Privacy Policy ZK99 — Protecting Malaysian Players' Data

1Introduction — ZK99's Privacy Commitment

ZK99 believes privacy is a fundamental right of every user, not something that needs to be requested or fought for. We built this platform with a "privacy by design" approach — meaning data protection is not bolted on after the fact, but considered from the very start of development.

This Privacy Policy is written in plain language, not complex legal jargon. We want you to genuinely understand what happens with your data — not just click "I agree" without knowing what you're agreeing to.

As a platform serving Malaysian users, zk99 complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards. Any enquiries regarding this Privacy Policy may be directed to our Data Protection Officer at privacy@zk99.biz.

2Personal Data We Collect

Zk99 only collects data that is genuinely necessary to provide you with a safe, fair, and efficient service. We do not collect data for purely corporate interests. The following are the categories of data we may collect:

2.1 Data You Provide Directly

• Full name as shown on your Malaysian identity card or passport
• Identity card number (MyKad) or passport number
• Date of birth and gender
• Email address and Malaysian mobile number
• Residential address in Malaysia
• Payment method details (Touch 'n Go eWallet, GrabPay, DuitNow, FPX, etc.) — account numbers or e-wallet IDs only, not passwords
• Information you provide to our customer support team

2.2 Automatically Collected Data

• IP address and device location (city/state level only, not precise address)
• Device type, operating system, and web browser used
• Gaming activity logs including bets placed, games played, and session duration
• Records of all financial transactions, including deposits and withdrawals
• Cookie and session data for platform functional purposes

2.3 Data from Third-Party Sources

In certain circumstances, zk99 may receive information about you from legitimate third parties, including:

• Payment processors (for transaction status verification only)
• Identity verification or anti-fraud bodies recognised in Malaysia
• Recognised credit reporting agencies (for KYC and AML compliance)

3How We Use Your Data

Every piece of data we collect has a clear and legitimate purpose. ZK99 uses your personal data for the following:

• Account Operations: Create, verify, and manage your player account on the zk99 platform.
• Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX Maybank2u or CIMB Clicks, and managing your winnings withdrawals in Malaysian Ringgit (RM).
• Legal Compliance: To fulfil KYC (Know Your Customer), AML (Anti-Money Laundering), and financial reporting obligations as required under Malaysian law.
• Platform Security: Identifying and preventing fraud, money laundering, multi-account abuse, and other unlawful activities on the platform.
• Customer Support: Helping you resolve technical issues, account enquiries, and any problems you encounter while using zk99.
• Product Improvement: Analysing how players use the platform to improve the user experience and develop more useful new features.
• Promotional Communications: Sending promotional information, exclusive offers, and platform updates via email or SMS — only if you have given consent to receive such communications.
• Responsible Gaming: Monitoring gameplay patterns to identify players who may need responsible gaming support.

4Legal Basis for Data Processing

ZK99 processes your personal data on valid legal grounds under Malaysia's Personal Data Protection Act 2010 (PDPA). The legal basis we rely on depends on the purpose of processing:

• Consent: For marketing communications and non-essential cookie use — you provide explicit consent and may withdraw it at any time.
• Contract Performance: For all processing necessary to perform the agreement between you and zk99, including payment processing and account management.
• Legal Obligation: For compliance with KYC, AML, and financial reporting obligations required under Malaysian law.
• Legitimate Interest: For platform security, fraud prevention, and product improvement purposes.

5Sharing Data with Third Parties

ZK99 does not sell, rent, or trade your personal data to any third party for marketing purposes. This is a commitment we uphold without exception. Your data may only be shared in the following limited circumstances:

• Service Providers: Companies acting on behalf of zk99, such as Malaysian payment processors (Touch 'n Go, GrabPay, DuitNow, etc.), technical infrastructure providers, and customer support service providers. All partners are bound by strict confidentiality agreements.
• Game Providers: Game provider companies (Pragmatic Play, PG Soft, Netent, etc.) may receive the minimum session data required to technically operate the games.
• Malaysian Authorities: When required by law, court order, or legitimate request from Malaysian government agencies such as Bank Negara Malaysia or the Royal Malaysia Police.
• Business Transfer: In the event of a merger, acquisition, or sale of zk99's assets, user data may be transferred to the receiving entity, subject to equivalent privacy protections.

6Data Storage & Security Measures

Your data security is a technical priority we invest in seriously. ZK99 implements the following security measures:

• Data-in-Transit Encryption: All communications between your device and zk99 servers are protected with TLS 1.3 protocol using AES-256 encryption.
• Data-at-Rest Encryption: Sensitive data stored in our databases is encrypted using the latest industry-standard encryption.
• Strict Access Controls: Only zk99 staff who require access to specific data for their job functions are permitted to do so, governed by role-based access control (RBAC).
• Regular Security Audits: The zk99 platform undergoes penetration testing and security audits by independent cybersecurity firms at least twice a year.
• 24/7 Monitoring: Automated monitoring systems operate around the clock to detect any suspicious activity or unauthorised access attempts.
• Data Backup: Data is securely backed up on a regular basis to ensure rapid recovery in the event of an unforeseen incident.

In the event of a data breach that materially affects your privacy, zk99 is committed to notifying you within 72 hours of the time we confirm the incident, in line with international best practices.

7Cookies, Tracking Technologies & Your Choices

ZK99 uses cookies and similar tracking technologies to keep the platform running smoothly and to enhance the user experience. We use four types of cookies:

• Essential Cookies (Required): Required for core platform functions — login, game sessions, and security. These cookies cannot be disabled.
• Functional Cookies: Saves your preferences such as language, display theme, and other settings to improve your experience.
• Analytics Cookies: Helps us understand how users interact with the platform — most visited pages, time spent, and more. This information is used in aggregate form only.
• Marketing Cookies: Used only with your consent to display relevant promotions within the zk99 platform — not on external websites.

You can manage your cookie preferences through your browser settings at any time. However, disabling essential cookies will affect your ability to use the platform fully.

8Your Privacy Rights as a ZK99 User

Under Malaysia's PDPA and zk99's privacy practices, you have the following rights regarding your personal data:

9Children's Data

The zk99 platform is strictly restricted to individuals aged 18 and above. ZK99 does not knowingly collect or process personal data of individuals under the age of 18.

If we find that personal data of a child or minor has been collected without proper age verification, we will take immediate steps to delete that data and close the associated account. If you believe your child or any underage individual has registered an account on our platform, please contact us immediately at support@zk99.biz.

10Amendments to This Privacy Policy

ZK99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or the technologies we use. Any amendments will be published on this page with a new "Last updated" date.

For significant amendments that affect how we use your data, zk99 will notify you via your registered email or in-platform notification at least 14 calendar days before the amendments take effect. This gives you sufficient time to review the changes and make an informed decision about your continued use of the platform.

Your continued use of the zk99 platform after any amendment takes effect constitutes your acceptance of the revised Privacy Policy.

11Contact Our Data Protection Officer

ZK99 has appointed a Data Protection Officer (DPO) responsible for ensuring full compliance with Malaysia's PDPA and international privacy standards. For any privacy or data protection enquiries, concerns, or requests, please contact:

• Privacy Email: privacy@zk99.biz
• General Support Email: support@zk99.biz
• Live Chat: Available 24/7 via the in-platform chat icon
• Response Time: Under 48 hours for privacy enquiries submitted via email

If you are dissatisfied with how we handle your privacy concerns, you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection (JPDP) under the Ministry of Digital.