Introduction & Scope
This Privacy Policy ("Policy") describes how 368zk, operated at https://368zk.cam, collects, uses, stores, shares, and protects personal information relating to players, prospective players, and visitors to the 368zk platform (collectively "you" or "the User").
368zk is an online sports betting and casino platform serving English-preference players primarily based in Indonesia. Our platform covers sports wagering — including BRI Liga 1, EPL, La Liga, UEFA Champions League, and international fixtures — alongside a casino catalog of 1,200+ slots, live dealer tables, and lottery products including togel (Indonesia's traditional numbers lottery). All financial transactions are denominated in Indonesian Rupiah (IDR / Rp).
This Policy applies to all personal data processed in connection with your use of https://368zk.cam and any related sub-pages, mobile-optimized interfaces, support channels (live chat, email, WhatsApp), and in-app messaging features.
By creating an Account or continuing to use the 368zk platform, you acknowledge that you have read and understood this Policy. If you do not agree with any part of this Policy, you should stop using the platform and contact the support team to close your Account.
Definitions
For the purposes of this Privacy Policy, the following terms carry the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or can reasonably be used to identify a living individual, either alone or in combination with other data. This includes name, contact details, device identifiers, and financial account information. |
| "Processing" | Any operation or set of operations performed on Personal Data — including collection, recording, storage, retrieval, use, disclosure, transmission, erasure, or destruction. |
| "Controller" | 368zk, in its capacity as the entity that determines the purposes and means of processing Personal Data collected through the platform. |
| "Processor" | A third-party entity that processes Personal Data on behalf of 368zk under a data processing agreement (e.g., payment gateway providers, KYC verification partners). |
| "KYC" | Know Your Customer — the identity verification process conducted by 368zk to confirm a Player's identity, age, and residential status before processing withdrawals or upon reaching deposit thresholds. |
| "Cookies" | Small text files placed on your device by the 368zk platform to facilitate session management, preference storage, analytics, and fraud detection. |
| "Account" | A registered user profile created by a Player on the 368zk platform following completion of the sign-up process. |
Data We Collect
3.1 Account Registration Data. When you create an Account, 368zk collects the following information:
- Full legal name (as it appears on your government-issued identity document)
- Date of birth (for age verification — 368zk is strictly 21+ only)
- Residential address (city, province, and postal code in Indonesia)
- Mobile telephone number (Indonesian number, e.g., +62 prefix)
- Email address
- Username and encrypted password (passwords are stored as cryptographic hashes — we do not have access to your plaintext password)
3.2 KYC Identity Verification Data. Before processing your first withdrawal or upon reaching internal deposit thresholds, 368zk will request:
- A copy of your Indonesian National Identity Card (KTP — Kartu Tanda Penduduk), passport, or other government-issued ID bearing your photograph and date of birth
- Proof of bank account ownership (e.g., a screenshot or statement header confirming the account is registered in your name) for BCA, BRI, BNI, Mandiri, or other linked banks
- In cases of heightened risk assessment, a "selfie with ID" photograph may be requested to confirm the document presented belongs to the Account holder
3.3 Financial Transaction Data. When you deposit or withdraw funds, 368zk records:
- Payment method type (e.g., BCA transfer, OVO, DANA, GoPay)
- Transaction reference numbers and bank account details (account holder name and last four digits — full account numbers are not stored on 368zk servers beyond the minimum needed for processing)
- Transaction amounts in IDR, timestamps (WIB), and processing status
3.4 Betting & Gaming Activity Data. 368zk maintains records of your wagering history, game session logs, live dealer interactions, bet amounts, outcomes, and account balance changes. This data is used for account integrity, dispute resolution, and responsible gaming monitoring.
3.5 Device & Technical Data. When you access 368zk, our servers automatically collect:
- IP address and approximate geolocation (city/region level — not precise GPS location)
- Device type, operating system, and browser version
- Session duration, pages visited, and interaction patterns
- Cookie identifiers and session tokens (see Section 8)
3.6 Support Communication Data. If you contact 368zk via live chat, email, or WhatsApp, we retain transcripts of those conversations for quality assurance, dispute resolution, and compliance purposes.
