Full Compliance with Malaysia's PDPA 2010

MZPlay Malaysia Privacy Policy

Your privacy is more than a legal obligation to MZPlay — it is a moral responsibility we take seriously every day. This document explains exactly how we handle your personal data.

Updated: 1 July 2026

Full Compliance with PDPA 2010

Mzplay is fully compliant with Malaysia's Personal Data Protection Act 2010. All personal data processing activities are carried out within the applicable Malaysian legal framework.

256-Bit SSL Encryption

All data transmitted between your device and MZPlay's servers is protected by 256-bit SSL encryption — the same security standard used by Malaysia's leading banks.

Your Data, Your Control

You have the full right to access, correct, or request the deletion of your personal data from mzplay's systems at any time by contacting our team.

No Sale of Data to Third Parties

MZPlay has never and will never sell player personal data to any third party for marketing or commercial purposes without your explicit prior consent.

Secure & Restricted Data Storage

Your personal data is stored on secure servers with restricted access. Only authorised MZPlay staff with operational need may access player data.

Data Breach Notification

In the event of any security incident involving your personal data, mzplay is committed to notifying you within 72 hours, in line with industry best practices.

This Privacy Policy describes how MZPlay collect, use, disclose, and protect your personal information when you use our platform at mzplay.ws. By registering for or using MZPlay's services, you agree to the terms of this Privacy Policy. Please read it carefully.

Section 1

Introduction & Scope of Privacy Policy

MZPlay is a Malaysian online casino platform operating in accordance with Malaysian laws and regulations. We take player privacy very seriously and are committed to protecting the personal information you share with us.

This Privacy Policy applies to all information collected through the MZPlay platform, including the mzplay.ws website, mobile application (where applicable), and all official MZPlay communication channels. This Policy forms part of Terms & Conditions mzplay and is to be read together with it.

As a company operating in Malaysia, mzplay is fully compliant with Personal Data Protection Act 2010 (PDPA) – the primary legislation governing personal data protection in Malaysia. All our personal data processing activities are conducted within the framework of the PDPA and internationally recognised data protection principles.

Section 2

Categories of Personal Data Collected

MZPlay collects various types of personal information depending on how you interact with our platform. The main categories of data we collect are as follows:

2.1 Identity Information

  • Full name as per official identification document
  • National Identity Card (MyKad) number or passport number
  • Date of birth and gender
  • Current residential address in Malaysia
  • An active mobile phone number
  • A valid email address

2.2 Financial & Transaction Data

  • Records of all deposits made via DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost, or ShopeePay
  • Records of all winning withdrawals and related amounts
  • Betting history and gaming activity on the mzplay platform
  • Account balance and credit movements

2.3 Technical & Usage Data

  • IP address and approximate geographic location
  • Device type, operating system, and web browser version
  • Login and logout time records
  • Pages visited and time spent on the mzplay platform
  • Cookie data and related tracking technologies
Data CategoryRequirementsRetention Period
Identity DataMandatoryThroughout active account period + 7 years
Financial DataMandatory7 years (legal requirement)
Technical DataAutomatic24 months
Preference CookiesPreferences12 months
Communication RecordsAutomatic36 months
Section 3

How MZPlay Collects Your Data

Mzplay collects your personal data through the following methods:

3.1 Direct Collection

You provide information directly to mzplay when:

  • Completing the mzplay account registration form
  • Submitting identity verification documents (KYC)
  • Making deposits or withdrawals via e-wallet or Malaysian online banking
  • Contacting mzplay customer support via live chat, email, or WhatsApp
  • Submitting a feedback form, complaint, or survey

3.2 Automatic Collection

When you use the MZPlay platform, our systems automatically record certain technical data for security, performance, and service improvement purposes. This includes system log data, device information, and platform usage patterns.

MZPlay has never purchased personal data lists from third-party data brokers. All data we hold about you is data you have provided directly, or data generated from your use of the MZPlay platform.

Section 4

Purpose of Personal Data Use

Mzplay uses your personal data for the following legitimate purposes under Malaysia's PDPA:

  • Account Management: Creating, verifying, and managing your mzplay account, including any required KYC processes.
  • Transaction Processing: Processing deposits via DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay, and managing your winnings withdrawals.
  • Fraud Prevention: Identifying and preventing fraudulent activity, money laundering, and other security threats to the MZPlay platform.
  • Customer Support: Enable MZPlay's customer service team to provide relevant and accurate assistance based on your account history.
  • Legal Compliance: Fulfil Malaysian legal obligations, including financial reporting and anti-money laundering (AMLA) requirements.
  • Service Improvement: Analysing platform usage patterns to enhance the overall MZPlay player experience.
  • Service Communications: Sending important notifications related to your account, transactions, mzplay promotions, and relevant policy updates.
Section 5

Data Sharing & Disclosure

Mzplay does not sell, rent, or disclose your personal data to third parties for marketing purposes. However, in certain limited situations, mzplay may need to share data with the following parties:

5.1 Trusted Service Providers

MZPlay works with approved third-party service providers to carry out specific functions, including payment processing, identity verification, and cloud hosting. All providers are bound by strict data protection agreements and may only use your data for the specific purposes agreed upon.

