Privacy Policy — zk9vip

zk9vip ("we", "us", "our") operates the online betting and casino platform accessible at https://zk9vip.cam (the "Platform"). This Privacy Policy applies to all users of the Platform, including visitors who have not registered an account and registered Members who actively use zk9vip's services.

Your privacy is of fundamental importance to zk9vip. We collect only the personal data that is necessary to deliver our services, maintain account security, comply with anti-money laundering (AML) obligations, and improve the overall Platform experience. We do not sell your personal data to third parties for their commercial benefit.

By accessing the Platform or registering an account, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with any aspect of this Policy, you must discontinue use of the Platform.

For the purposes of this Privacy Policy, the following definitions apply:

zk9vip collects the following categories of personal data, depending on the nature of your interaction with the Platform:

zk9vip does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, health data, or biometric identifiers — except where a government-issued identity document submitted for KYC incidentally contains such information (e.g., religion field on Indonesian KTP). Such incidental data is not used for any profiling or decision-making purpose beyond identity confirmation.

We collect personal data through three primary channels:

• Direct Provision: You provide data directly when you complete the registration form, submit KYC documents, make deposits or withdrawals, set responsible gaming limits, or contact our support team via live chat or email.
• Automated Collection: Technical data is collected automatically when you browse the Platform, including session identifiers, IP address, device fingerprint, and clickstream data. This data is collected via server logs, cookies, and analytics scripts operated by zk9vip or its authorized technology partners.
• Third-Party Sources: zk9vip may receive supplementary identity verification data from accredited KYC screening providers. We may also receive fraud-alert signals from payment networks (such as those operated by BCA, BRI, or e-wallet providers OVO and GoPay) where unusual transaction patterns are detected.

zk9vip processes your personal data for the following specific, documented purposes only:

• Account Management: Creating, maintaining, authenticating, and closing your zk9vip Account; resetting login credentials; managing account preferences and responsible gaming tool settings.
• Identity Verification (KYC/AML): Verifying your identity, age (21+), and financial source in compliance with international AML standards; screening against sanctions lists and politically exposed persons (PEP) databases.
• Payment Processing: Crediting deposits from BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay, ShopeePay, and LinkAja to your Account Balance in IDR; processing withdrawal requests to your verified payment account.
• Service Delivery: Making football markets (BRI Liga 1, EPL, La Liga, Champions League), slot games, live dealer tables, and togel (Indonesia's traditional numbers lottery) draws available within your Account session.
• Fraud Prevention & Security: Detecting and preventing unauthorized access, multi-account abuse, bonus fraud, money laundering, match-fixing, and other prohibited conduct as defined in the Terms and Conditions.
• Customer Support: Responding to inquiries, resolving disputes, processing responsible gaming self-exclusion requests, and delivering KYC decision notifications.
• Marketing Communications: Sending promotional emails, bonus offers, and platform update notifications — but only where you have given explicit consent and have not subsequently wi thddrawn that consent. You may opt out of marketing communications at any time via your Account settings or by contacting support.
• Platform Improvement: Analyzing aggregated, anonymized usage patterns to improve Platform performance, game selection, and user experience — no individual-level profiling is conducted for this purpose.
• Legal Compliance: Meeting obligations imposed by applicable international law, court orders, regulatory directives, or lawful requests from authorized law enforcement agencies.

zk9vip processes your personal data on the following legal bases, each of which applies to the relevant processing activity described in Section 5:

Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. Withdrawal of consent for marketing does not affect your ability to use the Platform or access your Account.

zk9vip does not sell, rent, or trade your personal data. We share personal data only in the circumstances described below, and only to the minimum extent necessary for the stated purpose:

• Payment Processors: To facilitate deposits and withdrawals, we share your name, account number, and transaction amount with the relevant payment network — BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, OVO, DANA, GoPay, ShopeePay, or LinkAja — as applicable to your chosen payment method. These entities act as independent data controllers for their own payment infrastructure.
• KYC Verification Providers: Where automated document verification is used, your KYC documents may be transmitted to an accredited identity verification service provider operating under strict data processing agreements with zk9vip. These providers process your data solely for the purpose of identity confirmation and do not retain it beyond the period required for that purpose.
• Game Studio Partners: Game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive anonymized session tokens and bet amounts necessary to deliver game functionality. They do not receive your name, identity documents, or payment details.
• Fraud Prevention Services: Aggregated risk signals (such as device fingerprint hashes and anonymized IP reputation scores) may be shared with industry-standard fraud prevention networks. No directly identifiable personal data is shared for this purpose.
• Legal and Regulatory Disclosure: We may disclose your personal data to competent courts, regulatory authorities, or law enforcement agencies where we are legally compelled to do so, or where disclosure is necessary to protect the rights, property, or safety of zk9vip, its Members, or the public.
• Corporate Transactions: In the event of a merger, acquisition, restructuring, or sale of zk9vip's operating entity, your personal data may be transferred to the acquiring entity as part of that transaction, subject to equivalent data protection commitments. You will be notified of any such transfer via the registered email address on your Account.

