Privacy Policy

zk998 is committed to protecting the privacy and personal data of every player who uses our platform. We operate as an international online gaming platform serving Indonesian players, and we recognise that the trust of our members is the foundation of our business. This Privacy Policy sets out the principles and practices that govern how zk998 handles personal data — from the moment you first visit zk998.pro to the ongoing management of your active account.

This Policy is written in plain, accessible English to ensure that every player can understand exactly how their data is handled. We have structured it as a set of numbered clauses for easy reference. Where a clause references another document — such as our Terms & Conditions — you are encouraged to read that document in conjunction with this Policy.

This Policy should be read alongside our Terms & Conditions, which govern the overall use of zk998 and may contain additional data-related provisions specific to account management, KYC verification, and fraud prevention.

2.1 For the purposes of this Privacy Policy, zk998 — the entity operating the online gaming platform at zk998.pro — acts as the data controller in respect of the personal data of its registered players and website visitors.

2.2 As data controller, zk998 determines the purposes and means of processing personal data collected through the platform. Where zk998 engages third-party service providers to assist in delivering platform services (such as payment processors, game studios, KYC verification providers, and customer support infrastructure), those parties act as data processors on behalf of zk998 under the terms of data processing agreements.

2.3 Contact details for data-related inquiries are provided in Clause 15 of this Policy.

3.1 zk998 collects personal data through several channels: directly from you when you register an account or contact support; automatically when you use the platform; and from third parties such as payment providers and KYC verification services. The categories of data we collect are described in the table below.

3.2 Special Category Data. zk998 does not intentionally collect special category data (such as health information, racial or ethnic origin, religious beliefs, or political opinions). In limited circumstances, responsible gaming assessments may involve questions that touch on personal circumstances; this information is handled with heightened care and used solely for player protection purposes.

3.3 Mandatory vs. Optional Data. Certain data — including identity data, contact data, and financial data — is required to operate your account and process transactions. Failure to provide mandatory data will prevent account registration or withdrawal processing. Other data, such as preferences for promotional communications, is optional.

zk998 uses personal data for the following purposes:

• Account Management: To register your account, verify your identity, maintain your wallet balance, and administer your gaming activity.
• Payment Processing: To process deposits and withdrawals in Indonesian Rupiah (IDR) via your chosen payment method — including bank transfers to BCA, BRI, BNI, Mandiri, CIMB Niaga, or BSI, and e-wallet transfers via OVO, DANA, GoPay, ShopeePay, or LinkAja.
• KYC & Age Verification: To verify that you are at least 21 years of age and that your identity matches your registered account details, as required by our operational obligations and responsible gaming policy.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, and other prohibited conduct as defined in our Terms & Conditions. This includes monitoring transaction patterns and gaming behaviour for anomalies.
• Legal & Regulatory Compliance: To meet any reporting, record-keeping, or disclosure obligations imposed by applicable laws or regulatory requirements, including AML (anti-money-laundering) obligations.
• Platform Operation & Improvement: To monitor platform performance, diagnose technical issues, analyse usage patterns, and develop new features and improvements to the zk998 platform.
• Customer Support: To respond to your queries, resolve disputes, and manage your support interactions through live chat and email.
• Responsible Gaming: To monitor gaming activity for signs of problem gambling, enforce deposit limits and self-exclusion requests you have activated, and contact you if responsible gaming thresholds are triggered.
• Promotional Communications: To send you information about bonuses, promotions, and platform updates where you have consented to receive such communications. You may opt out at any time by contacting support.

zk998 processes personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between zk998 and the player — including account registration, payment processing, and game provision.
• Legal Obligation: Processing required to comply with applicable laws — including KYC identity verification, AML transaction monitoring, and regulatory reporting.
• Legitimate Interests: Processing conducted in pursuit of zk998's legitimate business interests — including fraud prevention, platform security, responsible gaming monitoring, and platform analytics — where those interests are not overridden by the player's own rights and interests.
• Consent: Processing based on your freely given, specific, informed consent — primarily applicable to promotional marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6.1 zk998 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes.

6.2 Service Providers. zk998 shares personal data with carefully selected third-party service providers who assist in operating the platform. These include:

• Payment processors and Indonesian banking partners (for deposit and withdrawal transactions in IDR).
• KYC verification providers (for identity document checks and age verification).
• Game content providers — including Pragmatic Play, Evolution Gaming, PG Soft, and others — who may receive session identifiers to operate game rounds. Game providers do not receive your financial or identity documents.
• Customer support platform providers (for live chat and ticket management).
• IT infrastructure and hosting providers (for secure data storage and platform delivery).
• Fraud detection and analytics service providers.

All service providers are required by contract to process your data only as instructed by zk998 and to maintain appropriate security standards.

6.3 Legal Disclosure. zk998 may disclose personal data to government authorities, law enforcement agencies, financial intelligence units, or courts where required to do so by law, court order, or regulatory direction, or where disclosure is necessary to prevent, investigate, or prosecute financial crime or other serious legal matters.

6.4 Business Transfers. In the event of a merger, acquisition, or sale of all or part of zk998's business, personal data held by zk998 may be transferred to the acquiring entity. Players will be notified of any such transfer and any material changes to how their data is processed.

