Privacy Policy
At z16, your privacy is a foundation — not an afterthought. This policy explains precisely what personal data we collect, why we collect it, how we protect it, and what rights you hold as a player on our platform.
How z16 Protects Your Data
These six commitments summarise our approach to data privacy. They complement — but do not replace — the full Privacy Policy document below, which all players are required to read.
All data transmitted between your device and z16's servers is protected with 256-bit SSL/TLS encryption — the same standard used by major Malaysian banking institutions including Maybank and CIMB.
z16 does not sell, rent, or trade your personal information to any third party for their own marketing or commercial purposes. Your data is used exclusively to operate and improve your z16 experience.
We collect only the data that is necessary to provide, verify, and secure your account and transactions. We do not collect data speculatively or beyond what is needed for a specific, documented purpose.
You have the right to access, correct, and request deletion of your personal data. z16 provides clear channels to exercise these rights — detailed in Section 8 of this policy — and will respond within statutory timeframes.
z16 uses cookies and similar technologies solely to improve platform performance, remember your preferences, and support security processes. Our cookie use is documented in full in Section 7 of this policy.
We do not retain personal data indefinitely. Retention periods are defined by the purpose for which data was collected, applicable legal obligations, and our anti-money laundering compliance requirements — detailed in Section 6 of this policy.
1 Introduction
This Privacy Policy ("Policy") describes how z16 ("the Company", "we", "us", "our") — the operator of the online gaming and sports betting platform accessible at z16.cam — collects, processes, stores, and protects the personal data of registered players and website visitors ("you", "the User", "the Player").
z16 is committed to handling personal data responsibly and in accordance with applicable data protection laws and principles. By registering an account with z16, accessing the Platform, or continuing to use our services after the effective date of this Policy, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your data as described herein.
This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, which together form the full framework governing your use of z16.
2 Definitions
For the purposes of this Privacy Policy, the following definitions apply:
| Term | Meaning |
|---|---|
| Personal Data | Any information that identifies or can be used to identify a natural person, directly or indirectly. This includes names, identification numbers, location data, email addresses, and any factors specific to the individual's identity. |
| Processing | Any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction. |
| Data Controller | z16, the entity that determines the purposes and means of processing personal data collected through the Platform. |
| Data Processor | Any third-party service provider that processes personal data on behalf of z16 and in accordance with z16's instructions, such as payment processors and KYC verification providers. |
| Platform | The z16 website, mobile interface, associated applications, and all services accessible at z16.cam. |
| KYC | Know Your Customer — the mandatory identity and address verification process conducted prior to or during the Player's use of the Platform. |
| Cookie | A small text file placed on a User's device by the Platform to store preferences, session data, and usage information. |
3 Data We Collect
z16 collects personal data in the following categories, depending on how you interact with the Platform:
3.1 Registration & Account Data
When you create a z16 account, we collect: full legal name, date of birth, email address, mobile phone number, residential address (including city — e.g., Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Shah Alam), chosen username, and account password (stored in encrypted form).
3.2 Identity Verification (KYC) Data
To comply with anti-money laundering obligations and to verify that players meet the minimum age requirement of 21 years, z16 may request: a copy of a government-issued photo identification (e.g., MyKad, passport), proof of address documentation, and in certain cases, source of funds documentation. KYC data is processed by z16 and authorised verification service providers under strict data processing agreements.
3.3 Financial & Transaction Data
We collect records of all deposits, withdrawals, bonuses credited, and betting transactions conducted through your z16 account. This includes the payment methods used (e.g., Touch 'n Go eWallet, DuitNow, FPX, Maybank transfer, Boost, GrabPay, Visa/Mastercard, or cryptocurrency wallet references). Full card numbers are never stored by z16 — payment card data is handled exclusively by our PCI-DSS compliant payment processor partners.
3.4 Usage & Technical Data
When you access the Platform, we automatically collect certain technical data including: IP address, device type and operating system, browser type and version, referring URL, pages visited and time spent, session duration, and clickstream data. This data is used for security monitoring, fraud prevention, and Platform performance optimisation.
3.5 Communications Data
If you contact z16's support team — via live chat, email to [email protected] or [email protected], or any other channel — we retain records of those communications, including the content of your messages and our responses, for quality assurance and dispute resolution purposes.
