Privacy Policy — zk889

This Privacy Policy governs the collection, use, storage, disclosure, and protection of personal data processed by zk889 ("we", "us", "our") in connection with the operation of the online betting and casino platform at https://zk889.app and any associated mobile applications, customer support channels, and promotional communications.

zk889 is the data controller responsible for your personal information. We determine the purposes and means of processing your data and are accountable for ensuring that it is handled lawfully, fairly, and transparently in accordance with applicable international data protection standards.

This policy applies to all individuals who access or use the zk889 platform, including registered players, prospective players who browse without registering, and any other party who interacts with our services. It does not apply to third-party websites or services linked from our platform — we encourage you to read the privacy policies of any third-party services you access.

zk889 collects only the personal data that is necessary to deliver our services, fulfil our legal obligations, and improve the player experience. The categories of personal data we collect are set out below.

When you register a zk889 account, we collect the following mandatory information:

• Full legal name as it appears on your government-issued identification;
• Date of birth (to verify that you are 21 years of age or older);
• Indonesian national identity card number (NIK from your KTP), passport number, or driving licence number, as provided during KYC verification;
• Residential address in Indonesia (province, city, and postal code);
• Email address and mobile phone number used for account access and communications;
• Username and encrypted password credentials.

To process deposits and withdrawals in Indonesian Rupiah (IDR), we collect:

• Bank account details, including account holder name, bank name (e.g., BCA, BRI, BNI, Mandiri, CIMB Niaga), and account number;
• E-wallet identifiers for OVO, DANA, GoPay, ShopeePay, or LinkAja accounts linked to your zk889 profile;
• Transaction history, including deposit amounts, withdrawal amounts, timestamps, and payment method used;
• Records of any chargebacks, disputes, or payment reversals associated with your account.

As part of our service operation and responsible gaming obligations, we record:

• All bets placed, game sessions initiated, and wagering outcomes across all product categories, including sports betting, live casino, slots, togel (Indonesia's traditional numbers lottery), and blackjack;
• Bonus activations, wagering requirement progress, and bonus claim history;
• Session duration, session frequency, and deposit and loss patterns, used to power our responsible gaming monitoring systems;
• Any self-exclusion requests, deposit limits, or cooling-off periods set by you.

When you access the zk889 platform, we automatically collect the following technical data:

• IP address and approximate geolocation (city and country level);
• Device type, operating system, browser type and version;
• Cookie identifiers and session tokens (see Section 8 for full cookie details);
• Platform access timestamps, page navigation data, and feature interaction logs;
• Error logs and crash reports where applicable.

We retain records of all communications you have with the zk889 support team, including:

• Live chat transcripts;
• WhatsApp message history relating to account support;
• Emails sent to or received from support@zk889.app;
• Any complaints, dispute records, or formal notices submitted through official channels.

zk889 processes your personal data only where we have a valid legal basis to do so. The following table sets out the primary purposes of our data processing activities and the corresponding legal basis for each.

zk889 may share your personal data with the following categories of third parties, strictly on a need-to-know basis and under contractual data protection obligations:

We share financial data with the payment processors and banking partners required to execute your deposit and withdrawal transactions. These include but are not limited to BCA, BRI, BNI, Mandiri, CIMB Niaga, and the e-wallet operators OVO, DANA, GoPay, ShopeePay, and LinkAja. Data shared is limited to what is necessary to complete the specific transaction.

We work with third-party KYC service providers to verify your identity and age. These providers process identity document images and biometric data under strict data processing agreements and are required to delete raw verification data after the verification process is complete.

Our game lobby is powered by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, and Spribe. These providers may receive non-personally identifiable session data (such as a tokenised player identifier and stake amount) necessary to deliver and record game results. They do not receive your full name, contact details, or financial information.

zk889 will disclose personal data to competent regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law, court order, or regulatory directive. Where legally permitted, we will notify you of such a disclosure request.

We use specialist third-party services for fraud detection, device fingerprinting, and anti-money laundering screening. These providers process data under contractual obligations and are prohibited from using it for any purpose other than providing services to zk889.

