Privacy Policy

1. Introduction

39zk ("we", "us", "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you register for an Account, access our gaming platform at https://39zk.cam, place bets, or otherwise interact with our services. This Policy applies to all Indonesian users and residents who engage with 39zk services.

By creating an Account or using the 39zk platform, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy. If you do not agree with any aspect of this Policy, you must immediately discontinue use of our services and close your Account.

39zk operates under international gaming regulations and maintains data processing standards consistent with global best practices. We recognize the sensitivity of personal and financial information in the Indonesian market and have implemented comprehensive security measures to safeguard your data against unauthorized access, misuse, or disclosure.

2. Information We Collect

2.1 Information You Provide Directly

When you register for a 39zk Account, we collect the following personal information:

• Identity Information: Full legal name as it appears on your Indonesian National Identity Card (KTP) or passport, date of birth, nationality, and government-issued identification number.
• Contact Information: Residential address, email address, and mobile phone number registered in Indonesia.
• Account Credentials: Username, password (stored in encrypted form), and security questions for Account recovery.
• Financial Information: Indonesian bank account details (bank name, account number, account holder name) for BCA, BRI, BNI, Mandiri, or other supported banks; e-wallet account information for OVO, DANA, GoPay, ShopeePay, or LinkAja; transaction history including deposits, withdrawals, and payment method details.
• Verification Documents: Scanned copies or photographs of your Indonesian National Identity Card (KTP) or passport, selfie photographs holding your ID for KYC verification, and proof of address documents such as utility bills, bank statements, or government correspondence dated within the last 3 months.

2.2 Information Collected Automatically

When you access the 39zk platform, we automatically collect certain technical and usage information:

• Device Information: Device type (mobile, tablet, desktop), operating system (Android, iOS, Windows, macOS), browser type and version, screen resolution, and device identifiers.
• Connection Data: IP address, internet service provider (ISP), geographic location (city and region, but not precise GPS coordinates), and time zone settings.
• Usage Data: Pages visited, time spent on each page, clickstream data, games played, bets placed (stake amount, odds, outcomes), session duration, and feature interactions.
• Cookies and Tracking Technologies: Session cookies, persistent cookies, web beacons, and similar tracking technologies to enhance user experience and analyze platform usage patterns. See Section 9 for detailed cookie information.

2.3 Information from Third Parties

We may receive information about you from third-party sources including payment processors (Indonesian banks and e-wallet providers) to verify transaction authenticity, KYC verification service providers to confirm identity document legitimacy, fraud prevention services to detect suspicious Account activity, and game providers (Pragmatic Play, Evolution Gaming, etc.) regarding gameplay data and RTP statistics.

3. How We Use Your Information

39zk uses the personal information we collect for the following purposes:

• Account Management: Creating and maintaining your 39zk Account, authenticating your identity when you log in, processing Account updates or closure requests, and managing communication preferences.
• KYC and Compliance: Verifying your identity to comply with anti-money laundering (AML) regulations, confirming you meet the minimum age requirement of 21 years, detecting and preventing fraudulent activity, multiple Account creation, or identity theft, and fulfilling legal obligations under international gaming regulations.
• Payment Processing: Processing deposits from Indonesian bank accounts (BCA, BRI, BNI, Mandiri) and e-wallets (OVO, DANA, GoPay), executing withdrawal requests to your verified payment methods, reconciling transactions and maintaining accurate financial records, and preventing chargebacks and payment fraud.
• Service Delivery: Providing access to casino games, live dealer tables, sports betting markets, and togel lottery betting, calculating bet outcomes and crediting winnings to your Account, delivering promotional offers and bonuses tailored to your gaming preferences, and providing customer support via live chat, email, WhatsApp, and in-app messaging.
• Security and Fraud Prevention: Monitoring for unusual Account activity or suspicious betting patterns, detecting bot usage, automated betting scripts, or collusion, protecting against cyberattacks, data breaches, and unauthorized access, and enforcing our Terms and Conditions and Responsible Gaming policies.
• Platform Improvement: Analyzing usage patterns to optimize platform performance and user interface design, conducting A/B testing on features and promotional campaigns, identifying and fixing technical issues or bugs, and developing new games and features based on User preferences.
• Marketing Communications: Sending promotional emails about bonuses, tournaments, and special offers (you may opt out at any time), notifying you about platform updates, policy changes, or service disruptions, and conducting customer satisfaction surveys to improve our services.
• Legal Compliance: Responding to legal requests from law enforcement or regulatory authorities, complying with court orders, subpoenas, or other legal processes, and enforcing our Terms and Conditions and resolving disputes through arbitration or litigation.