3.6 Responsible Gambling Data
Where you use z16's responsible gambling tools — such as setting deposit limits, activating self-exclusion, or requesting account closure — we record and retain those instructions and the dates on which they were applied. This data is essential to ensuring your instructions are honoured correctly and is retained for compliance and audit purposes.
4 How We Use Your Data
z16 processes your personal data only for specific, documented purposes. The legal basis and purpose for each category of processing is described below:
| Purpose | Legal Basis |
|---|---|
| Account creation and management | Performance of contract — necessary to provide the services you have requested. |
| Identity verification (KYC) and age verification | Legal obligation — compliance with anti-money laundering and age restriction requirements. |
| Processing deposits, withdrawals and bonuses | Performance of contract — necessary to fulfil your transaction requests. |
| Fraud prevention and security monitoring | Legitimate interest — protecting the integrity of the Platform and the security of all players. |
| Customer support and dispute resolution | Performance of contract and legitimate interest — resolving queries and maintaining service quality. |
| Responsible gambling tool administration | Legal obligation and legitimate interest — protecting player welfare. |
| Platform analytics and performance improvement | Legitimate interest — improving the user experience for all players. |
| Regulatory compliance and record-keeping | Legal obligation — maintaining records required by applicable law. |
5 Data Sharing & Disclosure
z16 does not sell, rent, or trade your personal data. We share personal data only in the following limited and documented circumstances:
5.1 Service Providers & Data Processors
z16 engages third-party service providers to support Platform operations, including payment processors (who handle MYR and cryptocurrency transactions), KYC and identity verification providers, cloud hosting and infrastructure providers, and fraud detection and security monitoring services. All such providers operate under binding data processing agreements and are permitted to use your data only as instructed by z16 and for no other purpose.
5.2 Legal & Regulatory Disclosure
z16 may disclose personal data to competent authorities, regulators, law enforcement agencies, or courts where required by applicable law or where we are legally compelled to do so. Such disclosures are made only to the extent strictly necessary and with appropriate safeguards where permitted.
5.3 Business Transfers
In the event of a merger, acquisition, reorganisation, or sale of all or substantially all of z16's assets, personal data held by z16 may be transferred to the successor entity as part of that transaction, subject to equivalent privacy protections being maintained.
5.4 No Third-Party Marketing Sharing
Under no circumstances does z16 share your personal data with third parties for those parties' own marketing or commercial purposes. Any sharing of data is strictly limited to the operational purposes described in this Section 5.
6 Data Retention
z16 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or compliance obligations. The following indicative retention periods apply:
- Account and KYC data: Retained for the duration of the account relationship and for a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements.
- Transaction records: Retained for a minimum of five (5) years from the date of the transaction.
- Communications records: Retained for up to two (2) years following the date of the communication, unless retention for a longer period is required for dispute resolution or legal proceedings.
- Responsible gambling records: Retained indefinitely for the purposes of honuring self-exclusion and related instructions, even following account closure.
- Technical and usage data: Retained for up to twelve (12) months, after which it is anonymised or deleted.
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.
7 Cookies & Tracking Technologies
z16 uses cookies and similar technologies on the Platform. A cookie is a small text file stored on your device when you visit the Platform. We use cookies for the following purposes:
7.1 Essential Cookies
These cookies are strictly necessary to operate the Platform. They enable core functionality such as session authentication, account security, and payment flow integrity. The Platform cannot function properly without these cookies. They cannot be disabled.
7.2 Performance & Analytics Cookies
These cookies collect aggregate, anonymised information about how Players use the Platform — such as which pages are visited most frequently and where users encounter errors. This data is used to improve Platform performance and the player experience. No individual player is identified through these cookies.
7.3 Preference Cookies
These cookies remember your settings and preferences — such as language selection, display preferences, and previously visited game categories — so that the Platform behaves consistently across sessions.
7.4 Security Cookies
These cookies support z16's fraud detection and security monitoring processes. They help identify unusual login patterns, suspicious activity, and potential account takeover attempts.
7.5 Managing Cookies
You may configure your browser to block or delete cookies. Please note that disabling essential cookies will impair your ability to use the Platform. Performance and preference cookies may be disabled without affecting core Platform functionality, though some personalised features may not work as expected.
