At ZK99, your personal data is handled with the same care and rigour we apply to financial transactions. This Policy explains exactly what data we collect, how we use it, and the rights you hold as a ZK99 player.
All data transmitted between your device and ZK99's servers is protected by 256-bit SSL encryption — the same standard used by leading Malaysian banks including Maybank2u and CIMB Clicks.
ZK99 does not sell, rent, or trade your personal data to any third party for commercial marketing purposes. Your information is used only for the purposes described in this Policy.
You have the right to access, correct, and request deletion of your personal data held by ZK99. We respond to all verified data requests within 30 days.
Player data is stored on secured, access-controlled servers. Financial data — including payment method details — is handled via PCI-compliant third-party payment processors. ZK99 does not store raw card numbers.
Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable licensing and legal obligations. Retention periods are defined per data category in this Policy.
In the event of a material data security breach affecting your personal data, ZK99 will notify affected players within 72 hours of becoming aware of the breach, consistent with international data protection standards.
This Privacy Policy ("Policy") sets out how ZK99 ("the Platform", "we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("you", "your", "Player "User") who visit the ZK99 website at zk99.cam or register and use any services offered by ZK99, including sports betting, live casino, slots, and related gaming services.
ZK99 is committed to handling personal data responsibly, securely, and in a manner consistent with applicable international data protection principles. We apply the same care to your personal data that we apply to financial transactions — treating your privacy as a non-negotiable component of our service.
By accessing the ZK99 website, creating a Player Account, making a deposit using any Malaysian payment method (FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, or Public Bank), or otherwise interacting with our services, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.
Note for Malaysian Users: While ZK99 operates under international licensing and applies international data protection standards, the Personal Data Protection Act 2010 (PDPA) of Malaysia may apply to certain aspects of your data rights depending on the specific circumstances of processing. We encourage Malaysian players to familiarise themselves with the PDPA. ZK99 treats Malaysian player data with full respect for applicable data protection principles regardless of the precise legal framework in question.
The following definitions apply throughout this Privacy Policy:
| Term | Meaning |
|---|---|
| Personal Data | Any information that identifies or could reasonably be used to identify a natural person, directly or indirectly — including name, identification number, email address, IP address, device identifiers, and financial data. |
| Data Controller | The entity that determines the purposes and means of processing personal data. For users of ZK99, the Data Controller is ZK99 (the Platform operator). |
| Data Processor | A third party that processes personal data on behalf of and under the instruction of the Data Controller. This includes payment processors, KYC verification providers, and cloud hosting providers. |
| Processing | Any operation performed on personal data, including collection, storage, use, disclosure, alteration, retrieval, or deletion. |
| Consent | A freely given, specific, informed, and unambiguous indication by the data subject that they agree to the processing of their personal data for a stated purpose. |
| Cookie | A small text file stored on the user's device by a web browser at the instruction of a website, used to retain session information, preferences, or analytical data. |
| KYC Data | Identity verification documents and information collected as part of ZK99's Know Your Customer process, including government-issued identification and proof of address. |
For the purpose of this Privacy Policy, the Data Controller responsible for the personal data of ZK99 Players is the operator of the ZK99 platform — the international gaming entity operating ZK99 under its applicable offshore gaming licence.
ZK99 does not operate as a Malaysian-registered company and is not regulated by Bank Negara Malaysia, the Companies Commission of Malaysia (SSM), or any other Malaysian domestic regulatory body. However, ZK99 processes personal data belonging to Malaysian players and applies data protection principles consistent with recognised international standards to that data.
Data Controller Contact: For all data protection enquiries, requests to exercise your data rights, or concerns about how your personal data is handled, please contact our designated protection contact at: [email protected] (plain text — not a clickable link). Please include "Privacy / Data Request" in the subject line of your communication.
ZK99 collects and processes the following categories of personal data in connection with your use of the Platform:
ZK99 applies the principle of data minimisation — we collect only the personal data that is strictly necessary for the specific purpose for which it is collected. We do not collect sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, or health data) unless specifically required by applicable compliance obligations.
ZK99 collects personal data through the following means:
| Collection Method | Description |
|---|---|
| Direct Registration | Data you voluntarily provide when creating a ZK99 account — name, email, phone number, date of birth, and IC/passport number. |
| KYC Submission | Identity and address documents you upload in response to ZK99's verification requirements prior to withdrawal processing. |
| Payment Transactions | Payment data generated when you deposit or withdraw using FPX, DuitNow, eWalets, cards, or cryptocurrency. Payment processors share necessary transaction data with ZK99 to credit or debit your account. |
| Platform Usage | Automatically collected technical data as you navigate the ZK99 website and use gaming services — including session logs, IP addresses, and device identifiers. |
| Cookies & Analytics | Data collected via cookies and similar tracking technologies to support platform functionality, security, and analytical purposes. See Section 9 for full cookie details. |
| Support Interactions | Data shared during live chat sessions, email communications, or when contacting ZK99 via any other support channel. |
| Third-Party Verification | Data received from third-party identity verification providers and fraud screening services used as part of ZK99's compliance process. |
ZK99 processes personal data solely for the specific, legitimate purposes set out in the table below. We do not process personal data for purposes that are incompatible with those stated here.
