Privacy Policy zas36 – Personal Data Protection for Malaysian Users

1. Introduction

This Privacy Policy is published by zas36, an online casino and Sports Betting platform operating at https://zas36.click. We recognise that privacy is a fundamental right, and we take that responsibility seriously. This policy sets out transparently how zas36 collects, processes, stores, and protects your personal data as a member of our platform.

As a platform that operates and serves users in Malaysia, zas36 is fully compliant with the Malaysian Personal Data Protection Act 2010 (PDPA) and all related regulations. This policy is reviewed and updated periodically to reflect changes in our operational practices or applicable legal requirements.

2. Personal Data Collected

Zas36 collects various categories of personal data depending on your interactions with our platform. The following are the categories of data we may collect:

2.1 Personal Identification Information

• Full name as stated on your Malaysian identity document (MyKad or passport).
• Date of birth and age.
• Identity card number (MyKad) or passport number for identity verification purposes.
• Images of identity documents when additional verification is required.

2.2 Contact Information

• The active email address provided at registration.
• A valid Malaysian phone number.
• Residential address (where required for specific verification purposes).

2.3 Financial Information

• Details of Malaysian e-wallet accounts (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow) used for deposits and withdrawals.
• Malaysian bank account details for withdrawals via FPX (Maybank2u, CIMB Clicks).
• Transaction history for deposits and withdrawals in Malaysian Ringgit (RM).

2.4 Platform Usage Data

• Gaming history – game types played, session duration, and game outcomes.
• Sports Betting history, including sport type, selected odds, and bet amounts in MYR.
• Records of interactions with the customer support team.
• Your preferences and account settings saved within the platform.

2.5 Technical Data

• The IP address of the device used to access the zas36 platform.
• Device type, operating system, and web browser used.
• Cookie data and session identifiers (further details in Section 9).
• Access logs and aggregated platform usage data.

3. How Data Is Collected

Zas36 collects personal data through a number of transparent channels:

• Directly from you – when you register an account, fill in forms on the platform, make deposits or withdrawals, contact customer support, or complete any surveys.
• Automatically — via cookies, server logs, and tracking technologies that operate when you use the zas36 platform, including the pages you visit and actions you take.
• From payment providers — transaction information shared by Malaysian e-wallet and banking providers (Touch 'n Go, GrabPay, Maybank, CIMB, and others) to process your deposits and withdrawals.
• From identity verification providers – in specific cases where third-party identity verification is required to meet legal compliance obligations.

4. Purposes for Using Personal Data

Zas36 uses the personal data collected solely for the following purposes:

• Account management — creating, verifying, and managing your member account on the zas36 platform.
• Transaction processing – processing MYR deposits via Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, and FPX, as well as your winnings withdrawals.
• Identity verification – verifies age (18 and above) and member identity in line with regulatory requirements and to prevent fraud.
• Service provision – gives you access to all games, Sports Betting, and features on the zas36 platform.
• Customer support – to assist you whenever you contact the zas36 support team with any queries or issues.
• Service communications – sending important notifications related to your account, transactions, or changes to the platform and its terms.
• Platform improvement – analyses aggregated, anonymised usage patterns to improve the user experience and platform content.
• Legal compliance — fulfilling obligations under the Malaysian PDPA 2010, anti-money laundering legislation, and any other applicable regulatory requirements.
• Responsible Gaming – monitoring usage patterns to identify members who may benefit from responsible gaming support.

5. Sharing Data With Third Parties

Zas36 does not sell or trade your personal data to any third party. However, in certain limited situations, necessary data sharing may take place:

5.1 Accountable Service Providers

Zas36 works with carefully selected third-party service providers to support platform operations. These providers are granted access only to the data necessary to perform their functions, and are bound by strict confidentiality agreements:

• Malaysian payment providers — Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, and FPX providers — to process deposit and withdrawal transactions in MYR.
• Cloud computing service providers for secure data storage.
• Approved identity verification providers for KYC (Know Your Customer) purposes.
• Gaming software providers such as Pragmatic Play, PG Soft, and Play'n GO, which require minimal session data to enable gameplay functionality.