How We Collect Your Data
368zk collects personal data through the following mechanisms:
Directly from You
Registration forms, KYC document uploads, deposit and withdrawal requests, support chat transcripts, email correspondence, and any other interaction where you voluntarily provide information.
Automatically Through Platform Use
Server logs, cookies, session tracking tokens, and analytics tools capture technical and behavioral data when you navigate the 368zk platform, whether logged in or browsing as an anonymous visitor.
From Third-Party Partners
KYC verification providers, payment processors (banks and e-wallet operators such as BCA, OVO, DANA, GoPay), fraud detection services, and game software providers may share data with 368zk in the course of facilitating your use of the platform.
Legal Basis for Processing
368zk processes your Personal Data on the following legal bases:
| Legal Basis | Examples of Processing Activities |
|---|---|
| Contractual Necessity | Account creation and management, processing deposits and withdrawals, settling bets, responding to support queries. |
| Legal Obligation | KYC identity verification, anti-money-laundering (AML) record-keeping, fraud investigation, compliance with regulatory information requests. |
| Legitimate Interests | Fraud detection, platform security, abuse prevention, analytics to improve platform performance and user experience, match integrity monitoring. |
| Consent | Sending promotional communications and marketing offers. Consent is optional and may be withdrawn at any time without affecting Account access. |
How We Use Your Data
368zk uses the personal data it collects for the following purposes:
- Account Management: Creating and maintaining your Account; authenticating your login; managing your balance and transaction history.
- Identity Verification: Confirming your age (21+ requirement) and identity through KYC checks before processing withdrawals.
- Payment Processing: Facilitating deposits and withdrawals via Indonesian banking and e-wallet channels (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja).
- Responsible Gaming: Monitoring betting patterns for indicators of problem gambling; enforcing self-exclusion, deposit limits, loss limits, and session time limits set by the player; complying with 368zk's responsible gaming obligations.
- Fraud & Security: Detecting unauthorized access, multi-account violations, bonus abuse, money laundering, and other prohibited conduct as defined in the 368zk Terms & Conditions.
- Customer Support: Responding to queries via live chat, email, and WhatsApp; resolving disputes; providing technical assistance.
- Platform Improvement: Analyzing aggregated, anonymized usage data to improve the platform's performance, user interface, game catalog, and payment processing infrastructure.
- Marketing Communications (Opt-In Only): Sending promotional offers, bonus announcements, and platform updates to players who have explicitly consented to receive such communications.
- Legal Compliance: Meeting obligations under applicable law, responding to lawful government or regulatory requests, and maintaining records as required by anti-money-laundering and counter-terrorism financing frameworks.
Data Sharing & Disclosure
7.1 Authorized Third-Party Processors. 368zk shares Personal Data with third-party service providers who process data strictly on our behalf and under binding data processing agreements. These include:
- Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) — for processing deposits and withdrawals in IDR.
- KYC Verification Partners: Third-party identity verification services that cross-check submitted documents against government records and fraud databases.
- Game Software Providers: Providers such as Pragmatic Play, Evolution Gaming, Microgaming, Spribe, and Pocket Games Soft receive session-level interaction data necessary for game operation and dispute resolution.
- Analytics & Infrastructure Providers: Cloud hosting, CDN, and server monitoring services that process technical data for platform availability and performance monitoring.
- Fraud & Security Services: Third-party fraud detection providers that analyze transactional and behavioral data to identify suspicious activity.
7.2 No Sale of Personal Data. 368zk does not sell, rent, lease, or commercially transfer your Personal Data to any third party for that party's own marketing or commercial purposes.
7.3 Legal Disclosure. 368zk may disclose Personal Data to government authorities, law enforcement bodies, financial intelligence units, or sports governing bodies (in the case of match integrity investigations) where required or permitted by applicable law, or where 368zk believes disclosure is necessary to protect the safety or rights of any person.