| Purpose | Data Categories Used |
|---|---|
| Account registration and management | Identity data, contact data, login credentials |
| Age verification (21+ enforcement) | Date of birth, KYC identity documents |
| Processing deposits and withdrawals | Financial data, payment method data, identity data |
| AML and fraud prevention compliance | Identity data, KYC data, transaction data, device data |
| Providing customer support | Contact data, account data, communications |
| Responsible gambling monitoring and tools | Account data, transaction data, usage data |
| Platform security and fraud detection | Technical data, device data, IP data, session logs |
| Marketing communications (where consented) | Contact data, gaming preferences, bonus history |
| Platform analytics and improvement | Usage data, technical data, anonymised behavioural data |
| Regulatory reporting and licensing compliance | Identity data, financial data, KYC data |
ZK99 processes personal data under one or more of the following legal bases, consistent with internationally recognised data protection principles:
Withdrawing Consent: Where ZK99 processes your data on the basis of consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal. To withdraw consent for marketing communications, contact [email protected] or update your notification preferences in Account Settings.
ZK99 does not sell, rent, or trade your personal data to any third party for commercial purposes. Personal data is shared with third parties only in the following circumstances, and only to the extent necessary for each specific purpose:
Transaction data is shared with the relevant payment processor in order to execute your deposit or withdrawal request. This includes FPX payment gateways, DuitNow transfer infrastructure, eWallet providers (Touch 'n Go, Boost, GrabPay), and card payment networks (Visa, Mastercard). These processors operate under their own privacy policies and applicable payment industry security standards (PCI DSS).
Identity documents and verification data are shared with ZK99's contracted KYC and identity verification technology providers, who process this data under strict data processing agreements and solely for the purpose of identity verification on ZK99's behalf.
Technical data including IP addresses, device fingerprints, and behavioural signals may be shared with fraud prevention and cybersecurity services used to protect ZK99 and its players from fraudulent activity, account takeover, and money laundering.
ZK99 may disclose personal data to gaming regulators, licensing authorities, financial intelligence units, or law enforcement agencies where required by applicable law, pursuant to a lawful court order, or in connection with an investigation into suspected criminal activity, fraud, or money laundering. ZK99 will notify affected Players of such disclosures where legally permitted to do so.
In the event of a merger, acquisition, or transfer of all or substantially all of ZK99's business assets to a third party, your personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations. ZK99 will provide advance notice of any such transfer to affected Players.
All third parties with whom ZK99 shares personal data are required to handle that data in accordance with applicable data protection standards and under contractual terms that prohibit use of the data for any purpose other than that for which it was shared.
ZK99 uses cookies and similar tracking technologies on the Platform for the purposes described below. By continuing to use the ZK99 website, you consent to the use of cookies in accordance with this Policy.
| Cookie Type | Purpose | Description | Duration |
|---|---|---|---|
| Essential | Platform functionality | Required for core platform features including session management, authentication, and security. Cannot be disabled without significantly impairing platform functionality. | Session / up to 12 months |
| Analytics | Platform improvement | Used to collect anonymised data on how Players navigate and use the platform. Helps ZK99 identify performance issues, popular features, and areas for improvement. | Up to 24 months |
| Functional | User preferences | Remembers your platform preferences such as language, game lobby layout, and notification settings to provide a personalised experience on return visits. | Up to 12 months |
| Security | Fraud prevention | Device fingerprinting and session integrity cookies used to detect suspicious activity, prevent account takeover, and identify multiple account creation attempts. | Session / up to 6 months |
You may manage cookie preferences through your browser settings. Note that disabling essential or security cookies will impair platform functionality and may prevent you from logging in or completing transactions. Clearing cookies will log you out of any active session.
ZK99 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, subject to any minimum retention periods required by ZK99's international gaming licence or applicable legal obligations.
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | Regulatory / AML compliance |
| KYC identity documents | Duration of account + 5 years after closure | Gaming licence obligation |
| Financial transaction records | 7 years from date of transaction | AML / legal obligation |
| Customer support communications | 3 years from last interaction | Legitimate interest / dispute resolution |
| Marketing consent records | Until consent withdrawn + 1 year | Consent / legal defence |
| Technical / session logs | 12 months from generation | Security / fraud prevention |
| Responsible gambling records | Duration of exclusion / limit + 5 years | Player protection obligation |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with ZK99's data deletion procedures. Anonymised data may be retained indefinitely for aggregated analytical purposes.
