Data & Privacy
At 369zk, we take the privacy of every player seriously. This Privacy Policy explains exactly what personal data we collect, why we collect it, how we use and protect it, and what rights you have over your own information. We encourage you to read this document carefully alongside our Terms & Conditions.
Our Commitments
Six core principles underpin the way 369zk handles your personal data — from collection through to deletion.
Every data exchange between your device and 369zk's servers is encrypted using industry-standard 256-bit SSL/TLS. Your login credentials, payment details, and personal information travel over a fully secured connection at all times.
Personal data is stored on access-controlled servers with role-based permissions. Only staff who require access to your data in order to deliver platform services are granted that access, and all access events are logged and audited.
369zk does not sell, rent, or trade your personal data to third-party marketers. Data shared with partners — such as payment processors and game studios — is strictly limited to what is necessary for service delivery.
We collect only the personal data that is genuinely necessary to operate your account, process transactions, and meet our legal obligations. We do not collect data speculatively or for purposes beyond those stated in this policy.
You have the right to access, correct, and — in certain circumstances — request deletion of the personal data 369zk holds about you. Submit a request via our support team and we will respond within 30 days.
In the unlikely event of a personal data breach that poses a risk to your rights or freedoms, 369zk will notify affected players promptly and take immediate remedial action to contain and resolve the incident.
Throughout this Privacy Policy, the following terms carry the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person — meaning information that can be used, directly or indirectly, to identify you as an individual. |
| "Processing" | Any operation performed on personal data, including collection, recording, storage, use, disclosure, or deletion. |
| "Data Controller" | The entity that determines the purposes and means of processing personal data. In the context of this policy, that is 369zk. |
| "Data Processor" | A third party that processes personal data on behalf of the Data Controller, under documented instruction — such as a payment gateway or identity verification provider. |
| "Platform" | The 369zk website, mobile-optimised site, and all associated services accessible via domains operated by the Company. |
| "Player" / "You" | Any natural person who registers and holds an account on the 369zk Platform. |
| "KYC" | Know Your Customer — the identity verification process used to confirm a Player's identity, age, and payment method ownership. |
| "Cookies" | Small text files placed on your device by the Platform to recognise your browser, maintain session state, and support analytics. |
369zk acts as the Data Controller for personal data collected through the Platform. The Company operates as an international offshore online betting platform serving English-preference players primarily in Indonesia. All data-related enquiries, access requests, and complaints should be directed to the Company's support team using the contact details provided in Section 15 of this policy.
Where the Company engages third-party service providers who process personal data on its behalf — such as payment processors, KYC verification services, and game data providers — those parties act as Data Processors and are contractually bound to process data only in accordance with the Company's documented instructions and applicable data protection standards.
When you register an account with 369zk, we collect your full legal name, date of birth, residential address (including city and province — for Indonesian players this typically means cities such as Jakarta, Surabaya, Bandung, Medan, Bali, Yogyakarta, or Semarang), email address, and phone number. This information is required to open and maintain your account and to conduct KYC verification.
We collect information about the payment methods you use to deposit and withdraw funds, including bank account details for local Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI) and e-wallet identifiers (GoPay, OVO, DANA, ShopeePay, LinkAja). We do not store full card numbers or full bank account numbers in unencrypted form. Payment processing is handled by our certified payment processor partners.
We maintain a complete record of all transactions conducted on your account, including deposits, withdrawals, bets placed, games played, bonuses claimed, and winnings received. This data is required for account management, dispute resolution, regulatory compliance, and responsible gaming monitoring.
When you access the Platform, we automatically collect certain technical data including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, pages visited, session duration, and click-path data. This data is used for security monitoring, fraud detection, platform optimisation, and aggregate analytics.
If you contact 369zk via live chat, email, or any other support channel, we retain records of those communications for quality assurance, training, and dispute resolution purposes. This includes chat transcripts, email correspondence, and any attachments or documents you submit.
As part of the KYC process, we collect copies of government-issued identity documents (such as a national identity card / KTP, passport, or driver's licence), proof of address documents, and payment method ownership evidence. These documents are stored securely and access is strictly limited to authorised compliance personnel.
369zk collects personal data through the following channels:
369zk processes your personal data on one or more of the following legal bases:
| Legal Basis | When It Applies |
|---|---|
| Contractual necessity | Processing required to open your account, process deposits and withdrawals, settle bets, and deliver the services you have contracted with us to provide. |
| Legal obligation | Processing required to comply with anti-money laundering (AML) obligations, KYC regulations, and any applicable reporting requirements under the laws of the jurisdiction in which we are licensed. |
| Legitimate interests | Processing for fraud prevention, security monitoring, responsible gaming oversight, platform analytics, and improving our services — where those interests are not overridden by your privacy rights. |
| Consent | Processing for marketing communications and non-essential cookies, where we have obtained your explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing. |
369zk uses the personal data we collect for the following purposes:
369zk shares personal data with trusted third-party service providers who process data on our behalf as Data Processors. These include payment processing partners (for bank transfers and e-wallet transactions), KYC and identity verification providers, anti-fraud and AML screening services, game studios supplying content to the Platform (such as Pragmatic Play, Evolution Gaming, and PG Soft), and cloud infrastructure and hosting providers. All Data Processors are contractually bound to use your data only for the specific services they provide to us.
