Privacy Policy — zk333

zk333 ("we", "us", "our") operates the online gambling platform at https://zk333.onl (the "Platform"), serving players primarily across Indonesia — including Jakarta, Surabaya, Bandung, Medan, Bali, and beyond. We are committed to protecting the personal data of every individual who registers, browses, or interacts with the Platform, and to being fully transparent about the data practices that underpin our service.

This Privacy Policy describes the categories of personal data we collect, the purposes for which we process that data, the legal grounds on which we rely, the circumstances under which we may share data with third parties, and the rights available to you as a data subject. Please read this document carefully. By creating an Account or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, date of birth, residential address, email address, mobile phone number, financial account details, IP address, device identifiers, and behavioural data generated through use of the Platform.
• "Processing" means any operation or set of operations performed on Personal Data, whether or not by automated means — including collection, recording, storage, use, disclosure, transmission, erasure, or destruction.
• "Data Controller" means zk333, the entity that determines the purposes and means of Processing Personal Data collected through the Platform.
• "Data Processor" means any third party engaged by zk333 to process Personal Data on zk333's behalf, in accordance with zk333's documented instructions.
• "Member" means any natural person who has created a registered Account on the Platform.
• "KYC" means Know Your Customer — the identity and document verification process required before a Member's first withdrawal or upon zk333's request at any time.
• "Cookies" means small text files placed on your device by the Platform for purposes of session management, analytics, and personalisation.
• "Sensitive Data" means a subset of Personal Data that warrants heightened protection, including government-issued identification numbers, financial account credentials, and information about health conditions relevant to responsible gaming assessments.

zk333 collects Personal Data across several categories depending on the nature of your interaction with the Platform:

zk333 collects Personal Data through the following means:

• Directly from you — when you register an Account, complete KYC verification, make a deposit or withdrawal, contact support, respond to a survey, or participate in a promotion.
• Automatically — through Cookies, web beacons, server logs, and similar tracking technologies that operate as you browse and use the Platform.
• From third-party payment processors — transaction confirmation data and fraud-screening signals provided by our certified payment partners when you make a deposit or withdrawal.
• From identity verification services — our KYC partners may return a verification status, risk score, or document authenticity assessment based on the documents you submit.
• From game providers — studios such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Pocket Games Soft may pass us anonymised game-session data that we link to your Account for compliance and responsible gaming purposes.
• From fraud prevention and security services — third-party services that help us detect account takeover attempts, bonus abuse, and money-laundering patterns may share device fingerprint and risk signals with us.

We process your Personal Data only for the purposes listed below. We do not use your data for any purpose that is incompatible with the purpose for which it was originally collected.

zk333 relies on the following legal bases when processing your Personal Data:

• Contractual necessity: Processing required to perform our obligations under the Member Agreement — including account creation, payment processing, and KYC verification — is necessary to fulfil the contract between you and zk333.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and internal analytics is justified by zk333's legitimate operational and compliance interests, provided those interests are not overridden by your privacy rights.
• Legal obligation: Certain processing activities — particularly KYC record-keeping, transaction logging, and AML/CTF screening — are required by applicable international regulatory standards to which zk333 is subject.
• Consent: Marketing communications and non-essential Cookie placement rely on your freely given, informed, and specific consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

zk333 does not sell, rent, or trade your Personal Data. We share your data only in the following limited circumstances:

• Payment processors: To facilitate deposits and withdrawals, we share necessary transaction data with our certified payment processing partners, who are contractually bound to process it solely for that purpose.
• KYC and identity verification providers: Your identity documents and selfie verification data are submitted to our contracted KYC partners who return a verification status. These partners operate under strict data processing agreements.
• Game providers: Limited session-level data may be exchanged with licensed game studios (e.g., Evolution Gaming, Pragmatic Play) for the purpose of delivering the game experience and resolving game-related disputes.
• Fraud prevention services: Device, behavioural, and transaction signals may be shared with specialist fraud-detection platforms to protect both Members and zk333 from financial crime.
• Legal and regulatory authorities: If required by a valid legal order, court judgment, or regulatory directive from a competent authority, zk333 will disclose the minimum amount of Personal Data necessary to comply with that obligation.
• Corporate transactions: In the event of a merger, acquisition, restructuring, or sale of all or part of zk333's business, your Personal Data may be transferred to the acquiring entity, subject to equivalent privacy protections being maintained.