ZK99 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
No online platform can guarantee absolute security against all possible threats. ZK99 applies best-practice security measures to minimise risk. Players can contribute to their own data security by maintaining strong, unique passwords for their ZK99 Account and enabling two-factor authentication.
As a data subject whose personal data is processed by ZK99, you hold the following rights in connection with your personal data. ZK99 is committed to facilitating the exercise of these rights in a timely and transparent manner.
You may request a copy of all personal data ZK99 holds about you, together with information about how it is processed.
You may request correction of any inaccurate or incomplete personal data held on your ZK99 Account.
You may request deletion of your personal data where ZK99 no longer has a legal basis to retain it. This right is subject to our mandatory retention obligations.
You may request that ZK99 restricts processing of your personal data in certain circumstances, such as where you contest the accuracy of the data.
You may request your personal data in a structured, machine-readable format for transmission to another service where technically feasible.
You may object to processing of your data for direct marketing purposes at any time. You may also object to processing based on legitimate interests where your individual circumstances warrant it.
To exercise any of the above rights, please contact ZK99's data protection contact by email at [email protected] (plain text — not a clickable link) with the subject line "Data Rights Request". Please include your full registered name, ZK99 username, and a description of the right you wish to exercise.
ZK99 will acknowledge all verified data rights requests within 5 business days and provide a substantive response within 30 calendar days. Where a request is complex or high in volume, we may extend this period by a further 30 days, with prior notice to you.
Note: Certain data rights are subject to limitations where data processing is required for legal or regulatory compliance. For example, ZK99 cannot delete financial transaction records that are subject to mandatory AML retention requirements, even upon request. Where a request cannot be fully accommodated, ZK99 will explain the basis for any limitation.
ZK99's services are strictly intended for adults aged 21 years and above. ZK99 does not knowingly collect, process, or retain personal data relating to any person under the age of 21. Registration by or on behalf of any person under the age of 21 is strictly prohibited under ZK99's Terms and Conditions.
Where ZK99 becomes aware that personal data has been collected from a person under the age of 21, that Account will be immediately suspended, all data will be deleted as soon as practicable, and any associated funds will be returned to the payment source after applicable verification. ZK99 cooperates with relevant authorities in all cases involving underage access.
If you are a parent or guardian and believe that your child may have accessed or registered on ZK99, please contact our support team immediately at [email protected] (plain text — not a clickable link).
As an international online gaming platform serving Malaysian players, ZK99 may process and store personal data on servers located outside Malaysia. This includes transfers to ZK99's hosting infrastructure, third-party payment processors, and KYC/identity verification providers operating in various international jurisdictions.
Where personal data is transferred internationally, ZK99 ensures that appropriate safeguards are in place to protect that data to a standard consistent with the protections described in this Policy. Safeguards may include contractual data protection obligations imposed on data processors and sub-processors, or processing within jurisdictions that provide an adequate level of data protection.
For Malaysian players, ZK99 acknowledges the relevance of the Personal Data Protection Act 2010 (PDPA) to the extent applicable to ZK99's processing activities. ZK99 applies data protection principles consistent with the PDPA's core requirements in its handling of Malaysian player data, including principles of consent, purpose limitation, and data security.
ZK99 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or operational circumstances. All changes will be reflected in an updated Policy published on this page, with the "Last Updated" date revised accordingly.
Where amendments are material — for instance, where we introduce a new category of data processing or change the basis on which we process your data — ZK99 will provide advance notice via email to your registered address and/or via a prominent notice on the Platform. We recommend that you review this Policy periodically to stay informed.
Continued use of the Platform following the effective date of an amended Policy constitutes your acceptance of the updated terms. If you do not agree with any amendment, you should cease using the Platform and contact ZK99 to arrange Account closure.
If you have any questions about this Privacy Policy, wish to exercise a data right, want to report a potential data protection concern, or need to withdraw consent for any category of processing, please contact ZK99 using the following channels:
| Channel | Details | Response Time |
|---|---|---|
| Data Protection Email | [email protected] — subject line: "Privacy / Data Request" | Within 5 business days (acknowledgement); 30 days (substantive response) |
| Live Chat Support | Available 24/7 via the on-site chat function. For data rights requests, please also follow up in writing via email. | Under 3 minutes |
| Marketing Opt-Out | Update notification preferences in Account Settings, or email [email protected] with subject "Marketing Opt-Out" | Effective within 2 business days |
All email addresses above are displayed as plain text and are not clickable links. Please copy the address and use your own email client to contact us. For related information, you may also review our Terms & Conditions or visit our Responsible Gambling page.
ZK99 handles your personal data with the same standards we apply to financial transactions. If you have any questions about how your data is used, our support team is available24/7. For players aged 21 and above only.