8 Your Data Rights
Subject to applicable law and certain conditions, you hold the following rights in respect of your personal data held by z16:
Request a copy of the personal data z16 holds about you, free of charge, in a structured and readable format.
Request correction of any personal data that is inaccurate, incomplete, or out of date.
Request deletion of your personal data, subject to z16's legal retention obligations where applicable.
Request that z16 temporarily suspend the processing of your personal data in certain circumstances.
Receive a copy of your data in a machine-readable format and request that it be transferred to another controller where technically feasible.
Object to processing of your data where z16 relies on legitimate interests as the legal basis, subject to compelling grounds being demonstrated.
To exercise any of the above rights, submit a written request to [email protected] with sufficient information to identify your account and specify the right you wish to exercise. z16 will acknowledge your request within five (5) business days and respond substantively within thirty (30) days. Where an extension is required, we will notify you within the initial thirty-day period.
9 Data Security
z16 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, and disclosure. These measures include, but are not limited to:
- 256-bit SSL/TLS encryption for all data in transit between your device and z16's servers.
- Encryption at rest for sensitive personal data stored in z16's databases, including KYC documents and financial records.
- Two-factor authentication (2FA) available to all players and required for administrative access to z16 systems.
- Role-based access controls ensuring that only authorised personnel with a documented need may access personal data.
- Continuous security monitoring to detect and respond to intrusion attempts, anomalous access patterns, and potential data breaches.
- Regular security audits and penetration testing of Platform infrastructure.
- Data breach response procedures in place to notify affected parties and relevant authorities where a reportable breach occurs.
Notwithstanding the above, no data transmission or storage system can be guaranteed to be 100% secure. Players are encouraged to protect their own accounts by using strong, unique passwords and enabling two-factor authentication.
10 Third-Party Services
The z16 Platform integrates third-party services to support payment processing, identity verification, and technical infrastructure. These third-party providers may process personal data in their capacity as Data Processors acting on behalf of z16.
z16 requires all third-party processors to:
- Process personal data only in accordance with z16's documented instructions and for no other purpose;
- Implement appropriate technical and organisational security measures;
- Notify z16 promptly of any personal data breach; and
- Delete or return all personal data upon termination of the processing relationship.
z16's Platform does not contain links to third-party websites. If you access any third-party site independently (for example, your e-wallet provider such as Touch 'n Go, Boost, or GrabPay, or your bank's internet banking portal), the privacy policy of that third party — not this Policy — governs the handling of your data on their platform.
11 Children & Minors
The z16 Platform is strictly intended for adults aged 21 years and above. z16 does not knowingly collect, process, or retain personal data belonging to any person under the age of 21.
Where z16 becomes aware that personal data has been collected from a person under the minimum age, we will take immediate steps to delete that data and close the associated account. Any activity conducted by an underage user will be voided in accordance with our Terms & Conditions.
If you have reason to believe that a minor has registered on the Platform, please contact us immediately at [email protected].
12 Updates to This Privacy Policy
z16 reserves the right to update or modify this Privacy Policy at any time. Where material changes are made to this Policy, we will take reasonable steps to notify registered Players — which may include a prominent notice on the Platform or an email to your registered address.
The "Effective Date" at the top of this document will be updated each time the Policy is revised. Continued use of the Platform following publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you must cease using the Platform and may request account closure in accordance with our Terms & Conditions.
We encourage you to review this Privacy Policy periodically to stay informed about how z16 handles your personal data.
13 Contact Us
For any privacy-related enquiries, data rights requests, or concerns regarding how z16 handles your personal data, please contact us through the following channels:
For all data rights requests, subject access requests, and privacy policy questions. We respond within 5 business days.
For account, payment, and general enquiries. Available around the clock for all Malaysian players.
When submitting a data rights request, please include your registered account username, the email address associated with your account, and a clear description of your request. This Privacy Policy was last updated on 1 January 2026. For players aged 21 and above only.
Your Privacy Is Our Priority
If anything in this policy is unclear, our support team is available 24/7. You can also visit our FAQ for quick answers, or head to the homepage to explore the z16 platform.
For players aged 21 and above only. By using z16 you confirm acceptance of this Privacy Policy. Please also review our Terms & Conditions and Responsible Gambling pages.