5.2 Legal Requirements

Zas36 may be required to disclose your personal data to the relevant authorities where mandated by Malaysian law, including court orders, criminal investigations, or directives from applicable regulatory bodies. In such cases, zas36 will endeavour to notify you in advance where permitted by law.

6. Cross-Border Data Transfers

As a platform operating in the global digital environment, some of zas36's technical service providers may store or process data outside Malaysia. In all such cases, zas36 ensures that:

• Data transfers only take place to countries or organisations that provide a level of data protection equivalent to or greater than that required under Malaysia's PDPA 2010.
• Appropriate data processing agreements exist between zas36 and data recipients outside Malaysia.
• Equivalent technical security measures are applied to protect data both in transit and in storage.

7. Data Security

Protecting your personal data is zas36's top priority. We implement multiple layers of technical and organisational security measures:

• 256-bit SSL Encryption for all data transmitted between your device and zas36's servers.
• Data encryption at rest – sensitive data is stored in encrypted form within our databases.
• Tiered access control — zas36 staff only have access to the data necessary for their specific job functions.
• 24/7 security monitoring — an automated monitoring system that detects and flags any suspicious activity.
• Regular security testing – security audits and penetration testing are conducted periodically by independent third parties.
• Two-factor authentication (2FA) available to member accounts as an additional security layer.

While zas36 takes all reasonable steps to protect your data, no security system can be guaranteed 100% foolproof. In the event of a serious data breach, zas36 will notify affected members and the relevant authorities within the timeframe required under Malaysian law.

8. Data Retention & Disposal

Zas36 retains your personal data for as long as your account remains active, and for the period required after account closure in accordance with Malaysian legal obligations:

• Financial transaction records in MYR are retained for a minimum of seven years in compliance with Malaysian financial regulatory requirements.
• Identity verification data is retained for as long as the account remains active, and for three years following account closure.
• Technical log data is typically retained for no more than 12 months.
• Customer support data is retained for two years following issue resolution.

Once data is no longer required and there is no legal obligation to retain it, zas36 will dispose of it using secure methods that ensure it cannot be recovered.

9. Cookies & Tracking Technologies

The zas36 platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. The following are the categories of cookies used:

You can manage cookie settings through your web browser settings. Disabling certain cookies may affect the functionality of some zas36 platform features. Session and security cookies are required for the platform to function correctly and cannot be disabled.

10. User Rights Under PDPA 2010

As a data subject under the Malaysian Personal Data Protection Act 2010 (PDPA), you have the following rights in relation to your personal data held by zas36:

11. Complaints, Enquiries & Contact

For any enquiries, requests, or complaints regarding this Privacy Policy or zas36's handling of your personal data, please contact us via:

• Email: support@zas36.click – for privacy enquiries, please include "Privacy Enquiry" in the subject line.
• Live Chat: Available 24/7 within the zas36 platform – the fastest option for immediate enquiries.

Zas36 is committed to addressing all privacy-related enquiries within three to five business days. For more complex requests such as data deletion or data portability, processing may take up to 30 business days in line with the timeframes permitted under Malaysia's PDPA 2010.

12. Privacy Policy Amendments

Zas36 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our operational practices, new legal requirements, or improvements to how we protect your data. The date of the most recent update will always be displayed at the top of this document.

For material changes to how we handle your personal data, zas36 will provide notice via email to your registered address or through in-platform notifications at least 14 days before the changes take effect. Your continued use of the zas36 platform following any changes to this Privacy Policy will be considered acceptance of the updated version.

Previous versions of this Privacy Policy are available upon request — contact our support team at support@zas36.click to obtain a copy of an earlier version if needed.