Privacy Policy

zk999 is committed to protecting the personal privacy of every individual who interacts with our platform. This Privacy Policy applies to all personal data processed by zk999 in connection with the delivery of our online sports betting, live casino, togel (traditional Indonesian numbers lottery), and gaming services.

This policy is intended to give you a clear, honest account of our data practices. Where technical or legal language is used, we have endeavored to provide plain-English explanations alongside it. If at any point you have questions not addressed here, please contact our support team using the details in Section 15.

This Privacy Policy should be read alongside our Terms and Conditions, which together constitute the full agreement governing your use of the zk999 Platform.

For the purposes of this Privacy Policy, zk999 — the entity operating the Platform at https://zk999.cam — acts as the data controller in respect of personal data collected from members and platform visitors. As data controller, zk999 determines the purposes and means of processing personal data and is responsible for ensuring that processing is conducted in accordance with applicable data protection principles.

In circumstances where zk999 engages third-party service providers to process personal data on its behalf (for example, payment processors, KYC verification providers, or technology infrastructure providers), those providers act as data processors under binding contractual data-processing agreements. zk999 remains responsible for ensuring that such processors handle your data in a manner consistent with this policy.

zk999 collects the following categories of personal data:

We collect personal data through the following methods:

• Direct submission — information you provide when creating an account, completing KYC verification, making a deposit, submitting a withdrawal request, or contacting customer support
• Automated technical collection — data generated automatically when you access the Platform, including IP addresses, device identifiers, browser fingerprints, and session activity logs
• Third-party payment providers — transaction confirmation data received from your bank or e-wallet provider when a deposit or withdrawal is processed
• Identity verification services — results of KYC document checks conducted by our licensed third-party identity verification partner
• Cookies and tracking technologies — session cookies, analytics cookies, and similar tools as described in Section 12 of this policy

zk999 processes your personal data for the following purposes:

• Account administration — creating, maintaining, and managing your member account, including authentication and access controls
• Identity and age verification — confirming that you meet the eligibility criteria of 21 years of age and that your identity matches the information provided at registration
• Payment processing — facilitating deposits and withdrawals through approved Indonesian banking and e-wallet channels; processing associated transaction records
• Fraud prevention and security — detecting, investigating, and preventing fraudulent transactions, multi-accounting, money laundering, and other prohibited activities
• Regulatory compliance — fulfilling obligations under applicable anti-money laundering (AML) regulations, including record-keeping and reporting requirements
• Customer support — responding to enquiries, resolving disputes, and providing technical assistance to members
• Responsible gaming — monitoring account activity to identify potential problem gambling patterns; administering deposit limits, session limits, and self-exclusion requests
• Service improvement — analyzing aggregated, anonymized usage data to improve the performance, usability, and feature set of the Platform
• Promotional communications — sending members information about bonuses, promotions, and platform updates, where you have consented to receive such communications or where we have a legitimate interest in doing so

zk999 processes your personal data on one or more of the following legal bases:

• Contractual necessity — processing that is required to perform the contract between you and zk999 (i.e., to provide the services you have registered to use, including account management, payment processing, and game delivery)
• Legal obligation — processing that is required to comply with applicable laws and regulations, including AML obligations, KYC requirements, and record-keeping mandates
• Legitimate interests — processing that is necessary for zk999's legitimate business interests, including fraud detection, platform security, service improvement, and responsible gaming monitoring, where such interests are not overridden by your privacy rights
• Consent — where you have given specific, informed, and freely given consent to a particular processing activity, such as receiving promotional communications. You may withdraw this consent at any time without affecting the lawfulness of prior processing

zk999 does not sell, rent, or license your personal data to third parties for their own marketing or commercial purposes. Data is shared only in the following limited, controlled circumstances:

• Payment service providers — Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the minimum data necessary to process your transactions
• KYC and identity verification providers — our licensed identity verification partner receives copies of identity documents submitted during the verification process, processed under a binding data-processing agreement
• IT and infrastructure providers — cloud hosting and technology service providers who store and process Platform data on our behalf, under strict contractual obligations that mirror the protections in this policy
• Regulatory and law enforcement authorities — where we are legally required to disclose information to a competent regulatory body, law enforcement agency, or court, we will comply with such obligations. Where permitted by law, we will seek to notify you of any such disclosure
• Business transfers — in the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections

Given the internationally operated nature of the zk999 Platform, your personal data may be transferred to and stored on servers located outside of Indonesia. Such transfers are conducted only to jurisdictions that provide an adequate level of data protection, or under appropriate safeguards including standard contractual clauses or equivalent data-processing agreements with the receiving party.