4. Legal Basis for Data Processing

Under international data protection principles, 39zk processes your personal information based on the following legal grounds:

• Contractual Necessity: Processing is necessary to fulfill our contractual obligations under the Terms and Conditions, including Account creation, payment processing, and service delivery.
• Legal Obligation: Processing is required to comply with anti-money laundering (AML) regulations, KYC requirements, age verification laws, and other applicable legal mandates.
• Legitimate Interests: Processing serves 39zk's legitimate business interests in fraud prevention, security enhancement, platform optimization, and marketing, provided these interests do not override your fundamental privacy rights.
• Consent: Where required by law, we obtain your explicit consent before processing certain categories of personal data, such as marketing communications or optional data collection activities.

5. How We Share Your Information

39zk does not sell, rent, or trade your personal information to third parties for their independent marketing purposes. However, we may share your information with the following categories of recipients under strict confidentiality obligations:

5.1 Service Providers

We share data with trusted third-party service providers who assist in operating our platform:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process deposits and withdrawals.
• Game Providers: Pragmatic Play, Evolution Gaming, Play'n GO, NetEnt, Microgaming, and other game studios to deliver casino games, live dealer tables, and slots.
• KYC Verification Services: Specialized identity verification providers to authenticate government-issued ID documents and detect fraudulent submissions.
• Cloud Storage Providers: Secure cloud infrastructure providers to store encrypted copies of your Account data and transaction history.
• Customer Support Tools: Live chat platforms, email service providers, and ticketing systems to deliver responsive customer service.
• Analytics Providers: Web analytics services to understand user behavior and improve platform performance.

5.2 Legal and Regulatory Authorities

We may disclose your information to law enforcement agencies, regulatory bodies, or courts when required by law, in response to valid legal requests (subpoenas, court orders, search warrants), to investigate or prevent suspected illegal activity, fraud, or threats to public safety, or to protect 39zk's legal rights in disputes or litigation.

5.3 Business Transfers

In the event of a merger, acquisition, asset sale, or other corporate restructuring involving 39zk, your personal information may be transferred to the acquiring entity, subject to the same privacy protections outlined in this Policy.

6. Data Security Measures

39zk employs industry-standard security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction:

• SSL Encryption: All data transmitted between your device and our servers is protected by 256-bit SSL (Secure Socket Layer) encryption, the same standard used by major Indonesian banks.
• Encrypted Storage: Sensitive personal data and financial information are stored in encrypted databases with access restricted to authorized personnel only.
• Two-Factor Authentication (2FA): Optional 2FA adds an extra layer of security to your Account login by requiring a time-based one-time password in addition to your password.
• Secure Payment Processing: Payment transactions are processed through PCI-DSS compliant systems that never expose full bank account or card details to 39zk staff.
• Access Controls: Role-based access controls limit employee access to personal data on a need-to-know basis, with comprehensive audit logs tracking all data access.
• Regular Security Audits: Independent security firms conduct periodic penetration testing and vulnerability assessments to identify and remediate potential weaknesses.
• Fraud Monitoring: Real-time fraud detection systems analyze betting patterns, login locations, and transaction behaviors to flag suspicious activity.

Despite these safeguards, no method of electronic transmission or storage is 100% secure. While we strive to protect your data using commercially reasonable means, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your Account credentials and should never share your password with anyone.

7. Data Retention

39zk retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law:

• Active Accounts: Data is retained for the duration of your Account's active status and for a reasonable period thereafter to allow for Account reactivation.
• Closed Accounts: After Account closure, we retain certain personal information (name, date of birth, KYC documents, transaction history) for 7 years to comply with anti-money laundering regulations, tax reporting requirements, and potential legal disputes.
• Marketing Data: If you opt out of marketing communications, we retain your email address on a suppression list to ensure you do not receive future promotional messages.
• Technical Logs: Server logs, IP addresses, and usage data are typically retained for 12-24 months for security monitoring and platform optimization purposes.

