Official Data Protection Policy

Privacy Policy zpley — Your Data, Our Responsibility

Zpley takes user privacy seriously. This document transparently explains how we collect, use, store, and protect your personal information every time you use our platform.

Last updated: 1 June 2026 English Malaysia

Zpley's Six Pillars of Data Protection

Privacy is more than a document — it is a daily practice embedded in every aspect of zpley's operations.

Bank-Grade Data Encryption

All your personal and financial data is encrypted using SSL 256-bit during transmission and AES-256 during storage — the same standard used by international financial institutions.

Data Is Not Sold to Third Parties

Zpley has never and will never sell, rent, or commercialise users' personal data to any third party for marketing or profit purposes.

Full Control in Your Hands

You may access, correct, download, or request deletion of your personal data at any time through your account settings or by contacting zpley support.

Responsible Data Retention

Your data is retained only for as long as necessary for legitimate purposes — and no longer. Once an account is closed, personal data not required for legal compliance will be deleted.

Data Breach Notification

In the event of any security incident involving your data, zpley is committed to notifying affected users within 72 hours and taking immediate remedial action.

Malaysia PDPA Compliance

The zpley Privacy Policy is designed to comply with Malaysia's Personal Data Protection Act (PDPA) 2010 — giving you protections recognised under local law.


1

Introduction

This Privacy Policy ("Policy") is published by zpley and applies to all users who access or use the zpley platform via our website or mobile app. We understand that personal information is a trust — and we do not take that responsibility lightly.

The purpose of this document is to give you a clear and honest overview of zpley's data handling practices. We do not hide anything behind complex legal language — every section is written to be easily understood by anyone.

By continuing to use the zpley platform, you confirm that you have read and understood this Privacy Policy. If anything is unclear, our team is ready to answer your questions.

This Policy should be read together with Terms and Conditions zpley. Both documents together form the complete agreement between you and zpley regarding your use of our platform.

2

Personal Data We Collect

Zpley collects your personal information through various means — during registration, platform use, financial transactions, and interactions with our support team. Below are the full details of the data we collect:

Data You Provide Directly

  • Identity information: Full name, date of birth, MyKad or passport number
  • Contact information: Email address, phone number
  • Financial information: Bank account details, e-wallet account numbers (TNG, GrabPay), deposit and withdrawal records
  • KYC verification documents: MyKad copy, bank statement, or other verification documents
  • Communications: Messages you send to our support team

Data Collected Automatically

  • Technical data: IP address, browser type and version, device type, operating system
  • Usage data: Pages visited, games played, session duration, access frequency
  • Location data: General geographic location based on IP address (not precise GPS location)
  • Cookie data: Session cookies, preference cookies, and user identifiers (further details in Section 6)
Data Category Example Primary Purpose
Identity Name, MyKad, date of birth KYC, age verification
Connect Email, phone number Communications, account security
Finance Bank accounts, e-wallets Payment processing, AML
Technical IP, device, browser Security, fraud detection
Usage Sessions, games, frequency Service improvements
3

How We Use Your Data

Zpley uses your personal data for legitimate and necessary purposes in operating the platform's services. We do not use your data for any purpose beyond what is stated here without your consent.

  • Account management: Creating and maintaining your account, processing logins, and ensuring account security.
  • Transaction processing: Processing deposits and withdrawals, verifying identity for financial purposes, and complying with anti-money laundering (AML) requirements.
  • Service provision: Allows you to access games, use platform features, and receive customer support.
  • Communications: Sending important notifications about your account, policy changes, promotions you are eligible for, and security updates.
  • Platform security: Detecting and preventing fraud, account misuse, suspicious activity, and cybersecurity threats.
  • Legal compliance: Fulfilling legal obligations including KYC, AML requirements, and reporting to authorities when required.
  • Platform improvements: Analysing usage data in aggregate (without individual identifiers) to improve user experience and platform performance.

zpley does not use your data for third-party advertising profiling, does not sell data to marketing companies, and does not use your data for any commercial purpose outside our own platform operations.

4

Data Sharing with Third Parties

Zpley does not sell, rent, or commercialise users' personal data to third parties. However, in the course of operating the platform, we work with several categories of trusted third-party service providers:

  • Payment gateway providers: FPX, DuitNow, TNG eWallet, and GrabPay — to process your financial transactions. They receive only the minimum information required to complete a payment.
  • Game software providers: Game development companies whose gaming platforms we use — they may receive game session identifiers but not your full identity information.
  • Cloud service providers: Our server infrastructure and data storage are managed by certified cloud providers that comply with international security standards.
  • Identity verification services: Third-party KYC providers that help us verify user identities in accordance with legal requirements.

All third-party providers working with zpley are bound by data protection agreements and are prohibited from using your data for any purpose beyond the scope of services they provide to zpley.

Zpley may also disclose user data when required by Malaysian law, court order, or a request from a legitimate law enforcement authority. In such situations, we will endeavour to notify the affected user unless prohibited from doing so by law.

