zslot Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how zslot ("Company," "we," "us," or "our") collects, processes, stores, and protects the personal data of users ("you," "Player," or "Data Subject") who access or use the zslot online gaming platform available at zslot.app and any associated mobile applications (collectively, the "Platform").

zslot acts as the Personal Information Controller (PIC) as defined under the Data Privacy Act of 2012. We are responsible for ensuring that all personal data processed through the Platform is handled lawfully, fairly, and transparently, and that appropriate technical and organizational measures are in place to protect your data.

By registering an account or using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue use of the Platform.

2 Personal Data We Collect

zslot collects personal data that is necessary for the provision of our gaming services, compliance with legal obligations, and improvement of the Platform experience. The categories of data we collect include:

2.1 Registration & Identity Data

• Full legal name, date of birth, and nationality
• Email address and mobile phone number
• Username and encrypted password
• Government-issued ID details (for KYC verification): ID type, ID number, expiry date
• Selfie or facial image (for identity verification purposes)
• Residential address (barangay, city/municipality, province, ZIP code)

2.2 Financial & Transaction Data

• GCash or PayMaya account number (masked)
• BPI, BDO, or Metrobank account details (masked, for bank transfer verification)
• Deposit and withdrawal history, amounts, and timestamps
• Bonus and promotional transaction records
• Gaming activity records including bets placed, games played, and outcomes

2.3 Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser version
• Session duration, login timestamps, and access logs
• Cookie identifiers and similar tracking technologies

2.4 Communications Data

• Support chat transcripts and email correspondence
• Survey responses and feedback submissions
• Marketing preference settings

3 How We Use Your Personal Data

zslot processes your personal data for the following specific purposes:

4 Legal Basis for Processing

Under the Data Privacy Act of 2012, zslot processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfill our obligations under the Terms & Conditions you agreed to upon registration, including account management, payment processing, and game provision.
• Legal Obligation: Processing required to comply with PAGCOR regulations, Anti-Money Laundering Act (AMLA), and other applicable Philippine laws, including mandatory reporting to the AMLC.
• Legitimate Interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your rights and freedoms.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit, informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5 Data Sharing & Disclosure

zslot does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your data only in the following circumstances:

5.1 Service Providers (Personal Information Processors)

We engage trusted third-party service providers who process data on our behalf under strict data processing agreements. These include payment processors (GCash, PayMaya, BPI, BDO, Metrobank), KYC verification providers, cloud hosting providers, game software suppliers, and customer support platforms. All processors are contractually bound to handle your data only as instructed by zslot and in compliance with the Data Privacy Act.

5.2 Regulatory & Law Enforcement Authorities

We are legally required to disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities when required by law, court order, or regulatory directive.

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of zslot's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you via email or a prominent notice on the Platform before your data becomes subject to a different privacy policy.

5.4 With Your Consent

We may share your data with other third parties where you have given us explicit, informed consent to do so. You may withdraw such consent at any time by contacting our Data Protection Officer.

6 Cookies & Tracking Technologies

zslot uses cookies and similar tracking technologies to operate the Platform, remember your preferences, analyze usage patterns, and deliver relevant content. The types of cookies we use are:

You can manage your cookie preferences through the cookie settings panel available on the Platform, or by adjusting your browser settings. Please note that disabling strictly necessary cookies may affect the functionality of the Platform and your ability to log in or complete transactions.

7 Data Retention

zslot retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years after account closure, in compliance with PAGCOR and AMLC record-keeping requirements.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of the transaction, as required under the Anti-Money Laundering Act.
• Gaming activity logs: Retained for three (3) years from the date of the activity, unless required longer for dispute resolution or regulatory purposes.
• Customer support communications: Retained for two (2) years from the date of the last interaction.
• Marketing data: Retained until you withdraw consent or request deletion, whichever is earlier.
• Technical and device logs: Retained for ninety (90) days for security monitoring purposes, then anonymized or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with our data disposal procedures.

8 Data Security

zslot implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• AES-256 encryption at rest for sensitive personal and financial data stored in our databases.
• Two-factor authentication (2FA) available for all player accounts and mandatory for administrative access.
• Role-based access controls (RBAC) ensuring that only authorized personnel can access personal data on a need-to-know basis.
• Regular penetration testing and vulnerability assessments conducted by independent security firms.
• 24/7 intrusion detection and monitoring systems to identify and respond to security incidents in real time.
• Data breach response procedures in place to notify affected users and the National Privacy Commission within 72 hours of discovering a notifiable breach, as required by NPC Circular 16-03.

9 Your Data Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by zslot:

• Right to be Informed: You have the right to know what personal data we collect, how it is used, and with whom it is shared — which is the purpose of this Policy.
• Right to Access: You may request a copy of the personal data we hold about you, along with information about how it is being processed.
• Right to Rectification: You may request correction of any inaccurate, incomplete, or outdated personal data in your account.
• Right to Erasure or Blocking: You may request deletion or blocking of your personal data where it is no longer necessary for the purpose it was collected, subject to our legal retention obligations.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Lodge a Complaint: You have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.

To exercise any of the above rights, please contact our Data Protection Officer at [email protected]. We will respond to verified requests within fifteen (15) business days. We may require proof of identity before processing your request.

10 Children's Privacy

The zslot Platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine law and PAGCOR regulations governing online gaming. We do not knowingly collect personal data from individuals under the age of 21.

If we become aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the Platform, please contact us immediately at [email protected] so we can investigate and take appropriate action.

11 Cross-Border Data Transfers

Some of our service providers and technology partners may be located outside the Philippines. Where personal data is transferred to countries that may not have equivalent data protection laws, zslot ensures that appropriate safeguards are in place, including:

• Contractual clauses that require the recipient to protect your data to standards equivalent to the Data Privacy Act of 2012.
• Transfers only to jurisdictions recognized by the NPC as providing adequate levels of data protection.
• Binding corporate rules where transfers occur within a group of companies.

By using the Platform, you acknowledge and consent to the transfer of your personal data to our service providers in other countries, subject to the safeguards described above.

12 Third-Party Links & Services

The zslot Platform may contain references to third-party game providers and payment services. These third parties operate under their own privacy policies, and zslot is not responsible for their data practices. We encourage you to review the privacy policies of any third-party services you interact with through the Platform.

Our payment partners — including GCash, PayMaya, BPI, BDO, and Metrobank — process payment data under their own privacy frameworks and applicable Bangko Sentral ng Pilipinas (BSP) regulations. zslot does not store full payment credentials and relies on tokenized references provided by these partners.

13 Updates to This Privacy Policy

zslot reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. When material changes are made, we will notify you by:

• Sending an email notification to your registered email address at least seven (7) days before the changes take effect.
• Displaying a prominent notice on the Platform upon your next login.
• Updating the "Last Updated" date at the top of this page.

Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Policy. We recommend reviewing this page periodically to stay informed about how zslot protects your personal data.

14 Contact Us & Data Protection Officer

zslot has appointed a Data Protection Officer (DPO) as required under the Data Privacy Act of 2012. If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact:

• Data Protection Officer: zslot Privacy Team
• Privacy Email: [email protected]
• General Support: [email protected]
• Response Time: Within 15 business days for data subject requests
• Languages: English and Filipino

If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012.