01 Introduction
This Privacy Policy ("Policy") describes how ZUS88 ("ZUS88", "We", "Us", "Our") collects, processes, stores, uses and protects personal information belonging to registered members, prospective members and visitors ("You", "User", "Data Subject") who access the ZUS88 online sports betting and live casino platform at zus88.cam and any associated mobile or web interfaces.
ZUS88 operates an online platform serving players primarily based in Malaysia, including users located in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya and Shah Alam. Our services cover sports betting on markets such as the English Premier League (EPL), Liga Super Malaysia and UFC events, alongside live dealer casino games, digital slots and instant-play titles, all denominated in Malaysian Ringgit (MYR/RM).
We are committed to handling your personal data responsibly, transparently and securely. This Policy sets out your rights and our obligations under applicable data protection principles. By creating a ZUS88 account or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.
This Policy should be read alongside the ZUS88 Terms & Conditions. Where there is a conflict between the two documents on a data-related matter, this Privacy Policy takes precedence.
02 Definitions
The following definitions apply throughout this Policy.
03 Data We Collect
ZUS88 collects only the personal data necessary to deliver platform services, maintain account security, comply with legal obligations, and support responsible gambling obligations. The categories of data we collect are set out in the table below.
| Category | Examples | Primary Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, MyKad / passport number, selfie / photo ID | Account registration, KYC age and identity verification |
| Contact Data | Email address, mobile number, city or state of residence | Account access, transaction alerts, support communications |
| Financial Data | Bank account name and number, e-wallet identifiers (Touch 'n Go, Boost, GrabPay, DuitNow, FPX), crypto wallet address (USDT TRC20), transaction history | Deposit and withdrawal processing, fraud detection |
| Account Activity Data | Bet history, game session records, bonus redemptions, win/loss records, login timestamps | Service delivery, platform integrity, responsible gambling monitoring |
| Technical Data | IP address, device type, browser type and version, operating system, session duration, referral URL | Security, fraud prevention, platform performance optimisation |
| Communications Data | Live chat transcripts, support emails, feedback forms, Telegram messages | Support resolution, quality assurance, legal record-keeping |
| Preference Data | Language preference, notification settings, self-imposed deposit or session limits | Personalising the user experience, responsible gambling tools |
ZUS88 does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, health records or biometric data beyond what is strictly necessary for KYC age verification.
04 How Data Is Collected
ZUS88 collects personal data through the following means:
- Direct Submission: Information you provide when registering an account, completing KYC verification, submitting a payment request, contacting support or participating in a promotion.
- Automated Technical Collection: Technical data collected automatically when you access or navigate the Platform, including via cookies, log files and analytics tools embedded within the Platform's own infrastructure.
- Third-Party Verification Services: Identity and address verification data returned by KYC service providers engaged by ZUS88 to confirm the accuracy of information you have submitted.
- Payment Providers: Transaction confirmation data from payment gateways including Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, DuitNow, FPX and crypto wallet networks, sufficient to confirm and reconcile deposits and withdrawals.
- Platform Interaction: Behavioural data generated through your use of betting markets, casino games, account settings and responsible gambling tools during active sessions.
ZUS88 does not purchase personal data lists from external commercial data brokers, nor does it collect data from social media platforms beyond what a user voluntarily submits during registration or support interactions.
05 Data Processing & Use
ZUS88 processes personal data for the following purposes:
- Account Management: Creating, maintaining and securing registered accounts, including authentication, password reset and account history.
- Service Delivery: Operating sports betting markets, casino games, live dealer rooms and all related Platform features that registered members access.
- Payment Processing: Verifying, executing and reconciling MYR deposits and withdrawals through supported Malaysian payment channels.
- Identity and Age Verification (KYC): Confirming that all registered members are who they claim to be and are aged 21 or above before processing withdrawal requests.
- Fraud and Security: Detecting, investigating and preventing fraud, unauthorised access, money laundering, bonus abuse and other prohibited conduct.
- Responsible Gambling: Monitoring account activity to identify at-risk behaviour patterns and applying self-imposed or platform-mandated restrictions where appropriate.
- Legal and Regulatory Compliance: Retaining records and disclosing information as required by applicable law, licensing conditions, regulatory instructions or court orders.
- Communications: Sending transaction notifications, security alerts, account status updates and, where opted in, promotional communications.
- Platform Improvement: Analysing aggregated, anonymised usage data to improve Platform design, performance and content relevance.
- Dispute Resolution: Using account and transaction records to investigate and resolve member complaints or third-party disputes.
ZUS88 does not use personal data to create automated individual profiles for marketing profiling sold to third parties, nor to make solely automated decisions with significant legal consequences without human review.