7.4 Business Transfers. In the event of a merger, acquisition, sale of assets, or restructuring involving 368zk, Personal Data held by 368zk may be transferred to the successor entity. Players will be notified of any such transfer that materially affects the processing of their data.
Cookies & Tracking Technologies
368zk uses cookies and similar tracking technologies to operate the platform, maintain session continuity, detect fraud, and analyze usage patterns. The types of cookies in use are:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Session management, authentication tokens, security validation. Required for the platform to function. Cannot be disabled without breaking core functionality. | Session / up to 24 hours |
| Functional | Stores your language preference, last-visited game category, and display settings. Improves your experience across return visits. | Up to 90 days |
| Analytics | Collects anonymized data on pages viewed, session duration, and navigation paths to help us improve the platform. IP addresses are pseudonymized before analysis. | Up to 13 months |
| Fraud Detection | Device fingerprinting and session consistency checks to detect multi-account abuse, bot activity, and unauthorized access attempts. | Up to 12 months |
You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent you from logging into or using the 368zk platform. Disabling analytics or functional cookies will not prevent access but may affect the quality of your experience.
Data Retention
9.1 368zk retains Personal Data for as long as necessary to fulfill the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve disputes or enforce agreements.
9.2 The following indicative retention periods apply:
- Account registration data and KYC documents: Retained for the lifetime of the Account plus a minimum of five (5) years following Account closure, in accordance with standard AML/KYC record-keeping obligations.
- Financial transaction records (deposit and withdrawal history): Retained for a minimum of five (5) years from the date of each transaction.
- Betting and gaming activity logs: Retained for a minimum of three (3) years from the date of the relevant activity, or longer if required for an open dispute or regulatory matter.
- Support communication transcripts: Retained for two (2) years from the date of the interaction.
- Marketing consent records: Retained until consent is withdrawn, plus a period of one (1) year thereafter as evidence of the original consent.
9.3 When data is no longer required under any applicable retention period, 368zk will securely delete or anonymize it using industry-standard data destruction methods.
International Data Transfers
10.1 368zk's platform infrastructure and some of its third-party service providers are based in jurisdictions outside Indonesia. As a result, your Personal Data may be transferred to, stored in, or processed in countries that do not have data protection laws equivalent to those in your home jurisdiction.
10.2 Where Personal Data is transferred internationally, 368zk takes steps to ensure that appropriate safeguards are in place, including contractual obligations (such as data processing agreements containing standard data protection clauses) and organizational security measures.
10.3 By using the 368zk platform, you consent to the transfer of your Personal Data to 368zk's processing infrastructure in accordance with this Policy.
Your Privacy Rights
As a player on 368zk, you hold the following rights with respect to your Personal Data. To exercise any of these rights, submit a written request to the 368zk support team via email ([email protected]) or live chat, including your Account username and a description of your request. We will respond within thirty (30) calendar days.
Right of Access
You have the right to request a copy of the Personal Data 368zk holds about you. This includes your Account details, KYC records on file, transaction history, and any support communication transcripts associated with your Account.
Right to Rectification
If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Some data (such as your date of birth as verified through KYC) cannot be amended without re-verification.
Right to Erasure ("Right to be Forgotten")
You may request deletion of your Personal Data where it is no longer necessary for the purposes it was collected, or where you withdraw consent on which processing was based. Note: data subject to mandatory legal retention periods (e.g., KYC and financial transaction records) cannot be erased before those periods expire.
Right to Restrict Processing
You may request that 368zk restricts the processing of your data in certain circumstances — for example, while the accuracy of disputed data is being investigated, or where you have objected to processing pending verification of 368zk's legitimate grounds.
Right to Data Portability
Where processing is based on your consent or on a contract with you, and is carried out by automated means, you have the right to receive a copy of your data in a structured, commonly used, machine-readable format.
Right to Object to Marketing
You may withdraw your consent to receive marketing communications from 368zk at any time by contacting the support team. Withdrawal of marketing consent does not affect your ability to use the platform or access non-promotional communications (such as Account security alerts or transaction notifications).
