ZK99 Privacy Policy – Malaysia Member Personal Data Protection

01 zk99 Privacy Introduction and Commitment

Zk99 understands that member trust is our most valuable asset. In today's increasingly complex digital world, personal data protection is no longer a mere formality — it is the foundation of a healthy relationship between a platform and its users. That is why we built our privacy systems not just to comply with the law, but to genuinely protect your interests as an individual.

This Privacy Policy explains in detail how ZK99 collects, uses, discloses, transfers, and stores your information when you use our services. We encourage you to read this document carefully so you fully understand our privacy practices and the rights available to you.

The zk99 platform operates within Malaysia's legal framework, including the Personal Data Protection Act 2010 (PDPA). We also adhere to international best practices in data management to ensure your information is always protected in accordance with the most current and responsible industry standards.

02 Information We Collect

Zk99 only collects information that is genuinely necessary to provide a quality, secure, and responsible service to our members. We do not collect data excessively, and every category of data collected has a clear and legally valid purpose.

In addition to data you provide directly during registration and platform use, zk99 also collects data automatically through cookie technology and analytics tools. This automatically collected data helps us ensure the platform functions properly and securely for all users.

03 How We Use Your Personal Data

Every piece of data we collect is used for a specific and legitimate purpose. zk99 does not use your data for purposes unrelated to service delivery without obtaining your consent first.

• Account management: Creating, verifying, and managing your member account, as well as securely and accurately processing all deposit and withdrawal transactions.
• Legal compliance: Carrying out Know Your Customer (KYC) and Anti-Money Laundering (AML) procedures as required under Malaysian law.
• Platform security: Detecting and preventing fraudulent activity, unauthorised access, multiple account usage, and other security threats that could affect members.
• Service enhancement: Analysing usage patterns to improve the interface, speed, and overall quality of the gaming experience on zk99.
• Service communications: Sending important notifications relating to your account, transaction confirmations, security updates, and relevant service information.
• Responsible gaming: Monitoring gaming patterns to identify risk indicators and offer appropriate support to members who need it.
• Relevant promotions: With your consent, sending information about promotions, bonuses, and special offers tailored to your interests and gameplay patterns.

04 Information Sharing and Disclosure

Zk99 does not sell member personal data to any third party. However, there are certain situations where we need to share your information with other parties for legitimate platform operational purposes. All data sharing is conducted with strict controls and only to the extent necessary.

• Payment service providers: zk99 shares necessary transaction information with licensed payment processors (FPX, digital wallets, payment gateways) to enable deposits and withdrawals to be processed securely.
• Gaming platform providers: Some technical data is shared with licensed game software providers to ensure smooth gameplay sessions and accurate recording of game outcomes.
• Statutory authorities: zk99 will disclose information to the relevant authorities when required by court order, legal investigation, or valid regulatory compliance requirements.
• Identity verification services: KYC data is shared with licensed third-party identity verification service providers to confirm the authenticity of documents submitted by members.
• Internal analytics services: Anonymised usage data is shared with analytics tools to help us understand usage patterns and improve the platform.

05 Cookies and Tracking Technologies

Zk99 uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and analyse how the platform is used. Understanding the cookies we use helps you make informed decisions about your privacy.

• Essential Cookies: Required for core platform functions such as login authentication, session management, and account security. These cookies cannot be disabled as they are critical to platform operations.
• Functional Cookies: Saving your preferences such as language, display settings, and gaming preferences so you do not need to reset them on every visit.
• Analytics Cookies: Helping us understand how members use the platform, which pages are most popular, and where improvements are needed. This data is processed in aggregate form and is not linked to individual identities.
• Security Cookies: Used to detect suspicious activity, prevent unauthorised access, and protect your account from cybersecurity threats.

You can manage your cookie settings through your web browser. However, disabling essential cookies may affect platform functionality. ZK99 uses session cookies that expire automatically when you close your browser, as well as persistent cookies stored for a set period for security and convenience purposes.

06 Data Security and Protection Measures

Zk99 invests seriously in data security infrastructure. We employ a combination of technical, organisational, and physical measures to protect your personal data from unauthorised access, loss, alteration, or inadvertent disclosure.

