Security

Security is central to how we build and run Zicket. We use industry-standard technologies and practices to protect our platforms and the data entrusted to us across ticketing, access control and cashless payments.

How we protect your data

• Encryption in transit. Traffic to and from our websites and applications is protected using TLS/SSL encryption.
• Payments handled by certified providers. Card payments are processed by PCI-DSS-compliant payment providers. We do not store full payment card details on our systems.
• Reliable, resilient hosting. Our platforms are hosted with reputable cloud providers using recognised security certifications, with redundancy and regular backups to support availability and recovery.
• Least-privilege access. Access to systems and data is restricted to authorised personnel on a need-to-know basis and reviewed regularly.
• Data protection by design. We handle personal data in line with the Personal Data (Privacy) Ordinance (Cap. 486) and our Privacy Policy, and we review our practices on an ongoing basis.

No method of transmission or storage can be guaranteed completely secure, but we work continually to safeguard your information and to meet the security expectations of our clients and partners.

Reporting a security concern

If you believe you have found a security vulnerability or have a security concern, please contact us at help@zicket.co and we will look into it promptly.