Privacy Policy zas36 – How We Protect Your Personal Data

When you register and use the zas36 platform, we collect several categories of personal information to enable us to provide a secure, seamless, and reliable service. This data collection is carried out transparently and only for legitimate purposes.

Data you provide directly:

• Identity information — full name, date of birth, MyKad or passport number, and current residential address.
• Contact information — your email address, mobile number, and chosen username.
• Financial information — bank account number, bank name, and e-wallet account numbers (TNG, GrabPay, ShopeePay) used for deposits and withdrawals.
• KYC verification documents — copy of identity card, proof of address, and a verification selfie if required by our security team.

Automatically collected data:

• Technical data — IP address, web browser type, device type, operating system, and screen resolution.
• Usage data — pages visited, time spent in each section, game preferences, betting history, and general activity patterns.
• Location data — general geographic location based on IP address, not precise GPS data.
• Session data — login information, activity timestamps, and session tokens used to maintain the security of your account.

Zas36 uses your personal data only for legitimate purposes necessary to operate the platform. We do not use your data for any other purpose without first obtaining your consent. The following are the primary purposes for which your data is used:

Additionally, de-identified usage data is used in aggregate for internal analytics purposes to improve user experience, develop new features, and understand overall platform usage trends. This aggregated data cannot be used to personally identify you.

Zas36 understands that your trust is invaluable. We do not share your personal information with outside parties except in the following limited situations, and every instance of sharing is carried out with adequate contractual safeguards:

• Payment Service Providers: Information required to process transactions is shared with approved payment processors such as FPX, TNG eWallet, and other providers. They receive only the minimum data necessary to process your transaction.
• Game Software Providers: Your username and session ID are shared with game providers such as Pragmatic Play, Evolution Gaming, and others to deliver the gaming experience. They do not receive your financial information or full identity details.
• Regulatory Authority: zas36 complies with all applicable legal and regulatory requirements. We will disclose information to authorities if required by law, court order, or a legitimate regulatory body.
• IT & Security Service Providers: Technical infrastructure and cybersecurity providers that help us operate and protect the platform may have limited access to certain data strictly within the scope of their duties.

All third parties working with zas36 are subject to strict data protection agreements and are not permitted to use your information for their own purposes. zas36 remains responsible for the protection of your data even when it is processed by appointed third parties.

Zas36 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. The following are the types of cookies we use:

You can control or delete cookies through your web browser settings at any time. Please note, however, that disabling essential cookies may affect core zas36 platform functions such as the ability to login and maintain your game session.

Zas36 retains your personal data only for as long as necessary to fulfil the purposes stated in this policy, or as required by applicable laws and regulations. Retention periods vary by data category:

• Active account data: Retained for the duration your account remains active and in good standing.
• Financial transaction data: Retained for a minimum of 7 years after a transaction occurs, in line with anti-money laundering (AML) and tax legal requirements.
• KYC documents: Retained for 5 years following account closure or the date of the last applicable compliance event.
• Customer support communication logs: Retained for 3 years for reference and dispute resolution purposes.
• Technical log data: Retained for 12 months before being automatically deleted from our systems.

Once the applicable retention period has elapsed, your data will be securely deleted from our systems using methods that comply with recognised information security standards. If you request early account closure, we will delete data not required to be retained by law within 30 days of receiving and verifying your request.

As a zas36 member and as an individual whose personal data we hold, you have the following rights, which we are fully committed to upholding:

• Right of Access: You have the right to request a copy of all personal data we hold about you. We will provide this information within 14 working days from the date the request is received.
• Right to Rectification: If you find any information we hold about you is inaccurate or outdated, you have the right to request that we correct it promptly.
• Right to Erasure: You may request that we delete your personal data, subject to any applicable legal retention requirements. Such requests will be processed within 30 days.
• Right to Object: You have the right to object to the processing of your data for direct marketing purposes. This objection will be enforced immediately without further inquiry.
• Right to Restrict Processing: Under certain circumstances, you may request that we restrict how we use your data while a dispute or review is ongoing.
• Right to Data Portability: You have the right to receive your personal data in a machine-readable format (CSV or JSON) for transfer to another platform should you choose to do so.

To exercise any of the above rights, please contact our privacy team via live chat within the platform or email your request to [email protected]. We will verify your identity before processing any request to protect your privacy from unauthorized access by third parties.

The security of your personal data is zas36's highest priority. We continuously invest in cybersecurity infrastructure to ensure your information is protected at every stage — from collection through storage to deletion.

• Encryption of data in transit: All communications between your browser and zas36 servers are secured by TLS 1.3 protocol with AES-256 encryption, ensuring no data can be intercepted in transit.
• Encryption of data at rest: Sensitive data such as financial information and KYC documents are encrypted at rest using military-grade encryption algorithms.
• Strict access controls: Only specifically authorized personnel may access user data, and all access is recorded, monitored, and regularly audited.
• Two-factor authentication (2FA): zas36 offers 2FA for all member accounts to add an extra layer of protection against unauthorised access.
• 24/7 Monitoring: Our cybersecurity team continuously monitors systems to detect any unusual activity or intrusion attempts.
• Regular penetration testing: Our platform undergoes regular security testing by independent third-party security experts to identify and remediate vulnerabilities before they can be exploited.

While we take all reasonable precautions, no digital system can guarantee 100% absolute security. In the event of a data breach involving your information, we are committed to notifying you within 72 hours of becoming aware of the breach, in line with international best practices.

Zas36 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or service improvements. Any material amendments will be communicated to you via an in-platform notice or email to your registered address at least 14 days before the changes take effect.

The "Updated" date at the top of this page will always reflect the date of the latest revision. We encourage you to review this page periodically to stay informed about how we protect your information.

Continued use of the zas36 platform after any amendments are published constitutes your acceptance of the updated Privacy Policy terms. If you do not agree with any changes, you should stop using the platform and contact us to close your account.