Privacy Policy

Throughout this Privacy Policy, the following terms carry the meanings defined below:

• "Personal Data" means any information that identifies or could reasonably be used to identify a natural person, including name, date of birth, national identity number, contact details, financial data, device identifiers, and behavioral data linked to an identifiable individual.
• "Processing" means any operation performed on Personal Data, whether automated or manual — including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Controller" means zk7apk, the entity that determines the purposes and means of processing your Personal Data.
• "Member" means any individual who has registered a verified account on the Platform.
• "Platform" means the zk7apk website accessible at zk7apk.net, including all subdomains, mobile-optimized versions, and any associated applications.
• "KYC" means Know Your Customer — the identity and address verification procedures zk7apk is required to conduct before processing withdrawals or fulfilling certain compliance obligations.
• "Third-Party Service Provider" means any external company engaged by zk7apk to perform specific processing functions on our behalf, such as payment processors, fraud detection vendors, game studios, and analytics providers.
• "Cookie" means a small text file placed on your device by the Platform to store session state, preferences, and behavioral data for functionality and analytics purposes.
• "WIB" means Western Indonesia Time (UTC+7), the primary time zone used for all Platform operating references.

zk7apk collects only the Personal Data that is necessary for the legitimate operation of the Platform, fulfilment of our legal obligations, and delivery of a secure, personalised gaming experience to Members. The categories of data we collect include:

We collect Personal Data through the following channels:

• Direct provision: When you register an account, complete KYC verification, make a deposit or withdrawal request, contact customer support, or participate in a promotion, you provide data directly to zk7apk.
• Automated technical collection: When you browse or interact with the Platform, our servers and analytics systems automatically record Technical Data and Usage Data as described in Clause 2. This occurs via server logs, cookies, and pixel tags.
• Payment processors: When you initiate a transaction via a local Indonesian bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, Bank Danamon, OCBC NISP) or an e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja), the payment provider may share transaction confirmation data with zk7apk for reconciliation and fraud prevention purposes.
• Identity verification providers: Third-party KYC service providers may return verified identity results and confidence scores to zk7apk following document verification checks.
• Fraud detection services: Automated risk-scoring systems may correlate device fingerprints, IP geolocation data, and behavioural patterns with known fraud signals and report results to zk7apk.
• Game studio data feeds: Licensed game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, Spribe, and others) may share session-level game performance data with zk7apk for RTP auditing and responsible gaming monitoring.

zk7apk processes your Personal Data under one or more of the following lawful bases, depending on the specific processing activity:

• Contractual necessity: Processing required to perform the contract between you and zk7apk — including account management, bet settlement, deposit and withdrawal processing, and customer support.
• Legal obligation: Processing required for us to comply with applicable legal obligations, including anti-money laundering (AML) regulations, KYC mandates, and instructions from regulatory or law enforcement authorities.
• Legitimate interests: Processing necessary for the legitimate interests of zk7apk — including fraud prevention, security monitoring, platform improvement, and responsible gaming enforcement — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we rely on your consent for a specific processing activity (such as sending promotional communications), we will obtain that consent clearly and separately, and you may withdraw it at any time without affecting the lawfulness of prior processing.

The Personal Data we collect is used exclusively for the following purposes:

• Account creation and management: Registering your account, verifying your identity, maintaining accurate account records, and enabling secure login to the Platform.
• Age verification and responsible gaming: Confirming that you meet the minimum age requirement of 21 years, and monitoring gameplay patterns to identify potential problem gambling behaviour that may warrant a responsible gaming intervention.
• Transaction processing: Crediting deposits and processing withdrawals to and from your registered payment methods — including local Indonesian bank accounts (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja) — in Indonesian Rupiah (IDR).
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent account activity, unauthorised access, money laundering, collusion, and other prohibited conduct as described in the Terms & Conditions.
• Customer support: Responding to your queries, resolving disputes, processing self-exclusion requests, and providing the 24/7 Indonesian-speaking support service referenced throughout the Platform.
• Legal and regulatory compliance: Fulfilling our obligations under applicable laws and responding to lawful requests from regulatory bodies, courts, or law enforcement agencies.
• Platform improvement: Analysing aggregated, anonymised usage patterns to improve the Platform's performance, game offering, payment methods, and overall user experience for Indonesian Members.
• Promotional communications: Sending you information about bonuses, promotions, and seasonal offers (such as those tied to Idul Fitri, Ramadhan, BRI Liga 1 fixtures, or Indonesian Independence Day) where you have opted in to receive such communications. You may unsubscribe at any time.

