Personal Data Protection

Privacy Policy MZPlay – Member Platform Personal Data Protection

Your privacy is our priority. This document transparently explains how MZPlay collects, uses, stores, and protects your personal data as a member of Malaysia's leading digital entertainment platform.

Last Updated: 1 January 2026
256-bit SSL Data Encryption
Zero Data Sales
KYC Strictly Regulated
PDPA Full Compliance

This Privacy Policy describes mzplay's privacy practices regarding the collection, use, disclosure, and protection of your personal information when using our platform, including the website and mobile app. By registering for or using mzplay services, you agree to the practices described in this policy. Please read this document carefully — we have written it in plain language because we believe transparency is the foundation of trust.

1

Privacy Policy Introduction and Scope

MZPlay is a digital entertainment platform operating for users in Malaysia. We take the privacy of every member seriously. This Privacy Policy applies to all individuals who:

  • Visiting and using the MZPlay website at mzplay.vin
  • Register and maintain a member account on our platform
  • Use the MZPlay mobile app on an Android or iOS device
  • Interacting with our customer support team through any communication channel
  • Participate in MZPlay promotional campaigns or bonus programmes

This policy does not apply to third-party websites, apps, or services that may be linked from our platform. We encourage you to read the privacy policies of other websites separately.

Note: MZPlay complies with Malaysia's Personal Data Protection Act 2010 (PDPA). We only process your personal data on valid legal grounds and for the purposes stated in this policy.
2

Personal Data We Collect

We collect various categories of personal data depending on how you interact with the mzplay platform. Below is a summary of the types of data we collect:

Data Category Examples of Information How It Is Collected
Identity Information Full name, identification card number, date of birth, gender During registration & the KYC process
Contact Information Email address, phone number, residential address During registration & profile updates
Financial Information Bank account number, bank name, transaction history During the deposit & withdrawal process
Platform Usage Data Betting history, games played, session duration Automatically during usage
Technical Data IP address, device type, web browser, operating system Automatically via cookies & logs
Verification Documents Copy of ID card, utility bill, selfie photo During the advanced KYC process

We only collect data necessary for the stated purposes. We do not collect sensitive data categories such as health information, biometric data, or political affiliations unless required by law.

3

How We Use Your Personal Data

MZPlay uses your personal data solely for legitimate purposes necessary to deliver quality services to you. The primary purposes for data use are:

  • Account management: Create, verify, and maintain your member account including the KYC process required to keep the platform free from fraud
  • Transaction processing: Process deposits, withdrawals, and all financial activities securely and accurately
  • Service delivery: Allow you to access all games, sports betting, and available platform features
  • Security & fraud prevention: Monitor suspicious activity, prevent money laundering, and protect platform integrity
  • Service communications: Send important notifications related to your account, transactions, and policy updates
  • Marketing (with consent): Send relevant promotional information, bonuses, and special offers based on your preferences
  • Platform improvements: Analyse usage patterns to improve the user experience and develop new features
  • Legal compliance: Fulfil legal obligations including reporting to relevant authorities when required
Marketing: You can stop receiving marketing communications at any time by updating your notification preferences in your account settings or by contacting our support team. Unsubscribing from marketing emails will not affect essential service communications.
4

Data Sharing and Disclosure

MZPlay does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We only share data in the following limited situations:

  • Trusted service providers: Third parties that help us deliver our services — including payment processors, licensed game providers, and identity verification services. All partners are bound by strict confidentiality agreements and may only use your data for purposes we specify.
  • Legal obligations: When required by law, court order, or valid request from relevant authorities including anti-money laundering agencies.
  • Protection of MZPlay rights: To enforce our Terms and Conditions, protect the rights or property of MZPlay, or safeguard the safety of members and the public.
  • Business transfers: If MZPlay is involved in a merger, acquisition, or asset sale, your data may be transferred as part of that transaction with appropriate notice provided to you.
Our commitment: MZPlay has never sold and will never sell your personal data to advertisers, data brokers, or any third party for their own commercial purposes. Your privacy is not our product.
5

