Privacy Policy

1. Introduction

1.1 Scope of This Policy

This Privacy Policy applies to all personal information collected by zk998 through our website (https://zk998.cam), mobile applications, customer support channels, and any other services we provide. It covers data collected from Indonesian users and international visitors who access our platform.

1.2 Data Controller

For the purposes of applicable data protection laws, zk998 is the data controller responsible for the personal information you provide to us. We determine how and why your personal data is processed. Our contact details for privacy-related inquiries are provided in Section 12 of this policy.

1.3 Consent and Agreement

By using zk998 services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein. If you do not agree with any part of this policy, you should not use our services.

1.4 Legal Basis for Processing

We process your personal data on the following legal bases:

• Contractual necessity: Processing is necessary to provide you with our betting services and fulfill our contractual obligations
• Legal compliance: Processing is required to comply with anti-money laundering (AML), Know Your Customer (KYC), and other regulatory obligations
• Legitimate interests: Processing is necessary for our legitimate business interests, including fraud prevention, security, and service improvement
• Consent: Where you have explicitly consented to specific data processing activities, such as marketing communications

2. Information We Collect

2.1 Personal Identification Information

When you register an account with zk998, we collect the following personal identification information:

• Full legal name as it appears on government-issued identification
• Date of birth (to verify you are 21 years or older)
• Residential address (street address, city, province, postal code)
• Email address
• Mobile phone number
• Government-issued ID documents (Indonesian KTP, passport, driver's license) for KYC verification
• Proof of address documents (utility bills, bank statements) if requested

2.2 Financial Information

To process deposits and withdrawals, we collect financial information including:

• Bank account details (account number, account holder name, bank name)
• E-wallet account identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja phone numbers or account IDs)
• Payment card information (processed through secure third-party payment processors; we do not store full card details)
• Transaction history (deposits, withdrawals, and payment method preferences)

2.3 Account and Betting Activity

We automatically collect information about your use of zk998 services, including:

• Betting history (bets placed, stakes, odds, outcomes, winnings/losses)
• Casino game play history (games played, session duration, bets, results)
• Account balance and transaction logs
• Bonus claims and wagering progress
• Login timestamps and session duration
• Customer support communications and chat transcripts

2.4 Technical and Device Information

When you access zk998, we automatically collect technical information including:

• IP address and approximate geolocation
• Device type, model, and operating system
• Browser type and version
• Screen resolution and device settings
• Referring website or source
• Pages visited and time spent on each page
• Cookies and similar tracking technologies (see Section 8)

2.5 Communications and Preferences

We collect information about your communication preferences and interactions with us:

• Marketing and promotional email preferences (opt-in/opt-out status)
• Language and currency preferences
• Customer support inquiries, complaints, and feedback
• Responses to surveys or promotional offers

3. How We Use Your Data

3.1 Service Provision

We use your personal information to provide and maintain zk998 betting services:

• Create and manage your account
• Process deposits and withdrawals
• Enable you to place bets on sports events and play casino games
• Calculate and credit winnings to your account
• Track betting history and account balances
• Apply bonuses and promotional offers

3.2 Identity Verification and Compliance

We process your data to comply with legal and regulatory obligations:

• Verify your identity and age (21+ requirement)
• Conduct Know Your Customer (KYC) and anti-money laundering (AML) checks
• Prevent fraud, money laundering, and terrorist financing
• Comply with licensing requirements and regulatory reporting obligations
• Respond to legal requests from authorities

3.3 Security and Fraud Prevention

Your information helps us maintain platform security and detect fraudulent activity:

• Monitor for suspicious betting patterns or account abuse
• Detect and prevent unauthorized account access
• Identify duplicate accounts or bonus abuse
• Protect against technical attacks, hacking, and data breaches
• Enforce our Terms & Conditions and prevent prohibited activities

3.4 Customer Support

We use your data to provide responsive customer service:

• Respond to inquiries via live chat, email, and WhatsApp
• Resolve account issues, payment disputes, and technical problems
• Process complaints and feedback
• Provide personalized assistance based on your account history

3.5 Marketing and Communications (With Consent)

Subject to your consent and communication preferences, we may use your contact information to:

• Send promotional emails about bonuses, special offers, and new features
• Notify you about upcoming sports events or tournaments
• Share personalized betting recommendations based on your preferences
• Invite you to participate in surveys or feedback programs

You can opt out of marketing communications at any time by clicking "unsubscribe" in emails or contacting customer support.