06 Legal Basis for Processing
ZUS88 processes personal data under one or more of the following recognised legal grounds, depending on the specific purpose:
- Contractual Necessity: Processing required to enter into and perform the Member Services Agreement between you and ZUS88, including account creation, payment processing and service delivery.
- Legal Obligation: Processing required to comply with applicable laws, regulatory requirements, licensing conditions, anti-money laundering rules, or lawful instructions from competent authorities.
- Legitimate Interests: Processing carried out for ZUS88's legitimate business interests, including fraud prevention, platform security and product improvement, where those interests are not overridden by your fundamental rights and freedoms.
- Consent: Processing based on your freely given, informed and specific consent, particularly in relation to optional marketing communications. You may withdraw consent at any time by contacting support or adjusting account notification settings.
- Vital Interests: In limited circumstances, processing may be necessary to protect the vital interests of a person, including where responsible gambling safeguards are urgently required.
07 Data Sharing & Disclosure
ZUS88 does not sell, rent or trade your personal data to third parties for their independent marketing or commercial purposes. ZUS88 may share your data with the following categories of parties only to the extent necessary for the stated purpose:
- Payment Processors and E-Wallet Providers: To process MYR deposits and withdrawals via Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, DuitNow, FPX and crypto networks. These processors receive only the transaction data necessary to complete the payment.
- Identity and KYC Verification Services: Third-party verification providers engaged to confirm member identity and age. Data shared is limited to what is strictly required for the verification check.
- Game Studio Operators: Data necessary for the technical delivery of casino games and sports markets, where game content is provided by licensed third-party studios. No marketing profiling data is transferred to game studios.
- Legal and Regulatory Authorities: Competent government bodies, regulators, law enforcement agencies or courts where ZUS88 is under a legal or regulatory obligation to disclose. Disclosure will be limited to what is legally required.
- Professional Advisers: Legal counsel, auditors and compliance consultants under strict confidentiality obligations, where necessary to defend legal claims or ensure regulatory compliance.
- Corporate Transactions: In the event of a merger, acquisition or restructuring, personal data may be transferred to the acquiring entity, subject to equivalent data protection standards being maintained and members being notified in advance.
No third-party service provider engaged by ZUS88 is authorised to use your personal data for their own purposes beyond the contracted service. All processors operate under written data processing agreements that require them to handle your data securely and in compliance with applicable standards.
08 Data Retention
ZUS88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory or accounting obligations. The general retention principles are as follows:
- Account and Transaction Records: Retained for a minimum of five years following account closure or the last transaction, as required for anti-money laundering record-keeping and potential legal proceedings.
- KYC and Identity Documents: Retained for the duration of the account relationship and for a minimum period after closure in accordance with applicable regulatory requirements.
- Betting and Casino Activity Logs: Retained for the period required to resolve potential disputes, satisfy audit obligations and support responsible gambling reviews.
- Support Communications: Retained for a reasonable period after resolution of the matter to which they relate, typically twelve months unless a dispute remains outstanding.
- Technical and Analytical Data: Aggregated or anonymised analytical data may be retained indefinitely for Platform improvement purposes, provided it no longer identifies any individual.
When personal data is no longer required, ZUS88 applies secure deletion or anonymisation procedures to ensure the data cannot be recovered or re-identified.
09 Data Security
ZUS88 implements technical and organisational security measures proportionate to the nature and sensitivity of the personal data held. Key safeguards include:
- Encryption in Transit: All data transmitted between your browser or mobile device and the ZUS88 Platform is encrypted using 256-bit TLS/SSL protocols.
- Encryption at Rest: Sensitive stored data, including financial credentials and identity document copies, is encrypted at rest using industry-standard cryptographic protocols.
- Access Controls: Access to personal data is restricted on a need-to-know basis. Staff access is subject to role-based permissions, authentication requirements and audit logging.
- Fraud Monitoring: Automated and manual monitoring systems operate continuously to detect unusual account activity, suspicious transactions and potential unauthorised access.
- Incident Response: ZUS88 maintains documented procedures for responding to personal data breaches, including internal escalation, containment and notification obligations.
- Third-Party Security Standards: All Data Processors engaged by ZUS88 are assessed for security compliance. Contracts include mandatory security requirements.
Whilst ZUS88 applies robust security measures, no platform can guarantee absolute protection against all threats. You are responsible for maintaining the security of your own account credentials and should notify ZUS88 support immediately if you suspect unauthorised account access.
10 Cookies & Tracking Technologies
ZUS88 uses cookies and similar technologies to support Platform functionality, maintain secure sessions, and collect aggregated analytics. The categories of cookies used are:
- Strictly Necessary Cookies: Required for the Platform to function correctly. These include session authentication tokens and security cookies. They cannot be disabled without impairing core Platform features.
