Privacy Policy

zk6com is committed to protecting the privacy and personal data of all Users who interact with our platform. We understand that our players trust us with sensitive information — including identity documents, financial transaction records, and gameplay data — and we take that responsibility seriously.

This Policy explains in clear, plain English how zk6com collects, processes, stores, shares, and protects personal data. It also explains what rights you have in relation to your data and how you can exercise them. We are committed to handling all personal data in accordance with applicable data protection principles, including purpose limitation, data minimization, accuracy, storage limitation, integrity, and confidentiality.

If you have any questions about this Policy or your personal data, you may contact our privacy team at any time. Contact details are provided in Section 15.

• "Personal Data" — Any information that identifies or could reasonably be used to identify a natural person, directly or indirectly. This includes name, email address, phone number, national identity number, IP address, and device identifiers.
• "Processing" — Any operation performed on personal data, including collection, recording, storage, alteration, retrieval, use, disclosure, or deletion.
• "Data Controller" — zk6com, as the entity that determines the purposes and means of processing personal data.
• "Data Processor" — A third party that processes personal data on behalf of zk6com under a contractual data-processing agreement (e.g., payment processors, KYC verification providers).
• "User" / "you" — Any individual who registers an account or otherwise interacts with the zk6com Platform.
• "KYC" — Know Your Customer: the identity and address verification process required before withdrawal of funds.
• "Cookies" — Small text files stored on your device by your browser when you visit the Platform, used to maintain session state and analyze usage patterns.

zk6com collects the following categories of personal data from Users. We collect only what is necessary for the purposes described in this Policy.

zk6com collects personal data through the following channels:

• Direct submission: When you register an account, complete KYC verification, make a deposit or withdrawal request, contact customer support, or participate in a promotion, you provide personal data directly to us.
• Automated technical collection: When you access and use the Platform, certain technical data is collected automatically via server logs, cookies, and similar tracking technologies. This includes your IP address, device type, browser fingerprint, and session activity.
• Payment processors: When you transact via BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, or ShopeePay, our payment processing partners share transaction confirmation data with us to reconcile your account Balance.
• Third-party verification providers: Our KYC and fraud-prevention partners may provide supplementary identity verification signals when you submit documents for account verification.
• Game providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may share session-level gameplay data with us to resolve disputes and ensure fair play.

zk6com processes your personal data for the following clearly defined purposes. We will not use your data for any purpose that is incompatible with those listed here without first notifying you and, where required, obtaining your consent.

• Account Management: Creating, maintaining, and securing your zk6com account, including authentication, password reset, and account closure procedures.
• Identity Verification (KYC): Confirming that you meet eligibility requirements — including the mandatory 21+ age restriction — before releasing withdrawal funds and as required by our licensing obligations.
• Transaction Processing: Executing and reconciling deposit and withdrawal transactions via supported payment methods, and maintaining accurate financial records.
• Fraud Prevention and AML Compliance: Detecting and investigating suspicious account activity, money laundering, and other forms of financial crime. Reporting to relevant authorities where legally required.
• Customer Support: Responding to inquiries, complaints, and technical support requests submitted via email or live chat.
• Platform Improvement: Analyzing aggregated usage data to improve the Platform's performance, game selection, payment options, and user experience.
• Responsible Gaming Monitoring: Tracking wagering patterns to identify potential problem gambling behavior and administering self-exclusion, deposit limits, and cooling-off tools.
• Marketing Communications: Sending promotional emails and in-platform notifications about bonuses, seasonal offers (including Idul Fitri, Imlek, and Indonesian Independence Day promotions), and new features — only where you have opted in to receive such communications.
• Legal and Regulatory Compliance: Fulfilling obligations imposed by applicable law, licensing requirements, and court or regulatory orders.

zk6com processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing that is necessary to perform our contract with you (the Terms & Conditions), including account registration, transaction processing, and customer support.
• Legal Obligation: Processing that is required by applicable law or regulation, including KYC identity verification, anti-money laundering (AML) checks, and regulatory reporting obligations.
• Legitimate Interests: Processing undertaken to pursue the legitimate business interests of zk6com, including fraud prevention, platform security, responsible gaming monitoring, and system analytics — provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for marketing communications and non-essential cookies. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

zk6com does not sell or rent your personal data to third parties. We may share your personal data only in the following strictly defined circumstances:

• Payment Processors: We share financial data with payment processing partners (including the processors behind BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, and ShopeePay) solely to execute and verify your transactions. These partners are contractually bound to process data only for payment purposes.
• KYC and Verification Providers: Approved identity verification and fraud-screening partners receive copies of your KYC documents under strict data-processing agreements. They may not use this data for any purpose other than verifying your identity for zk6com.
• Game Studio Providers: Gameplay session data may be shared with licensed game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft) for dispute resolution and game integrity auditing.
• Legal and Regulatory Authorities: We may disclose personal data to law enforcement, financial intelligence units, or regulatory bodies where required by applicable law, court order, or regulatory directive. We will notify you of such disclosures where legally permitted to do so.
• Corporate Transactions: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections. You will be notified in advance of any such transfer.

zk6com retains personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of your active Account, plus a minimum of 5 years following Account closure, to comply with AML record-keeping requirements.
• KYC documentation: Retained for a minimum of 5 years from the date of verification, or longer if required by regulatory obligation.
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Customer support correspondence: Retained for 3 years from the date of the last interaction.
• Marketing consent records: Retained for as long as you remain opted in, plus 3 years following opt-out, as evidence of prior consent.
• Technical and usage data (logs): Retained for 12 months in an identifiable form, after which data is aggregated and anonymized for analytical purposes.

