Privacy Policy

1. Introduction

This Privacy Policy ("Policy") is published by zoom188 ("Company", "we", "us", "our"), the operator of the online casino and sports betting platform accessible at https://zoom188.cam (the "Platform"). It governs the collection, use, storage, disclosure and protection of personal data provided by or collected from individuals who access or use the Platform ("Members", "Users", "you").

By registering an account, accessing the Platform or submitting any personal information to zoom188, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. Where your consent is the legal basis for processing, you may withdraw that consent at any time, though such withdrawal will not affect the lawfulness of processing that occurred prior to withdrawal.

zoom188 directs its services primarily at adult users resident in Malaysia and other eligible jurisdictions. Where the Platform processes personal data of Malaysian residents, the Company applies privacy standards consistent with internationally recognised data protection principles, including purpose limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality.

2. Definitions

The following terms carry the meanings set out below throughout this Policy:

3. Data We Collect

zoom188 collects only the categories of personal data necessary for the purposes described in this Policy. The information we collect falls into the following categories:

3.1 Registration and Account Data

When you create a zoom188 account, we collect the information you provide, which typically includes: full legal name, date of birth, residential address (including city — such as Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya or Shah Alam), email address, telephone number, chosen username, and — at the KYC stage — copies of government-issued identity documents such as a Malaysian NRIC (MyKad) or passport.

3.2 Financial and Transaction Data

To process deposits and withdrawals, we collect payment instrument details associated with Malaysian payment channels including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and online banking services offered by Maybank, CIMB, Public Bank and Hong Leong. We record transaction histories, deposit amounts in MYR, withdrawal requests and associated timestamps. Full payment card numbers are not stored by zoom188; these are processed directly by our PCI-DSS compliant payment service providers.

3.3 Identity Verification (KYC) Data

In compliance with our regulatory and anti-money laundering obligations, we may collect copies of identity documents, proof of address documentation (such as utility bills or bank statements), selfie photographs and, in certain circumstances, source-of-funds declarations. This data is processed strictly for verification and compliance purposes.

3.4 Technical and Device Data

When you access the Platform, we automatically collect technical information including your IP address, device type and model, operating system, browser type and version, session duration, pages visited, referral source, and approximate geolocation derived from IP address. This data assists with fraud prevention, service optimisation and regulatory reporting.

3.5 Behavioural and Gameplay Data

We collect data relating to your activity on the Platform, including game sessions, wagering amounts, betting markets accessed, bonus claims and responsible gambling tool usage. This data is used to personalise your experience, identify unusual patterns for fraud or problem gambling detection, and improve the Platform's features.

3.6 Communications Data

When you contact our Customer Support team via live chat or email, we retain records of those communications — including the nature of your enquiry, the support agent's response and any attachments — for a period necessary to resolve the matter and to maintain a service history.

4. How We Use Your Data

zoom188 processes personal data for clearly defined and legitimate purposes. The table below summarises the primary processing activities:

5. Legal Basis for Processing

zoom188 processes personal data only where a valid legal basis exists. The principal legal bases we rely upon are as follows:

• Contractual Necessity: Processing required to create and maintain your account, execute transactions and deliver the services set out in our Terms & Conditions.
• Legal Obligation: Processing necessary for compliance with applicable laws, including anti-money laundering regulations, identity verification requirements and responsible gambling obligations.
• Legitimate Interest: Processing for fraud prevention, Platform security, internal analytics and service improvement, provided such interests are not overridden by your privacy rights.
• Consent: Processing for optional marketing communications and certain cookie-based tracking activities. Consent may be withdrawn at any time without affecting other processing.

6. Data Sharing and Disclosure

zoom188 does not disclose your personal data to third parties except in the following circumstances:

6.1 Service Providers and Processors

We engage trusted third-party service providers who process personal data on our behalf under strict contractual obligations. These include: payment processing companies (including those operating the DuitNow, FPX and e-wallet infrastructure), cloud hosting and infrastructure providers, identity verification and KYC service providers, anti-fraud and security technology vendors, and customer support platform operators. All such providers are contractually required to process data only on our instructions and to maintain appropriate security standards.

6.2 Regulatory and Law Enforcement Authorities

Where required by applicable law, court order or regulatory authority, zoom188 will disclose personal data to relevant governmental or regulatory bodies. This includes cooperation with financial intelligence units and anti-money laundering authorities where suspicious activity is identified.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring or sale of all or part of the Company's business, personal data held by zoom188 may be transferred to the successor entity, subject to that entity providing equivalent privacy protections. Members will be notified of any such transfer via the Platform or registered email address.