Children & Minors
368zk is strictly an adults-only platform. You must be at least 21 years of age to create an Account or place any wager on 368zk. This minimum age limit applies to all users regardless of local laws that may set a lower gambling age.
368zk does not knowingly collect Personal Data from individuals under the age of 21. If we become aware that an Account has been created by, or that Personal Data has been submitted by, a person under 21, we will immediately suspend the Account, delete the data, and return any deposited funds to the originating payment method (less applicable processing costs).
If you believe a minor has accessed 368zk through your Account or device, please contact the support team immediately at [email protected]. We treat underage access as a serious matter and respond to such reports promptly.
Security Measures
13.1 368zk implements and maintains the following technical and organizational security measures to protect your Personal Data:
- Transport Encryption: All data transmitted between your browser/device and 368zk's servers is encrypted using TLS 1.2 or higher (256-bit SSL). The 368zk platform does not serve any pages over unencrypted HTTP connections.
- Password Hashing: Account passwords are stored as salted cryptographic hashes. 368zk staff cannot view your plaintext password. 368zk will never ask you to share your password via any channel.
- Access Controls: Internal access to Personal Data is restricted on a need-to-know basis. Staff with access to sensitive data undergo background checks and regular data protection training.
- Payment Data Isolation: Full payment card numbers and full bank account numbers are not stored on 368zk's own servers. Payment data is tokenized and handled directly by PCI-compliant payment gateway partners.
- Fraud Detection Systems: Automated systems monitor for unusual account activity, including atypical login locations, rapid successive transactions, and patterns consistent with unauthorized access.
- Regular Security Reviews: 368zk's security infrastructure is subject to periodic internal and external review to identify and remediate vulnerabilities.
13.2 Despite these measures, no internet-based system can guarantee absolute security. You are responsible for maintaining the confidentiality of your Account credentials and for notifying 368zk immediately if you suspect unauthorized access to your Account.
Third-Party Links & Services
The 368zk platform may reference third-party brands, services, or game providers (such as Pragmatic Play, Evolution Gaming, Microgaming, or Indonesian banking brands like BCA, BRI, BNI, and Mandiri) in an informational context. Where 368zk's platform interfaces with third-party services (such as a payment gateway or live game stream hosted by a provider), those services operate under their own privacy policies.
368zk is not responsible for the privacy practices of third-party providers and recommends that you review the privacy policy of any third party whose services you use in connection with your 368zk Account.
Policy Changes
368zk reserves the right to update or revise this Privacy Policy at any time. The "Effective Date" shown at the top of this page will be updated whenever a new version is published. The most current version of the Policy is always available at https://368zk.cam/privacy-policy.
Where a revision materially affects how we process your data — particularly in relation to the categories of data collected, the purposes of processing, or the parties with whom data is shared — 368zk will notify registered players by posting a banner notice on the platform or by sending an email to the address registered on your Account at least seven (7) days before the revised Policy takes effect.
Your continued use of the 368zk platform following the effective date of any revision constitutes acceptance of the updated Policy. If you do not accept the changes, you must stop using the platform and request Account closure before the revision takes effect.
Contact Us
For privacy-related enquiries, data subject access requests, complaints, or to exercise any of the rights described in Section 11, please contact the 368zk Data & Privacy team using the details below. Contact information is provided as plain text only — no clickable links are embedded.
Email (Privacy Enquiries)
[email protected] — mark your subject line "Privacy Request" for prioritized routing to the data compliance team.
Live Chat
Available 24/7 via the in-platform live chat widget. For privacy or data deletion requests, always follow up in writing via email to ensure a full audit trail is maintained.
Response Timeframe
Data subject requests will receive a written acknowledgment within three (3) business days and a full substantive response within thirty (30) calendar days of receipt. Where a request is complex or involves a large volume of data, the response period may be extended by a further thirty (30) days, with notice given to the Player.
This Privacy Policy was last updated on 1 January 2026 (Version 1.4). The authoritative version is the English-language document published at https://368zk.cam/privacy-policy.