Privacy
Policy

1 Introduction

1.1 zeus40 ("we", "us", "our") operates the online gaming platform accessible at zeus40.vip. We are committed to protecting the privacy and personal data of all individuals who interact with our platform, including registered Players, visitors, and prospective users.

1.2 This Privacy Policy has been prepared in compliance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations (IRR), as administered by the National Privacy Commission (NPC) of the Philippines.

1.3 This Privacy Policy should be read together with zeus40's Terms & Conditions, which are available at zeus40.vip/terms-conditions. In the event of any conflict between this Privacy Policy and the Terms & Conditions on matters of data privacy, this Privacy Policy shall prevail.

1.4 We may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or regulatory requirements. The effective date at the top of this document indicates when the current version came into force. We encourage you to review this policy periodically.

2 Personal Data We Collect

2.1 zeus40 collects the following categories of personal data from Players and platform users:

Identity & Contact Data:

• Full legal name as it appears on a government-issued Philippine ID
• Date of birth (for age verification — Players must be 21 years or older)
• Philippine mobile number
• Email address
• Residential address (province, city/municipality)
• Government-issued ID type and number (for KYC verification)

Financial Data:

• GCash or PayMaya / Maya account details (mobile number associated with the e-wallet)
• Bank account details for bank transfer transactions (account name, bank name, account number)
• Transaction history (deposits, withdrawals, wager amounts, winnings)

Technical & Usage Data:

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Session duration, pages visited, and features used on the platform
• Login timestamps and access logs

Communications Data:

• Records of communications with zeus40 support (live chat transcripts, email correspondence)
• Feedback, complaints, and dispute records

2.2 zeus40 does not collect sensitive personal information beyond what is strictly required for identity verification and regulatory compliance. We do not collect biometric data, health information, or political affiliations.

3 How We Collect Your Data

3.1 zeus40 collects personal data through the following means:

• Direct collection: Information you provide when registering an Account, completing KYC verification, making deposits or withdrawals, or contacting our support team;
• Automated collection: Technical and usage data collected automatically when you access and use the zeus40 platform, including through cookies, log files, and similar tracking technologies;
• Third-party sources: Identity verification data from KYC service providers; fraud and AML screening data from compliance service providers; payment transaction data from e-wallet and banking partners (GCash, PayMaya / Maya, and Philippine banks).

3.2 All data collection by zeus40 is conducted on a lawful basis as described in Section 5 of this Privacy Policy. We do not collect personal data through deceptive or covert means.

4 How We Use Your Personal Data

4.1 zeus40 uses the personal data we collect for the following purposes:

• Account management: Creating and maintaining your zeus40 Account, verifying your identity, and managing your Account settings and preferences;
• Age verification: Confirming that you meet the 21+ minimum age requirement under Philippine gaming regulations before permitting real-money play;
• Service delivery: Processing deposits and withdrawals, crediting winnings, applying bonuses, and providing access to games and platform features;
• Regulatory compliance: Fulfilling our obligations under PAGCOR regulations, the Anti-Money Laundering Act (AMLA), and other applicable Philippine laws, including reporting requirements to the Anti-Money Laundering Council (AMLC);
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, money laundering, unauthorized account access, and other security threats;
• Responsible gaming: Monitoring gaming patterns to identify potential problem gambling behavior and applying responsible gaming tools in accordance with PAGCOR guidelines;
• Customer support: Responding to your inquiries, resolving disputes, and improving our support services;
• Platform improvement: Analyzing usage data to improve the zeus40 platform, fix technical issues, and develop new features;
• Marketing communications: Sending you promotional offers, bonus notifications, and platform updates — only where you have provided consent or where we have a legitimate interest to do so, and always with an easy opt-out option.

4.2 zeus40 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review, except where required by law or where you have provided explicit consent.

5 Legal Basis for Processing

5.1 Under the Data Privacy Act of 2012, zeus40 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions you agreed to when registering your Account (e.g., processing deposits, withdrawals, and wagers);
• Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including PAGCOR licensing requirements, AMLA reporting obligations, and KYC requirements;
• Legitimate interests: Processing necessary for zeus40's legitimate business interests, including fraud prevention, platform security, and service improvement, where these interests are not overridden by your privacy rights;
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent, particularly for marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 Sharing Your Personal Data

6.1 zeus40 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your personal data with the following categories of recipients only to the extent necessary:

• Payment processors: GCash, PayMaya / Maya, and Philippine banking partners, solely to process deposits and withdrawals;
• KYC and identity verification providers: Third-party service providers that assist us in verifying your identity and age in compliance with PAGCOR and AMLA requirements;
• Fraud prevention and AML compliance providers: Service providers that assist us in detecting and preventing fraudulent activity and money laundering;
• Game content providers: Third-party game studios and software providers whose games are available on the zeus40 platform, to the extent necessary for game delivery and fairness auditing;
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities, where required by law or regulatory obligation;
• Professional advisers: Legal counsel, auditors, and other professional advisers, subject to confidentiality obligations;
• Business successors: In the event of a merger, acquisition, or sale of all or part of zeus40's business, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

6.2 All third parties with whom zeus40 shares personal data are required to handle that data in accordance with applicable Philippine data protection law and are prohibited from using it for any purpose other than the specific purpose for which it was shared.