5.2 Legal Obligations

MZPlay may be required to disclose your personal data to the relevant authorities where mandated by Malaysian law or a valid court order. This includes investigations by the MACC, Bank Negara Malaysia, or other law enforcement agencies acting within their lawful jurisdiction.

MZPlay's Commitment: We will never sell or disclose your personal data to advertising companies, data brokers, or any third party for commercial purposes without your explicit consent. This is a commitment we will not compromise on.

Section 6

Data Security Measures

MZPlay continuously invests in security infrastructure to ensure your personal data is protected to the highest standard:

  • Encryption in Transit: All communications between your browser and MZPlay's servers are protected by TLS 1.3 encryption — the latest security protocol.
  • Encryption at Rest: Sensitive data stored in MZPlay's databases is encrypted using AES-256 bit.
  • Access Controls: A role-based access control (RBAC) system ensures that only authorised MZPlay staff can access player data relevant to their role.
  • Security Audits: MZPlay conducts regular internal and external security audits to identify and address vulnerabilities.
  • 24/7 Monitoring: A real-time threat detection system monitors the MZPlay platform around the clock for any suspicious activity.
  • Two-Factor Authentication: 2FA is available and encouraged for all MZPlay accounts as an additional layer of protection.
Section 7

Cookies & Tracking Technologies

The mzplay platform uses cookies and similar tracking technologies to enhance your experience and ensure the platform runs smoothly. Below are the types of cookies we use:

  • Essential Cookies: Required for core mzplay platform functions such as login session management and security. These cookies cannot be disabled.
  • Preference Cookies: Saves your preferences such as language, display layout, and game selections for a more personalised experience.
  • Analytics Cookies: Help us understand how players use the MZPlay platform so we can make meaningful improvements.
  • Functional Cookies: Enables additional features such as mzplay's live chat customer support.

You can manage or disable non-essential cookies through your web browser settings. Please note, however, that disabling certain cookies may affect the functionality of some parts of the mzplay platform.

Section 8

Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by mzplay:

1
Right of Access

You have the right to request a copy of the personal data mzplay holds about you. Requests will be processed within 21 business days.

2
Right to Rectification

If the data we hold is inaccurate or outdated, you have the right to request that mzplay correct it promptly.

3
Right to Erasure

You may request the deletion of your personal data, subject to any legal retention obligations applicable to MZPlay.

4
Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes by MZPlay at any time.

5
Right to Restrict Processing

Under certain circumstances, you may request that mzplay restrict the way we process your personal data.

6
Right to Withdraw Consent

For processing that relies on your consent, you may withdraw that consent at any time without affecting any prior processing.

To exercise any of the rights above, please submit a written request to support@mzplay.ws with the subject line "PDPA Rights Request". We will verify your identity before processing any request.

Section 9

Data Retention Period

MZPlay retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by Malaysian law. Our general principles are:

  • Active account data is retained for the duration your account remains active on the MZPlay platform.
  • Financial data and transaction records are retained for 7 years after the transaction date, as required under Malaysian law governing financial audits and anti-money laundering.
  • Following account closure, personal data no longer required for legal obligations will be deleted or anonymised within 90 days.
  • Technical data and system logs are retained for up to 24 months for security and troubleshooting purposes.
Section 10

Children & Minors

The mzplay platform is intended for individuals aged 21 years and above only. mzplay does not knowingly collect or process personal data from individuals under the age of 21.

If MZPlay discovers that personal data from a minor has been collected without our knowledge, we will take immediate steps to delete that data and close the associated account.

If you are aware that a person under 21 years of age has registered for or used the MZPlay platform, please contact us immediately at support@mzplay.ws so that the appropriate action can be taken.

Section 11

Privacy Policy Amendments

MZPlay reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, Malaysian legal requirements, or technological developments.

When significant changes are made, we will:

  • Updating the "Last Updated" date at the top of this page.
  • Sending a notification to your registered email address if any changes materially affect how we manage your data.
  • Displaying a notice within the mzplay platform during your next login session.

We encourage you to review this Privacy Policy periodically. Your continued use of the MZPlay platform after any amendments are published constitutes acceptance of the updated terms.

Section 12

Contact MZPlay's Privacy Officer

For any questions, concerns, or requests relating to this Privacy Policy or how mzplay handles your personal data, please reach us through the following channels:

Privacy Officer Email

Send your privacy request to support@mzplay.ws with the subject line "Privacy Policy Enquiry". We aim to respond within 5 business days.

Live Chat 24/7

For general privacy-related enquiries, MZPlay's customer support team is available 24/7 via in-platform live chat in Bahasa Melayu.

Response Times

PDPA rights requests are processed within 21 business days. General enquiries are responded to within 1–3 business days. MZPlay will notify you if additional time is required.


🔒

Your Data is Safe with mzplay

Now you know how MZPlay protects your privacy. Register for a free account and start enjoying a safe and trusted online casino experience in Malaysia.

Bahasa Melayu