Upon expiration of the retention period, personal information is securely deleted or anonymized so that it can no longer be associated with you as an individual.

8. Your Privacy Rights

As a 39zk User, you have the following rights regarding your personal information:

• Right to Access: You may request a copy of the personal data we hold about you by contacting customer support. We will provide this information in a commonly used electronic format within 30 days.
• Right to Rectification: If your personal information is inaccurate or incomplete, you may update it directly in your Account settings or request corrections through customer support.
• Right to Erasure: You may request deletion of your personal data, subject to our legal obligations to retain certain information for AML compliance, tax reporting, and dispute resolution (typically 7 years).
• Right to Restrict Processing: You may request that we limit how we process your data in certain circumstances, such as while we verify the accuracy of disputed information.
• Right to Data Portability: You may request a copy of your personal data in a structured, machine-readable format for transfer to another service provider.
• Right to Object: You may object to processing based on legitimate interests, including direct marketing communications. Use the "unsubscribe" link in promotional emails or contact customer support.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

To exercise any of these rights, contact 39zk customer support at [email protected] or via live chat. We may require identity verification before processing your request to protect against fraudulent requests.

9. Cookies and Tracking Technologies

39zk uses cookies and similar tracking technologies to enhance your browsing experience and analyze platform usage. Cookies are small text files stored on your device that allow us to recognize you on subsequent visits.

9.1 Types of Cookies We Use

Cookie Type	Purpose	Duration
Essential Cookies	Required for basic platform functionality, login authentication, and security. Cannot be disabled.	Session / Persistent
Performance Cookies	Collect anonymous usage statistics to optimize platform performance and identify technical issues.	Persistent (up to 2 years)
Functionality Cookies	Remember your preferences (language, currency display, game filters) for enhanced user experience.	Persistent (up to 1 year)
Targeting Cookies	Track your gaming preferences to deliver personalized bonus offers and game recommendations.	Persistent (up to 1 year)

9.2 Managing Cookies

You can manage cookie preferences through your browser settings. Most browsers allow you to block all cookies, accept only first-party cookies, or receive notifications when cookies are set. Note that disabling essential cookies may prevent you from accessing certain platform features or logging into your Account. Refer to your browser's help documentation for specific instructions on managing cookies.

10. Third-Party Links

The 39zk platform may contain links to external websites operated by game providers, payment processors, or other third parties. This Privacy Policy applies only to information collected by 39zk. We are not responsible for the privacy practices or content of third-party websites. We encourage you to review the privacy policies of any external sites you visit.

11. Children's Privacy

39zk services are strictly intended for adults aged 21 years or older. We do not knowingly collect personal information from individuals under 21. Age verification is mandatory through KYC documentation. If we discover that a User is under 21, we will immediately suspend the Account, void all bets, return deposited funds (minus bonuses and winnings), and delete associated personal data. Parents or guardians who believe their child has registered an Account should contact us immediately at [email protected].

12. International Data Transfers

39zk operates internationally and may transfer your personal information to servers located outside Indonesia for processing and storage. When we transfer data internationally, we implement appropriate safeguards to ensure your information receives an equivalent level of protection, including standard contractual clauses approved by international data protection authorities, encryption during transmission and storage, and agreements with third-party processors requiring compliance with data protection standards.

13. Changes to This Privacy Policy

39zk reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform features. Material changes will be communicated via email to your registered email address and prominently displayed on the Website. The "Last Updated" date at the top of this Policy indicates when the most recent changes were made. Continued use of the platform after amendments become effective constitutes acceptance of the revised Policy. We encourage you to review this Privacy Policy periodically.

14. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or how 39zk handles your personal information, please contact us through the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 on the 39zk website
• WhatsApp: +62 812-3456-7890 (08:00-24:00 WIB daily)

We will respond to all privacy-related inquiries within 30 days. For urgent security concerns or suspected data breaches, please contact us immediately via live chat or email with "URGENT - SECURITY" in the subject line.