The zk9vip Platform uses cookies and similar tracking technologies to provide core functionality, remember your session, and analyze Platform usage. The following categories of cookies are in use:

You may manage your cookie preferences through your browser settings at any time. Please note that disabling essential cookies will impair your ability to log in and use the Platform. Disabling functional cookies will reset your display preferences on each visit. Disabling analytics cookies will not affect your access to any Platform feature.

zk9vip does not use third-party advertising cookies or retargeting pixels. No data collected through cookies on the zk9vip Platform is shared with advertising networks for the purpose of serving behavioral advertisements on other websites.

zk9vip retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Account and Identity Data: Retained for the duration of your active Account membership, plus a minimum of 5 years following Account closure, to meet AML record-keeping obligations.
• KYC Documents: Retained for 5 years from the date of submission or from the date of Account closure, whichever is later, in line with international financial crime prevention standards.
• Transaction Records (deposits, withdrawals, bets): Retained for 7 years from the date of each transaction. This period is required for financial audit and dispute resolution purposes.
• Customer Support Communications: Live chat transcripts and email records are retained for 3 years from the date of the interaction, after which they are permanently deleted from our systems.
• Technical and Usage Data: IP logs and session data are retained for 12 months. Aggregated analytics data (which cannot be attributed to any individual) may be retained indefinitely.
• Marketing Preferences: Records of your marketing consent or opt-out are retained for the lifetime of your Account plus 2 years, to demonstrate compliance with applicable marketing regulations.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with zk9vip's data destruction policy. Where data is anonymized rather than deleted, the resulting data can no longer be attributed to you and is therefore no longer subject to this Privacy Policy.

zk9vip implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, loss, alteration, or disclosure:

• 256-Bit SSL Encryption: All data transmitted between your device and the zk9vip Platform is encrypted using industry-standard 256-bit TLS/SSL encryption. This applies to login sessions, payment flows, KYC document uploads, and all API communications.
• Encrypted Data Storage: Sensitive personal data — including KYC documents, bank account details, and identity records — is encrypted at rest using AES-256 encryption on zk9vip's secure servers.
• Access Controls: Access to production systems containing Member personal data is restricted to authorized zk9vip personnel on a strict need-to-know basis, authenticated via multi-factor authentication (MFA) and role-based access control (RBAC).
• Penetration Testing: zk9vip's Platform infrastructure undergoes regular security assessments by qualified third-party security professionals to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: zk9vip maintains a documented data breach response plan. In the event of a security incident affecting your personal data, we will notify affected Members via their registered email address within 72 hours of becoming aware of the breach.
• Staff Training: All zk9vip personnel with access to Member data receive mandatory data protection and security awareness training as part of their onboarding and annually thereafter.

Depending on your location, you may have the following rights in relation to the personal data that zk9vip holds about you. To exercise any of these rights, please contact our support team with your Account username and a clear description of your request:

zk9vip will respond to all verifiable data rights requests within 30 calendar days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for it within the initial 30-day period.

We may need to verify your identity before processing a data rights request. This is a security measure to ensure that personal data is not disclosed to or altered by unauthorized parties. Verification will typically involve confirming your Account username, registered email address, and one additional identity factor.

The zk9vip Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the account registration process and again at the point of first withdrawal.

If zk9vip becomes aware that personal data has been collected from an individual under 21 years of age, we will immediately suspend the associated Account, delete the personal data without undue delay, and return any real-money deposits made through that Account to the originating payment method.

Parents and guardians who believe that a person under the age of 21 in their care has registered an Account with zk9vip should contact our support team immediately at [email protected]. We take underage gambling seriously and will act on all credible reports promptly.

The zk9vip Platform may, in certain contexts (such as game lobby pages or promotional content), contain references to third-party services including game studios, sports data providers, and payment networks. Where such references include links or integrations, zk9vip is not responsible for the privacy practices or content of those third-party services.

We encourage you to review the privacy policies of any third-party service you interact with. This Privacy Policy applies solely to data collected and processed by zk9vip through the Platform at https://zk9vip.cam and does not extend to any third-party website, application, or service.

zk9vip operates as an international platform. Your personal data may be transferred to, stored, and processed in countries other than Indonesia, including the jurisdiction in which zk9vip's operating entity is registered and the locations of our technology infrastructure providers.

Where personal data is transferred outside Indonesia, zk9vip takes appropriate steps to ensure that such transfers are subject to adequate data protection safeguards, including:

• Data processing agreements incorporating standard contractual clauses or equivalent mechanisms that require recipient entities to process personal data to a standard equivalent to that described in this Privacy Policy.
• Selection of technology partners and infrastructure providers that maintain internationally recognized security certifications (including ISO 27001 or SOC 2 Type II where applicable).
• Encryption of personal data in transit and at rest, as described in Section 10, regardless of the jurisdiction in which data is stored.

By registering an Account with zk9vip and providing your personal data, you acknowledge and consent to international transfers of your data as described in this section.

zk9vip reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform services. The effective date at the top of this page will be updated to reflect the date of the most recent revision.

Where changes are material — particularly where they affect how your personal data is used, shared, or retained — zk9vip will provide advance notice via email to the address registered on your Account at least 14 days before the changes take effect. For minor or clarifying updates, the updated Policy will be published on this page without separate notification.

Your continued use of the Platform after the effective date of any amendment to this Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the revised Policy, you must cease using the Platform and contact support to request Account closure. Previous versions of this Privacy Policy are available upon written request.

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data zk9vip holds about you, please contact us through either of the following channels:

• Live Chat: Available 24/7 via the in-platform live chat widget. Our Indonesian-speaking support agents can assist with general privacy inquiries, data rights requests, and marketing opt-out requests in real time.
• Email: [email protected] — for formal written data rights requests, breach reports, and complaints. Please include your Account username and a clear description of your inquiry. We target a response within 24 hours for general inquiries and within 5 business days for formal data rights requests.

For urgent matters — including reports of suspected unauthorized access to your Account or data breach notifications — please contact us via live chat and state "URGENT — DATA SECURITY" at the start of your message to ensure immediate escalation to our security team.