Privacy Policy ZUS77 – Our Commitment to Protecting the Personal Data of Malaysian Members

01Introduction & Scope of This Privacy Policy

Welcome to ZUS77's Privacy Policy. This document explains how the ZUS77 platform ("we", "us", "ZUS77") at zus77.click collects, uses, stores, protects, and in certain circumstances discloses your personal information ("Personal Data") when you use our services.

This Privacy Policy applies to all users and registered members of ZUS77 who access the platform via zus77.click or any associated ZUS77 mobile application. It should be read together with Terms & Conditions ZUS77, which constitutes the entire agreement between you and our platform.

ZUS77 operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant data protection legislation. As a platform built specifically for Malaysian users, we take our legal and ethical data protection obligations very seriously. Your trust is the foundation of our relationship, and we will not treat it lightly.

02Types of Personal Data We Collect

ZUS77 collects various categories of Personal Data required to deliver our services safely and efficiently. The data we collect can be grouped into the following categories:

Identity Data:

• Full name as stated on your Malaysian Identity Card (MyKad) or valid passport
• Malaysian Identity Card number (IC number) or passport number
• Date of birth and gender
• Current residential address in Malaysia
• Photo of identity document (for the KYC verification process)

Contact & Account Data:

• An active Malaysian mobile number
• An active email address
• The username chosen during registration
• Passwords stored in encrypted hash form (we do not store passwords in plain text)

Financial Data:

• Malaysian bank account numbers and bank names (Maybank, CIMB, Public Bank, RHB, and others)
• E-wallet details (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay) used for deposits and withdrawals
• Records of deposit and withdrawal transactions, including date, time, method, and amount in Malaysian Ringgit (MYR)
• History of betting and gaming activity on the ZUS77 platform

Technical & Usage Data:

• The IP address of the device used to access ZUS77
• Device type, operating system, and browser version
• Approximate location data based on IP address (state within Malaysia)
• In-platform activity logs including pages visited and features used
• Login session data including date, time, and session duration

03How We Collect Your Personal Data

ZUS77 collects your Personal Data through various methods that occur when you interact with our platform:

• Account Registration: Information you enter directly into the ZUS77 registration form, including your name, IC number, phone number, and email address.
• KYC Verification Process: Identity documents uploaded during the Know Your Customer (KYC) process to verify your identity before your first withdrawal is approved.
• Financial Transactions: Information provided when making deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or FPX (Maybank2u, CIMB Clicks, and others), including the account details designated for withdrawals.
• Platform Usage: Data is collected automatically as you use ZUS77 – including games played, bets placed on the Malaysia Super League or other competitions, session duration, and platform features accessed.
• Cookies & Similar Technologies: Technical information is collected automatically via cookies and other tracking technologies as you browse the ZUS77 website (see Section 9 for more details).
• Communications with Customer Support: Records of conversations via live chat, email, or other support channels when you contact the ZUS77 support team.

04Purposes for Using Personal Data

ZUS77 uses collected Personal Data solely for the following legitimate and operationally necessary purposes:

• Service Provision: To process account registration, verify member identity, and enable access to all ZUS77 games and platform features including slots, live casino, Sports Betting and e-sports.
• Financial Processing: To process deposits via designated Malaysian payment methods and to process withdrawal of winnings to a member's Malaysian bank account or e-wallet within the committed timeframe.
• Verification & Security: To verify member identity during login, detect suspicious activity, and prevent fraud, money laundering and platform abuse.
• Legal Compliance: To fulfill our obligations under applicable Malaysian laws, including anti-money laundering (AML) requirements, age verification, and other mandatory reporting obligations.
• Customer Support: To verify member identity when they contact support, access account records as needed to resolve queries and issues, and improve the overall quality of our support service.
• VIP & Rewards Programme: To calculate reward eligibility under the ZUS77 VIP Rewards Programme, assess betting activity for weekly cashback purposes, and determine other VIP tier benefits.
• Responsible Gaming: To monitor betting activity patterns for signs of potential problem gambling and to deliver relevant responsible gaming information to members who may need support.
• Service Communications: To send transaction confirmations, important account notices, service updates and, where you have consented, ZUS77 promotional information and offers.

05Personal Data Sharing & Disclosure

ZUS77 does not sell, rent or trade members' Personal Data to any third party. However, there are limited circumstances in which we may need to share your data with the following parties, solely for platform operational purposes:

• Payment Service Providers: Transaction details necessary for processing are shared with Malaysian payment service providers such as the FPX network, TnG eWallet operators, and other payment gateways to facilitate your deposits and withdrawals. These providers are bound by strict confidentiality agreements.
• Identity Verification Providers: KYC verification documents may be processed through approved third-party identity verification services for the purpose of authenticating document legitimacy. All such providers comply with high data protection standards.
• Game Providers: Minimum session information required may be shared with game platform and live casino providers to enable game delivery. This data does not include full personally identifiable information.
• Malaysian Authorities: ZUS77 will disclose Personal Data to Malaysian authorities (police, courts, relevant government agencies) when legally required to do so by law, court order, or official investigation. Where permitted by law, we will notify the affected member accordingly.

In all data-sharing scenarios described above, ZUS77 ensures that recipients are bound by confidentiality and data protection obligations equivalent to, or stricter than, our own policy. We do not share more data than is necessary for the stated purpose.

06ZUS77 Data Security Measures

ZUS77 implements multiple layers of technical and organizational security measures to protect members' Personal Data from unauthorized access, alteration, disclosure, or destruction:

• 256-bit SSL Encryption: All communications between your device and ZUS77's servers are protected by Transport Layer Security (TLS) using 256-bit encryption — the same standard used by Malaysia's major banks.
• Encryption of Stored Data: Sensitive data such as IC numbers, bank account details and financial information is stored in encrypted form in our database. Passwords are stored as one-way hashes that cannot be decrypted.
• Internal Access Controls: Access to members' Personal Data within ZUS77 is strictly limited on a need-to-know basis. Only staff who require access for their specific job functions are permitted, and all access is automatically logged.
• Continuous Security Monitoring: ZUS77's systems are continuously monitored for unusual activity, intrusion attempts and security anomalies. Our security team responds to threats in real time.
• Regular Security Testing: ZUS77's infrastructure undergoes regular penetration testing and security audits conducted by independent third parties to identify and address vulnerabilities before they can be exploited.
• Two-Factor Authentication: ZUS77 offers and strongly encourages the use of two-factor authentication (2FA) via SMS OTP to protect member accounts from unauthorized access, even if a password has been compromised.

07Personal Data Retention Period

ZUS77 retains members' Personal Data only for as long as necessary to fulfil the purposes for which it was collected as outlined in this policy, or for as long as required under applicable Malaysian law:

• Active Account: Personal data is retained for as long as your account remains active on ZUS77. Financial transaction records and betting activity are kept for a minimum of seven (7) years in accordance with Malaysia's anti-money laundering legislation.
• After Account Closure: Following account closure at a member's request, ZUS77 will retain the minimum data required for legal compliance purposes for the period prescribed under Malaysian law. Data that is no longer required will be deleted or anonymised within 90 days of account closure.
• KYC Verification Records: Identity verification documents are retained for seven (7) years after the business relationship with a member ends, in accordance with the requirements of Malaysia's Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001.
• Security Logs: Access logs and security-related activity are retained for a minimum period of two (2) years to facilitate investigation of security incidents should they occur.

When data is no longer needed and there is no legal obligation to retain it, ZUS77 follows established secure data deletion procedures to ensure the data is permanently and irrecoverably destroyed.

08Your Rights as a Data Subject

As a ZUS77 member and data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your Personal Data: