Zas36 Privacy Policy — Malaysia Member Personal Data Protection

1Introduction and Privacy Commitment of zas36

Welcome to the zas36 Privacy Policy. This document is part of our unwavering commitment to protecting the personal information of every individual who uses the zas36 platform at zas36.onl. We understand that privacy is not merely a legal obligation — it is a fundamental right that we are fully committed to respecting.

Zas36 operates as an online gaming platform providing Live Casino, Sports Betting, bingo, and a range of digital games to players in Malaysia. In delivering these services, we need to collect and process certain personal data. This Privacy Policy clearly and honestly explains what data we collect, why it is collected, how it is used, who it is shared with, and how you can control your own data.

We encourage you to read this document in full. If anything is unclear or you need further clarification, the zas36 support team is available via 24/7 live chat or email at [email protected].

2Types of Personal Data We Collect

Zas36 only collects data that is reasonably necessary to provide, maintain, and improve our services. The data we collect can be divided into several main categories:

For members undergoing advanced KYC verification, we may request additional documents such as the last three months of bank statements or a utility bill as proof of address. All such documents are stored in an encryption-protected environment and are accessible only by authorised personnel.

3How We Use Your Personal Data

Every piece of data we collect is used for a specific and legitimate purpose. zas36 does not process your personal data for purposes unrelated to the provision of platform services without obtaining your consent first. The primary purposes for data use are:

• Account Management: Creating, maintaining, and securing your member account, including secure login and two-factor authentication (2FA).
• Payment Processing: Verifying identity for deposit transactions via DuitNow, FPX, Touch 'n Go, and other payment methods, and processing withdrawals securely.
• KYC & AML Compliance: Meeting Know Your Customer (KYC) and anti-money laundering (AML) requirements set by regulatory bodies.
• Customer Support: Helping you resolve technical issues, account inquiries, and platform-related complaints more efficiently.
• Platform Security: Detecting and preventing unauthorized access, fraud, bonus abuse, and any suspicious activity.
• Continuous Improvement: Analyzing usage patterns in aggregate (not individually) to improve the gaming experience, interface, and platform performance.
• Important Communications: Sending account-related notifications, security updates, terms changes, and relevant promotional information (unsubscribable at any time).
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and offering appropriate assistance in line with our responsible gaming program.

All data processing is carried out on a valid legal basis — whether for the performance of a contract, the platform's legitimate interests, legal obligations, or consent you have explicitly provided.

4Data Sharing with Third Parties

Zas36 does not sell your personal data to any party under any circumstances. However, to provide a complete and secure service, we may need to share certain data with carefully selected third parties. All such third-party service providers are bound by strict data protection agreements.

• Payment Processor: Transaction information is shared with licensed payment processors such as local banks and digital wallet providers to complete your financial transactions.
• KYC Provider: Identity verification data is shared with approved third-party KYC service providers for document verification and basic background check purposes.
• Game Provider: Limited game session information is shared with game providers for technical purposes and dispute resolution.
• Analytics Services: Anonymised usage data is shared with analytics platforms to understand overall usage patterns — no personally identifiable information is included.
• Authorities: zas36 will disclose required data to law enforcement authorities or regulatory bodies when mandated by law or a valid court order.

5Data Security Measures

Protecting your personal data is zas36's top priority. We continuously invest in the latest security infrastructure to keep your information safe, whether in transit or at rest.

• TLS 1.3 Encryption: All communication between your device and zas36 servers is protected by TLS 1.3 protocol, the highest encryption standard available today.
• AES-256 Encryption: Sensitive data stored in our databases is protected with AES-256-bit encryption — the same standard used by global financial institutions and governments.
• Two-Factor Authentication (2FA): We encourage all members to enable 2FA for an additional layer of protection against unauthorized access.
• Regular Security Audits: Our systems and infrastructure undergo regular penetration testing and independent security audits conducted by third-party cybersecurity firms.
• Internal Access Controls: Access to member personal data within the zas36 organisation is restricted on a need-to-know basis and enforced through role-based access controls (RBAC).
• 24/7 Monitoring: Our threat detection system operates around the clock to identify and respond to any suspicious activity in real time.

While we take all reasonable steps to protect your data, no system can guarantee 100% absolute security. In the event of a data security incident affecting you, we will notify you within the timeframe required by applicable regulatory requirements.

6Use of Cookies and Tracking Technologies

Zas36 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. They help us remember your preferences and understand how you use the platform.

• Essential Cookies: Required for core platform functions such as login session management, security, and basic navigation. These cookies cannot be disabled without affecting platform functionality.
• Preference Cookies: Storing your preferences such as language, display settings, and game preferences for a more personalized experience.
• Analytics Cookies: Helping us understand how members use the platform in aggregate — most visited pages, session duration, and navigation patterns. This data is anonymized.
• Performance Cookies: Used to optimise page loading speed, game performance, and overall platform stability.

Zas36 does not use third-party cookies for targeted advertising purposes (ads that follow you across other websites). We believe an experience free from intrusive advertising is part of delivering a quality service.

7Your Rights Regarding Personal Data

As a zas36 member, you have full rights over your personal data. We respect and facilitate the exercise of these rights to the best of our ability. Your rights include:

To exercise any of the above rights, contact our privacy team via live chat or email at [email protected]. We will process your request within 30 calendar days of receipt and provide a detailed response.

8Data Retention Period and Deletion Policy

Zas36 does not retain your personal data longer than necessary. Data retention periods are determined by operational requirements and applicable legal and regulatory obligations.

• Active Account Data: Retained for the duration your account is active, plus the minimum legally mandated period following account closure.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's financial and tax legislation.
• KYC Documents: Retained for a minimum of 5 years after the end of the business relationship in accordance with applicable AML/CFT requirements.
• Security Logs: Retained for 2 years for security incident investigation and audit purposes if required.
• Anonymised Analytics Data: May be retained indefinitely as it cannot be linked back to any specific individual.

9Amendments to This Privacy Policy

The digital landscape is constantly evolving, and our Privacy Policy must evolve with it to reflect changes in law, technology, and industry best practices. zas36 reserves the right to update this Privacy Policy at any time.

When we make material changes to this Policy, we will take proactive steps to notify you:

• Clear notifications on the platform's home page or an informational pop-up at login.
• Update the "Last Updated" date at the top of this document and on this page.
• Email notification to all active members for changes that materially affect your privacy rights.

10Contact Our Privacy Officer

If you have any questions, concerns, or complaints regarding the privacy and protection of your personal data at zas36, we strongly encourage you to reach out to us. Our privacy team is ready to provide a thorough and satisfactory response.

• Live Chat: The fastest option — available 24/7 directly within the zas36 platform or app.
• Privacy Email: [email protected] — for inquiries requiring a more detailed written response (response within 2–4 business hours).
• FAQ: Many common privacy questions have been answered on the FAQ us.

We are committed to handling every privacy inquiry seriously, professionally, and within a reasonable timeframe. Your trust is zas36's most valuable asset, and we will always strive to maintain it through transparency and responsible action.