As an internationally operated platform serving Indonesian players, zk333 may transfer your Personal Data to, or store it on, servers located outside Indonesia. Such transfers may occur when our contracted KYC providers, payment processors, or cloud infrastructure partners operate data centres in other jurisdictions.

Whenever Personal Data is transferred internationally, zk333 ensures that appropriate safeguards are in place — including contractual data processing agreements that impose data protection obligations equivalent to international best-practice standards. By using the Platform and accepting this Privacy Policy, you consent to your Personal Data being transferred to and processed in jurisdictions outside Indonesia where such transfers are necessary to deliver the services you have contracted with us.

zk333 retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable regulatory standards. The following retention periods apply as a general guide:

Once the applicable retention period has expired, Personal Data is securely deleted or anonymised. Anonymised or aggregated data — from which no individual can be identified — may be retained indefinitely for statistical or business intelligence purposes.

The Platform uses Cookies and similar tracking technologies (web beacons, local storage, pixel tags) to deliver a functional, secure, and personalised experience. Cookies are categorised as follows:

• Strictly necessary Cookies: Required for the Platform to function — including session authentication, load balancing, and fraud prevention. These cannot be disabled without impairing core functionality.
• Functional Cookies: Remember your preferences such as chosen language, notification settings, and game lobby filters to provide a more personalised experience on return visits.
• Analytics Cookies: Collect anonymised data about how Members navigate the Platform — pages visited, time spent, click patterns — to help us improve the layout and content. Data collected by analytics Cookies is aggregated and does not identify you personally.
• Marketing Cookies: Used to deliver targeted promotional content within the Platform and to measure the effectiveness of our marketing campaigns. Marketing Cookies require your prior consent and may be withdrawn at any time.

You can manage Cookie preferences through your browser settings. Note that blocking strictly necessary Cookies will impair your ability to log in and use core Platform features. For a full list of individual Cookies used, please contact [email protected].

As a Member and data subject, you hold the following rights with respect to your Personal Data held by zk333. To exercise any of these rights, submit a written request to [email protected]. We will respond within 30 days.

The Platform is strictly intended for adults aged 21 and over. zk333 does not knowingly collect, store, or process Personal Data belonging to any individual under the age of 21. If you are a parent or guardian and believe that a minor in your care has accessed the Platform or submitted Personal Data, please contact us immediately at [email protected]. Upon verification, we will promptly close the Account, void any transactions, and securely delete the minor's Personal Data.

zk333 implements a comprehensive set of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform servers — indicated by the padlock icon in your browser address bar.
• Encrypted storage for sensitive data at rest, including KYC documents and financial records, using industry-standard encryption protocols.
• Access controls limiting employee access to Personal Data on a strict need-to-know basis, enforced through role-based access management systems and multi-factor authentication for internal systems.
• Penetration testing and vulnerability assessments conducted on a regular basis by independent security specialists.
• Intrusion detection systems monitoring Platform infrastructure in real time for anomalous activity, potential attacks, and unauthorized access attempts.
• Incident response procedures that ensure any confirmed data breach is contained promptly, assessed for impact, and reported to affected Members and relevant authorities as required.

Whilst zk333 employs robust security measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your Account login credentials and for ensuring that no unauthorised individual has access to the device from which you access the Platform.

The Platform may, from time to time, contain links or references to third-party websites — for example, game provider studios, payment method landing pages, or sports data providers. These third-party sites operate independently of zk333 and are governed by their own privacy policies. zk333 exercises no control over, and accepts no responsibility for, the data practices of any third-party website. We strongly recommend that you review the privacy policy of any external site you visit before submitting personal information to it.

zk333 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or regulatory requirements. When we make material changes, we will update the "Effective Date" and "Last Reviewed" fields at the top of this page. Where a change materially affects your rights or the way in which we use your Personal Data, we will endeavour to notify registered Members by email or through an on-site notification prior to the change taking effect.

Your continued use of the Platform after the publication of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any amendment, you must cease using the Platform and contact our support team to request Account closure.

If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or wish to raise a complaint about how zk333 has handled your Personal Data, please contact our Data Protection team through any of the following channels:

• Email: [email protected] — subject line "Privacy Request" — responses within 30 days.
• Live Chat: Available 24/7 on the Platform. Select "Account & Privacy" from the topic menu when connecting.
• Support Hours: 24 hours a day, 7 days a week — including all Indonesian public holidays. Native Indonesian-speaking agents are available.

We are committed to resolving privacy concerns promptly and fairly. If you are not satisfied with our response, you have the right to escalate your complaint to the relevant data protection authority in the jurisdiction applicable to your situation.