zk7apk does not disclose your Personal Data to any party outside of the circumstances explicitly described in this clause. Disclosures occur only to the categories of recipients listed below, and only to the extent necessary for the stated purpose:

• Payment processors and financial institutions: Your bank account or e-wallet details and transaction amounts are shared with the relevant Indonesian payment provider (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja, and others) solely to execute your requested deposit or withdrawal transaction.
• KYC and identity verification providers: Your identity documents (KTP, passport, proof of address) are transmitted in encrypted form to our contracted KYC provider for verification processing. These providers act as data processors on our behalf under strict contractual data protection obligations.
• Fraud detection and security vendors: Technical and behavioural data may be shared with specialist fraud detection providers to identify and prevent prohibited conduct, in our legitimate interest and yours.
• Licensed game studios: Where game session data is required for dispute resolution or RTP auditing, relevant session records may be shared with the game provider (e.g., Pragmatic Play, Evolution Gaming, NetEnt, Microgaming) under contractual confidentiality obligations.
• Regulatory and law enforcement authorities: We may disclose Personal Data to the extent required by law, court order, or the lawful request of a competent government or law enforcement body. Where legally permitted, we will notify you of such disclosure.
• Successor entities: In the event of a merger, acquisition, or sale of assets involving zk7apk, your Personal Data may be transferred to the acquiring entity, subject to the same level of protection described in this policy. You will be notified of any such transfer in advance where practically possible.

The Platform uses cookies and similar tracking technologies to deliver core functionality, maintain session security, and improve the user experience. The following categories of cookies are in use:

You may manage non-essential cookies through your browser settings. Note that disabling functional cookies may affect Platform features such as saved preferences. Disabling strictly necessary cookies will prevent you from using authenticated sections of the Platform.

zk7apk retains Personal Data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Active account data: Retained for the duration of your account's active status, plus a minimum of five (5) years following account closure to satisfy anti-money laundering and financial record-keeping obligations.
• KYC documentation: Retained for a minimum of five (5) years from the date of submission, in line with standard AML compliance requirements.
• Transaction records: All deposit and withdrawal records denominated in IDR are retained for a minimum of five (5) years from the transaction date.
• Support communications: Live chat transcripts, email correspondence, and support ticket records are retained for three (3) years from the date of the interaction.
• Technical and usage logs: Server access logs and session data are retained for up to twelve (12) months. Anonymised analytics data may be retained indefinitely in aggregated form.
• Self-exclusion records: Records of self-exclusion requests are retained for the duration of the exclusion period plus five (5) years, to prevent re-registration during a permanent exclusion.

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised. Where deletion is not immediately practicable due to backup systems, data is isolated from active processing until secure deletion is completed.

zk7apk implements a layered security architecture to protect your Personal Data from unauthorised access, accidental loss, alteration, or destruction. Our technical and organisational security measures include:

• 256-bit TLS encryption: All data transmitted between your device and our servers is encrypted using industry-standard Transport Layer Security (TLS 1.2 or higher). This applies equally to login sessions, deposit and withdrawal requests, KYC document uploads, and support communications.
• Encryption at rest: Sensitive Personal Data stored on our servers — including KYC documents, financial account details, and password credentials — is encrypted at rest using AES-256 encryption.
• Access controls: Access to Personal Data within zk7apk's systems is strictly role-based. Only personnel with a legitimate operational need are granted access to specific categories of data, and all access is logged and audited.
• Password security: Account passwords are stored as salted cryptographic hashes. zk7apk staff cannot retrieve your plain-text password; our agents will never ask for it.
• Intrusion detection: Automated monitoring systems scan for unusual access patterns, brute-force login attempts, and anomalous data requests around the clock.
• Third-party security audits: Our security posture is reviewed periodically by qualified external security specialists to identify and remediate vulnerabilities.

Despite these measures, no system is entirely immune to security incidents. In the event of a data breach that poses a significant risk to your rights and freedoms, zk7apk will notify affected Members promptly via their registered email address and take immediate remediation steps.

