Privacy Policy — How ziatogel Handles Your Personal Information

Introduction

ziatogel ("we", "our", "us" or the "Platform") is the operator of the website accessible at https://ziatogel.cam. This Privacy Policy ("Policy") explains how ziatogel collects, uses, discloses and safeguards the personal data of individuals ("User", "you" or "your") who access or register on the Platform.

ziatogel is an English-language casino and sports entertainment information platform designed exclusively for adults aged 21 and above. This Policy applies to all ziatogel services, including account registration, payment processing, marketing communications and customer support interactions.

By accessing the Platform, creating an account or submitting any personal information, you confirm that you have read and accepted this Policy. This Policy is to be read alongside the Terms & Conditions and the Responsible Gambling page, both of which are incorporated by reference.

Definitions

For the purposes of this Policy, the following terms have the meanings assigned below:

Data We Collect

ziatogel collects personal data through several channels. The categories below describe what is collected and at which point in the user journey.

3.1 Registration Data

When a User creates an account on ziatogel, we collect: full legal name, date of birth, residential address (including city — for example Kuala Lumpur, Penang, Johor Bahru, Shah Alam or Petaling Jaya), email address, phone number and chosen account credentials.

3.2 Identity Verification (KYC) Data

To comply with age verification requirements and anti-money-laundering obligations, we may request government-issued identity documents such as a Malaysian MyKad, passport or equivalent, proof of residential address (e.g., a recent utility bill), and proof of payment method ownership.

3.3 Transaction & Payment Data

When Users make deposits or withdrawals, ziatogel collects transaction reference numbers, payment method details (e.g., Maybank2u account identifier, Touch 'n Go eWallet reference, FPX transaction ID, DuitNow reference or cryptocurrency wallet address), transaction amounts in MYR and transaction timestamps. Full card numbers or banking passwords are never collected or stored by ziatogel directly.

3.4 Usage & Device Data

During platform use, ziatogel automatically collects IP address, device type and operating system, browser type and version, pages visited and time spent, referring URL and session duration. This data is used to improve platform performance and detect unusual access patterns.

3.5 Communications Data

When a User contacts ziatogel support, we retain records of the correspondence including the content of messages, timestamps and the resolution outcome. This data assists in resolving disputes and improving service quality.

3.6 Responsible Gambling Data

Where a User sets deposit limits, session time reminders or self-exclusion, ziatogel records those choices to enforce them accurately across the account lifecycle.

Data Processing & Purposes

The table below summarises the primary purposes for which ziatogel processes personal data:

Lawful Basis for Processing

ziatogel relies on the following lawful bases when processing personal data:

1. Contractual necessity: Processing required to deliver the services described in the Terms & Conditions, including account management, transaction processing and KYC verification.
2. Legal obligation: Processing required to comply with applicable anti-money-laundering, age verification, record-keeping or other statutory requirements.
3. Legitimate interests: Processing required for fraud detection, platform security, analytics and service improvement, where these interests are not overridden by a User's fundamental rights.
4. Consent: Marketing communications and non-essential cookies are processed only where the User has provided express prior consent. Consent may be withdrawn at any time without affecting prior processing.

Data Sharing

ziatogel does not sell, lease or barter personal data to third parties for their own marketing purposes. Data may be disclosed to the following categories of recipients for the purposes set out in Section 4:

• Payment processors and banking partners: To facilitate MYR deposits and withdrawals via Maybank, CIMB, DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay and cryptocurrency networks. These processors receive only the minimum data necessary to complete the transaction.
• KYC and identity verification service providers: To confirm age and identity in accordance with applicable requirements. Documents shared with such providers are contractually protected against misuse.
• Cloud hosting and infrastructure providers: Who store platform data in secure, access-controlled environments under contractual data-processing agreements.
• Analytics and performance providers: Who process aggregated and, where possible, anonymised usage data to help ziatogel understand platform traffic and user experience patterns.
• Legal and regulatory authorities: Where disclosure is required by law, court order, regulatory directive or to defend ziatogel's legal rights.
• Acquirers or business successors: In the event of a merger, acquisition or asset sale, personal data may be transferred as part of the business transaction, subject to equivalent privacy protections.