7.1 zk998 uses cookies and similar browser-based technologies to operate the platform, maintain session security, and collect analytics data. The categories of cookies used are described below.

7.2 zk998 does not deploy third-party advertising cookies or tracking pixels for external ad networks. Analytics data collected through cookies is used solely to improve the zk998 platform experience.

7.3 You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent you from logging in to zk998 and using core platform features. Disabling functional or analytics cookies will not prevent you from using the platform but may reduce certain personalisation features.

8.1 zk998 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account and identity data: Retained for the lifetime of your account and for a minimum of five (5) years following account closure, to satisfy AML record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• KYC documents: Retained for the duration of the account relationship and for at least five (5) years after account closure. Documents are stored in encrypted form with strictly controlled access.
• Gaming activity logs: Retained for a minimum of two (2) years from the date of the relevant session or transaction, and longer where required for dispute resolution or regulatory purposes.
• Customer support communications: Retained for two (2) years from the date of the interaction.
• Marketing consent records: Retained until consent is withdrawn, plus one (1) year thereafter as evidence of the consent history.

8.2 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

9.1 zk998 implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Key security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and zk998 servers.
• Encryption at rest for sensitive data stores, including KYC document repositories and financial transaction databases.
• PCI-DSS-compliant payment processing infrastructure for all IDR financial transactions.
• Role-based access controls ensuring that staff access to personal data is limited to what is strictly necessary for their role.
• Multi-factor authentication requirements for internal administrative access to systems holding personal data.
• Continuous security monitoring and intrusion detection systems.
• Regular internal security reviews and vulnerability assessments.

9.2 While zk998 takes all reasonable and industry-standard precautions to protect your personal data, no internet transmission or digital storage system can be guaranteed to be 100% secure. You also play an important role in security — keep your login credentials confidential and notify zk998 support immediately if you suspect your account has been accessed without your authorisation.

10.1 As an international online gaming platform, zk998 may transfer personal data across national borders — for example, to servers or service providers located in jurisdictions outside Indonesia. Where such transfers occur, zk998 ensures that appropriate safeguards are in place to protect your data, including contractual obligations on data processors that are equivalent in effect to applicable data protection standards.

10.2 Indonesian players should be aware that data transferred outside Indonesia may be subject to the laws of the destination country. zk998 takes reasonable steps to ensure that any such transfers are made to jurisdictions that offer an adequate level of data protection, or to parties that have agreed to maintain equivalent protections by contract.

10.3 Payment data processed through Indonesian banking partners — including transactions via BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OVO, DANA, GoPay, ShopeePay, and LinkAja — is processed within Indonesia's domestic payment infrastructure where possible and is subject to the applicable regulations governing those payment systems.

11.1 As a data subject, you hold a range of rights in respect of your personal data held by zk998. These rights are described below and may be exercised by contacting zk998 via live chat or at the email address provided in Clause 15.

11.2 Response Timeframe. zk998 will respond to all data rights requests within thirty (30) calendar days of receipt. Where a request is complex or involves a high volume of data, we may extend this period by a further thirty (30) days and will inform you accordingly.

11.3 Identity Verification for Requests. To protect your data, zk998 will verify your identity before processing any data rights request. You will be asked to provide sufficient information to confirm that you are the account holder to whom the data relates.

11.4 Limitations. Certain data rights may be limited where zk998 is required by law to retain data (e.g., for AML record-keeping) or where erasure would prejudice the rights of another party (e.g., in an ongoing dispute). Where a right cannot be fulfilled in full, zk998 will explain the reason for any limitation.

12.1 zk998 is strictly an adult platform. No person under the age of 21 is permitted to register an account or use the platform's services. zk998 does not knowingly collect personal data from individuals under the age of 21.

12.2 If zk998 becomes aware that personal data has been collected from a person under 21 — whether through a falsified registration or any other means — that account will be immediately closed, all associated data will be deleted to the extent permitted by law, and any financial balances will be handled in accordance with our Terms & Conditions and applicable legal requirements.

12.3 Adults are responsible for ensuring that minors do not access their zk998 account. We recommend using device-level parental controls and keeping your account credentials confidential to prevent unauthorised access by minors.

13.1 The zk998 platform may contain links to or integrations with third-party services, including payment provider portals and game studio interfaces. These third-party services operate under their own privacy policies, which are independent of this Policy.

13.2 zk998 is not responsible for the privacy practices or content of third-party websites or services. We encourage you to review the privacy policy of any third-party service you interact with in connection with your use of zk998.

14.1 zk998 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or platform features. The "Last Updated" date at the top of this page will be revised whenever a material change is made.

14.2 Where changes are material — meaning they significantly affect how your personal data is used or the rights available to you — zk998 will notify registered players via email to their registered address or via a prominent notice on the platform, giving a minimum of 14 days' notice before the revised Policy takes effect.

14.3 Your continued use of zk998 following the effective date of any revised Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with any changes, you may request account closure as described in our Terms & Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by zk998, please contact us through any of the following channels:

This Privacy Policy was last reviewed and updated on 1 January 2026 and is effective for all current and new zk998 members from that date.