Zona66 is committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, who we share it with, and what rights you have as a user of our platform.
A plain-English overview of our core data protection commitments. The full legal detail is in the sections below — please read the complete policy carefully.
Zona66 does not sell, rent, or trade your personal information to any third party for their own marketing or commercial purposes. Your data is used solely to deliver, secure, and improve the services you have requested from us.
All data transmitted between your device and Zona66's servers is protected by 256-bit SSL encryption. Sensitive personal and financial data stored on our systems is encrypted at rest using industry-standard protocols.
You have the right to access, correct, and request deletion of your personal data. You may also withdraw consent for certain uses, opt out of marketing communications, and request a portable copy of your data at any time.
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Regulatory records (such as KYC and financial transaction data) are retained for a minimum of five years in accordance with anti-money laundering obligations.
Where personal data is transferred to third-party processors outside Malaysia — for example, to payment processors supporting Touch 'n Go eWallet, Boost, or DuitNow transactions — we ensure appropriate contractual safeguards are in place.
You can opt out of promotional emails, SMS notifications, and in-platform marketing communications at any time through your account settings or by contacting our support team directly. Opt-outs are processed within five business days.
This Privacy Policy ("Policy") describes how Zona66 ("Zona66", "we", "us", or "our") collects, uses, discloses, retains, and protects the personal data of individuals ("you", "your", or "User") who access, register on, or otherwise interact with the Zona66 platform at https://zona66.lat and any associated mobile interfaces or services.
Zona66 is an English-language online casino and sports betting platform principally serving Malaysian players. We take our obligations regarding personal data seriously, and this Policy has been prepared to give you a clear and transparent account of our data practices.
By using the Zona66 platform, you acknowledge that you have read and understood this Privacy Policy. Where we rely on your consent as the legal basis for processing, your continued use of our platform constitutes that consent for the purposes described herein. You may withdraw consent at any time as described in Section 9.
For the purposes of this Privacy Policy, the following definitions apply:
Zona66 collects personal data in the following categories:
When you create an account, we collect: full legal name, date of birth, residential address, email address, contact number, username, and password (stored in hashed form). This information is required to establish and maintain your Zona66 account.
To comply with anti-money laundering (AML) obligations and to verify your age and identity, we collect: copies of government-issued identification documents (Malaysian MyKad, Passport, or Driver's Licence), proof of address documents (utility bills or bank statements), and selfie photographs submitted as part of the KYC process.
We collect data relating to deposits and withdrawals, including: payment method identifiers (e-wallet IDs, bank account numbers, cryptocurrency wallet addresses), transaction amounts, timestamps, and reference numbers. We process MYR transactions via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, and cryptocurrency channels (BTC/USDT).
We collect records of your gaming sessions, bet placements, game outcomes, sports betting selections (including football markets such as Liga Super Malaysia and EPL), wager amounts, win/loss records, and bonus utilisation history.
We automatically collect certain technical data when you access the platform, including: IP address, device type and operating system, browser type and version, session duration, pages visited, referral source, and geolocation data at country or city level.
We retain records of communications between you and Zona66, including live chat transcripts, support email correspondence, and any complaints or feedback submitted through the platform.
Cookies and similar tracking technologies may collect browsing behaviour, session identifiers, and preference settings. Full details are provided in Section 10.
| Data Category | Examples | Collection Method |
|---|---|---|
| Account Data | Name, email, DOB, address | User-provided at registration |
| KYC Data | MyKad copy, proof of address | User-provided via KYC portal |
| Financial Data | Deposit/withdrawal records, e-wallet IDs | Automatically generated on transaction |
| Gaming Activity | Bets placed, game history, RTP outcomes | Automatically recorded during play |
| Technical Data | IP address, device, browser | Automatically collected on access |
| Communications | Support chat, emails | User-initiated contact |
Zona66 processes your personal data for the following purposes:
Where applicable data protection law requires a legal basis for each processing activity, Zona66 relies on the following:
Zona66 does not sell your personal data to third parties. We may share your data with the following categories of recipients where necessary and proportionate:
To process deposits and withdrawals, we share necessary financial data with payment processors including e-wallet operators (Touch 'n Go eWallet, Boost, GrabPay), real-time payment networks (DuitNow, FPX), and Malaysian banking institutions (Maybank, CIMB, Public Bank, Hong Leong Bank). These processors act as data processors under contractual data processing agreements.
KYC documents and identity data may be shared with third-party identity verification service providers engaged by Zona66 to automate or supplement the verification process. These providers process data solely on Zona66's instructions.
Certain gaming session data (such as bet amounts, round identifiers, and game outcomes) may be shared with the third-party game studio providers whose titles are hosted on the Zona66 platform, to the extent necessary to operate and audit those games.
Zona66 may disclose personal data to regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law, by court order, or where we reasonably believe such disclosure is necessary to prevent fraud, money laundering, or other criminal activity.
