Privacy Policy

Clause 1

1 Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings assigned below:

Clause 2

2 Scope & Application

This Privacy Policy applies to all Personal Data collected by zk899 in connection with the operation of the Platform and the delivery of its services to players in Indonesia and any other jurisdiction from which the Platform is lawfully accessed.

This Policy governs data collected through:

• The zk899 website accessible at https://zk899.bio and all associated sub-pages.
• Account registration, login, and profile management processes.
• Deposit, withdrawal, and payment transaction flows using local Indonesian bank transfers (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja).
• KYC verification submissions, including uploaded identity documents.
• Customer support interactions via live chat, WhatsApp, and email.
• Cookies and similar tracking technologies on the Platform.

This Policy does not apply to any third-party websites, applications, or services that may be linked to or from the Platform. zk899 has no control over and accepts no responsibility for the privacy practices of such external parties.

Clause 3

3 Data We Collect

zk899 collects only the Personal Data that is necessary and proportionate to the purposes for which it is processed. The categories of data we collect include:

Clause 4

4 How Data Is Collected

zk899 collects your Personal Data through the following methods:

• Direct submission: Data you actively provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting our support team, or updating your account profile.
• Automated collection: Technical and behavioural data gathered automatically as you browse and interact with the Platform, using server logs, session trackers, and first-party cookies.
• Payment processors: Confirmation and transaction reference data passed to us by Indonesian bank transfer gateways and e-wallet providers when you complete a financial transaction.
• Identity verification providers: Results and flags generated by our KYC service partners when processing identity document checks, used solely to confirm your eligibility to hold a zk899 account.
• Customer support interactions: Notes and records created during live chat, WhatsApp, or email support sessions to facilitate case resolution and quality assurance.

Clause 5

5 Purpose of Use

zk899 processes your Personal Data strictly for the following purposes:

• Account management: Creating, maintaining, and securing your zk899 account, including authentication and password reset functionality.
• Identity and age verification: Confirming that you are at least 21 years of age and a resident of Indonesia, in compliance with our eligibility requirements.
• Transaction processing: Handling deposits and withdrawals in IDR through your nominated Indonesian bank account or e-wallet, and maintaining accurate financial records.
• Fraud prevention and security: Detecting and investigating suspicious account activity, unauthorised access attempts, bonus abuse, and money laundering indicators.
• Regulatory compliance: Meeting obligations under applicable international online gaming licensing requirements and cooperating with lawful regulatory or law-enforcement requests.
• Customer support: Responding to account queries, resolving disputes, processing responsible gaming requests, and delivering service improvements based on support interaction data.
• Platform improvement: Analysing aggregated and anonymised usage data to improve site performance, game selection, and overall user experience.
• Responsible gaming: Monitoring player activity to identify potential indicators of problem gambling and applying responsible gaming tools in line with a player's own preferences or regulatory requirements.
• Marketing communications (opt-in only): Sending promotional offers, bonus notifications, and seasonal campaign updates — such as Ramadhan specials or Idul Fitri promotions — to players who have opted in to marketing communications. You may withdraw consent at any time.

Clause 6

6 Legal Basis for Processing

zk899 processes your Personal Data on one or more of the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations under the player account agreement, including delivering the Services you have signed up for and processing financial transactions.
• Legitimate interests: Processing necessary for fraud detection, platform security, responsible gaming monitoring, and business analytics, where those interests are not overridden by your rights and freedoms.
• Consent: Processing for marketing communications and non-essential cookies, which requires your freely given, specific, and informed consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.
• Legal obligation: Processing required to comply with applicable laws, regulatory requirements, or enforceable orders from competent authorities.

Clause 7

7 Data Sharing

zk899 does not sell, rent, or trade your Personal Data to third parties for their own commercial purposes. We may share your data only in the following limited and controlled circumstances:

• Payment processors: We share the minimum necessary financial and identity data with Indonesian bank transfer gateways and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) to complete your requested deposit or withdrawal transactions.
• KYC and identity verification providers: We share identity document data with authorised third-party verification services solely for the purpose of confirming your eligibility. These providers are bound by strict confidentiality and data security obligations.
• Game studios: Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive anonymised session data for the purpose of game performance and RTP auditing. No personally identifiable data is shared with game studios.
• Platform infrastructure providers: Cloud hosting, content delivery, and cybersecurity vendors who process data on our behalf under binding data processing agreements that prohibit independent use of your data.
• Regulatory and law-enforcement authorities: Where required by a lawful order, court mandate, or applicable regulation, we may disclose Personal Data to Indonesian governmental bodies or international regulatory authorities. We will notify you of such disclosure where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of the zk899 business, your data may be transferred to the acquiring entity, subject to equivalent privacy protections. You will be notified in advance of any such transfer.