7. Data Retention

zoom188 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable regulatory and legal obligations. The following general retention periods apply:

• Account and transaction records: Retained for a minimum of five (5) years from the date of account closure or last transaction, in line with standard anti-money laundering record-keeping requirements.
• KYC documentation: Retained for a minimum of five (5) years following the completion of the customer relationship, as required by applicable financial regulations.
• Customer support communications: Retained for three (3) years from the date of the relevant interaction, unless a longer period is required for dispute resolution or regulatory purposes.
• Marketing consent records: Retained for the duration of the consent and for a reasonable period thereafter to demonstrate compliance.
• Technical and log data: Typically retained for twelve (12) months, after which aggregated or anonymised data may be retained for analytical purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data disposal procedures.

8. Data Security

zoom188 implements technical and organisational measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration or disclosure. Our security measures include, but are not limited to:

• Transport Layer Security (TLS/HTTPS) encryption for all data transmitted between your device and the Platform.
• AES-256 encryption for sensitive data stored within our systems.
• Two-factor authentication (2FA) available for Member accounts.
• Role-based access controls limiting internal staff access to personal data on a need-to-know basis.
• Regular security vulnerability assessments and penetration testing of Platform infrastructure.
• Incident response procedures for the detection, assessment and notification of personal data breaches.

9. Cookies and Tracking Technologies

zoom188 uses cookies and similar tracking technologies to operate the Platform, enhance your experience and gather analytical information. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function correctly, including maintaining your logged-in session and security tokens. These cookies cannot be disabled without materially affecting Platform functionality.
• Functional Cookies: Remember your preferences, such as language settings and display options, to personalise your experience on subsequent visits.
• Analytical Cookies: Collect aggregated and anonymised data about how Members use the Platform, which pages are visited most frequently, and how navigation flows can be improved. This data does not identify individual users.
• Marketing and Tracking Cookies: Used only where you have provided consent, these cookies enable us to tailor promotional communications to your interests and to measure the effectiveness of marketing campaigns.

You may manage cookie preferences through your browser settings. Blocking certain categories of cookies may limit Platform functionality. For further information about the specific cookies used by zoom188, please contact Customer Support.

10. Your Data Protection Rights

Subject to applicable law and certain exceptions, you have the following rights with respect to your personal data held by zoom188:

To exercise any of the rights set out above, please contact us using the details in Section 14. We will acknowledge your request within five (5) business days and aim to fulfil your request within thirty (30) days, subject to identity verification and any applicable exemptions.

11. Minors and Age Restrictions

The zoom188 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals below the age of 21. The registration process includes a mandatory date of birth field, and account holders are required to confirm their eligibility. Identity verification procedures provide an additional layer of protection.

If zoom188 becomes aware that personal data has been collected from a person below the minimum age requirement, we will promptly suspend the relevant account, delete the data to the extent required by law and decline any associated financial transactions. If you believe a minor has registered an account on the Platform, please contact us immediately at [email protected].

12. International Data Transfers

zoom188 operates globally and may transfer personal data to servers or service providers located outside of Malaysia. When personal data is transferred internationally, we take appropriate steps to ensure that an equivalent level of protection is maintained, including through the use of contractual safeguards with third-party processors.

Where personal data is transferred to a country that does not provide an equivalent level of data protection to the standards applied in Malaysia, zoom188 implements contractual protections — such as standard data protection clauses — to ensure that your data continues to be handled in accordance with this Policy.

13. Updates to This Policy

zoom188 reserves the right to update or revise this Privacy Policy at any time to reflect changes in applicable law, our data processing practices or the features available on the Platform. The "Last Updated" date at the top of this page indicates when the most recent revision was made.

Where a change to this Policy is material — for example, where we introduce a new purpose for processing personal data or make changes to the way Sensitive Data is handled — zoom188 will provide advance notice via email to your registered address or through a prominent notification on the Platform. Your continued use of the Platform following such notification constitutes acceptance of the revised Policy.

We recommend that Members review this Policy periodically. A copy of the current Policy is always available at https://zoom188.cam/privacy-policy.

14. Contact Us

If you have any questions, concerns or complaints regarding this Privacy Policy or the way in which zoom188 handles your personal data, please reach out to us through the following channels:

zoom188 aims to acknowledge all privacy-related correspondence within two (2) business days and to provide a substantive response within thirty (30) days of receipt. If you are not satisfied with our response, you have the right to escalate the matter to the relevant regulatory authority in your jurisdiction.