In the event of a merger, acquisition, restructuring, or sale of all or part of zk889's business, player data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and the privacy terms applicable to your data under the new entity before the transfer takes effect.

zk889 retains personal data only for as long as is necessary to fulfil the purposes described in this Privacy Policy or to comply with applicable legal and regulatory obligations. The retention periods below represent our standard approach:

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised so that it can no longer be associated with an identifiable individual.

zk889 takes the security of your personal data seriously and implements a layered set of technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and the zk889 platform is encrypted in transit using Transport Layer Security (TLS 1.2 or higher).
• Encryption at Rest: Sensitive data stored on zk889 servers — including identity documents and financial records — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. Only authorised personnel with a legitimate operational need can access player data, and all access is logged and audited.
• Two-Factor Authentication (2FA): Players are strongly encouraged to enable 2FA on their accounts. All internal zk889 administrative systems require 2FA for staff access.
• Penetration Testing: zk889's infrastructure is subject to regular independent penetration testing and vulnerability assessments to identify and remediate security weaknesses proactively.
• Incident Response: In the event of a confirmed data breach that is likely to result in a risk to your rights, zk889 will notify affected players without undue delay and take immediate steps to contain and remediate the breach.

zk889 uses cookies and similar tracking technologies to operate the platform efficiently, remember your preferences, maintain your session security, and understand how players interact with our services. The table below describes the categories of cookies we use:

You can manage your cookie preferences at any time through your browser settings. Please note that disabling strictly necessary cookies will prevent the zk889 platform from functioning correctly and will result in your inability to log in or place bets.

As a user of the zk889 platform, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our support team at support@zk889.app with the subject line "Privacy Rights Request — [Your Username]".

zk889 will respond to all verified privacy rights requests within 30 calendar days. Where a request is particularly complex or we receive a high volume of requests, we may extend this period by an additional 60 days, but we will notify you of any such extension within the initial 30-day window. We may need to verify your identity before processing a request.

If you believe that a minor has accessed or registered on the zk889 platform, please contact our support team immediately at support@zk889.app. We treat all reports of underage access with the highest priority and will investigate and act on them without delay.

Parents and guardians are encouraged to use parental control software to restrict access to online gambling platforms on devices used by minors. We recommend industry-recognized solutions such as Net Nanny, Kaspersky Safe Kids, and similar tools available for both Android and iOS devices widely used across Indonesia.

zk889 operates as an internationally licensed online gaming platform. As a result, some of your personal data may be processed or stored on servers located outside of Indonesia. When we transfer personal data internationally, we take steps to ensure that appropriate safeguards are in place to protect it, including:

• Entering into contractual data processing agreements with all third-party recipients that impose data protection obligations equivalent to those described in this Privacy Policy;
• Using service providers who operate from jurisdictions with recognised data protection frameworks;
• Applying technical safeguards such as encryption in transit and at rest to all transferred data.

All payment transactions with Indonesian banking partners — including BCA, BRI, BNI, Mandiri, and CIMB Niaga — and e-wallet operators including OVO, DANA, GoPay, ShopeePay, and LinkAja are processed in accordance with Bank Indonesia regulations and applicable Indonesian financial data standards.

zk889 reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or the services we offer. When we make material changes to this policy — those that meaningfully affect your rights or how we use your data — we will notify you by:

• Sending an email notification to your registered email address;
• Displaying a prominent notification within your zk889 account dashboard on your next login;
• Updating the "Last Updated" date displayed at the top of this page.

We encourage you to review this Privacy Policy periodically. Your continued use of the zk889 platform after any update takes effect constitutes your acknowledgment of the updated policy. The most current version of this Privacy Policy is always available at https://zk889.app/privacy-policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way zk889 processes your personal data, please reach out to our dedicated privacy team through any of the following channels:

• Email: support@zk889.app — use the subject line "Privacy Enquiry — [Your Username]" for the fastest response.
• WhatsApp: +62 811 9889 889 — available 24 hours a day, 7 days a week (WIB, UTC+7).
• Live Chat: Available directly on the zk889 platform — click the chat icon in the bottom-right corner of any page while logged in.

Our privacy team aims to respond to all enquiries within 3 business days. For formal privacy rights requests (as described in Section 9), please allow up to 30 calendar days for a full response. All communications are handled by Indonesian-speaking support agents who are available around the clock across Western Indonesia Time (WIB), Central Indonesia Time (WITA), and Eastern Indonesia Time (WIT) zones.