Clause 8

8 Data Retention

zk899 retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable laws and regulatory obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised in accordance with our internal data destruction procedures.

Clause 9

9 Cookies & Similar Technologies

zk899 uses first-party cookies and similar browser-based technologies to enhance your experience on the Platform. We do not deploy third-party advertising cookies or cross-site tracking pixels. The cookies we use fall into the following categories:

• Strictly necessary cookies: Essential for the Platform to function correctly. These include session authentication cookies that keep you logged in during a browsing session and security tokens that protect against cross-site request forgery (CSRF). These cookies cannot be disabled without breaking core Platform functionality.
• Functional cookies: Used to remember your preferences, such as your preferred deposit method or responsible gaming reminder settings. Disabling these cookies may reduce convenience but will not prevent you from using the Platform.
• Analytics cookies: First-party analytics cookies that collect anonymised, aggregated data about how players navigate the Platform — including which pages are visited most frequently and where technical errors occur. This data helps us improve site performance and user experience. No personally identifiable information is stored in analytics cookies.

You can manage or delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from logging in to your zk899 account. For instructions on managing cookies in your specific browser, refer to your browser's help documentation.

Clause 10

10 Your Data Rights

As a player on the zk899 platform, you hold the following rights in respect of your Personal Data. These rights may be exercised at any time by contacting us via 24/7 live chat or by emailing [email protected]. We will respond to all verified data rights requests within 30 days.

To exercise any of the above rights, contact our support team via 24/7 live chat or email at [email protected]. We may need to verify your identity before processing your request. There is no charge for exercising your data rights unless a request is manifestly unfounded or excessive.

Clause 11

11 Security Measures

zk899 takes the security of your Personal Data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS encryption: All data transmitted between your device and our servers is encrypted in transit using industry-standard TLS 1.2 or higher protocols.
• Encrypted data storage: Sensitive data, including KYC documents and financial records, is encrypted at rest using AES-256 encryption on secure, access-controlled servers.
• Access controls: Access to player Personal Data is restricted to authorised zk899 personnel on a strict need-to-know basis. All internal access is logged and regularly audited.
• Two-factor authentication: zk899 supports two-factor authentication (2FA) for player account logins. We strongly recommend all players enable 2FA to protect their accounts.
• Penetration testing and vulnerability management: The Platform undergoes regular security assessments by independent cybersecurity specialists to identify and remediate vulnerabilities before they can be exploited.
• Incident response: In the event of a data breach that poses a material risk to your rights, zk899 will notify affected players without undue delay and take immediate steps to contain and remediate the incident.

While we apply rigorous security standards, no online platform can guarantee absolute security. You are responsible for keeping your account credentials confidential and for logging out of your account when using shared devices. If you suspect your account has been compromised, contact our support team immediately via 24/7 live chat.

Clause 12

12 Minors & Age Restriction

The zk899 platform is strictly intended for adults aged 21 years and older. zk899 does not knowingly collect Personal Data from any individual under the age of 21.

All players are required to confirm their age at the point of registration. zk899 further verifies player age through its KYC programme. If we discover — at any point — that a player is under 21 years of age, the relevant account will be immediately suspended, all associated balances will be frozen pending investigation, and any real-money winnings will be forfeited. The account will be permanently closed and the matter referred to appropriate authorities where required.

If you are a parent or guardian and believe that a minor in your care has registered on the zk899 platform, please contact us immediately via 24/7 live chat or at [email protected] so that we can take prompt action.

Clause 13

13 Amendments to This Policy

zk899 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable regulations, or Platform features. When a material change is made, we will update the "Last updated" date displayed at the top of this page and, where appropriate, display a notice within the Platform.

Non-material changes — such as typographical corrections, clarifications that do not alter the substance of any clause, or reformatting — may be made without specific notice.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data. Your continued use of the Platform following the publication of any revised Policy constitutes your acceptance of the updated terms. If you object to any change, you may request account closure by contacting our support team.

Clause 14

14 Contact & Data Requests

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your Personal Data, please contact the zk899 data support team through any of the following channels:

• 24/7 Live Chat: Available directly within the zk899 platform. This is the fastest channel for data rights requests and privacy concerns.
• Email: [email protected] — please use the subject line "Privacy Request" and include your registered account username to help us locate your records and respond promptly. Response time: within 2–6 hours.
• WhatsApp: +62 811-XXXX-XXXX — available during peak support hours 08:00–24:00 WIB.

We will acknowledge all data rights requests within 5 business days and provide a full response within 30 days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

zk899 is committed to resolving all privacy concerns fairly and transparently. If you feel that your concern has not been adequately addressed, you retain the right to escalate the matter to the relevant data protection authority in your jurisdiction.