At 999zk, your privacy is not an afterthought — it is a core part of how we build and operate our platform. This Privacy Policy explains exactly what personal data we collect, why we collect it, how we use and protect it, and the rights you hold over your own information.
This Privacy Policy ("Policy") applies to all individuals who access, register on, or otherwise interact with the 999zk Platform, accessible at 999zk.asia. It covers the collection, use, storage, disclosure, and protection of personal data in connection with all services offered by 999zk, including the online casino, sports betting (sportsbook), live casino games, slot games, and all associated customer support interactions.
This Policy is incorporated by reference into the 999zk Terms & Conditions. By registering an account or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree with this Policy, you should not create or continue to use a 999zk account.
This Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which contain additional provisions relevant to account management and Member obligations.
999zk operates as the data controller in respect of all personal data collected through the Platform. As data controller, 999zk determines the purposes and means by which your personal data is processed, and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.
For all privacy-related enquiries, data access requests, or complaints, Members may contact the 999zk Data Protection team at support@999zk.asia with the subject line "Privacy Request". We aim to respond to all privacy-related correspondence within five business days.
999zk collects the following categories of personal data in connection with the provision of its services:
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, KTP / passport number, photo ID image | Account registration, KYC verification, age and identity confirmation |
| Contact Data | Email address, WhatsApp / phone number, city of residence (e.g., Jakarta, Surabaya, Bandung) | Account communications, support, promotional notifications (where opted in) |
| Financial Data | Bank account name and number (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI), e-wallet account identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history in IDR | Deposit processing, withdrawal verification, AML compliance, fraud prevention |
| Technical Data | IP address, device type, browser type and version, operating system, screen resolution, session duration, referral URL | Platform security, fraud detection, performance optimisation, geographic access control |
| Usage Data | Games played, bets placed and settled, wagering history, bonus usage, login timestamps, session duration (WIB) | Responsible gaming monitoring, bonus eligibility, dispute resolution, personalisation |
| Communications Data | Live chat transcripts, email correspondence, WhatsApp message metadata, support ticket content | Customer support, dispute resolution, quality assurance, legal compliance |
| Preference Data | Responsible gaming limits set (deposit limits, session alerts, cooling-off periods), game category preferences, notification opt-in/out status | Responsible gaming tools delivery, personalised experience, marketing preference compliance |
999zk does not collect or store full payment card numbers. Card transactions processed via Visa or Mastercard are handled exclusively through PCI DSS-compliant third-party payment gateways; 999zk receives only a tokenised reference, the card's last four digits, and the card type for reconciliation purposes.
The majority of personal data we hold is provided directly by you during the following interactions:
When you access and use the 999zk Platform, we automatically collect certain technical and usage data through cookies, web beacons, server logs, and similar tracking technologies. This includes your IP address, device identifiers, session activity, and gameplay data. See Section 10 for full details of our cookies and tracking practices.
In limited circumstances, 999zk may receive data about you from third parties, including:
999zk uses personal data strictly for the purposes for which it was collected. The primary purposes are as follows:
999zk processes your personal data on the following legal bases:
999zk shares personal data with carefully selected third-party service providers who process data on our behalf and under our instruction. These include payment processors (handling IDR transactions via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja), identity verification and KYC service providers, game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft), cloud hosting and infrastructure providers, fraud detection and AML screening services, and customer support platform providers.
All third-party service providers are bound by data processing agreements that restrict them to processing your data solely for the purpose of providing services to 999zk, and that require them to maintain appropriate technical and organisational security measures.
999zk may disclose personal data to law enforcement agencies, regulatory authorities, or courts where required to do so by applicable law, a valid legal order, or where 999zk reasonably believes disclosure is necessary to prevent fraud, money laundering, or other criminal activity, or to protect the rights and safety of 999zk, its Members, or third parties.
In the event of a merger, acquisition, restructuring, or sale of all or part of 999zk's business, personal data held by 999zk may be transferred to the relevant successor entity. Where such a transfer occurs, 999zk will notify affected Members via the registered email address associated with their account no fewer than 14 days before the transfer takes effect, and the successor entity will be required to honour the terms of this Privacy Policy.
For the avoidance of doubt, 999zk does not sell, rent, lease, or otherwise commercially exploit your personal data to any third party for that party's own marketing, advertising, profiling, or commercial purposes.
999zk operates as an internationally licensed platform, and some of our service providers — including cloud infrastructure providers and certain game studios — may process your data on servers located outside Indonesia. Where personal data is transferred internationally, 999zk takes steps to ensure that an adequate level of protection is maintained, consistent with the standard of care described in this Policy.
Specifically, international transfers to third-party processors are governed by contractual clauses that require the recipient to apply data protection standards at least equivalent to those applied by 999zk. Where 999zk becomes aware of any international transfer arrangement that no longer provides adequate protection, it will take prompt remedial action, which may include terminating the relevant service provider relationship.
If you would like more information about the specific safeguards applied to any particular international data transfer, please contact us at support@999zk.asia.
999zk implements a layered security architecture to protect your personal data against unauthorised access, loss, alteration, or disclosure. Our security measures include, but are not limited to:
Cookies are small text files placed on your device when you visit a website. They allow the website to recognise your device, remember your preferences, and collect information about how you use the site. 999zk uses first-party cookies (set directly by 999zk) and certain third-party cookies (set by our service providers).
