Privacy Policy — zk3311

1 Introduction

This Privacy Policy ("Policy") describes how zk3311 ("Company", "We", "Us", or "Our") collects, uses, stores, shares, and protects the personal data of individuals ("Players", "Users", or "You") who access or use the zk3311 gaming platform at https://zk3311.cam ("Platform").

This Policy applies to all personal data collected through the Platform, including data provided during account registration, identity verification (KYC), deposits and withdrawals, customer support interactions, and general browsing of the Platform. It is incorporated by reference into our Terms & Conditions and should be read alongside them.

By creating a zk3311 account or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue use of the Platform.

2 Definitions

• "Personal Data" — Any information that identifies or could reasonably identify a natural person, directly or indirectly. This includes name, date of birth, national ID number, email address, phone number, IP address, and financial account details.
• "Processing" — Any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, restriction, erasure, or destruction.
• "Data Controller" — The entity that determines the purposes and means of processing Personal Data. For the purposes of this Policy, zk3311 is the Data Controller.
• "Data Processor" — A third party that processes Personal Data on behalf of the Data Controller pursuant to a written data processing agreement.
• "Consent" — A freely given, specific, informed, and unambiguous indication of agreement by a Player to the processing of their Personal Data for a stated purpose.
• "KYC" — Know Your Customer: the identity verification process conducted to comply with Anti-Money Laundering (AML) obligations and to confirm Player eligibility.
• "Cookies" — Small text files placed on your device by the Platform to store session information, preferences, and aggregate analytics data.

3 Data We Collect

zk3311 collects the following categories of Personal Data in connection with the operation of the Platform and delivery of our Services:

Data Category	Examples	Collection Point
Identity Data	Full legal name, date of birth, Indonesian National ID (KTP / NIK), passport number	Registration, KYC verification
Contact Data	Email address, mobile phone number, residential address	Registration, account settings
Financial Data	Bank account numbers (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata), e-wallet IDs (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history	Deposits, withdrawals, KYC
Technical Data	IP address, device type, browser type and version, operating system, session timestamps	Automatic — Platform access
Usage Data	Pages visited, games played, bet amounts, session duration, feature interactions	Automatic — Platform activity
Communications Data	Live chat transcripts, support ticket content, email correspondence	Customer support interactions
Marketing Preferences	Promotional opt-in or opt-out status, preferred communication channels	Registration, account settings

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond what is strictly required for identity verification purposes.

4 How Data Is Collected

Personal Data is collected through the following channels:

• Direct Submission: Data you voluntarily provide when registering an account, completing KYC verification, submitting a deposit or withdrawal request, or contacting our support team.
• Automated Collection: Technical and Usage Data collected automatically via server logs, cookies, and analytics tools each time you access or interact with the Platform.
• Third-Party Sources: Identity and address verification data received from our KYC partners during the verification process. Payment confirmation data received from our payment processing partners (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja).
• Fraud Prevention Systems: Data flagged by our internal risk engine or third-party fraud detection services in connection with suspicious account activity or payment anomalies.

5 Purpose of Processing

zk3311 processes your Personal Data for the following purposes:

1. Account Management: To create, maintain, and administer your zk3311 account, including authentication and password recovery.
2. Service Delivery: To provide access to sports betting markets (including bandar bola — football bookmaking — and mix parlay accumulator products), casino games, slot titles, and all other Platform features.
3. Identity Verification (KYC): To verify your identity, age (21+), and eligibility to use the Platform in compliance with international AML and KYC obligations.
4. Payment Processing: To process deposits and withdrawals via approved Indonesian payment channels and to maintain accurate transaction records.
5. Fraud & Security: To detect, investigate, and prevent fraudulent activity, collusion, money laundering, bonus abuse, and unauthorized account access.
6. Regulatory Compliance: To fulfill obligations under applicable international gaming regulations and AML/CFT frameworks, including record-keeping requirements.
7. Customer Support: To respond to your queries, process complaints, and maintain a record of support interactions for quality assurance.
8. Marketing Communications: To send you promotional offers, bonus notifications, and platform news — but only where you have provided explicit consent. You may withdraw this consent at any time.
9. Platform Improvement: To analyze aggregate usage patterns and performance metrics to improve the quality, speed, and user experience of the Platform.
10. Responsible Gaming: To monitor gameplay patterns that may indicate problem gambling behavior, and to administer self-exclusion, deposit limits, and cooling-off features requested by Players.

