Privacy Policy — How ze96 Collects, Uses and Protects Your Personal Data

1. Introduction

This Privacy Policy (hereinafter "the Policy") is issued by ze96 (hereinafter "ze96", "we", "us" or "our") and applies to all personal data collected through the ze96 website accessible at https://ze96.cam, including its account services, payment processing functions, promotional communications and customer support channels (collectively "the Platform").

ze96 is committed to protecting the privacy and personal data of all users, including users located in Malaysia. This Policy describes the categories of personal data we collect, the lawful bases on which we process that data, the purposes for which it is used, the period for which it is retained and the rights available to each user in relation to their personal data.

By accessing ze96, creating an account or providing personal data through any channel of the Platform, you acknowledge that you have read and understood this Policy. If you do not agree with any part of this Policy, please do not use the Platform.

2. Definitions

For the purposes of this Policy, the following definitions apply:

• "Account" means the individual registered user profile created on ze96.
• "Data Controller" means ze96, which determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" means any third-party service provider engaged by ze96 to process personal data on ze96's behalf and under ze96's documented instructions.
• "Data Subject" means any identified or identifiable natural person whose personal data is processed by ze96, including registered users of the Platform.
• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, date of birth, email address, phone number, payment details, IP address and device identifiers.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure or destruction.
• "Platform" means the ze96 website and all associated services accessible at https://ze96.cam.
• "Sensitive Data" means personal data revealing racial or ethnic origin, political opinions, religious beliefs, health information, financial account credentials or biometric data, which is subject to enhanced protection obligations.

3. Data Controller Identity

The Data Controller responsible for personal data collected and processed through the ze96 Platform is the ze96 operating entity. For all data protection enquiries, requests and complaints, users should direct their communication to:

• Email: [email protected] (plain text — not a clickable link)
• Website: https://ze96.cam

ze96 will respond to data protection enquiries within a reasonable period and in any event within thirty (30) calendar days of receipt of a clearly articulated written request.

4. Personal Data We Collect

4.1 Data Provided Directly by You

ze96 collects the following categories of personal data that you provide directly during registration, verification and use of the Platform:

4.2 Data Collected Automatically

When you access the ze96 Platform, certain technical data is collected automatically by our systems and third-party analytics tools. This includes:

• Internet Protocol (IP) address and approximate geographic location derived from IP;
• Browser type, version and operating system;
• Device type, screen resolution and device identifiers;
• Pages visited, time spent on each page and navigation path through the Platform;
• Referring URL (the page from which you arrived at ze96);
• Cookie identifiers and session tokens as described in the Cookies section of this Policy.

5. Purposes of Data Processing

ze96 processes your personal data for the following specific and documented purposes:

6. Legal Basis for Processing

ze96 processes personal data only where a lawful basis for doing so exists. The applicable legal bases are as follows:

• Contractual necessity: Processing required to perform the contract between ze96 and the user, including account operation, payment processing and service delivery.
• Legal obligation: Processing required to comply with applicable laws and regulatory requirements, including KYC, anti-money laundering obligations and mandatory data retention rules.
• Legitimate interests: Processing necessary for ze96's legitimate business interests where those interests are not overridden by the user's rights and freedoms, including fraud prevention, Platform security and service improvement.
• Consent: Where ze96 relies on consent as the basis for processing (for example, for optional marketing communications), such consent will be sought explicitly and may be withdrawn by the user at any time.

7. Data Sharing and Disclosure

7.1 Authorised Service Providers

ze96 may share your personal data with third-party service providers who process data on our behalf under binding data processing agreements. These providers include payment processors (such as those facilitating Touch 'n Go eWallet, FPX and DuitNow transactions), identity verification services, IT infrastructure providers, analytics platforms and customer support tools.

7.2 Regulatory and Law Enforcement Disclosure

ze96 may disclose personal data to competent regulatory authorities, law enforcement bodies or courts of jurisdiction where required to do so by applicable law, by a valid court order or by a legally binding regulatory demand. In such cases, ze96 will disclose only the minimum data necessary to satisfy the legal requirement.

