zk1177 is committed to protecting the personal data of every Member. This Privacy Policy explains precisely what information we collect, why we collect it, how it is used and stored, and what rights you hold over your own data.
Six principles that guide how zk1177 handles your personal information every single day.
We collect only the information strictly necessary to provide our services, verify your identity through KYC, and process payments via Indonesian banking channels. We do not gather unnecessary data for data's sake.
zk1177 does not sell, rent, or trade your personal data to advertising networks, data brokers, or any third party for marketing purposes. Your information is never monetised beyond delivering our platform services.
All data transmitted between your device and zk1177 is protected by 256-bit SSL/TLS encryption — the same standard used by BCA, BRI, and Mandiri online banking. Data at rest is encrypted using AES-256.
You have the right to access, correct, export, and request deletion of your personal data at any time. zk1177 processes all data rights requests within 30 days of receipt, in line with internationally recognised privacy standards.
We retain personal data only for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable law. Account data is deleted or anonymised within 90 days of confirmed account closure.
In the unlikely event of a data security incident affecting your personal information, zk1177 will notify affected Members promptly — within 72 hours of becoming aware — along with details of the incident and recommended protective actions.
The following terms carry specific meanings throughout this Privacy Policy:
The Data Controller responsible for your Personal Data is the legal entity operating the zk1177 platform under its international gaming licence. zk1177 is the primary point of contact for all data privacy matters, including access requests, correction requests, deletion requests, and complaints.
For all privacy-related enquiries, please contact our Data Protection team using the details provided in Clause 15 of this Policy. We aim to respond to all data rights requests within 30 calendar days of receipt.
zk1177 collects Personal Data across several categories, depending on how you interact with our platform. The following table provides a structured overview of the data categories we process:
| Data Category | Examples | Collected When |
|---|---|---|
| Identity Data | Full legal name, date of birth, Indonesian national ID (KTP) number, gender | Registration & KYC verification |
| Contact Data | Email address, WhatsApp number, residential address in Indonesia | Registration & account updates |
| Financial Data | Bank account number, e-wallet identifier (OVO, DANA, GoPay), transaction history, deposit/withdrawal amounts in IDR | Payment processing |
| KYC Documentation | Scanned KTP photograph, selfie with KTP, proof of address document | Identity verification |
| Technical Data | IP address, browser type and version, device type, operating system, session timestamps, geolocation (city-level) | Platform access & security monitoring |
| Usage Data | Pages visited, games played, bet amounts and outcomes, bonus claims, session duration | Continuous during platform use |
| Communication Data | Live chat transcripts, support email correspondence, feedback submissions | Customer support interactions |
| Preference Data | Responsible gaming settings (deposit limits, self-exclusion status, session reminders), preferred payment methods | Account settings management |
We do not intentionally collect special categories of sensitive Personal Data (such as racial or ethnic origin, political opinions, religious beliefs, or health information) unless directly relevant to a responsible gaming assessment requested by the Member.
The majority of Personal Data we hold is provided directly by you during the following interactions:
When you access and use the zk1177 platform, certain Technical Data and Usage Data is collected automatically through cookies, server logs, and similar tracking technologies. This includes your IP address, device identifiers, browser configuration, pages visited, and gameplay activity. This automated collection is necessary for platform security, fraud prevention, and service optimisation.
In limited circumstances, zk1177 may receive Personal Data about you from trusted third-party sources, including:
zk1177 processes your Personal Data only where a valid legal basis exists. The applicable legal bases are as follows:
Processing is necessary to perform the contract between you and zk1177 — specifically, to create and manage your account, process deposits and withdrawals via Indonesian Banking Channels, settle bets, and provide the gaming services you have requested. Without this processing, we would be unable to deliver the platform's core functionality.
Certain processing activities are required by law, including KYC identity verification to satisfy Anti-Money Laundering (AML) obligations, age verification to enforce the 21+ eligibility requirement, and transaction record-keeping for regulatory audit purposes.
zk1177 processes certain data on the basis of its legitimate business interests, including platform security monitoring, fraud detection, responsible gaming enforcement, and service improvement through anonymised analytics. We conduct a balancing assessment to ensure our legitimate interests do not override your fundamental privacy rights.
Where required, we will seek your explicit consent before processing your Personal Data — for example, before sending you optional promotional communications. You may withdraw consent at any time by contacting [email protected] or adjusting your account notification preferences. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
zk1177 processes your Personal Data for the following specific purposes:
zk1177 shares Personal Data with carefully vetted third-party service providers who process data strictly on our behalf and under our instructions. These include cloud infrastructure providers, KYC verification platforms, payment processing partners (including Indonesian Banking Channels), fraud detection services, and customer support software vendors. All Data Processors are contractually bound to maintain the confidentiality and security of your data and are prohibited from using it for any purpose other than the service they provide to zk1177.
zk1177 may disclose Personal Data to law enforcement agencies, regulatory bodies, or other government authorities where required to do so by applicable law, court order, or regulatory directive. We will disclose only the minimum data necessary to satisfy the legal requirement and, where legally permissible, will notify the affected Member of such disclosure.
In the event of a merger, acquisition, asset sale, or restructuring of the zk1177 business, Personal Data held about Members may be transferred to the acquiring or successor entity. In such circumstances, zk1177 will provide advance notice to affected Members and will ensure that the receiving entity is bound by privacy obligations no less protective than those set out in this Policy.