3.6 Service Improvement and Analytics

We analyze aggregated and anonymized data to improve zk998 services:

• Understand user behavior and preferences
• Identify popular betting markets and casino games
• Optimize platform performance and user experience
• Develop new features and products
• Test and refine promotional campaigns

4. Data Sharing & Disclosure

4.1 Third-Party Service Providers

We share your data with trusted third-party service providers who help us operate zk998:

• Payment processors: Banks, e-wallet providers, and payment gateways to process deposits and withdrawals
• Game providers: Casino game and live dealer studios (e.g., Evolution Gaming) to enable gameplay
• Odds suppliers: Sports data providers who supply betting odds and results
• KYC verification services: Identity verification platforms to conduct age and identity checks
• Cloud hosting providers: Data storage and infrastructure services
• Customer support platforms: Live chat, email, and ticketing systems
• Marketing services: Email delivery platforms (only if you opt in to marketing)

All third-party providers are contractually obligated to protect your data and use it only for specified purposes.

4.2 Legal and Regulatory Authorities

We may disclose your information to legal and regulatory authorities when required by law:

• To comply with court orders, subpoenas, or legal processes
• To respond to requests from licensing authorities or gaming regulators
• To cooperate with law enforcement investigations
• To comply with anti-money laundering (AML) and counter-terrorist financing (CTF) reporting obligations

4.3 Business Transfers

In the event of a merger, acquisition, sale of assets, or business restructuring, your personal information may be transferred to the acquiring entity. We will notify you via email and/or prominent notice on our platform before your data is transferred and becomes subject to a different privacy policy.

4.4 No Sale of Personal Data

zk998 does not sell, rent, or trade your personal information to third parties for marketing purposes. We respect your privacy and will never monetize your data by selling it to advertisers, data brokers, or other third parties.

5. Data Security

5.1 Security Measures

zk998 employs industry-standard security measures to protect your personal information:

• 256-bit SSL encryption: All data transmitted between your device and our servers is encrypted using bank-grade SSL/TLS protocols
• Secure data storage: Personal information is stored on encrypted servers in secure data centers with restricted physical access
• Access controls: Strict role-based access controls ensure only authorized personnel can access personal data on a need-to-know basis
• Firewalls and intrusion detection: Network security systems monitor and block unauthorized access attempts
• Regular security audits: Independent security assessments and penetration testing to identify and address vulnerabilities
• Two-factor authentication: Optional 2FA for account logins to prevent unauthorized access

5.2 Payment Security

Financial transactions are processed through PCI-DSS compliant payment providers. We do not store full credit card numbers, CVV codes, or other sensitive payment credentials on our servers. Payment card data is tokenized and handled by certified payment processors.

5.3 Account Security Responsibilities

You are responsible for maintaining the security of your account credentials:

• Choose a strong, unique password and change it regularly
• Never share your username or password with anyone
• Enable two-factor authentication if available
• Log out after each session, especially on shared devices
• Report suspicious activity immediately to customer support

5.4 Data Breach Notification

In the unlikely event of a data breach that compromises your personal information, we will notify affected users within 72 hours via email and provide guidance on protective measures. We will also report breaches to relevant regulatory authorities as required by law.

6. Data Retention

6.1 Retention Periods

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal obligations:

6.2 Account Closure and Data Deletion

When you close your zk998 account, we will:

• Immediately disable your access to the platform
• Process any outstanding withdrawals or refunds
• Retain your data for the legally required periods specified above
• Anonymize or delete data that is no longer subject to legal retention requirements

Note that certain data must be retained for seven years to comply with anti-money laundering laws and regulatory obligations, even after account closure.