7.3 No Commercial Data Sales

ze96 does not sell, rent, exchange or commercially transfer your personal data to any third party for that party's own marketing or commercial purposes. Data sharing is limited to the categories described in Clauses 7.1 and 7.2 above.

8. International Data Transfers

Some of ze96's service providers and technology infrastructure are located outside Malaysia. Where personal data is transferred to a jurisdiction outside Malaysia, ze96 will ensure that appropriate safeguards are in place to protect the data to a standard equivalent to that required under applicable data protection law. Such safeguards may include contractual data transfer agreements, adequacy determinations or other recognised transfer mechanisms.

9. Data Retention Periods

Personal data is retained for no longer than is necessary to fulfil the purposes for which it was collected, subject to any applicable legal, regulatory or contractual obligation to retain it for a longer period.

10. Security Measures

ze96 implements and maintains appropriate technical and organisational security measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures include, but are not limited to:

• Encryption of personal data during transmission using TLS (Transport Layer Security) protocols;
• Encryption of sensitive data at rest where technically feasible and appropriate;
• Role-based access controls restricting internal access to personal data to authorised personnel only;
• Regular security assessments and vulnerability reviews of Platform infrastructure;
• Incident response procedures for detecting, assessing and reporting data security incidents.

11. Cookies and Similar Tracking Technologies

11.1 What Are Cookies

Cookies are small text files placed on your device when you visit a website. They are used to recognise returning visitors, maintain session integrity, remember user preferences and, in some cases, to gather analytical data about Platform usage.

11.2 Categories of Cookies Used by ze96

• Strictly necessary cookies: Essential for the Platform to function. These cannot be disabled as they are required for session authentication, security and core Platform operations.
• Analytical and performance cookies: Used to collect aggregated data about how users interact with the Platform, including pages visited, session duration and navigation paths. This data is used to improve Platform performance and user experience.
• Functional cookies: Used to remember user preferences such as language settings and responsible gambling limit configurations.

11.3 Managing Cookie Preferences

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies or receive notifications when a new cookie is set. Please note that disabling strictly necessary cookies may impair your ability to use the ze96 Platform correctly.

12. Minors and Age Restriction

ze96 is strictly an adult platform. The collection and processing of personal data of individuals under the age of 21 is not permitted and does not form part of ze96's intended data processing activities. Any account found to have been created by a person under 21 years of age will be closed immediately, all associated data will be handled in accordance with the applicable legal requirements and any deposited funds may be subject to forfeiture or refund in accordance with the ze96 Terms and Conditions.

Parents and guardians are advised to use appropriate parental-control software to prevent minors from accessing online gambling platforms, including ze96.

13. Exercising Your Data Rights

To exercise any of your rights as described in the User Rights section of this Policy — including the rights of access, rectification, erasure, restriction, objection or portability — you must submit a written request to ze96 by email at [email protected].

Your request should include sufficient information to allow ze96 to verify your identity and to locate the relevant personal data. ze96 will acknowledge your request promptly and will provide a substantive response within thirty (30) calendar days, or within any shorter period required by applicable law.

ze96 will not charge a fee for handling data rights requests unless the request is manifestly unfounded, excessive or repetitive, in which case ze96 reserves the right to charge a reasonable administrative fee or to decline the request, providing written reasons for doing so.

14. Amendments to This Policy

ze96 reserves the right to update this Privacy Policy at any time. Where a material change is made, ze96 will use reasonable endeavours to notify registered users by email, by a prominent notice on the Platform, or both, prior to the change taking effect. Continued use of the Platform following publication of an updated Policy constitutes your acceptance of the revised terms.

The "Last updated" date at the top of this document reflects the date on which the most recent revision was published. It is your responsibility to review this Policy periodically.

15. Contact Us

For all data protection enquiries, rights requests, complaints or questions relating to this Privacy Policy, please contact ze96 using the details below. Do not include sensitive personal or financial details in initial enquiry messages sent by email.

• Email: [email protected] (plain text — not a clickable link)
• Website: https://ze96.cam
• Response time target: within 30 calendar days of receipt