• 256-bit SSL encryption for all data transmissions between your device and zk99 servers.
• Data-at-rest encryption for all sensitive data stored in our databases.
• Two-factor authentication (2FA) available on all member accounts as an additional layer of security.
• Multi-layered web application firewall (WAF) protecting the platform against common cyberattacks.
• Intrusion detection and prevention systems (IDS/IPS) operating 24 hours a day, 7 days a week.
• Regular security audits by independent third parties to identify and address potential vulnerabilities.
• Role-based access control (RBAC) ensuring only staff who require access to specific data are permitted to do so.
• Regular cybersecurity training for all zk99 staff who handle members' personal data.

07 Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and ZK99's privacy policy, you have the following rights regarding the personal data we hold:

• Right to Access: You have the right to request a copy of the personal data we hold about you at any time. ZK99 will process this request within 21 business days.
• Right to Rectification: If any personal data we hold about you is inaccurate or outdated, you have the right to request that we correct it promptly.
• Right to Erasure: In certain circumstances, you may request that we delete your personal data. Please note that some data may need to be retained for legal compliance purposes even after your account is closed.
• Right to Restrict Processing: You may request that we restrict how we use your data in certain situations, such as while a dispute regarding data accuracy is being resolved.
• Right to Withdraw Consent: You may withdraw consent previously given for specific data processing at any time, without affecting the validity of processing carried out prior to withdrawal.
• Right to Lodge a Complaint: If you are dissatisfied with how zk99 handles your personal data, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.

To exercise any of the above rights, please contact our privacy team at [email protected] including your account username and the details of your request. zk99 may need to verify your identity before processing the request in order to protect your account security.

08 Data Retention and Deletion

Zk99 retains your personal data only for as long as necessary for the purpose it was collected, or as required by Malaysian law. We have a clear data retention policy for each category of information we collect.

• Active account data: Retained for as long as your account is active and necessary for service delivery.
• Financial transaction data: Retained for a minimum of 7 years from the transaction date in accordance with Malaysian financial and tax legal requirements.
• KYC Data: Retained for a minimum of 5 years after the business relationship ends in accordance with Malaysian AML/CFT requirements.
• Security logs: Retained for 2 years for security incident investigation and dispute resolution purposes.
• Support communications data: Retained for 3 years after issue resolution for reference and service improvement purposes.

Once the retention period has expired and there is no legal requirement to retain the data, ZK99 will securely delete or anonymise your data using industry-standard methods.

09 Children's Privacy and Age Restrictions

Zk99 has a firm and uncompromising policy on child protection. Our platform is exclusively for adults aged 18 and above. We do not knowingly collect or process personal data of individuals under the age of 18.

If zk99 discovers or is notified that personal data of a minor has been collected, we will take immediate action to delete the information and terminate the account in question. Our strict age verification (KYC) process is specifically designed to prevent minors from registering or accessing the platform.

10 Links to Third-Party Websites

The zk99 platform may contain links or integrations with third-party services such as game providers, payment gateways, and social media channels. This Privacy Policy applies solely to the zk99 platform and does not cover the privacy practices of any third-party websites or services.

Zk99 is not responsible for the content, privacy policies, or practices of any third-party websites that may be linked from our platform. We encourage you to read the privacy policy of each third-party website you visit separately before providing any personal information to them.

All third-party service providers integrated with the zk99 platform have undergone security review and have signed data processing agreements that bind them to data protection standards equivalent to those of zk99.

11 Amendments to This Privacy Policy

Zk99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our business practices, new legal requirements, or relevant technological developments. Any amendments will take effect immediately upon being published on our platform.

When significant amendments are made to this Privacy Policy, ZK99 will notify members via their registered email or in-account notification at least 14 days before the changes take effect. For minor amendments that do not affect your fundamental rights, notice may be provided solely through an update to this page.

The "Last updated" date at the top of this page will always reflect the latest version of the Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your information.

12 Contact the zk99 Privacy Team

If you have any questions, concerns, or requests regarding this Privacy Policy or how zk99 handles your personal data, our dedicated privacy team is available to assist you at any time.

You may reach us through the following channels:

• Privacy Email: [email protected] (please state "Privacy Inquiry" in the email subject line)
• Live Chat: Available 24/7 via the chat icon at the bottom corner of the platform
• Response time: zk99 is committed to responding to all privacy inquiries within 3 business days

For formal complaints related to PDPA compliance, you may also contact the Department of Personal Data Protection Malaysia (JPDP) directly through their official channels if you believe the matter cannot be resolved through zk99's internal process.