7. Your Privacy Rights

Under applicable data protection laws, you have the following rights regarding your personal information:

7.1 Right to Access

You have the right to request a copy of the personal information we hold about you. We will provide this information in a commonly used electronic format within 30 days of your request.

7.2 Right to Rectification

If your personal information is inaccurate or incomplete, you have the right to request corrections. You can update most account information directly in your account settings or by contacting customer support.

7.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data, subject to legal limitations. Note that we are required to retain certain data for seven years under anti-money laundering regulations, even if you request deletion. After the required retention period, we will delete or anonymize your data.

7.4 Right to Restrict Processing

You can request that we limit how we use your personal data in certain circumstances, such as when you contest the accuracy of your data or object to processing based on legitimate interests.

7.5 Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format and transmit it to another service provider, where technically feasible.

7.6 Right to Object

You can object to processing of your personal data for direct marketing purposes at any time. You can also object to processing based on legitimate interests by explaining your specific situation.

7.7 Right to Withdraw Consent

Where we process your data based on consent (e.g., marketing emails), you have the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

7.8 Exercising Your Rights

To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Rights Request." We will respond within 30 days and may request identity verification to protect your data from unauthorized access.

8. Cookies & Tracking Technologies

8.1 What Are Cookies

Cookies are small text files stored on your device when you visit zk998. They help us recognize your browser, remember your preferences, and improve your user experience.

8.2 Types of Cookies We Use

• Essential cookies: Required for platform functionality, including session management, security, and login authentication. These cannot be disabled.
• Performance cookies: Collect anonymous information about how you use zk998 to help us improve the website.
• Functionality cookies: Remember your preferences such as language, currency, and display settings.
• Marketing cookies: Track your browsing behavior to deliver personalized promotions (only if you opt in).

8.3 Managing Cookies

You can control cookies through your browser settings. Note that disabling cookies may affect platform functionality. Most browsers allow you to:

• View and delete cookies
• Block third-party cookies
• Block cookies from specific websites
• Accept all cookies or block all cookies

8.4 Third-Party Tracking

Third-party service providers (payment processors, game providers, analytics platforms) may place cookies on your device. These are governed by their respective privacy policies, not this policy.

9. International Data Transfers

zk998 operates internationally and stores data on servers located in multiple jurisdictions outside Indonesia. When you use our services, your personal information may be transferred to, stored in, and processed in countries where our service providers operate.

These countries may have data protection laws that differ from Indonesian laws. However, we ensure that all international data transfers comply with applicable data protection regulations and that appropriate safeguards are in place, including:

• Standard contractual clauses approved by data protection authorities
• Adequacy decisions recognizing equivalent data protection standards
• Binding corporate rules for intra-group transfers
• Explicit consent for transfers where required

10. Children's Privacy

zk998 services are strictly intended for adults aged 21 years and older. We do not knowingly collect personal information from individuals under 21.

If we discover that we have inadvertently collected data from a person under 21, we will immediately delete that information and close the associated account. If you believe a minor has provided personal information to zk998, please contact us immediately at [email protected].

Parents and guardians should monitor their children's internet usage and keep account credentials secure to prevent underage access to gambling platforms.

11. Changes to This Privacy Policy

zk998 reserves the right to update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Send email notifications to registered users (if changes materially affect your rights)
• Display a prominent notice on the platform for 30 days

Your continued use of zk998 after changes take effect constitutes acceptance of the revised Privacy Policy. We encourage you to review this policy periodically to stay informed about how we protect your data.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us:

• Privacy Email: [email protected]
• General Support Email: [email protected]
• Live Chat: Available 24/7 on all pages
• WhatsApp: +62 812-3456-7890

For formal privacy rights requests (access, deletion, rectification), please use the subject line "Privacy Rights Request" and include your account username and registered email address for verification.

We aim to respond to all privacy inquiries within 30 days. Complex requests may require additional time, in which case we will notify you of the delay and expected response timeline.