In the event of a merger, acquisition, restructuring, or sale of all or part of Zona66's business, personal data held by Zona66 may be transferred to the acquiring entity as part of that transaction. Affected users will be notified of any such transfer and any material change to this Policy that results.
Zona66 operates internationally and may transfer personal data to service providers and infrastructure located outside Malaysia. Such transfers may include data stored on cloud servers, processed by payment gateways, or handled by game studio providers in other jurisdictions.
Where personal data is transferred internationally, Zona66 takes steps to ensure that appropriate safeguards are in place, including contractual data processing agreements incorporating standard data protection clauses, and selecting processors that operate under recognised data protection frameworks.
By using the Zona66 platform and agreeing to this Privacy Policy, you consent to the transfer of your personal data to countries outside Malaysia where such transfers are necessary to provide the services you have requested.
Zona66 retains personal data only for as long as necessary to fulfil the purposes for which it was collected or as required by law. Our general retention practices are as follows:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Registration Data | Duration of account + 5 years post-closure | Legal obligation (AML) |
| KYC Documents | Minimum 5 years from verification | Legal obligation (AML/CTF) |
| Financial Transaction Records | Minimum 5 years from transaction date | Legal obligation |
| Gaming Activity Logs | 3 years from last activity | Legitimate interest |
| Support Communications | 3 years from resolution | Legitimate interest |
| Marketing Consent Records | Until withdrawal of consent + 3 years | Legal obligation |
| Technical/Log Data | 90 days (rolling) | Legitimate interest (security) |
Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised such that it can no longer be associated with an identifiable individual.
Subject to applicable law and certain limitations, you have the following rights in respect of your personal data held by Zona66:
You have the right to request a copy of the personal data we hold about you, together with information about how it is processed. We will respond to access requests within thirty (30) days.
You have the right to request correction of inaccurate or incomplete personal data. You may update most account information directly through your Zona66 account settings. For changes to verified KYC data, contact support.
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent. Note that certain data must be retained to comply with legal obligations (see Section 8) and cannot be deleted on request.
You may request that we restrict processing of your personal data in certain circumstances — for example, while a rectification request is being assessed, or where you contest the legal basis for processing.
Where processing is based on your consent or on a contract, and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller.
You have the right to object to processing of your personal data where we rely on legitimate interests as the legal basis, including profiling for direct marketing purposes. You may opt out of marketing communications at any time through your account settings.
Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. Withdrawal may be exercised through account settings or by contacting [email protected].
To exercise any of the above rights, please contact us at [email protected] with your full name, registered email address, and a description of your request. We may ask you to verify your identity before processing a data rights request. We will respond within thirty (30) days of receiving a verified request.
Zona66 uses cookies and similar tracking technologies to operate the platform, enhance your experience, and analyse usage. Cookies are small text files stored on your device when you visit a website.
You can manage your cookie preferences at any time through your browser settings. Most browsers allow you to block or delete cookies. Note that blocking strictly necessary cookies will impair your ability to use the Zona66 platform. For analytical and marketing cookies, your consent preferences can be updated through the cookie preference centre available on the platform.
Zona66 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, disclosure, or destruction. These measures include:
While Zona66 takes extensive measures to protect your data, no transmission over the internet or electronic storage system is completely secure. We cannot guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, Zona66 will notify affected users without undue delay in accordance with applicable requirements.
Zona66 is strictly an adult platform. Our services are available exclusively to users who are aged 21 years and above. We do not knowingly collect, use, or retain personal data of individuals under the age of 21.
If we become aware that personal data has been submitted by or relates to a person under 21, we will take immediate steps to delete such data and close the associated account. All accounts are subject to age verification as part of the KYC process. Any winnings generated by an underage account will be forfeited.
The Zona66 platform may display or reference third-party services (such as payment processors and game studios). These third parties operate under their own privacy policies and data practices, for which Zona66 bears no responsibility.
When you interact with a third-party payment provider (for example, initiating a Touch 'n Go eWallet or DuitNow transfer), that transaction will be governed by that provider's terms and privacy policy in addition to ours. We recommend reviewing those policies independently.
Zona66 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered users by email or via an in-platform notice.
Your continued use of the Zona66 platform following the posting of an updated Privacy Policy constitutes your acknowledgement of and agreement to the changes, to the extent permitted by applicable law. We encourage you to review this Policy periodically.
If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by Zona66, please contact us using the details below. We take all data-related enquiries seriously and will respond promptly.
Please include your registered username or email address and a clear description of your request in all correspondence. Where you are exercising a data rights request under Section 9, we may ask you to provide proof of identity before we can action your request. Data rights requests are processed within thirty (30) days of receipt of a verified request.
Our support team is available around the clock to help with any privacy-related concerns. You can also visit our FAQ page for quick answers to common questions about data, accounts, and security on Zona66.