This Privacy Policy explains how zb66 collects, uses, stores, and protects your personal data when you access or use our online casino and sports betting platform. We are committed to handling your information responsibly and transparently.
zb66 ("we", "us", "our") operates the online gaming platform at https://zb66.cam and its associated interfaces (collectively, "the Platform"). In providing our casino, sports betting, and related gaming services to players across Malaysia — including in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and beyond — we necessarily collect and process certain personal data about you.
This Privacy Policy ("Policy") sets out in clear, structured terms: what personal data we collect, why we collect it, how we use and protect it, who we may share it with, how long we retain it, and what rights you have in relation to your data. This Policy applies to all Users of the Platform, whether registered Account holders or visitors browsing without an Account.
This Policy should be read alongside our Terms & Conditions, which govern your use of the Platform as a whole. By registering an Account or using the Platform, you acknowledge that you have read and understood this Policy.
Our commitment: zb66 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Your data is used only as described in this Policy, for the purposes of operating and improving the Platform and meeting our legal obligations.
For the purposes of this Policy, the following terms have the meanings assigned below:
| Term | Definition |
|---|---|
| "Personal Data" | Any information that identifies or can reasonably identify a natural person, directly or indirectly — including name, email address, phone number, device identifiers, and payment details. |
| "Processing" | Any operation performed on Personal Data, including collection, recording, storage, use, disclosure, transmission, erasure, or destruction. |
| "Data Controller" | zb66, as the entity that determines the purposes and means of processing your Personal Data. |
| "Data Processor" | A third party that processes Personal Data on behalf of zb66, strictly in accordance with our documented instructions. |
| "User" / "you" | Any individual who accesses or uses the Platform, whether as a registered Account holder or an unregistered visitor. |
| "KYC" | Know Your Customer — the identity and age verification process conducted by zb66 to confirm a User's identity and eligibility to use the Platform. |
| "Cookies" | Small data files placed on your device by the Platform to enable or improve certain functionality, remember preferences, and support analytics. |
zb66 collects Personal Data in several categories depending on how you interact with the Platform. The table below summarises the main categories of data we hold and specific examples within each category:
| Category | Examples of Data Collected |
|---|---|
| Identity Data | Full legal name, date of birth, MyKad or passport number, nationality, photograph (where submitted for KYC verification). |
| Contact Data | Email address, phone number, residential address (including city — e.g., Kuala Lumpur, Penang, Johor Bahru). |
| Account Data | Username, hashed password, account preferences, responsible gambling settings, communication preferences. |
| Financial Data | Payment method type (e.g., Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB), transaction reference numbers, deposit and withdrawal history. We do not store full card numbers or full e-wallet credentials. |
| Transaction Data | Bet history, game participation records, bonus usage records, win and loss records, wagering activity. |
| Technical Data | IP address, device type, operating system, browser type and version, session identifiers, time zone. |
| Usage Data | Pages visited, features used, session duration, click-path data, game preferences, search queries within the Platform. |
| Communications Data | Records of support chat conversations, email correspondence, and feedback submitted to the zb66 team. |
We collect Personal Data through the following channels:
zb66 processes your Personal Data only for clearly defined, legitimate purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which we process your data are:
For each processing activity, zb66 relies on one or more of the following legal bases:
zb66 does not sell, rent, or trade your Personal Data to third parties for their own commercial purposes. We share your data only in the limited circumstances described below, and only to the extent necessary for the specified purpose:
International Transfers: Some of our service providers may process your data outside Malaysia. Where such transfers occur, zb66 implements appropriate contractual safeguards — including standard data protection clauses — to ensure your data receives equivalent protection regardless of where it is processed.
zb66 retains your Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or to meet our legal and regulatory obligations — whichever period is longer. The following general retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account & Identity Data | Duration of the Account relationship, plus a minimum of 5 years following Account closure to meet AML and regulatory obligations. |
| Financial & Transaction Data | Minimum 7 years from the date of each transaction, in accordance with standard financial record-keeping obligations. |
| KYC Documentation | Minimum 5 years from the date of verification, or longer where required by applicable AML regulations. |
| Support Communications | 3 years from the date of the last interaction, for quality assurance and dispute resolution purposes. |
| Technical & Usage Data | Up to 24 months in identifiable form; thereafter retained only in aggregated, anonymised form with no defined retention limit. |
| Marketing Consent Records | Duration of the consent, plus 2 years following withdrawal of consent as evidence of the consent history. |
When Personal Data is no longer required, zb66 will securely delete or irreversibly anonymise it. Where data cannot be immediately deleted due to backup retention schedules, it will be isolated from further active processing until deletion occurs.
