zus888 Privacy Policy

1. Data Controller

1.1 For the purposes of this Privacy Policy, the data controller is zus888 ("zus888", "we", "us", "our"), the operator of the online gaming platform accessible at zus888.win.

1.2 zus888 holds an international gaming authority licence. The processing of personal data described in this Policy is carried out in accordance with the data protection obligations attached to that licence and applicable data protection legislation.

1.3 If you have any questions about this Policy or wish to exercise your data rights, please contact our Data Protection team via the details in Section 14.

2. Personal Data We Collect

2.1 zus888 collects personal data in the following categories, depending on the nature of your interaction with the platform:

2.2 zus888 does not collect special category data (such as health data, racial or ethnic origin, or political opinions) except where expressly required for responsible gaming purposes (for example, self-exclusion records).

3. How We Use Your Personal Data

3.1 zus888 uses your personal data for the following purposes:

• Account Administration: Creating and managing your zus888 account, processing login and authentication, and maintaining account records;
• Identity & Age Verification: Confirming that you meet the 21-year minimum age requirement and verifying your identity in accordance with our KYC obligations;
• Payment Processing: Processing deposits and withdrawals in MYR via your chosen payment method, including Touch n Go eWallet, Boost, Maybank, CIMB, and Public Bank;
• Fraud Prevention & AML: Detecting, investigating, and preventing fraudulent activity, money laundering, and other prohibited conduct on the platform;
• Regulatory Compliance: Meeting obligations imposed by zus888's international gaming authority licence, including record-keeping, reporting, and audit requirements;
• Responsible Gaming: Monitoring gaming behaviour to identify potential problem gambling indicators and administering responsible gaming tools such as deposit limits and self-exclusion;
• Platform Improvement: Analysing aggregated, anonymised usage data to improve game offerings, user experience, and platform performance;
• Customer Support: Responding to support enquiries submitted via live chat or email;
• Marketing Communications: Sending promotional offers and platform updates to Members who have opted in to receive such communications. You may opt out at any time by contacting support.

4. Legal Basis for Processing

4.1 zus888 processes personal data on the following legal bases:

• Contract Performance: Processing necessary to fulfil our obligations under the Member agreement, including account management, payment processing, and game access;
• Legal Obligation: Processing required to comply with our licensing conditions, anti-money laundering obligations, and other applicable legal requirements;
• Legitimate Interests: Processing carried out in pursuit of zus888's legitimate interests in fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your rights and interests;
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit opt-in consent. Consent may be withdrawn at any time.

5. Data Sharing & Disclosure

5.1 zus888 does not sell, rent, or trade your personal data to third parties for their own marketing purposes.

5.2 We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment Service Providers: Including Touch n Go eWallet, Boost, and Malaysian banking partners, for the purpose of processing your financial transactions;
• Identity Verification Providers: Third-party KYC services used to verify identity documents and screen against sanction lists;
• Game Providers: Licensed game studios whose games are hosted on the zus888 platform, to the extent necessary to resolve disputes or support audits;
• Regulatory Authorities: Our licensing authority and other competent regulators, where disclosure is required by law or licence condition;
• Law Enforcement: Where required by a court order, subpoena, or lawful request from an enforcement authority;
• Fraud Prevention Services: Industry fraud prevention databases and services used to detect and prevent financial crime.

5.3 All third-party service providers engaged by zus888 are subject to data processing agreements that require them to process your data only for the specified purpose and in compliance with applicable data protection standards.

6. International Data Transfers

6.1 zus888 operates under international gaming authority licensing and may, as a consequence, transfer personal data to countries outside Malaysia for the purposes described in this Policy.

6.2 Where personal data is transferred internationally, zus888 ensures that appropriate safeguards are in place, including contractual protections equivalent to applicable data protection standards.

6.3 Financial data related to MYR transactions is processed through Malaysian-licensed payment infrastructure to the extent technically and contractually feasible.