Where data is transferred internationally, zk999 applies the same level of data protection that would apply if the data remained within Indonesia, and we require all recipients to implement equivalent technical and organizational security measures.

zk999 retains personal data only for as long as necessary for the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active account data — retained for the duration of the account's active status plus a minimum of five (5) years following account closure, in accordance with AML record-keeping obligations
• Transaction records — retained for a minimum of five (5) years from the date of the transaction, in compliance with applicable financial regulations
• KYC documents — retained for a minimum of five (5) years following account closure or the completion of the business relationship
• Customer support records — retained for three (3) years from the date of the last interaction, unless a longer period is required for ongoing dispute resolution
• Technical and usage logs — retained for up to twelve (12) months from collection, after which they are anonymized or deleted

Upon the expiry of the applicable retention period, personal data is securely deleted or anonymized so that it can no longer be associated with you. Some data may be retained in anonymized, aggregated form for statistical and service-improvement purposes indefinitely.

zk999 implements a comprehensive set of technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers
• Encryption of sensitive data at rest, including identity documents and payment details
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis
• Multi-factor authentication (MFA) requirements for Platform administrative access
• Regular independent security audits and penetration testing of Platform infrastructure
• Intrusion detection systems and real-time anomaly monitoring on all data processing systems
• Staff data protection training and confidentiality obligations for all personnel with access to member data

Despite these measures, no internet transmission or electronic storage system is entirely secure. In the event of a data breach that poses a risk to your rights, zk999 will notify you and relevant authorities within the timeframes required by applicable law.

As a member of zk999, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at the details in Section 15.

We will respond to all valid rights requests within 30 days of receipt. Where a request is complex or we receive a high volume of requests, this period may be extended by a further two months — we will notify you if this applies. We will not charge a fee for reasonable requests; however, we reserve the right to charge an administrative fee for manifestly unfounded or excessive requests.

zk999 uses cookies and similar tracking technologies to ensure the Platform operates correctly, to analyze usage patterns, and to improve the member experience. The following categories of cookies are used:

• Essential cookies — strictly necessary for the Platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without preventing you from using the service.
• Analytics cookies — used to understand how members navigate and use the Platform, enabling us to identify areas for improvement. Data collected via analytics cookies is aggregated and anonymized where possible.
• Functional cookies — used to remember your preferences, such as your preferred language or currency display settings, to improve your experience across sessions.
• Security cookies — used to detect and prevent fraudulent account activity, including identification of bot traffic and automated credential-stuffing attempts.

You can manage cookie preferences through your browser settings. Note that disabling non-essential cookies will not affect your ability to use the Platform's core functionality, but may limit personalization features. Blocking essential cookies will prevent you from logging in or using the Platform.

zk999 employs age-verification controls during the registration process and reserves the right to request documentary proof of age at any point during the account lifecycle. These controls reflect our commitment to responsible gaming and the protection of minors from gambling-related harm.

zk999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we provide. The "Last Updated" date at the top of this page will be revised whenever a material change is made.

Where changes are material — meaning they significantly affect how we handle your personal data or the rights available to you — we will notify you via an on-platform notice or, where we hold a current email address for your account, by email, at least 14 days before the changes take effect.

Your continued use of the Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the changes. If you do not agree with the revised policy, you must stop using the Platform and may request account closure in accordance with our Terms and Conditions.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way zk999 handles your personal data, please contact our Data Protection team through the following channels:

• Email: support@zk999.cam — please include "Privacy Request" in the subject line for data-related enquiries
• Live Chat: Available 24 hours a day, 7 days a week through the on-platform chat widget — our team is available across WIB, WITA, and WIT time zones
• Response Time: We aim to acknowledge privacy-related requests within 72 hours and provide a substantive response within 30 days

If you are not satisfied with our response to a privacy complaint, you may have the right to lodge a complaint with a relevant data protection authority in your jurisdiction.