Data Security & Protection

We implement multiple layers of technical and organisational security measures to protect your personal data from unauthorised access, loss, alteration, or unintended disclosure:

  • 256-bit SSL/TLS Encryption: All data transmitted between your device and MZPlay servers is encrypted using the highest industry-standard encryption protocols
  • Encryption of data at rest: Sensitive data stored in our databases, including financial information, is encrypted at rest.
  • Strict access controls: Only mzplay staff with a legitimate operational need are permitted to access member personal data, and all access is logged and monitored
  • Periodic security auditing: Our platform undergoes regular penetration testing and security auditing by independent cybersecurity experts
  • Two-factor authentication (2FA): Available to all members to add an extra layer of protection to your account
  • 24/7 Monitoring: Automated monitoring systems operate around the clock to detect and respond to security threats

While we take security measures seriously, no system can guarantee 100% absolute security. In the event of a data breach affecting your personal data, MZPlay will notify you within the timeframe required by applicable law.

6

Cookies & Tracking Technologies

MZPlay uses cookies and similar tracking technologies to enhance the user experience and analyse platform usage. Cookies are small text files stored on your device when you visit our website.

We use the following types of cookies:

  • Essential cookies: Required for core platform functions such as login verification and session security. These cookies cannot be disabled as they are critical to platform operation.
  • Performance cookies: Collect information on how visitors use our website to help us improve performance and the user experience.
  • Functional cookies: Allow the platform to remember your preferences such as language and display settings to provide a more personalised experience.
  • Analytics cookies: Help us understand usage patterns, most visited pages, and session duration for continuous platform improvement.
You can manage your cookie settings through your web browser settings. Disabling certain cookies may affect some platform functions. For more information on managing cookies, refer to your web browser's documentation.
7

Your Privacy Rights as a Member

As a MZPlay member, you have the following rights regarding your personal data under applicable data protection laws:

Right of Access

Request a copy of the personal data we hold about you at any time

Right to Rectification

Request correction of inaccurate or incomplete data

Right to Erasure

Request deletion of your personal data under certain circumstances permitted by law

Right to Object

Object to the processing of your data for direct marketing purposes

Right to Portability

Receive your data in a structured, machine-readable format

Right to Restriction

Request restriction of your data processing while any dispute is being resolved

To exercise any of the above rights, please contact the MZPlay customer support team via Live Chat or our official email. We will respond to your request within 30 business days. Please note that some requests may be subject to legal obligations that prevent us from fulfilling them in full.

8

Data Retention Period

MZPlay retains your personal data only for as long as necessary to fulfil the purposes outlined in this policy or as required by law. General retention period guidelines are as follows:

  • Active account data: Retained for as long as your account is active and for a reasonable period after account closure
  • Financial transaction records: Retained for a minimum of seven (7) years in accordance with Malaysia's accounting and tax legal requirements
  • KYC documents: Retained for a minimum of five (5) years after the business relationship ends, in accordance with anti-money laundering legal requirements
  • Support communication logs: Retained for two (2) years for quality control and dispute resolution purposes
  • Marketing data: Retained until you withdraw consent or request deletion

When the retention period expires, your personal data will be securely deleted or permanently anonymised so it can no longer be associated with you.

9

Children's and Minors' Privacy

MZPlay is a platform intended exclusively for individuals aged 18 and above. We do not knowingly collect or process personal data of individuals under the age of 18.

If we determine that personal data of an individual under 18 years of age has been collected without proper age verification, we will take immediate steps to:

  • Immediately close the associated account
  • Delete all personal data of that individual from our systems
  • Return any deposited funds to the original payment method
If you are a parent or guardian and believe your child has registered on the mzplay platform, please contact us immediately through our customer support. We will handle the situation with the highest priority.
10

Cross-Border Data Transfers

In the course of platform operations, your personal data may be transferred to and processed in countries other than Malaysia, particularly in connection with the use of international technology service providers and cloud infrastructure.