You may control cookie settings through your browser's privacy settings. Most browsers allow you to block or delete cookies; however, blocking strictly necessary cookies will prevent you from logging in to or using the 999zk Platform. For guidance on managing cookies in popular browsers, please refer to your browser's official help documentation. Note that 999zk does not respond to Do Not Track (DNT) browser signals at this time.
999zk retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where anonymisation is applied, the anonymised data may be retained indefinitely for statistical and analytical purposes, as it no longer constitutes personal data.
As a 999zk Member, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at support@999zk.asia with the subject line "Privacy Request — [Right Name]". We will respond within five business days.
Request a copy of all personal data we hold about you, along with information about how it is processed and stored.
Request correction of any inaccurate or incomplete personal data we hold about you, including name, contact details, or bank account information.
Request deletion of your personal data where there is no longer a lawful basis for us to retain it, subject to our legal record-keeping obligations.
Request that we limit how we use your data while a dispute regarding its accuracy or our right to process it is being resolved.
Request your personal data in a structured, commonly used, machine-readable format for transfer to another service provider of your choice.
Object to processing of your data for direct marketing purposes. You may also object to processing based on legitimate interests, subject to our overriding grounds.
Where processing is based on consent (primarily marketing), withdraw that consent at any time without affecting the lawfulness of prior processing.
Lodge a complaint with the relevant data protection authority if you believe your privacy rights have been violated and we have failed to resolve the matter satisfactorily.
The 999zk Platform is strictly for adults aged 21 years and over. We do not knowingly collect or process personal data belonging to individuals under the age of 21. Any account found to have been registered by or on behalf of a person under 21 will be immediately suspended, all associated data will be retained only to the extent required by our legal obligations, and all deposits will be returned where legally permissible.
Parents and guardians in Indonesia who are concerned about a minor accessing online gambling platforms are strongly encouraged to install appropriate parental control software on shared devices and to maintain awareness of their children's online activities. Should you discover that a minor has registered an account on the 999zk Platform, please contact us immediately at support@999zk.asia so that we may take prompt action.
999zk's age verification process — conducted as part of KYC — requires submission of a valid government-issued identification document confirming the Member's date of birth. This document is cross-referenced against the date of birth provided at registration. Accounts that cannot confirm eligibility will not be permitted to make withdrawals.
The 999zk Platform may contain references to or integrations with third-party services, including game studios (Pragmatic Play, Evolution Gaming, Spribe, etc.) and payment providers (BCA, BRI, OVO, DANA, GoPay, etc.). While 999zk selects its partners with care and requires them to maintain appropriate data security standards via contractual agreements, this Privacy Policy does not extend to the data practices of third-party platforms or services once you navigate away from 999zk or interact directly with a third-party service.
999zk accepts no responsibility for the privacy practices of third-party websites or services that are accessed through or in connection with the 999zk Platform. We encourage all Members to review the privacy policies of any third-party service they use in connection with their gambling activities.
999zk reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, where we introduce a new category of data collection, a new purpose for processing, or a new third-party recipient — we will notify all active Members via the registered email address associated with their account no fewer than 14 days before the revised Policy takes effect.
Minor amendments — such as typographical corrections, clarifications that do not alter the substance of Member rights or our data practices, or updates to reflect changes in service provider names — may take effect immediately upon publication on this page. The "Last Updated" date at the top of this Policy will always reflect the date of the most recent revision.
Continued use of the 999zk Platform following the effective date of any amendment to this Policy constitutes your acceptance of the revised terms. If you do not agree with any amendment, you should cease using the Platform and request account closure by contacting support@999zk.asia prior to the amendment's effective date.
For all privacy-related enquiries, data access or deletion requests, consent withdrawals, or complaints, please contact the 999zk Data Protection team using the details below. All communications should include your registered username and a clear description of your request to help us respond efficiently.
999zk's support team is fluent in both English and Bahasa Indonesia. Formal legal notices and data subject requests should be submitted in writing via email to ensure they are properly logged, tracked, and escalated to the appropriate team member.
Beyond the legal text, here is what our privacy commitments look like in practice — for every Member across Jakarta, Surabaya, Bandung, Bali, and beyond.
Every byte of data transmitted between your device and 999zk is protected by 256-bit SSL/TLS encryption — the same standard used by BCA and Mandiri internet banking. Your identity documents and financial records are further encrypted at rest using AES-256.
Your personal data is never sold, rented, or commercially shared with third parties for their own marketing purposes. 999zk collects only what is necessary to operate your account, process IDR transactions, and meet our legal obligations.
Full card numbers from Visa and Mastercard transactions are never stored on 999zk servers. Payments are processed via PCI DSS-compliant gateways. Local bank and e-wallet transactions (OVO, DANA, GoPay) are handled through verified Indonesian payment rails.
Identity verification is a one-time requirement before your first withdrawal. We explain exactly which documents are needed (KTP or passport), how they are stored, and when they will be deleted — no ambiguity, no hidden data collection.
You decide what marketing you receive. Opt out of promotional emails and WhatsApp messages at any time — your preference is updated within 30 days. Responsible gaming limits, self-exclusion, and account closure requests are also honoured promptly and permanently.
Our dedicated support team — fluent in both English and Bahasa Indonesia — is available around the clock via Live Chat to handle privacy questions, data access requests, and account security concerns. Formal written requests receive a documented response within five business days.
Your data is protected. Your transactions are secure. Your privacy rights are respected. Explore everything 999zk has to offer — from live casino tables to sportsbook markets on BRI Liga 1 and the EPL.