Privacy Policy

In this Privacy Policy, the following terms carry the meanings set out below:

2.1 This Privacy Policy applies to all Personal Data collected and processed by 999zk in connection with your use of the Platform, including during account registration, identity verification, gameplay, payment transactions, customer support interactions, and marketing communications.

2.2 This Policy applies regardless of whether you access the Platform from a desktop browser, mobile browser, or any other interface. By creating an account or using the Platform in any way, you acknowledge that you have read and understood this Privacy Policy.

2.3 This Policy is intended primarily for individuals resident in Indonesia and is designed to reflect the data protection standards applicable to our primary operating market. If you access the Platform from outside Indonesia, you do so at your own risk and accept that data protections applicable in your jurisdiction may differ.

3.1 Registration Data. When you create a 999zk account, we collect the following information:

• Full legal name as it appears on your government-issued ID;
• Date of birth (to verify the 21+ age requirement);
• Indonesian residential address;
• Email address;
• Mobile phone number;
• Username and password (the password is stored in hashed form; we never store or view plaintext passwords).

3.2 Identity Verification (KYC) Data. To comply with our anti-money-laundering obligations and to process your first withdrawal, we collect:

• Copies of government-issued photo ID (Indonesian KTP or valid passport);
• A self-verification selfie holding the submitted ID document;
• Proof of payment method (bank account screenshot or e-wallet screenshot in your name);
• Proof of address (utility bill or bank statement dated within 90 days).

3.3 Financial Data. During deposit and withdrawal transactions, we collect:

• Bank account number and bank name (BCA, BRI, BNI, Mandiri, or other supported banks);
• E-wallet identifiers (OVO, DANA, GoPay, ShopeePay, or LinkAja account details);
• Transaction amounts, timestamps, and reference numbers.

999zk does not store full card numbers, CVV codes, or other sensitive card data — these are handled entirely by our certified payment processor partners.

3.4 Gameplay & Activity Data. During your use of the Platform, we automatically record:

• Bet history, game outcomes, win/loss records, and session durations;
• Bonus usage, wagering-requirement progress, and promotion activity;
• Login timestamps, session durations, and logout events.

3.5 Technical & Device Data. We collect technical information automatically when you access the Platform:

• IP address and approximate geolocation derived from IP;
• Device type, operating system, and browser version;
• Device fingerprint data (used for fraud prevention and duplicate account detection);
• Referring URL and Platform navigation path.

3.6 Communications Data. When you contact our support team, we retain records of that communication — including live chat transcripts, email correspondence, and any attachments — for quality assurance and dispute-resolution purposes.

999zk uses the Personal Data we collect for the following clearly defined purposes:

We do not use automated profiling or solely automated decision-making for any purpose that produces a legal or similarly significant effect on you, without also providing a means to request human review.

999zk processes your Personal Data on one or more of the following legal bases:

• Contractual necessity: Processing required to enter into and perform the contract between you and 999zk — including account creation, payment processing, and dispute resolution;
• Legal obligation: Processing required to comply with applicable law — including AML regulations, tax reporting obligations, and licensing conditions;
• Legitimate interests: Processing in our legitimate interests or those of a third party, where those interests are not overridden by your rights — including fraud prevention, platform security, and service improvement. We conduct a balancing test for each such purpose;
• Consent: Processing based on your explicit consent, specifically for direct marketing communications. You may withdraw this consent at any time by contacting our support team or using the unsubscribe link in any marketing email.

6.1 999zk does not sell or rent your Personal Data to any third party for their own commercial purposes. We share your data only in the following circumstances and only to the extent strictly necessary:

• Payment processors: We share financial data with our certified payment processor partners (including local Indonesian bank networks and e-wallet platforms) solely to facilitate your deposit and withdrawal transactions;
• KYC and fraud-prevention providers: We share identity documents and device data with specialist KYC and AML screening services to verify your identity and screen for financial crime risk;
• Game studios: Gameplay session data is shared with the relevant game provider (e.g., Evolution Gaming, Pragmatic Play) to facilitate the game experience and resolve any technical disputes;
• Regulatory and law enforcement authorities: We disclose Personal Data to competent authorities where we are legally required to do so, including in response to a lawful court order, regulatory request, or to report suspected financial crime;
• IT infrastructure providers: We engage third-party hosting, cloud storage, and security service providers who process data on our behalf under strict data-processing agreements that prohibit any independent use of your data.

6.2 Business Transfers. In the event of a merger, acquisition, asset sale, or restructuring of 999zk's business, your Personal Data may be transferred to the acquiring entity as part of that transaction. You will be notified via email and a prominent Platform notice before your data becomes subject to a materially different privacy policy.