As a Member of the Platform, you have the following rights in relation to your Personal Data. To exercise any of these rights, contact us via the channels listed in Clause 15. We will respond within thirty (30) calendar days of receiving a verified request:

• Right of access: You may request a copy of the Personal Data zk7apk holds about you, along with information about how it is processed and who it has been shared with.
• Right to rectification: If any Personal Data we hold about you is inaccurate or incomplete, you may request that it be corrected. For certain data fields, you may update your information directly through your Account settings.
• Right to erasure ("right to be forgotten"): You may request deletion of your Personal Data where we no longer have a legitimate reason or legal obligation to retain it. Note that certain data must be retained for the minimum periods set out in Clause 8; erasure requests cannot override those legal retention obligations.
• Right to restrict processing: You may request that we limit processing of your data to storage only, for example while a dispute about data accuracy or a deletion request is being resolved.
• Right to data portability: You may request that we provide your Personal Data in a commonly used, machine-readable format for transfer to another service provider, where technically feasible.
• Right to object: You may object to processing based on legitimate interests (Clause 4) or for direct marketing purposes. We will cease marketing communications upon receipt of an opt-out request without delay.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

Identity verification may be required before we can fulfil a data subject request, to ensure we do not disclose or delete data in response to a fraudulent request.

The Platform is strictly intended for adults aged 21 years and over. zk7apk does not knowingly collect Personal Data from individuals under the age of 21. During registration and KYC verification, we take active steps to confirm that every Member meets this age threshold.

If zk7apk becomes aware that Personal Data has been collected from an individual under 21 — whether through false age declaration or any other means — we will:

• Immediately suspend the relevant account pending investigation.
• Void any gameplay activity and transactions conducted during the period of underage use.
• Delete all Personal Data associated with the underage individual as soon as reasonably practicable, except where retention is required for legal compliance purposes.
• Refund any deposits made by the underage individual via the original payment method, subject to standard verification requirements.

Parents or guardians who believe a minor has registered on the Platform are strongly encouraged to contact us immediately at [email protected] so that the account can be suspended and data deleted without delay.

The Platform integrates with third-party services to deliver payment processing, game content, identity verification, and security functionality. While zk7apk selects these partners carefully and requires them to maintain appropriate data protection standards, each third-party service operates under its own privacy policy for data processed within its own systems.

Third-party service categories and examples include:

• Payment providers: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, Bank Danamon, OCBC NISP) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja) process transaction data under their own regulatory frameworks and privacy policies.
• Game studios: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, and Spribe host and operate their game content from their own licensed infrastructure. Session data generated within game interfaces is processed by the respective studio under their own data protection arrangements.
• KYC and AML providers: Contracted identity verification and anti-money laundering screening vendors process document images and personal identifiers under strict data processing agreements with zk7apk.
• CDN and infrastructure providers: Content delivery and cloud infrastructure partners may process Technical Data (such as IP addresses and request metadata) as part of service delivery. These providers act solely as data processors under zk7apk's instructions.

zk7apk is not responsible for the data practices of third-party services operating independently of the Platform. Where you interact directly with a third-party interface (such as a bank's payment gateway), their privacy policy governs that interaction.

As an internationally operated platform serving Members primarily in Indonesia, zk7apk may transfer Personal Data to servers or service providers located outside of Indonesia. Where such transfers occur, zk7apk ensures that appropriate safeguards are in place to maintain a level of data protection equivalent to the standards described in this policy. These safeguards may include:

• Contractual data processing agreements incorporating internationally recognised standard contractual clauses for data transfers.
• Restricting transfers to service providers located in jurisdictions with recognised adequate data protection frameworks.
• Implementing technical and organisational security measures at the receiving location that meet or exceed those described in Clause 9 of this policy.

Indonesian Members whose data is transferred internationally retain all rights described in Clause 10. Transfers do not dilute your data protection rights or zk7apk's obligations to you as the data controller.

zk7apk reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform functionality. The effective date at the top of this page will be updated whenever a revision is published.

For material changes — those that significantly affect how your Personal Data is used or your rights in relation to it — we will notify active Members via the email address registered to their account, and/or via a prominent notice displayed upon next login. We encourage you to review this policy periodically to stay informed of any updates.

Your continued use of the Platform following publication of an updated Privacy Policy constitutes acceptance of the revised terms. If you do not agree to a material change, you may close your account as described in the Terms & Conditions.

For any privacy-related enquiries, data subject access requests, consent withdrawal requests, or concerns about how zk7apk handles your Personal Data, please contact our Data Protection team through any of the following channels:

• Live Chat: Available 24/7 within the Platform after login. The fastest channel for urgent privacy concerns.
• WhatsApp: Available to verified Members after login. Details visible in the Account section.
• Email: [email protected] — please include "Privacy Request" in the subject line. We aim to respond within 5 business days for privacy-specific matters and no later than 30 calendar days for formal data subject requests.

Our support team operates 24 hours a day, 7 days a week, with primary operating hours referenced in Western Indonesia Time (WIB, UTC+7). All privacy communications are handled with strict confidentiality and processed only by authorised personnel.