Mzplay Privacy Policy – Personal Data Protection for Malaysian Players

Introduction & Scope of This Policy

This Privacy Policy ("Policy") is published by MZPlay ("we", "platform", "company") and applies to all users who access or use the MZPlay platform at mzplay.click and all related services.

We understand that personal data is sensitive and we take this responsibility seriously. This Policy explains in detail and in plain language — not confusing legal jargon — how we handle your personal information from the moment you register through to after you stop using our platform.

Mzplay is fully compliant with Personal Data Protection Act 2010 (PDPA) Malaysia and all applicable privacy laws in force in Malaysia. We also uphold industry best-practice data protection principles to ensure your data remains secure at all times.

Personal Information We Collect

Mzplay only collects information that is strictly necessary to provide our services. We do not collect excessive or irrelevant data beyond what is needed to operate the platform. The categories of information we collect are as follows:

How We Collect Your Information

MZPlay collects your personal information through a variety of lawful and transparent methods:

• Account Registration: When you register with MZPlay, you directly provide basic information such as your name, phone number, and email address.
• KYC Process: When you undergo identity verification (Know Your Customer), you will be required to upload documents such as your MyKad or passport along with proof of address.
• Financial Transactions: Every time you make a deposit via Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, Maybank2u, CIMB Clicks, or FPX, your transaction details are automatically recorded.
• Platform Usage: Your browsing data, clicks, game sessions, and interactions with the platform are collected automatically via cookies and similar technologies.
• Communication: When you contact MZPlay customer support via live chat, email, or other channels, records of those communications are retained.
• Authorised Third Parties: In certain cases, such as address verification or background checks required by law, we may receive information from trusted third-party sources.

How Your Personal Data Is Used

MZPlay uses collected information solely for the following purposes, which are directly related to the platform's operations and your interests as a member:

Sharing Data with Third Parties

Mzplay firmly believes that your personal information belongs to you. We does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes.

However, there are limited situations where MZPlay may need to share your information, and this is done only under the following circumstances:

• Licensed Payment Providers: Minimal transaction information is shared with licensed payment providers such as TNG, DuitNow, GrabPay, Boost, ShopeePay, and FPX solely for the purpose of processing your transactions. All such providers are bound by strict confidentiality agreements.
• IT Service Providers: Server hosting companies, cloud service providers, and cybersecurity vendors who help us operate the platform. They may only use your data in accordance with mzplay's instructions.
• Legal Authorities: When required by a court order, regulatory directive, or valid Malaysian legal obligation. We will notify you if the law permits us to do so.
• Fraud Detection: Information that must be shared with fraud detection agencies to protect the platform ecosystem from unlawful activity.

Data Security & Protection Measures

Mzplay continuously invests in the latest cybersecurity infrastructure to ensure your personal and financial data is always protected to the highest possible standard. Our security measures include:

• 256-bit SSL Encryption: All communications between your device and mzplay servers are encrypted using the latest TLS 1.3 protocol, on par with the standards adopted by major Malaysian banks.
• Data-at-Rest Encryption: Sensitive data stored in our databases — including IC numbers, bank details, and KYC information — is encrypted using AES-256 before storage.
• Two-Factor Authentication (2FA): MZPlay offers 2FA as an option for all member accounts as a strongly recommended additional layer of security.
• Strict Access Control: Only MZPlay staff who genuinely need it to perform their duties are granted access to members' personal data, and every access is logged and audited.
• Regular Security Audits: We conduct penetration testing and independent security audits at least twice a year.
• 24/7 Monitoring: Our automated monitoring system detects and responds to any suspicious activity in real time.
• Incident Response Plan: mzplay has a clear procedure for responding to any data breach, including notifying affected parties within 72 hours.

Cookies, Tracking Technologies & Analytics

MZPlay uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small files stored on your device that help us recognise you and remember your preferences.

We use four main types of cookies:

• Essential Cookies: Required for core platform functions such as login, session verification, and security. These cookies cannot be disabled.
• Preference Cookies: Saves your preferences such as language, theme, and display settings. Can be disabled, but may affect your user experience.
• Analytics Cookies: Helps us understand how players use the platform for continuous improvement. This data is collected in aggregate and does not directly identify individuals.
• Security Cookies: Used to detect suspicious activity, prevent fraud, and protect your account from unauthorised access.

Your Rights Under PDPA 2010

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by MZPlay. We are committed to respecting and facilitating the exercise of these rights:

Data Retention Period

MZPlay retains your personal data only for as long as necessary for the purposes stated in this Policy, or as required under Malaysian law. The following are our data retention guidelines:

Once the retention period expires, data will be securely deleted or fully anonymised so that it can no longer be linked to any individual.

Changes to This Privacy Policy

MZPlay reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or platform technology developments.

You will be notified of any material changes to this Policy through:

• In-platform notification on MZPlay at least 14 days before the changes take effect.
• Email to your registered email address.
• A clear notice on the main Privacy Policy page showing the updated effective date.

Your continued use of the MZPlay platform after the effective date of any changes constitutes your acceptance of the updated Policy. If you do not agree with the changes, please stop using the platform and contact us to close your account.

Contact Us About Privacy

If you have any questions, concerns, or complaints regarding how mzplay handles your personal data, our Data Protection Officer (DPO) team is here to help:

• Privacy Email: privacy@mzplay.click
• General Support Email: support@mzplay.click
• Live Chat: Available 24/7 via the mzplay platform.
• Response Time: Within 3 business days for privacy-related enquiries.

For formal complaints regarding this Privacy Policy, please send an email with the subject line "Privacy Complaint – [Your Account Number]" to privacy@mzplay.click. We will acknowledge receipt of your complaint within 24 hours and provide a full response within 14 business days.

If you believe mzplay has not met our obligations under PDPA 2010, you are also entitled to file a complaint with the Department of Personal Data Protection Malaysia.