7.1 999zk uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies we deploy are:

• Strictly necessary cookies: Essential for the Platform to function — including session management, login state, and security tokens. These cannot be disabled without preventing core Platform functionality;
• Functional cookies: Store your preferences such as language setting, display options, and responsible-gaming tool configurations to personalise your experience across sessions;
• Analytical cookies: Collect aggregated, anonymised data on how members navigate the Platform — including pages visited, features used, and session duration — to help us identify areas for improvement;
• Fraud-prevention cookies: Store device fingerprint data to detect duplicate account creation, automated bot activity, and other prohibited conduct under our Terms & Conditions.

7.2 You may manage your cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the Platform, but may reduce the quality of your experience and may disable some personalisation features.

7.3 999zk does not deploy third-party advertising or behavioural-profiling cookies that track your activity across other websites.

8.1 999zk implements a multi-layered security programme to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction. Key measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers;
• AES-256 encryption for sensitive data stored at rest on our servers;
• Hashed and salted password storage — we never store, transmit, or view plaintext passwords;
• Role-based access controls ensuring that staff can only access Personal Data on a strict need-to-know basis;
• Continuous intrusion-detection and threat-monitoring systems operating 24/7;
• Regular third-party penetration testing and security audits;
• Dedicated data-breach response procedures with a 72-hour notification target for material breaches.

8.2 In the event of a data breach that is likely to result in a high risk to your rights and freedoms, 999zk will notify affected members without undue delay via the email address registered to their account.

9.1 999zk retains Personal Data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Our standard retention periods are:

9.2 Where retention is required by a legal obligation (such as AML record-keeping), the legal obligation period overrides any shorter operational retention period. After the applicable retention period expires, Personal Data is securely and irreversibly deleted or anonymised.

10.1 999zk operates internationally, and your Personal Data may be stored and processed on servers located outside Indonesia. Wherever Personal Data is transferred across borders, we apply appropriate safeguards to ensure that the level of data protection is not undermined by the transfer.

10.2 Safeguards applied to international transfers include:

• Contractual clauses with recipient entities that impose obligations equivalent to those applicable to 999zk as data controller;
• Transfer to entities located in jurisdictions that maintain internationally recognised data protection frameworks;
• Technical controls (encryption in transit and at rest) that apply regardless of the physical location of the data.

10.3 By using the 999zk Platform and accepting this Privacy Policy, you consent to the transfer of your Personal Data to our server infrastructure and service-provider network as described in this clause.

As a 999zk member, you hold the following rights in respect of your Personal Data. To exercise any of these rights, contact us at [email protected]. We will respond within 30 days of receipt of a valid request.

Verification requirement: To protect your data from unauthorised access, we may require you to verify your identity before processing a data rights request. Requests that cannot be satisfactorily verified will not be actioned.

12.1 The 999zk Platform is strictly intended for adults aged 21 and over. We do not knowingly collect Personal Data from individuals under the age of 21. Registration requires explicit confirmation that you meet the minimum age requirement, and we verify age through our KYC process.

12.2 If we become aware that Personal Data has been collected from an individual under 21, we will take immediate steps to close the associated account, delete the data, and — where funds were deposited — return them to the originating payment method after deducting the value of any wagers placed.

12.3 If you have reason to believe that a person under 21 has created an account on 999zk, please notify us immediately at [email protected].

13.1 The 999zk Platform may contain links to third-party game studios, payment processors, and other service providers. These links are provided for functional and operational purposes only. 999zk does not control the privacy practices of third-party websites or services, and this Privacy Policy does not apply to them.

13.2 We encourage you to read the privacy notice of any third-party service before submitting Personal Data to it. 999zk assumes no responsibility or liability for the content or data-handling practices of any third party.

14.1 999zk reserves the right to amend this Privacy Policy at any time. Where changes are material — for example, if we introduce a new purpose for processing or share data with a new category of third party — we will notify registered Members by email at least 14 days before the changes take effect, and will display a prominent notice on the Platform.

14.2 Non-material amendments (such as clarifications or formatting improvements that do not alter the substance of the Policy) may be made without advance notice. The "Last Updated" date at the top of this page will always reflect when the current version was published.

14.3 Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not accept the revised Policy, please cease using the Platform and contact our support team to close your account.

15.1 Privacy Enquiries. If you have any question about this Privacy Policy, wish to exercise a data right, or want to raise a privacy concern, please contact the 999zk data team:

15.2 Complaints. If you are not satisfied with how 999zk has handled your Personal Data or responded to a data-rights request, you may escalate your complaint to the supervisory authority or data-protection regulator applicable to our operating jurisdiction. Details of the relevant authority are available from our support team on request.

This Privacy Policy was last revised on 1 January 2026 and supersedes all previous versions. By continuing to use the 999zk Platform you confirm your acceptance of this Policy in full.