Important Note: This Privacy Policy applies to all users of the Zalo88 platform in Malaysia. By registering or using our services, you agree to the terms set out in this Privacy Policy. Please read carefully before proceeding with registration.

1Introduction

Zalo88 is an online wagering platform operating for users in Malaysia. We understand that your trust depends not only on the quality of the games we offer, but also on how we handle the personal information you entrust to us. This Privacy Policy was drafted to fulfill our responsibilities under Malaysia's Personal Data Protection Act 2010 (PDPA) and internationally recognized security standards.

Whenever you use the zalo88 platform — whether through a web browser, mobile app, or any other digital interface we provide — this policy applies in full. We are committed to ensuring your personal data is used only for legitimate purposes, stored securely, and not shared with any party without your consent except where permitted by law.

2Information We Collect

Zalo88 only collects information that is strictly necessary to provide a quality, secure service that meets legal requirements. We do not collect data beyond what is needed for those purposes.

2.1 Information You Provide Directly

  • Registration information — Full name, date of birth, identity card or passport number, email address, mobile phone number, and password.
  • Financial information — Bank account number, bank name, e-wallet details, and records of deposit and withdrawal transactions.
  • Identity verification documents (KYC) — Copies of MyKad, passport, bank statements, or other documents submitted during the account verification process.
  • Communication information — Any messages, complaints, feedback, or requests you send to our support team.

2.2 Information Collected Automatically

  • Technical data — IP address, web browser type, device operating system, screen resolution, and other technical details.
  • Activity data — Pages visited, games played, session duration, login frequency, and betting history.
  • Location data — Geographic location based on IP address to ensure you are accessing the platform from a permitted region.
  • Cookie and tracking technology data — Information collected through cookies, pixels, and similar technologies as further described in Section 8.
Please Note: zalo88 never collects sensitive information such as medical records, religious beliefs, political views, or biometric data unless required by applicable law.

3Purpose of Personal Data Use

Every piece of information we collect has a clear and legitimate purpose. Below is a complete list of the purposes for which your personal data is used on the zalo88 platform:

Purpose of Use Types of Data Used Legal Basis
Account Registration & Verification Name, email, phone number, IC/passport Contractual consent
Financial Transaction Processing Bank details, e-wallet, transaction history Contractual requirement
KYC & AML Compliance Identity documents, bank statements Legal obligations
Account Security & Fraud Prevention IP address, login activity, device data Legitimate interest
Customer Service Communication Email, phone number, chat history Consent & contract
User Experience Personalisation Game history, language preferences Legitimate interest
Offers & Promotions Delivery Email, phone number Explicit consent

4How We Protect Your Data

Zalo88 continuously invests in enterprise-grade cybersecurity infrastructure to keep your personal data protected at all times. Data protection is not merely a legal obligation for us — it is a core value that shapes how we operate every day.

256-bit SSL Encryption

All data transmitted between your device and zalo88 servers is protected by 256-bit SSL encryption. This means every piece of information you enter — including passwords and banking details — cannot be read by any third party during transmission.

Encrypted Data Storage

Personal data stored in our database is also encrypted using AES-256 standards. Your password is never stored in plain text — it goes through an irreversible hashing process.

Strict Access Control

Only Zalo88 staff who require access to specific data to perform their duties are permitted to access that information. Every access is logged and continuously monitored by our internal security team.

Regular Security Audits

Our systems and infrastructure undergo periodic security audits by independent third parties. Any identified vulnerabilities are addressed promptly in accordance with established incident response protocols.

5Information Sharing with Third Parties

Zalo88 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. However, in certain limited situations, we may need to share some of your information with the following parties:

  • Payment providers — Banks, e-wallet operators, and payment processors that assist in processing your deposits and withdrawals. They are bound by strict confidentiality agreements and only receive the information necessary for the relevant transaction.
  • Game software providers — Game platform providers supplying zalo88 with gaming platforms may receive the technical data necessary to ensure games function correctly.
  • Authorities and regulatory bodies — If required by law, court order, or direction from a competent authority, zalo88 will disclose only the minimum information necessary.
  • Technology service providers — Cloud infrastructure providers, email services, and customer support platforms that assist us in running daily operations, subject to strict data processing agreements.
Our Guarantee: zalo88 never shares your personal information with third-party advertising companies, data brokers, or any entity that has no legitimate operational need. Every instance of data sharing is based strictly on the minimum information required.

6Data Retention Period

Zalo88 retains your personal data for as long as your account is active and for the required period after account closure to meet legal obligations, resolve disputes, and enforce our agreements.

  • Active account data — Retained for the duration your account is active plus 7 years after account closure, in line with financial legal requirements.
  • Financial transaction records — Retained for a minimum of 7 years in accordance with anti-money laundering (AML) legal requirements.
  • Customer support communication logs — Retained for 3 years from the date of last interaction.
  • Login and security data — Retained for 12 months for fraud detection and security purposes.
  • Marketing data — Retained until you withdraw consent or request data deletion.

7Your Rights as a Data Owner

Under the Personal Data Protection Act 2010 and Zalo88's internal policies, you have the following rights regarding your personal data:

  • Right to Access — You may request a copy of the personal data we hold relating to your account at any time.
  • Right to Rectification — If any information we hold is inaccurate or outdated, you have the right to request that we correct it.
  • Right to Erasure — You may request that we delete your personal data, subject to any legal obligations that may prevent immediate deletion.
  • Right to Object to Processing — You may object to the processing of your data for direct marketing purposes at any time.
  • Right to Withdraw Consent — Where processing is based on your consent, you may withdraw that consent at any time without affecting the validity of prior processing.
  • Right to Lodge a Complaint — You have the right to lodge a complaint with the relevant data protection authority if you believe your rights have been violated.

To exercise any of the above rights, please contact the zalo88 support team via live chat on our platform. We will process your request within 30 working days from the date of receipt.

8Cookie Policy

Zalo88 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

8.1 Types of Cookies We Use

  • Essential Cookies — Required for core platform functions such as login, user sessions, and security. These cookies cannot be disabled.
  • Performance Cookies — Collects information on how users interact with the platform to help us improve service quality.
  • Functional Cookies — Stores your preferences such as language, location, and display settings to deliver a more personalized experience.
  • Analytics Cookies — Helps us understand platform usage patterns on an aggregated, anonymous basis for ongoing improvement.

You can manage or disable cookies through your web browser settings at any time. However, disabling essential cookies may affect certain features on the Zalo88 platform.

9Children's Privacy

The zalo88 platform is exclusively for adult users aged 18 and above. We do not intentionally collect personal information from individuals under 18 years of age. If we discover that we have collected data from a minor without our knowledge, we will take immediate action to delete that information and close the account in question.

Child Protection: If you suspect that someone under the age of 18 has registered or is using the zalo88 platform, please contact our support team immediately via live chat. We will investigate the matter and take appropriate action without delay.

10Privacy Policy Amendments

Zalo88 reserves the right to modify or update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or new platform features. Any significant changes will be communicated to you via your registered email or a prominent notice on our platform at least 14 days before the changes take effect.

The update date shown at the top of this document reflects the latest version of the Privacy Policy currently in effect. Continued use of the zalo88 platform after changes take effect constitutes your acceptance of the updated terms.

Contact Us: For any questions, concerns, or requests related to this Privacy Policy, the zalo88 support team is available via live chat on our platform 24 hours a day, 7 days a week. Email us at: [email protected]