Data Retention

ziatogel retains personal data only for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable law. The general retention principles are:

• Active account data is retained for the duration of the account relationship plus a reasonable post-closure period to handle residual queries, chargebacks or disputes.
• Transaction and financial records are typically retained for a minimum of five years to satisfy anti-money-laundering and financial record-keeping obligations.
• KYC documentation is retained for the period required by applicable identity verification and compliance obligations.
• Customer support records are retained for a reasonable period following resolution to support any subsequent appeal or regulatory enquiry.
• Marketing preference records are retained until an opt-out is received, after which contact is ceased and the opt-out record is retained as evidence of compliance.
• Analytics and log data is anonymised or deleted on a rolling basis once its operational purpose has been served.

When personal data is no longer required, ziatogel uses secure deletion or anonymisation methods to render it irrecoverable.

Security Measures

ziatogel implements technical and organisational measures proportionate to the risk associated with the data it processes. These measures include:

• Encrypted data transmission using TLS protocols between the User's browser and the Platform;
• Hashed storage of account passwords using industry-standard algorithms;
• Access controls restricting staff access to personal data on a need-to-know basis;
• Regular review of security configurations for hosting infrastructure;
• Internal procedures for detecting, investigating and notifying affected Users of personal data breaches where required.

While ziatogel employs reasonable security practices, no method of transmission or storage is completely secure. Users are responsible for maintaining the confidentiality of their account credentials and should contact support immediately if they suspect unauthorised account access.

Cookies & Tracking Technologies

ziatogel uses the following categories of cookies and similar technologies:

Most modern browsers allow you to view, manage and delete cookies through the browser's settings menu. Disabling essential cookies may impair the functionality of the Platform. For further guidance on browser cookie management, consult your browser's official help documentation.

International Data Transfers

ziatogel operates as an internationally accessible platform and may engage service providers — including hosting, analytics and payment infrastructure partners — whose servers are located outside Malaysia. Where personal data is transferred to a third country, ziatogel applies safeguards that may include:

• Contractual clauses requiring the recipient to process data to a standard equivalent to that applied within Malaysia;
• Transfers to jurisdictions that maintain recognised data protection frameworks;
• Technical measures limiting the personal data transferred to the minimum necessary for the stated purpose.

If you wish to obtain further information about the safeguards applied to a specific international transfer involving your personal data, please contact us using the details in Section 14.

User Rights

Subject to applicable law and certain exemptions, you may exercise the following rights in relation to your personal data held by ziatogel. Submit a written request to the contact address in Section 14; we will respond within a commercially reasonable period and may ask you to verify your identity before actioning a request.

Minors

ziatogel is strictly for adults aged 21 and above. The Platform does not knowingly collect personal data from individuals under 21 years of age. Where ziatogel identifies or is notified that an account has been created by a person under 21, all associated personal data will be deleted promptly and the account will be closed. If you have reason to believe a minor has registered on the Platform, please notify us immediately at the contact address in Section 14.

Changes to This Policy

ziatogel may update this Privacy Policy from time to time to reflect changes in data processing practices, technology, legal requirements or business operations. The revised Policy will be published on this page with an updated effective date. Continued use of the Platform after a Policy revision constitutes acceptance of the updated terms.

For material changes — such as the introduction of a new data category, a new purpose for existing data, or a new third-party sharing arrangement — ziatogel will make reasonable efforts to notify registered users through in-account notifications or email before the change takes effect, where technically feasible.

Contact Us

For privacy enquiries, data subject right requests, complaints or any other matter relating to this Policy, please contact the ziatogel privacy team using the details below. We ask that you include your full name, registered account email address (if applicable) and a clear description of your request or concern to enable prompt handling.