7. Data Retention

7.1 zus888 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, regulatory, accounting, or reporting obligations.

7.2 The following indicative retention periods apply:

• Account & Identity Data: Retained for the duration of your membership and for a minimum of five (5) years after account closure, in accordance with AML and licensing obligations;
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction;
• Support Communications: Retained for three (3) years from the date of the interaction;
• Technical & Session Logs: Retained for up to twelve (12) months from collection;
• Self-Exclusion Records: Retained indefinitely or for the duration specified in the self-exclusion agreement, plus a mandatory post-exclusion period.

7.3 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised.

8. Cookies & Tracking Technologies

8.1 zus888 uses the following categories of cookies on the platform:

• Strictly Necessary Cookies: Required for platform operation including login sessions, security tokens, and session management. These cannot be disabled.
• Performance Cookies: Used to collect anonymised data about how the platform is used, to help us improve functionality and user experience. These are enabled by default but can be disabled in your browser settings.
• Functional Cookies: Used to remember your preferences, such as language settings and display options. Disabling these may affect platform functionality.

8.2 zus888 does not use third-party advertising cookies or cross-site tracking cookies.

8.3 You may manage cookies through your browser settings. Note that disabling strictly necessary cookies will prevent you from accessing your zus888 account.

9. Your Data Rights

9.1 Subject to applicable law and our legal retention obligations, you have the following rights in relation to your personal data held by zus888:

• Right of Access: You may request a copy of the personal data we hold about you;
• Right to Rectification: You may request correction of inaccurate or incomplete personal data;
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal obligations;
• Right to Restrict Processing: You may request that we limit how we use your data in certain circumstances;
• Right to Object: You may object to processing based on legitimate interests, including direct marketing;
• Right to Data Portability: You may request your data in a structured, machine-readable format where technically feasible.

9.2 To exercise any of the above rights, contact the zus888 support team via live chat or email. We will respond within 30 days of receiving a valid request. We may need to verify your identity before processing a data rights request.

10. Children's Privacy

10.1 zus888 is strictly an adults-only platform. Persons under 21 years of age are prohibited from registering or using any zus888 service.

10.2 zus888 does not knowingly collect personal data from individuals under 21 years of age. If we become aware that personal data has been collected from an underage individual, we will take immediate steps to delete that data and close the associated account.

10.3 If you believe that a person under 21 has registered on the platform, please contact our support team immediately.

11. Data Security

11.1 zus888 implements technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and zus888's servers;
• Encryption of sensitive data fields — including passwords and financial information — at rest;
• Role-based access controls restricting staff access to personal data on a need-to-know basis;
• Regular security assessments and penetration testing of platform infrastructure;
• Two-factor authentication options for Member accounts.

11.2 No system is completely immune to security risks. In the event of a data breach that is likely to result in a risk to your rights and interests, zus888 will notify affected Members and relevant authorities in accordance with applicable law and licensing obligations.

12. Third-Party Links

12.1 The zus888 platform may contain links to third-party websites or services, including game providers' information pages. zus888 is not responsible for the privacy practices of any third-party site and encourages you to review the privacy policy of any external site you visit.

12.2 Clicking a link to a third-party website means you leave the zus888 platform. Your activity on any third-party site is governed by that site's own terms and privacy policy, not by this Policy.

13. Changes to This Privacy Policy

13.1 zus888 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will update the "Last updated" date at the top of this page.

13.2 For significant changes that materially affect how we process your personal data, we will notify registered Members via email or in-platform notification. Continued use of the platform following notification constitutes acceptance of the updated Policy.

13.3 We encourage you to review this Policy periodically to stay informed of how zus888 protects your data.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by zus888, please contact us through the following channels:

• Live Chat: Available 24/7 on the zus888 website. Response time under 2 minutes.
• Email: [email protected]

We aim to respond to all data-related enquiries within 30 calendar days. Where a request is complex or we receive a high volume of requests, we may extend this period by up to an additional 60 days, in which case we will notify you of the extension.