7 Data Retention

7.1 zeus40 retains your personal data for as long as is necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

7.2 Specifically, zeus40 applies the following retention periods:

• Account data and KYC records: Retained for a minimum of five (5) years following Account closure, in compliance with PAGCOR licensing requirements and the Anti-Money Laundering Act;
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, in compliance with AMLA reporting obligations;
• Support communications: Retained for three (3) years from the date of the communication, or longer if related to an unresolved dispute or legal proceeding;
• Marketing preferences: Retained until you withdraw consent or request deletion, subject to any overriding legal retention requirements.

7.3 Upon expiry of the applicable retention period, zeus40 will securely delete or anonymize your personal data in accordance with our data disposal procedures.

8 Data Security

8.1 zeus40 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• TLS (Transport Layer Security) encryption for all data transmitted between your device and the zeus40 platform;
• Encryption of sensitive data at rest, including financial data and government ID information;
• Role-based access controls that restrict access to personal data to authorized personnel only;
• Regular security assessments and penetration testing of the zeus40 platform;
• Multi-factor authentication requirements for administrative access to systems containing personal data;
• Staff training on data protection obligations and security best practices.

8.2 While zeus40 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your Account login credentials and for notifying zeus40 immediately if you suspect unauthorized access to your Account.

8.3 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, zeus40 will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected Players without undue delay, in accordance with the Data Privacy Act of 2012.

9 Cookies & Tracking Technologies

9.1 zeus40 uses cookies and similar tracking technologies (such as web beacons and local storage) to enhance your experience on the platform, analyze usage patterns, and support security functions. The following categories of cookies are used:

• Strictly necessary cookies: Essential for the operation of the zeus40 platform, including session management, login authentication, and security functions. These cannot be disabled without affecting platform functionality;
• Performance and analytics cookies: Used to collect anonymized data about how Players use the platform, which pages are visited most frequently, and where errors occur. This data helps us improve the platform;
• Functional cookies: Used to remember your preferences, such as language settings and display options, to provide a more personalized experience;
• Marketing cookies: Used to deliver relevant promotional content and to measure the effectiveness of our marketing campaigns. These are only set with your consent.

9.2 You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the zeus40 platform. For instructions on managing cookies in your specific browser, refer to your browser's help documentation.

10 Your Data Privacy Rights

10.1 Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by zeus40:

• Right to be informed: The right to be informed about how your personal data is collected, used, and shared — which this Privacy Policy fulfills;
• Right of access: The right to request a copy of the personal data zeus40 holds about you;
• Right to rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to erasure: The right to request deletion of your personal data, subject to zeus40's legal retention obligations under PAGCOR regulations and the AMLA;
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests;
• Right to data portability: The right to receive your personal data in a structured, commonly used format where technically feasible;
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

10.2 To exercise any of the above rights, please contact zeus40's Data Protection Officer using the contact details in Section 14 of this Privacy Policy. We will respond to your request within fifteen (15) business days, in accordance with NPC guidelines.

10.3 Please note that certain rights may be limited where zeus40 is required to retain or process your data to comply with legal obligations, including PAGCOR licensing requirements and AMLA reporting obligations.

11 Children & Minors

11.1 If you are a parent or guardian and believe that your child under the age of 21 has provided personal data to zeus40, please contact our Data Protection Officer immediately using the contact details in Section 14. We will investigate and take appropriate action promptly.

12 International Data Transfers

12.1 zeus40 primarily stores and processes personal data within the Philippines. Where it is necessary to transfer personal data to service providers or partners located outside the Philippines — for example, certain game content providers or technology infrastructure providers — zeus40 ensures that such transfers are conducted in compliance with the Data Privacy Act of 2012.

12.2 International transfers of personal data are only made where:

• The recipient country provides an adequate level of data protection as recognized by the NPC; or
• Appropriate safeguards are in place, such as contractual data processing agreements that impose data protection obligations equivalent to those under Philippine law; or
• The transfer is necessary for the performance of a contract with you (e.g., processing a payment through an international payment network).

12.3 zeus40 does not transfer personal data to jurisdictions that do not provide adequate data protection without implementing appropriate safeguards.

13 Updates to This Privacy Policy

13.1 zeus40 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. The effective date at the top of this document will be updated accordingly.

13.2 Where changes are material, zeus40 will notify registered Players via the contact details on file or through a prominent notice on the platform prior to the changes taking effect.

13.3 The most current version of this Privacy Policy is always available at zeus40.vip/privacy-policy. Your continued use of the zeus40 platform following the effective date of any update constitutes your acceptance of the revised Privacy Policy.

14 Contact & Data Protection Officer

14.1 zeus40 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, concerns, or requests regarding your personal data or this Privacy Policy, please contact our DPO:

14.2 If you are not satisfied with zeus40's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

14.3 For general support inquiries unrelated to data privacy, please contact our Player Support team. For responsible gaming support, please visit our Responsible Gaming page.