Privacy Policy zh333 – Personal Data Protection for Malaysia's Online Casino Platform

Zh333 collects personal data through various channels when you register, use the platform, or interact with our support team. This data collection is necessary to provide services that are secure, fair, and compliant with Malaysian law. The following are the categories of data we collect:

Identity & Registration Data

• Full name as stated on your Malaysian MyKad or passport.
• National identity card number (MyKad) or passport number.
• Date of birth for age verification (18 and above).
• Gender and nationality.
• Email address and an active Malaysian mobile number.
• Username and password (stored in encrypted form).

Financial & Transaction Data

• Bank account number and bank name (for withdrawal purposes via FPX/Maybank2u/CIMB Clicks).
• E-wallet account numbers used (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow).
• Deposit and withdrawal history in Malaysian Ringgit (MYR).
• Transaction records for legal compliance and dispute resolution purposes.

Platform Usage Data

• Gaming and betting history (slots, baccarat, live casino, Sports Betting, badminton).
• IP address, device type, operating system, and web browser type.
• Game session time and duration.
• Pages visited and platform features used.

Data collected by zh333 is used responsibly and solely for legitimate, necessary purposes. zh333 will not use your data beyond the scope stated here without first obtaining your explicit consent.

You have the right to withdraw consent for the use of your data for marketing and promotional purposes at any time, without affecting your right to use the zh333 platform. Submit a withdrawal request via zh333's live chat or support email.

Zh333 does not sell, rent, or disclose your personal data to external parties without your consent — except in the limited circumstances set out below:

Trusted Service Providers

Zh333 works with selected third-party service providers to keep our platform running. These include:

• Game providers such as Evolution Gaming, Pragmatic Play, and SA Gaming — to deliver live casino games, slots, and baccarat. These providers receive only the minimum data necessary for game operations.
• Payment providers — payment processors handling transactions via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX. They are bound by strict confidentiality agreements.
• KYC verification services — a third-party provider that assists in verifying members' identities to meet Malaysian legal compliance requirements.
• Cloud infrastructure and hosting — a server provider that stores your data in a secure, encrypted environment.

Mandatory Disclosure to Authorities

Zh333 may be required to disclose members' personal data to the relevant authorities in the following circumstances:

• A court order or valid legal process issued by a Malaysian court.
• Criminal investigations involving money laundering or financial fraud by Malaysian law enforcement agencies.
• Regulatory reporting requirements imposed on online entertainment platform operators.

Zh333 continuously invests in security infrastructure to ensure members' personal data remains protected against cyber threats and unauthorised access. Our key security measures include:

• Data encryption in transit: All communication between your device and zh333's servers uses TLS 1.3 with 256-bit SSL encryption — no data travels in a form readable by unauthorised parties.
• Data encryption at rest: Sensitive data such as passwords and financial details are stored in encrypted form using irreversible hashing algorithms.
• Role-based access control: zh333 staff only have access to the data they need to perform their duties. No individual staff member has unrestricted access to all data.
• Regular security audits: zh333 conducts penetration testing and independent third-party security audits at least twice a year.
• Two-factor authentication (2FA): zh333 supports 2FA as an additional layer of security for member accounts.
• 24/7 Monitoring: Our automated monitoring system detects and responds to suspicious activity around the clock.

The zh333 platform uses cookies and similar tracking technologies to enhance your experience and ensure the platform operates correctly. Cookies are small text files stored on your device when you visit the zh333 platform.

Types of Cookies Used by zh333

• Session cookies: Required to maintain your login status during an active session. These cookies are deleted automatically when you close your browser. Without them, the zh333 platform cannot function.
• Preference cookies: Saves your language settings, display preferences, and game preferences so you don't have to reconfigure them each time you log in.
• Analytics cookies: This helps zh333 understand how members use the platform — which pages are visited most, which games are most popular, and where users may encounter confusion. This data is used in aggregate and anonymised form.
• Security cookies: Helps detect fraudulent activity, suspicious login attempts, and other security threats.

You can manage cookies through your web browser settings. However, disabling required cookies may affect the functionality of the zh333 platform. For more information, refer to your browser's help section.

Zh333 handles financial data to the highest security standards given its sensitive nature. All transactions are conducted in MYR through approved local Malaysian payment methods.

Financial information you provide to zh333 — including Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow account details, and FPX accounts via Maybank2u or CIMB Clicks — is used solely to process your deposits and withdrawals. zh333 does not store full debit or credit card numbers in our systems.

KYC (Know Your Customer) Process

As part of Malaysia's anti-money laundering (AML) compliance requirements, zh333 conducts a KYC process that includes:

• Identity verification using MyKad or a valid travel document.
• Address verification using a recent Malaysian utility bill or bank statement (not more than 3 months old).
• Payment method verification — ensuring the e-wallet or bank account is held under the same name used to register with zh333.
• For withdrawals exceeding RM 10,000, zh333 may require additional source of funds verification.

As a zh333 member and an individual whose personal data we handle, you have rights protected under Malaysia's Personal Data Protection Act 2010 (PDPA). zh333 fully respects and facilitates the exercise of these rights:

Zh333 does not retain your personal data for longer than necessary for the permitted purposes. Retention periods vary depending on the type of data and applicable legal requirements:

• Active account data: Retained for the duration of your active account plus 7 years after account closure (Malaysia AML compliance requirement).
• Financial transaction records: Retained for 7 years from the transaction date, in accordance with the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001.
• KYC documents: Retained for 6 years from the date of submission or account closure, whichever is later.
• Support communication logs: Retained for 2 years for reference and dispute resolution purposes.
• Analytics data (anonymised): May be retained indefinitely as it contains no personally identifiable information.

Once the specified retention period has lapsed, your data will be securely deleted or anonymised so it can no longer be linked to you.

Zh333 is an exclusive platform for individuals aged 18 and above. We do not knowingly collect personal data from children or minors. zh333's child protection measures include:

• Mandatory age verification at registration using a date of birth confirmed through the KYC process.
• Should zh333 discover that data from a minor has been inadvertently collected, it will be deleted immediately and the associated account terminated.
• Parents or guardians who suspect their child has registered on the zh333 platform are encouraged to contact us immediately at privacy@zh333.biz.

For individuals classified as vulnerable (including those experiencing gambling-related issues), zh333 provides self-exclusion tools and deposit limits accessible through the Responsible Gaming zh333.

Zh333 has appointed a Data Protection Officer (DPO) who is responsible for overseeing PDPA compliance and handling privacy-related enquiries and complaints from members.

For any enquiries, requests, or complaints regarding zh333's Privacy Policy or the handling of your personal data, you may contact zh333's DPO through the following channels:

If you are not satisfied with zh333's response to your privacy complaint, you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection (JPDP), the regulatory body responsible for enforcing the PDPA in Malaysia.