When personal data is no longer required, it is securely deleted or anonymized in accordance with our internal data disposal procedures.

zk6com implements a layered set of technical and organizational security measures to protect your personal data against unauthorized access, loss, destruction, or alteration. These measures include:

• Encryption in transit: All data transmitted between your device and zk6com servers is protected by TLS 1.2 or higher (256-bit SSL encryption).
• Encryption at rest: Sensitive personal data and KYC documents stored on our servers are encrypted using AES-256 or equivalent standards.
• Access controls: Access to personal data is restricted to authorized personnel on a strict need-to-know basis. All access is logged and audited.
• Two-factor authentication: Critical internal systems require multi-factor authentication for all administrative users.
• Intrusion detection and monitoring: Our infrastructure is monitored 24/7 for anomalous activity, with automated alerts and incident response protocols in place.
• Third-party security audits: zk6com undergoes periodic independent security assessments and penetration testing.

Despite these measures, no transmission over the internet or electronic storage method is 100% secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, zk6com will notify affected Users without undue delay in accordance with applicable law.

zk6com uses cookies and similar technologies to operate and improve the Platform. The following types of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session management cookies that keep you logged in and security cookies that prevent cross-site request forgery. These cannot be disabled.
• Functional Cookies: Remember your preferences (such as language settings and game display options) to provide a more personalized experience. These are active by default but can be disabled via your browser settings.
• Analytics Cookies: Collect aggregated, anonymized data about how Users navigate the Platform (pages visited, time on site, entry and exit points). This data is used solely to improve Platform performance. Analytics cookies are only placed with your consent.
• Security and Fraud Prevention Cookies: Used by our risk management systems to detect and prevent fraudulent activity, bot traffic, and account takeover attempts. These are strictly necessary and cannot be disabled.

You can manage your cookie preferences at any time through your browser's settings. Disabling functional or analytics cookies may affect the quality of your experience on the Platform. Disabling strictly necessary cookies will prevent the Platform from functioning correctly.

As a User of zk6com, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receiving a valid request.

The zk6com Platform is strictly intended for adults aged 21 years and over. We do not knowingly collect or process personal data from individuals under the age of 21. Age verification is a mandatory step in the KYC process, and all accounts are subject to age confirmation before withdrawal privileges are activated.

If zk6com discovers or has reasonable grounds to believe that personal data has been collected from a minor, the affected Account will be immediately suspended, all balances forfeited, and the personal data deleted from our systems as promptly as possible. If you are a parent or guardian and believe your child has opened an account on zk6com, please contact us immediately at [email protected].

zk6com primarily serves Users in Indonesia and stores data on servers located in jurisdictions that maintain appropriate data protection standards. In limited circumstances, personal data may be transferred to or accessed by service providers located outside Indonesia, including KYC verification partners and game studio providers operating internationally.

Where international data transfers occur, zk6com ensures that adequate safeguards are in place, which may include:

• Contractual data-processing agreements incorporating standard data protection clauses.
• Transfers only to jurisdictions recognized as providing an adequate level of data protection.
• Technical safeguards including end-to-end encryption for all cross-border data flows.

By using the zk6com Platform, you acknowledge and consent to the international transfer of your personal data as described in this section, subject to the safeguards set out above.

zk6com reviews this Privacy Policy at least annually and may update it to reflect changes in our data practices, Platform features, applicable law, or regulatory requirements. The following process applies when this Policy is amended:

• The "Last Updated" date at the top of this page will be revised to reflect the effective date of the most recent version.
• For material amendments — those that significantly affect your rights or the way we process your personal data — we will notify registered Users via email to their registered address at least 14 days before the changes take effect.
• For minor or administrative amendments, the updated Policy will be published on this page without advance notice, and continued use of the Platform constitutes acceptance.
• If you do not agree to an amended Privacy Policy, you may request Account closure by contacting [email protected] before the effective date of the changes.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by zk6com, please contact our privacy team using the details below. We are committed to responding to all privacy-related inquiries within 30 days.

• Privacy & Data Protection Email: [email protected]
• Subject Line: Please use "Privacy Policy Inquiry" or "Data Rights Request" to ensure prompt routing to the correct team.
• Support Hours: 24 hours a day, 7 days a week (including Indonesian public holidays)
• Response Commitment: General privacy inquiries — within 5 business days. Formal data rights requests — within 30 calendar days.
• Platform: https://zk6com.cam