We may disclose personal data to competent authorities, regulators, law enforcement bodies, or courts where we are legally required to do so — for example, in response to a valid court order, a regulatory enquiry, or where disclosure is necessary to prevent or report a crime including money laundering or fraud.
In the event of a merger, acquisition, restructuring, or sale of all or part of the Company's assets, personal data held by 369zk may be transferred to the relevant successor entity, subject to equivalent data protection obligations being imposed on that entity.
369zk does not sell, rent, lease, or otherwise trade your personal data to third-party advertisers, data brokers, or marketing platforms. Any sharing of data is strictly limited to the purposes and categories of recipient described in this section.
369zk retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:
| Data Category | Retention Period |
|---|---|
| Account registration data | Duration of account plus 5 years following account closure, to meet AML record-keeping obligations. |
| KYC verification documents | Duration of account plus 5 years following account closure. |
| Transaction and betting records | Duration of account plus 5 years following account closure. |
| Customer support communications | 3 years from the date of the communication. |
| Technical and usage logs | 13 months on a rolling basis, then anonymised for aggregate analytics. |
| Marketing consent records | Until consent is withdrawn, plus 1 year thereafter to demonstrate compliance. |
Following the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where deletion is not immediately possible due to backup schedules or legal hold obligations, data will be isolated and protected until deletion can be completed.
369zk implements a layered approach to data security, incorporating both technical and organisational measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key measures include:
Cookies are small text files stored on your device when you visit the Platform. They enable the site to recognise your browser across sessions, maintain your login state, remember your preferences, and collect usage analytics. 369zk uses both first-party cookies (set directly by our Platform) and limited third-party cookies (set by trusted service providers).
| Category | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly necessary | Session management, authentication, security tokens. Required for the Platform to function. | No — essential for platform operation. |
| Functional | Remembering your language preference, display settings, and last-visited game category. | Yes — disabling may reduce personalisation. |
| Analytics | Aggregate usage data (page views, session duration, navigation paths) used to improve the Platform. Data is anonymised before analysis. | Yes — opt out via browser settings. |
| Fraud prevention | Device fingerprinting and behavioural signals used by our anti-fraud systems to detect suspicious activity. | No — required for security. |
You can control non-essential cookies through your browser settings. Most browsers allow you to block or delete cookies via their privacy or security settings panel. Note that disabling certain cookies may affect the functionality of the Platform — for example, you may be required to log in again on each visit if session cookies are blocked.
As a player whose personal data is processed by 369zk, you hold the following rights. To exercise any of these rights, contact us using the details in Section 15. We will respond within 30 days of receiving a valid request.
Request a copy of the personal data 369zk holds about you, along with information on how it is being processed.
Request correction of any inaccurate or incomplete personal data we hold about you.
Request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to our legal retention obligations.
Request that we limit how we use your data while a dispute about its accuracy or lawfulness is being resolved.
Request your personal data in a structured, commonly used, machine-readable format where processing is based on consent or contractual necessity.
Object to processing based on our legitimate interests, including direct marketing. We will cease processing unless we can demonstrate compelling legitimate grounds.
The 369zk Platform is strictly for adults aged 21 years and over. We do not knowingly collect personal data from any person under the age of 21. Registration by minors is expressly prohibited under our Terms & Conditions. If we discover or are notified that an account has been registered by a person under 21, we will immediately suspend the account, conduct a KYC review, and permanently close the account if the age breach is confirmed. Any balance held in such an account will be subject to forfeiture.
If you believe that a minor has registered an account on 369zk, please contact our support team immediately at the address given in Section 15 so that we can investigate and act promptly.
369zk operates as an international offshore platform. As a result, personal data collected from players in Indonesia may be stored on, or transferred to, servers located outside Indonesia. Where such transfers occur, the Company takes steps to ensure that appropriate safeguards are in place — including contractual protections with Data Processors — to maintain data protection standards equivalent to those applied within the Platform's operating jurisdiction.
By registering an account and using the Platform, you acknowledge and consent to the transfer of your personal data to servers or third-party processors that may be located outside your country of residence, in accordance with the purposes and safeguards described in this Privacy Policy.
369zk reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform services. Material updates will be communicated to registered players via email and/or a prominent notice on the Platform at least 7 days before the revised policy takes effect.
The "Last updated" date at the top of this page will always reflect the most recent revision. We encourage you to review this policy periodically. Your continued use of the Platform following the effective date of any revision constitutes your acceptance of the updated policy.
If you have any questions about this Privacy Policy, wish to exercise a data rights request, or have a concern about how 369zk handles your personal data, please contact our support team. Indonesian-speaking agents are available 24 hours a day, 7 days a week across all Indonesian time zones (WIB, WITA, and WIT).
Support email: [email protected] (plain text — not a clickable link)
Live chat: Available directly on the Platform homepage, open 24/7.
For formal data subject access requests or erasure requests, please email the address above with the subject line "Data Rights Request — [Your Account Username]" and include a copy of your government-issued ID so that we can verify your identity before processing the request.
Review our Terms & Conditions for the full legal framework, check the FAQ for quick answers, or head back to the homepage to explore the platform.