When your data is transferred outside Malaysia, mzplay ensures adequate protection by:

  • Only dealing with recipient parties that have an equivalent or higher level of data protection than that required in Malaysia
  • Implementing data transfer agreements containing recognised standard protection clauses
  • Ensure all third-party data processors are bound by strict confidentiality and security obligations
11

Contact Us Regarding Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, we encourage you to contact us directly:

  • Live Chat: The fastest channel — available 24/7 directly within the MZPlay platform
  • Email: [email protected] — we aim to respond within 24 business hours
  • Telegram: Through the official MZPlay support channels stated on the platform

For formal complaints regarding data protection that cannot be resolved internally, you have the right to refer the matter to the Department of Personal Data Protection Malaysia or the relevant authority under applicable law.

Response time commitment: We are committed to responding to all privacy-related enquiries within 72 hours and resolving data rights requests within 30 business days from the date a complete request is received.
Full PDPA Compliance
256-bit SSL Encryption
No Data Sales
24/7 Privacy Support
Periodic Security Auditing

How mzplay Protects Your Privacy

Six layers of data protection we implement to keep every member's personal information secure

End-to-End Encryption

Every bit of data moving between your device and MZPlay servers is encrypted using the latest TLS 1.3 protocol. Sensitive information such as banking details and identity documents is encrypted at rest using AES-256.

Integrated & Secure KYC

Our identity verification process uses facial recognition technology and automated document verification, conducted within a secure isolated environment. Your original documents are never stored in unencrypted form.

Layered Access Control

Member data is only accessible to staff with a legitimate operational need. All access is logged, monitored, and regularly audited. The "need-to-know" principle is strictly observed across all our internal operations.

Real-Time Anomaly Monitoring

Our AI-powered system monitors access patterns and transactions in real time. Any unusual activity — including suspicious login attempts or abnormal transaction patterns — triggers an immediate alert.

Full Regulatory Compliance

MZPlay fully complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable anti-money laundering (AML) requirements. Internal compliance audits are conducted quarterly.

Immediate Breach Notification

In the event of any security incident affecting your data, MZPlay is committed to notifying impacted members within 72 hours and taking immediate remedial action to minimise the impact.

Frequently Asked Questions About Data Privacy

Answers to the most frequently asked questions by mzplay members regarding data security and privacy

Absolutely not. MZPlay does not sell, rent, or share your personal data with any third-party company for their marketing or advertising purposes. Your data is only shared with service providers that help us operate the platform (such as payment processors and game providers), and only when required by law.

You can request a copy of your personal data by contacting our support team via Live Chat or email at [email protected]. Please include your account number and the type of data you require. We will process the request within 30 business days and deliver the data in a readable format. Identity verification is required before any data is released.

Yes. The MZPlay mobile app uses the same encryption as the web version — 256-bit SSL/TLS for all data communications. In addition, our app is regularly reviewed by independent security experts. We recommend enabling a screen lock on your device and using the biometric authentication feature available in the app for added protection.

You may request the deletion of your personal data under certain circumstances. However, some data must be retained to meet legal obligations — such as financial transaction records for 7 years and KYC documents for 5 years after account closure. Data not subject to legal obligations will be permanently deleted within 30 days of receiving a valid request.

Contact our support team via Live Chat immediately. We will help you change your password, review your account activity logs, and take any additional security measures required. As a precaution, enable two-factor authentication (2FA) in your account settings and ensure you are using a strong, unique password not used on any other website.

Still have questions? Visit the FAQ or contact 24/7 customer support.

Your Privacy Is Protected. Join MZPlay with Confidence Today.

Malaysia's digital entertainment platform that puts member safety and privacy first. Over 1,000 game options await you in a secure, fair, and trusted environment.

256-bit SSL encrypted data
No sale of personal data
Malaysia PDPA Compliance
Bahasa Melayu