zb66 implements a layered set of technical and organisational security measures to protect your Personal Data against unauthorised access, loss, alteration, or disclosure. Our current security measures include:
Your responsibility: While zb66 takes all reasonable steps to protect your data at our end, the security of your Account also depends on you maintaining strong, unique credentials and not sharing your login details with anyone. If you suspect unauthorised access to your Account, contact our live chat support immediately.
The zb66 Platform uses Cookies and similar tracking technologies to operate correctly, remember your preferences, and improve your experience. We use the following categories of Cookies:
You may manage your Cookie preferences through your browser settings. Please note that disabling certain Cookie categories may impair the functionality of specific Platform features. zb66 does not use Cookies to serve third-party advertising or to track your browsing activity outside of the Platform.
You have a number of rights in relation to the Personal Data that zb66 holds about you. These rights are summarised below. To exercise any of these rights, please contact our support team via live chat or email at the address shown in Section 14.
zb66 will respond to all valid data subject requests within 30 days of receipt. Where requests are complex or numerous, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for it. We will not charge a fee for handling reasonable requests.
Please note that some rights are subject to limitations. For example, the right to erasure does not apply where zb66 is required to retain data to comply with a legal obligation (such as AML record-keeping requirements). Where we are unable to fulfil a request in full, we will explain the reason clearly.
The zb66 Platform is strictly intended for persons aged 21 years and above. We do not knowingly collect Personal Data from any individual under the age of 21.
Age verification is a mandatory step in the Account registration process. Where zb66 discovers or has reasonable grounds to believe that a registered User is under 21 years of age, we will immediately suspend the Account, conduct a review, and — where confirmed — close the Account and return any deposited Real Money Funds in accordance with applicable requirements.
If you are a parent or guardian and believe that a minor in your care has registered or attempted to register an Account on zb66, please contact our support team immediately via live chat. We will investigate and take appropriate action without delay. Protecting minors from online gambling is a responsibility we take very seriously.
zb66 reserves the right to update or amend this Privacy Policy at any time. The most current version will always be published at https://zb66.cam/privacy-policy, together with the effective date of the current version.
Where amendments are material — meaning they significantly affect how we collect, use, or share your Personal Data — zb66 will provide advance notice by displaying a prominent notification on the Platform or by sending an email to your registered address. For minor clarifications or non-material updates, publishing the revised Policy on the Platform constitutes sufficient notice.
Continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you should discontinue use of the Platform and may close your Account by contacting our support team.
If you have any questions, concerns, or requests relating to this Privacy Policy or the way zb66 handles your Personal Data, please contact us using the details below. We aim to respond to all privacy-related enquiries within 5 business days.
For requests relating to your data subject rights (access, rectification, erasure, etc.), please include your registered Account email address and a description of your request so we can locate your records and respond accurately.
Six ways our Privacy Policy works to keep your personal information secure and in your control.
zb66 does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. Your data stays within the boundaries described in this Policy, full stop.
Every byte of data transmitted between your browser and the zb66 Platform is protected by TLS encryption. Sensitive data fields are also encrypted at rest in our secure database infrastructure.
From access requests to erasure, you have eight distinct rights over the Personal Data we hold. Our support team will action valid requests within 30 days, with no fee for reasonable submissions.
We use only strictly necessary, functional, and first-party analytical cookies. There are no third-party advertising trackers or social media pixels on the zb66 Platform — your browsing stays private.
We publish specific retention periods for every category of data we hold. When that period expires, your data is securely deleted or anonymised — we do not hold personal information indefinitely.
In the unlikely event of a data breach that poses a risk to your rights, zb66 commits to notifying affected users without undue delay and providing clear information about what happened and what we are doing about it.
Our support team handles all data subject requests promptly and confidentially. Reach us via 24/7 live chat or review our full site policies below.