The zk1177 platform uses the following categories of cookies and similar tracking technologies:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential Cookies | Maintain your login session, remember your language preference, and enable core platform functionality. These cannot be disabled without impairing your ability to use the platform. | Session / up to 30 days |
| Security Cookies | Detect and prevent fraudulent activity, bot traffic, and unauthorised account access attempts. | Session / up to 7 days |
| Analytics Cookies | Collect anonymised data about how Members navigate the platform to help us identify usability issues and improve the service. No personally identifiable information is included in analytics reports. | Up to 13 months |
| Preference Cookies | Remember your platform preferences, such as your preferred deposit method or responsible gaming settings, so you do not need to re-enter them on each visit. | Up to 12 months |
You can control and manage cookies through your browser settings. Most modern browsers allow you to view, delete, and block cookies from specific or all websites. Please note that disabling essential or security cookies will significantly impair your ability to use the zk1177 platform, including logging in and completing financial transactions. Detailed instructions for managing cookies in popular browsers (Chrome, Firefox, Safari, Edge) are available in each browser's help documentation.
As an internationally operated platform, zk1177 may transfer your Personal Data to Data Processors located outside of Indonesia. Such transfers are necessary to enable services such as cloud hosting, KYC verification, and fraud screening, which are provided by globally operating vendors.
Whenever Personal Data is transferred internationally, zk1177 ensures that adequate safeguards are in place to protect your data to a standard equivalent to that described in this Policy. These safeguards may include contractual clauses, data processing agreements, or the use of vendors located in jurisdictions with recognised data protection standards.
zk1177 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following retention periods apply as a general guide:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years post-closure | AML / regulatory compliance |
| Financial Transaction Records | 7 years from the date of transaction | Financial record-keeping obligations |
| KYC Documentation | Duration of account + 5 years post-closure | AML / regulatory compliance |
| Support Communications | 3 years from the date of interaction | Dispute resolution & quality assurance |
| Technical & Usage Logs | 13 months from collection | Security monitoring & analytics |
| Marketing Preferences | Until opt-out or account closure | Consent-based processing |
Upon expiry of the applicable retention period, Personal Data is either securely deleted or irreversibly anonymised. Anonymised data — from which no individual can be identified — may be retained indefinitely for statistical and research purposes.
As a Member of zk1177, you hold the following rights with respect to your Personal Data. These rights may be exercised at any time by contacting us at [email protected] with the subject line "DATA PRIVACY REQUEST":
Right of Access
Request a copy of all Personal Data we hold about you, along with information on how it is processed.
Right to Rectification
Request correction of any inaccurate or incomplete Personal Data held in your account.
Right to Erasure
Request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal obligations.
Right to Restrict Processing
Request that we temporarily suspend processing of your data while the accuracy or lawfulness of the processing is under review.
Right to Data Portability
Receive a structured, machine-readable copy of your Personal Data for transfer to another service provider where technically feasible.
Right to Object
Object to processing carried out on the basis of legitimate interests, including profiling for responsible gaming assessments.
Right to Withdraw Consent
Withdraw consent for any processing activity based on consent (e.g., promotional emails) at any time without penalty.
Right to Lodge a Complaint
File a complaint with the relevant data protection authority if you believe your privacy rights have been infringed.
zk1177 will respond to all data rights requests within 30 calendar days. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it. We may need to verify your identity before processing a data rights request to prevent unauthorised access to your information.
zk1177 implements a comprehensive, multi-layered security framework to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction. Our security measures include:
The zk1177 platform is strictly intended for individuals who are at least 21 years of age. We do not knowingly collect Personal Data from individuals under the age of 21. Age verification is a mandatory component of the KYC process, and any account found to be registered by a person under the age of 21 will be immediately terminated and all associated data will be securely deleted, except where retention is required by applicable law.
If you are a parent or guardian and believe that a minor has registered on zk1177 without your consent, please contact us immediately at [email protected] so that we can investigate and take appropriate action.
zk1177 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or business operations. Where changes are material, we will notify active Members via the email address registered to their account or through a prominent in-platform notification at least 14 days before the changes take effect.
The "Last Updated" date displayed at the top of this page will always reflect the date of the most recent revision. We encourage you to review this Policy periodically to stay informed about how we protect your Personal Data. Your continued use of the zk1177 platform following the effective date of any amendment constitutes your acknowledgement of the updated Policy.
For any questions, concerns, or formal requests relating to this Privacy Policy or the processing of your Personal Data by zk1177, please contact our Data Protection team using the information below. We are committed to resolving all privacy enquiries promptly and transparently.
Data Protection Email:
Subject Line:
Please use "DATA PRIVACY REQUEST" for data rights requests or "PRIVACY COMPLAINT" for formal complaints to ensure your message is routed to the correct team.
Response Time:
We aim to acknowledge all privacy enquiries within 24 hours (WIB) and provide a substantive response within 30 calendar days.
If you are not satisfied with our response to your privacy complaint, you have the right to escalate the matter to the relevant data protection authority in the jurisdiction governing zk1177's operating licence. Details of the relevant authority will be provided upon request.
For questions about our gaming terms, please review our Terms & Conditions. For common questions about deposits, withdrawals, and account management, visit our FAQ page.
Our support team is available 24 hours a day, 7 days a week to address any privacy concerns. You can also explore our full Terms & Conditions or visit the FAQ for quick answers.