6 Legal Basis for Processing

zk3311 processes your Personal Data on the following legal bases:

• Contractual Necessity: Processing required to fulfill our obligations under the Terms & Conditions you accepted upon registration — including account management, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable AML, KYC, and gaming regulatory obligations, including mandatory record retention periods.
• Legitimate Interests: Processing necessary for our legitimate business interests, including fraud prevention, platform security, abuse detection, and aggregate analytics — provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for optional purposes such as marketing communications, where your explicit prior consent has been obtained and may be withdrawn at any time without penalty.

7 Data Sharing & Disclosure

zk3311 does not sell or commercially exploit your Personal Data. We share data only in the following strictly defined circumstances:

• Payment Processors: Financial Data is shared with our approved Indonesian banking and e-wallet partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, LinkAja) solely for the purpose of processing deposits and withdrawals on your behalf.
• KYC & Identity Verification Partners: Identity Data and supporting documents are securely transmitted to our contracted KYC verification service providers for the sole purpose of confirming your identity and age eligibility.
• Game Software Providers: Technical and Usage Data may be shared with game studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft) to the extent necessary for game functionality, dispute resolution, and regulatory auditing of RNG outputs.
• Fraud Prevention Services: Limited Technical Data and transaction records may be shared with third-party fraud detection partners under strict data processing agreements where suspicious activity is identified.
• Legal & Regulatory Authorities: We may disclose Personal Data to law enforcement agencies, regulatory bodies, or courts where we are legally compelled to do so, or where disclosure is necessary to protect the rights, safety, or property of zk3311 or third parties.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of our assets, your Personal Data may be transferred to the successor entity, subject to equivalent privacy protections being maintained.

8 Data Retention

zk3311 retains your Personal Data for as long as is necessary to fulfill the purposes for which it was collected, including for the satisfaction of any legal, regulatory, accounting, or reporting obligations.

• Active Account Data: Retained for the full duration of your account's active status plus a minimum period of five (5) years following account closure, in accordance with standard AML record-keeping requirements.
• KYC Documents: Retained for a minimum of five (5) years from the date of the most recent transaction on your account, or longer where required by applicable regulation.
• Transaction Records: Retained for a minimum of five (5) years in encrypted form for AML and financial audit purposes.
• Support Communications: Retained for three (3) years from the date of the interaction for quality assurance and dispute resolution purposes.
• Marketing Preferences: Retained until you withdraw your consent or close your account, whichever is earlier.
• Technical & Usage Logs: Retained in anonymized or aggregated form for up to twenty-four (24) months for platform performance analysis.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymized so that it can no longer be associated with any identifiable individual.

9 Data Security

zk3311 implements a comprehensive set of technical and organizational security measures to protect your Personal Data against unauthorized access, accidental loss, alteration, disclosure, or destruction:

• 256-bit SSL/TLS Encryption: All data in transit between your browser and our servers is encrypted using TLS 1.2 or higher. Our SSL certificate is maintained and renewed continuously.
• At-Rest Encryption: Sensitive Personal Data stored on our servers is encrypted at rest using AES-256 encryption.
• Access Controls: Access to Personal Data is restricted to authorized personnel on a strict need-to-know basis. All staff with data access undergo regular privacy and security training.
• Multi-Factor Authentication: Administrative access to systems containing Personal Data requires multi-factor authentication as a minimum.
• Regular Security Audits: Our infrastructure undergoes periodic penetration testing and security audits conducted by independent third-party security specialists.
• Incident Response: In the event of a confirmed personal data breach that poses a risk to your rights and freedoms, zk3311 will notify affected Players without undue delay and will take all reasonable steps to contain and remediate the breach.