5

Data Storage & Security Measures

The security of your data is our highest priority. zpley implements multiple layers of technical and operational protection to ensure your personal data remains safe at all times:

  • Transmission encryption: SSL/TLS 1.3 for all data transmitted between your device and zpley's servers
  • Storage encryption: Databases encrypted using AES-256 — the same standard used by banks and government agencies
  • Strict access controls: Only zpley staff with specific authorisation may access personal data, and all such access is logged and audited regularly.
  • 24/7 security monitoring: Real-time threat detection system that monitors for any suspicious activity
  • Regular security testing: Security audits and penetration testing are conducted regularly by independent third parties.

Zpley retains personal data for as long as necessary to fulfil the original purpose of collection and to meet legal requirements. Standard retention periods are:

  • Active account data: For as long as the account remains active
  • Transaction data: Minimum 7 years (financial regulatory requirement)
  • KYC data: Minimum 5 years after account closure
  • Communication logs: 2 years from the date of communication

While we implement comprehensive security measures, no online system can guarantee absolute security. You are also responsible for keeping your own password and account secure.

6

Cookies & Tracking Technologies

Zpley uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. Cookies are small data files stored on your device when you visit our website.

Types of Cookies We Use

  • Essential cookies: Required for core platform functions such as login, session security, and navigation. These cookies cannot be disabled.
  • Preference cookies: Saving your preferences such as language, display theme, and other settings so you do not need to reconfigure them each time.
  • Analytics cookies: Helps us understand how users interact with our platform — this data is collected in aggregate and is not linked to any individual's identity.
  • Security cookies: Used to detect and prevent fraudulent activity, bots, and unauthorised access attempts.

You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect platform functionality. The zpley mobile app uses similar technologies (session tokens and device identifiers) for the same purposes.

7

Your Rights Regarding Personal Data

As a zpley user based in Malaysia, you have the following rights regarding your personal data under the Personal Data Protection Act (PDPA) 2010:

Right of Access

Request a copy of the personal data zpley holds about you at any time.

Right to Rectification

Correct any inaccurate or outdated data via account settings or support.

Right to Erasure

Request deletion of your data when it is no longer needed, subject to legal requirements.

Right to Data Portability

Request your data in a structured, reusable format for personal use.

Right to Object

Object to the processing of your data for specific purposes, including marketing communications.

Right to Restrict Processing

Request a temporary restriction on the processing of your data under certain circumstances.

To exercise any of these rights, contact the zpley support team or submit a written request to the email address listed in Section 11. We will process your request within 14 business days and notify you of the action taken.

8

Children's Data

Zpley services are for individuals aged 18 and above only. zpley does not intentionally collect or process personal data of individuals under 18. Our KYC verification process is specifically designed to detect and prevent registration by underage individuals.

If we discover that personal data of someone under the age of 18 has been collected unintentionally, we will take immediate steps to delete that data and close the account in question. Parents or guardians who believe their child may have registered on zpley are advised to contact our support team immediately.

9

Cross-Border Data Transfers

In the course of its operations, zpley may transfer or store your personal data on servers located outside Malaysia — including data centres in Southeast Asia and East Asia. Such transfers are carried out solely for operational and service continuity purposes.

When transferring data overseas, zpley ensures protections equal to or exceeding Malaysia's PDPA standards through:

  • Contractual data protection agreements with all third-party service providers
  • Selection of cloud providers that comply with international standards such as ISO 27001 and SOC 2
  • Regular assessments of the data protection practices of third-party providers

By using the zpley platform, you consent to cross-border data transfers as described in this Policy, with the understanding that equivalent levels of protection are maintained at all storage locations.

10

Changes to This Privacy Policy

Zpley may update this Privacy Policy from time to time to reflect changes in our privacy practices, new technologies, legal requirements, or other operational reasons. We are committed to remaining transparent about any changes.

When we make material changes, we will:

  • Updating the "Last Updated" date at the top of this document
  • Displaying notifications within your account and app
  • Sending notification emails to your registered email address
  • Providing at least 14 days' notice before changes take effect

Continued use of the zpley platform after the effective date of any changes will be deemed as your acceptance of the updated Privacy Policy. If you do not agree with any changes, you may close your account before those changes take effect.

11

Contact Us About Privacy

If you have any questions, concerns, or complaints regarding how zpley handles your personal data, we encourage you to contact us directly. We have a dedicated team responsible for handling privacy matters.

  • Privacy Email: [email protected]
  • Live Chat: Available on the zpley website or app, 24/7
  • Response time: Within 5 business days for general enquiries; 14 business days for formal data rights requests

For complaints that are not resolved to your satisfaction, you have the right to lodge a complaint with the Department of Personal Data Protection, Ministry of Communications and Digital Malaysia, which is the PDPA regulatory body in this country.

This Privacy Policy was last updated on 1 June 2026 and supersedes all previous versions. zpley © 2026. All rights reserved.


Your Privacy Is Protected — Ready to Get Started?

Zpley builds its platform with trust at the core of everything. Your data is protected, your transactions are secure, and your gaming experience is enjoyable. Register today and experience the difference for yourself.

Bahasa Melayu