- Functional Cookies: Used to remember preferences such as language settings and display options to improve your experience across sessions.
- Analytics Cookies: Used to collect anonymised information about how users interact with the Platform, including pages visited, session duration and navigation paths. This data helps ZUS88 improve Platform design and performance.
- Security Cookies: Used to detect and prevent fraudulent activity, multiple account creation and automated bot access.
ZUS88 does not deploy third-party advertising cookies or permit external advertising networks to track users across other websites through the ZUS88 Platform. You may manage browser cookie settings through your browser's privacy controls. Disabling strictly necessary cookies may impair Platform functionality, including account login.
11 User Rights
Subject to applicable law and verification of your identity, you hold the following rights in relation to your personal data held by ZUS88. To exercise any of these rights, contact our support team at [email protected].
Request a copy of the personal data ZUS88 holds about you, along with information about how it is processed.
Request correction of inaccurate or incomplete personal data held in your ZUS88 account profile.
Request deletion of your personal data where it is no longer required, subject to legal retention obligations that may prevent full deletion.
Request that ZUS88 restricts processing of your data in certain circumstances, such as while a dispute or inaccuracy is being resolved.
Request a structured, machine-readable copy of personal data you have provided to ZUS88 for transfer to another service, where technically feasible.
Object to processing of your data based on legitimate interests, particularly where that processing is used for direct marketing or profiling.
Where processing relies on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.
Request human review of any decision that significantly affects you and has been made solely through automated processing, where applicable.
ZUS88 will respond to verified data subject requests within a reasonable timeframe. In some circumstances, ZUS88 may be unable to comply with an erasure request where data retention is required by law or necessary to defend legal claims.
12 Minors & Age Policy
ZUS88 is strictly for individuals aged 21 years and above. We do not knowingly collect personal data from anyone under the age of 21. Age verification is conducted as part of the KYC process before withdrawal access is granted, and ZUS88 reserves the right to request proof of age at any stage of the account lifecycle.
If ZUS88 discovers or is informed that personal data has been collected from an underage individual, the affected account will be suspended immediately. All personal data associated with the underage user will be deleted as quickly as operationally feasible, subject to any legal obligations to retain evidence of the breach.
If you are a parent or guardian and believe that your child has registered an account on ZUS88, please contact support immediately at [email protected] so that we can investigate and take appropriate action promptly.
Play responsibly. ZUS88 is for adults aged 21 and above only. Gambling can be addictive. If you or someone you know may be experiencing gambling-related harm, visit the Responsible Gambling page for support resources and account management tools.
13 Cross-Border Data Transfers
ZUS88 operates under an international licence and may engage service providers — including payment processors, KYC verification services and technical infrastructure partners — located outside Malaysia. Where personal data is transferred to processors in other countries, ZUS88 ensures that equivalent data protection standards are applied through contractual safeguards, including data processing agreements that mandate appropriate technical and organisational security measures.
By using the ZUS88 Platform, you acknowledge that your personal data may be transferred to, stored in, or processed in a country other than Malaysia. ZUS88 takes reasonable steps to ensure that any such transfer occurs under conditions that protect your data rights to a standard comparable to those that would apply within Malaysia.
14 Policy Amendments
ZUS88 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law or Platform operations. Material changes will be communicated to registered members via the email address on file or through a prominent notice on the Platform prior to the changes taking effect.
The "Effective date" displayed at the top of this Policy identifies the version currently in force. We recommend reviewing this Policy periodically to stay informed about how ZUS88 handles your personal data. The most current version is always accessible at zus88.cam/privacy-policy.
Your continued use of the Platform after the effective date of a revised Policy constitutes your acceptance of the updated terms. If you object to any changes, you may close your account by contacting support and requesting account closure.
15 Contact Us
If you have questions, concerns or a formal request relating to this Privacy Policy or the handling of your personal data by ZUS88, please contact our data support team through one of the following channels. All data-related enquiries are treated with priority and full confidentiality.
- Email: [email protected] — include "Privacy Request" in the subject line for fastest routing.
- Live Chat: Available on the Platform 24 hours a day, 7 days a week, including Malaysian public holidays. Average first response time: under 2 minutes.
- Telegram: Available 08:00 – 00:00 MYT daily for general queries and escalations.
ZUS88 aims to acknowledge all privacy-related requests within 3 business days and to resolve substantive requests within 30 days. Where a request is complex or requires additional verification, we will inform you of the expected resolution timeline.
For matters relating to Platform rules and member obligations, please refer to the Terms & Conditions. For responsible gambling support tools and self-exclusion, visit the Responsible Gambling page.