10 Cookies Policy

zk3311 uses cookies and similar tracking technologies to ensure the Platform functions correctly and to provide a consistent, personalized experience. The following categories of cookies are used:

Cookie Type	Purpose	Duration
Strictly Necessary	Maintain your login session, prevent CSRF attacks, and enable core Platform functionality. These cannot be disabled.	Session / up to 24 hours
Functional	Remember your language preferences, display settings, and last-visited game categories for a more convenient experience.	Up to 30 days
Analytics	Collect aggregate, anonymized data on page visits, load times, and feature usage to help us improve Platform performance.	Up to 13 months
Responsible Gaming	Store your session time limit and deposit limit preferences to enforce the responsible gaming controls you have configured.	Persistent until changed

Most web browsers allow you to manage cookie preferences through their settings. Please note that disabling Strictly Necessary cookies may prevent you from logging in or using certain core features of the Platform. Disabling Analytics or Functional cookies will not affect your ability to play games or process transactions.

11 Your Rights

As a Player whose Personal Data is processed by zk3311, you hold the following rights in relation to your data. To exercise any of these rights, please contact our support team at [email protected]:

• Right of Access: You may request a copy of the Personal Data we hold about you, along with information on how it is being processed. We will respond within 30 days of a verified request.
• Right to Rectification: You may request correction of any inaccurate or incomplete Personal Data we hold about you. Certain data changes may require re-verification of your identity.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations under AML and gaming regulations.
• Right to Restrict Processing: You may request that we limit the processing of your Personal Data in certain circumstances, such as where you contest the accuracy of the data or object to its processing.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you may request a machine-readable copy of your Personal Data for transfer to another service provider.
• Right to Object: You may object at any time to the processing of your Personal Data for direct marketing purposes. We will cease such processing immediately upon receipt of a valid objection.
• Right to Withdraw Consent: Where processing is based on consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

12 Minors

The zk3311 Platform is strictly intended for adults aged 21 years or older. We do not knowingly collect, process, or retain Personal Data from individuals under the age of 21. If we become aware that Personal Data has been collected from a minor without verifiable parental consent, we will take immediate steps to delete that data and close the associated account.

If you believe a minor has registered on the Platform, please notify us immediately at [email protected] so that we can investigate and act accordingly.

13 International Data Transfers

In operating a global gaming platform that serves Indonesian players, zk3311 may transfer certain categories of Personal Data to servers or service providers located outside of Indonesia. Such transfers are conducted only where:

• The receiving country or territory provides an adequate level of data protection as recognized by applicable international standards; or
• Appropriate contractual safeguards are in place between zk3311 and the receiving party, including standard contractual clauses or equivalent data transfer mechanisms; or
• The transfer is necessary for the performance of a contract between you and zk3311 (e.g., processing a bank transfer via an internationally operating payment processor).

Where your data is transferred internationally, we ensure that it receives the same level of protection as if it remained within a jurisdiction with comparable privacy standards.

14 Policy Changes

zk3311 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or Platform functionality. Material changes will be communicated to Players via their registered email address at least 7 days before taking effect.

The "Last Updated" date at the top of this Policy will be revised with each amendment. Your continued use of the Platform following the effective date of any update constitutes acceptance of the revised Policy. We encourage you to review this page periodically to stay informed of how your Personal Data is being handled.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please reach out to our Data Protection team:

• Email: [email protected]
• Response Time: Within 30 days for formal data subject requests; within 24 hours for general privacy queries
• Support Hours: 24/7, including Indonesian public holidays such as Idul Fitri, Idul Adha, and Indonesian Independence Day (17 August)
• Operating Time Zone: WIB (Western Indonesia Time, UTC+7)