Privacy Policy zoro77 – Member Data & Personal Information Protection

Welcome to the zoro77 Privacy Policy. This document explains in detail how our online entertainment platform – operating under the domain zoro77.onl – collects, processes, stores, and protects your personal information while you use our services.

This Privacy Policy applies to all users of the zoro77 platform, including unregistered visitors, registered members, and any individual who interacts with our platform via web browser, mobile app, or any of our official communication channels.

By registering an account or continuing to use the zoro77 platform, you acknowledge that you have fully read and understood this Privacy Policy. If you do not agree with any provision in this document, you are advised to discontinue use of our platform.

Zoro77 collects various types of information depending on how you interact with our platform. Below is a summary of the data types collected and their purposes:

For members who register via the zoro77 mobile app, we may also request permission to send push notifications, which you can withdraw at any time through your device settings.

Every piece of information we collect has a clear and lawful purpose. zoro77 does not use your data for any purpose other than those stated below:

• Account Management: To create, verify, and maintain your account so your gaming experience runs smoothly and securely.
• KYC & Compliance Process: To verify your identity in compliance with legal requirements related to anti-money laundering (AML) and child protection.
• Financial Processing: To securely process deposits and withdrawals and prevent financial fraud and unauthorised activity.
• Customer Support: To provide effective assistance when you reach our support team via Live Chat or other channels.
• Experience Personalisation: To personalise content, promotions, and game recommendations based on your preferences and usage patterns.
• Service Communications: To send important account notifications, the latest promotions, policy updates, and security information.
• Platform Security: To detect and prevent fraudulent activity, system abuse, and unauthorised access to member accounts.
• Analytics & Improvement: To analyse platform usage patterns and improve our services, interface, and overall user experience.

Zoro77 understands that your trust is invaluable. We do not share your personal data with third parties except in the following strictly defined situations:

1. Payment Service Providers: Required transaction information is shared with registered payment gateways (such as DuitNow, FPX, Touch 'n Go, Boost, and GrabPay) solely to process your financial transactions.
2. Game Software Providers: Minimal gameplay session data is shared with our game software providers solely for technical purposes and wins processing.
3. KYC Service Providers: Identity verification documents may be shared with trusted third parties for legally mandated identity verification purposes.
4. Authorities: Information may be disclosed to law enforcement agencies, courts, or regulatory authorities when required by law or a valid court order.
5. Business Acquisition: In the event of a merger, acquisition, or sale of zoro77 assets, user data may be transferred to the successor entity with appropriate notice given to members.

All third parties with whom we share data are bound by strict data protection agreements and are only permitted to use that information for the stated purposes.

Zoro77 uses cookies and related tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit the zoro77 platform.

The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, session security, and authentication. These cookies cannot be disabled as the platform will not function without them.
• Performance Cookies: To collect information about how you use the platform — such as most-visited pages and error messages received — helping us improve our services.
• Functional Cookies: Enables the platform to remember your preferences such as language, account settings, and display preferences for a more personalised experience.
• Analytics Cookies: Used by our first-party analytics tools to understand aggregate usage patterns, without identifying individual users.

You can manage cookie settings through your browser preferences. However, blocking all cookies may affect the functionality of certain parts of the zoro77 platform. For more information on managing cookies, please refer to your web browser's documentation.

Your data security is our top priority. zoro77 implements multiple layers of technical and administrative protection to keep your information safe at all times:

• End-to-End Encryption: All communications between your device and zoro77 servers use TLS 1.3 protocol with 256-bit encryption – the same standard used by leading financial institutions.
• Two-Factor Authentication (2FA): Members are encouraged to enable two-factor authentication for an additional layer of account protection.
• Real-Time Monitoring: Our automated monitoring system operates 24 hours a day, 7 days a week to detect unusual activity or unauthorised access attempts.
• Regular Security Audits: zoro77 conducts regular security assessments and penetration testing by independent security experts to identify and address any vulnerabilities.
• Tiered Access Control: Internal staff can only access data required for their specific duties, with all access logged and monitored.
• Secure Data Backup: Data is regularly backed up to secured locations to ensure service continuity and recovery in the event of an unexpected incident.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by zoro77:

To submit any request related to the above rights, please contact our Privacy team via Live Chat or email. We will process your request within 30 business days.

Zoro77 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy or as required by law. The following are our data retention guidelines:

• Active Account Data: Retained for the duration your account is active plus 7 years after account closure, in line with Malaysia's financial legal requirements.
• Financial Transaction Records: Retained for a minimum of 7 years from the transaction date for tax and financial legal compliance purposes.
• KYC Documents: Retained for 5 years after account closure, or longer if required by the relevant authorities.
• Support Communication Logs: Retained for 3 years after the last interaction for reference and resolution of any disputes.
• Analytics & Technical Log Data: Retained for 13 months before being automatically deleted or anonymised.

Upon expiry of the relevant retention period, your data will be securely deleted or fully anonymised so that it can no longer be linked to any specific individual.

Zoro77 is integrated with a range of trusted third-party service providers to deliver a complete and seamless experience for our members. These services include game providers, payment gateways, and identity verification tools.

It is important to understand that each of these third-party providers has their own privacy policy. zoro77 only shares the minimum necessary information with these third parties and requires them to adhere to data protection standards equal to or higher than our own.

Zoro77 is not responsible for the privacy practices or content of any third-party websites or services. We encourage you to read the privacy policy of each service provider you use alongside our platform.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, the zoro77 Privacy team is here to help.

You can reach us via:

• Live Chat: Available 24/7 directly through the zoro77 platform for the fastest response.
• Privacy Email: [email protected] – for privacy and data protection enquiries.

We are committed to responding to all privacy-related enquiries within 5 business days. For data deletion or transfer requests, the processing period is up to 30 business days.

If you are not satisfied with how we handle your complaint, you have the right to submit a complaint to the Department of Personal Data Protection Malaysia or the relevant regulatory body in your country.