Privacy Policy zz66 — Our Commitment to Protecting Your Data

zz66 zz66 is committed to protecting and respecting the privacy of every player who uses our services. This Privacy Policy is prepared in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data protection.

This document outlines the types of personal information we collect, the purposes for which it is used, the parties who may receive it, how long it is retained, and your rights as a data owner. We believe transparency is the foundation of trust — which is why we explain everything clearly and in plain language, free of confusing legal jargon.

This policy applies to all users of the website zz66, our official mobile app, and any related services we offer to players in Malaysia and internationally.

zz66 collects various types of personal information depending on your interactions with our platform. Below is a detailed summary of the data we collect and its sources:

We only collect information that is strictly necessary to provide safe, quality service. We do not collect sensitive data such as health information or religious beliefs unless you voluntarily disclose it yourself.

Every piece of information collected by zz66 used for legitimate and clearly stated purposes. The following are the primary purposes for which your data is used:

• Account Management: To create, verify, and maintain your player account and to process the required Know Your Customer (KYC) procedure.
• Transaction processing: To process deposits, withdrawals, and all financial transactions securely and accurately through Malaysia's various local payment methods.
• Platform security: To detect and prevent fraud, money laundering, multiple account ownership, and any suspicious activity that could compromise the integrity of the platform.
• Service improvements: To analyze usage patterns and player behavior in order to improve the gaming experience, platform performance, and game offerings.
• Service communications: To send important notifications related to your account, transactions, policy changes, and security information.
• Marketing (with consent): To send promotional offers, bonuses, and special event notifications — only if you have consented to receive them.
• Legal compliance: To comply with applicable legal and regulatory obligations, including reporting requirements to the relevant authorities.

zz66 does not sell, rent, or trade your personal information to any third party for their own marketing purposes. However, we share necessary data with certain parties in the following circumstances:

• Payment service providers: Financial details shared with payment processors, banks, and e-wallet operators to facilitate your deposit and withdrawal transactions.
• Game providers: Minimum account information required by third-party game software providers to allow you to access their games through the zz66 platform.
• Identity verification providers: Identity document data shared with authorised third-party KYC services for the purpose of secure identity verification.
• Legal authority: Information required by government authorities, law enforcement agencies, or courts when we are legally obligated to do so under applicable law.
• Business transfers: In the event of a merger, acquisition, or transfer of business assets, user data may be transferred as part of those business assets — with appropriate notice provided to you in advance.

All third parties that receive your data are bound by strict data protection agreements and are only permitted to use that information for the purposes specified in those agreements.

Protecting your personal data is the highest technical and operational priority at zz66. We implement multiple layers of security measures to keep your information safe at all times:

• 256-bit SSL Encryption: All data transmitted between your device and zz66 servers is encrypted using industry-standard TLS/SSL technology to prevent interception.
• Two-Factor Authentication (2FA): An additional security layer for account login that requires verification via your mobile device in addition to your password.
• Data Segregation: Sensitive financial data is stored in a segregated server environment, separate from general profile data.
• Continuous monitoring: 24/7 automated monitoring system that detects and alerts against any unusual activity or unauthorized access attempts.
• Regular security audits: Regular security assessments and penetration testing conducted by independent cybersecurity experts.
• Internal access controls: Only authorised staff with legitimate job requirements are permitted to access user data, and every access is logged for audit purposes.

zz66 uses cookies and similar tracking technologies to enhance the user experience and analyze platform performance. Cookies are small data files stored on your device when you visit our website.

Types of cookies we use:

• Essential cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled.
• Performance cookies: Collecting anonymous information about how visitors use our platform to help us improve the user experience.
• Functional cookies: Remembering your preferences such as language, region, and display settings to provide a more personalised experience.
• Analytics cookies: We use trusted third-party analytics tools to understand platform traffic and usage patterns in an aggregated, anonymised manner.

You can control or delete cookies through your browser settings at any time. Please note, however, that disabling essential cookies may affect certain features of the zz66 platform.

zz66 retains your personal information only for as long as necessary to fulfill the purposes stated in this Privacy Policy, or as required by applicable law.

• Active account data: Retained for as long as your account remains active and for a period of 7 years after account closure for legal compliance and financial record purposes.
• Financial transaction data: Retained for a minimum of 7 years in accordance with Malaysia's accounting and tax legal requirements.
• Communication logs: Customer support records and account-related communications are retained for 3 years after the last interaction.
• Technical log data: Server logs and technical data are retained for 90 days for diagnostic and security purposes.
• Marketing data: Retained until you withdraw consent or close your account.

When data is no longer needed, it will be securely deleted or anonymised in accordance with established data deletion procedures. Anonymised data may be retained for analytical purposes indefinitely, as it can no longer be linked to any specific individual.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and the privacy policy of zz66, you have the following rights regarding your personal data:

• Right to access: You have the right to request a copy of the personal information we hold about you.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete information.
• Right to erasure: Under certain circumstances, you have the right to request deletion of your personal data ("right to be forgotten"), subject to our legal obligations.
• Right to restrict processing: You have the right to request that we restrict or stop processing your data under certain circumstances.
• Right to withdraw consent: You may withdraw consent for data processing at any time without affecting the validity of prior processing.
• Right to complain: You have the right to file a complaint with Malaysia's Personal Data Protection Commissioner if you believe your privacy rights have been violated.

To exercise any of the above rights, please contact our privacy team via email at [email protected]. We will process your request within 14 business days.

zz66 takes child and youth protection seriously. Our platform is not designed for individuals under the age of 18 and we do not intentionally collect personal information from them.

If we discover that personal information of a child under the age of 18 has been collected without our knowledge, we will take the following steps immediately:

• Closing the account in question immediately.
• Deleting all personal information associated with the account.
• Refunding any deposited funds, subject to identity verification.

If you are a parent or guardian and believe your child has registered an account at zz66, please contact us immediately at [email protected] for immediate action.

zz66 reserves the right to amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or service improvements. When significant amendments are made, we will:

• Updating the "Last updated" date at the top of this page.
• Sending a notice to your registered email address at least 14 days before the amendment takes effect.
• Displaying a prominent notice on the zz66 website and mobile app.

Continued use of the platform after the effective date of any amendment constitutes your acceptance of the updated policy. It is your responsibility to review this page periodically.

If you have any questions, concerns, or wish to exercise your privacy rights, our Data Protection Officer team zz66 ready to assist you.

• Privacy Email: [email protected]
• General Support Email: [email protected]
• Live Chat: Available 24/7 directly on the zz66 platform
• Response time: Within 14 business days for formal privacy enquiries

For complaints that cannot be resolved, you have the right to refer the matter to the Department of Personal Data Protection Malaysia under the Ministry of Communications and Digital.