Your privacy is a fundamental priority at 98zk. This Privacy Policy explains precisely what personal data we collect, why we collect it, how we use and protect it, and what rights you hold as a data subject. Please read this document carefully before using our services.
Six core principles that shape how 98zk handles your personal information every day.
98zk collects only the personal data that is strictly necessary to operate your account, process transactions, and comply with legal obligations. We do not collect data speculatively or for undefined future uses.
All data transmissions between your device and 98zk's servers are protected by TLS 1.3 encryption. Sensitive data at rest — including identity documents submitted for KYC — is encrypted using AES-256 standards.
98zk does not sell, rent, or trade your personal data to advertisers, data brokers, or any other commercial third parties. Your information exists solely to support the services you have chosen to use on this platform.
You have the right to access, correct, port, restrict the processing of, and request deletion of your personal data at any time. Submit a data rights request by contacting our support team and we will respond within 30 days.
98zk uses cookies exclusively for platform functionality, session management, and analytical purposes. We do not use third-party advertising cookies. You can review our full cookie categorisation in the Cookies section of this policy.
Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, including satisfying applicable legal retention obligations. Account data is held for a maximum of 5 years following account closure, after which it is securely deleted.
Scope of this Policy: This Privacy Policy applies to all personal data collected by 98zk through the website at https://98zk.cam, including its subdomains and mobile interfaces, and through any other point of contact with players and prospective players, including customer support interactions. This policy should be read alongside our Terms & Conditions. In the event of any conflict between the two documents on a data protection matter, this Privacy Policy prevails.
The following definitions apply throughout this Privacy Policy:
98zk acts as the Data Controller for all Personal Data collected through the Platform. As Data Controller, 98zk is responsible for determining the purposes and means of data processing and for ensuring that all processing activities comply with applicable data protection law in the jurisdictions in which the Platform operates.
For all data protection enquiries, rights requests, and complaints, Players may contact the 98zk Data Protection team using the contact details set out in Section 15 of this policy. We aim to acknowledge all data protection enquiries within 3 business days and to provide a substantive response within 30 calendar days of receipt.
| Detail | Information |
|---|---|
| Controller Name | 98zk Platform |
| Platform URL | https://98zk.cam |
| Contact Email | [email protected] |
| Primary Market | Indonesia (with international player base) |
| Default Time Zone | WIB (Western Indonesia Time, UTC+7) |
98zk collects Personal Data through several channels, each described below. We collect only the data necessary for the specified purpose and do not retain data beyond the periods defined in Section 8.
When you create an account on 98zk, we collect the following information:
To comply with anti-money laundering obligations and to enforce the 21+ age restriction, 98zk collects the following Sensitive Data during the KYC process:
Each time you make a deposit or withdrawal on 98zk, we record the following transaction-level data:
98zk maintains a full record of all gaming and betting activity conducted through your account, including:
When you contact 98zk's support team — whether via live chat or email — we record the content of your communications, your account identifier, the nature of your enquiry, and the resolution provided. Support interactions may be monitored and recorded for quality assurance and staff training purposes.
The Platform automatically collects certain technical data when you access it, including your IP address, browser type and version, device model, operating system, screen resolution, referring URL, and pages visited during each session. This data is used exclusively for Platform security, fraud detection, and aggregate performance analytics.
98zk processes Personal Data only where a valid legal basis exists for doing so. The applicable legal bases for each category of processing activity are summarised below:
| Processing Activity | Legal Basis |
|---|---|
| Account registration and management | Performance of a contract (the Player Agreement / Terms & Conditions) |
| Processing deposits and withdrawals | Performance of a contract; compliance with financial regulations |
| KYC identity and age verification | Legal obligation (AML compliance, age restriction enforcement) |
| Fraud detection and platform security | Legitimate interests of 98zk in protecting the Platform and its users |
| Responsible gaming monitoring | Legal obligation; legitimate interests in player welfare |
| Sending account-related communications | Performance of a contract; legitimate interests |
| Sending promotional communications | Consent (opt-in at registration or subsequently); may be withdrawn at any time |
| Platform analytics and performance improvement | Legitimate interests of 98zk in improving service quality |
| Compliance with legal obligations and regulatory requests | Legal obligation |
98zk uses the Personal Data collected through the Platform for the following specific purposes:
Your registration data is used to create and maintain your account, authenticate your identity at login, enforce the single-account policy, and personalise your experience on the Platform. Your account data is also used to communicate essential service notifications — such as deposit confirmations, withdrawal processing updates, and security alerts — to your registered email address and phone number.
Transaction data is shared with our payment processing partners — including the relevant Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) — to the extent necessary to execute deposit and withdrawal instructions. This data transfer is governed by data processing agreements with each payment partner and is limited strictly to the data required to complete the transaction.
KYC and transaction data is used to fulfil 98zk's obligations under applicable anti-money laundering (AML) and counter-terrorism financing (CTF) frameworks. This includes monitoring transactions for unusual patterns, maintaining required records, and reporting to competent authorities where legally mandated. 98zk does not use this data for any purpose beyond legal compliance.
Gaming activity data — including session duration, wagering frequency, win/loss patterns, and deposit velocity — is analysed by 98zk's responsible gaming systems to identify potential indicators of problem gambling. Where such indicators are detected, the Platform may proactively reach out to the Player, apply responsible gaming tools, or refer the matter to a member of the responsible gaming team for review. This processing is conducted in the Player's genuine welfare interest and forms part of 98zk's obligations as a licensed gaming operator.
With your explicit consent, 98zk may use your email address and phone number to send you promotional communications about offers, bonuses, and new game launches relevant to the Indonesian market — including seasonal promotions around Idul Fitri, Ramadhan, and other cultural occasions. You may withdraw your marketing consent at any time by contacting our support team or using the unsubscribe mechanism in any marketing email. Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal.
Technical and device data, including IP addresses and session metadata, is used to detect and prevent unauthorised access, account takeover attempts, multi-accounting, bonus abuse, and other fraudulent activities. Where fraud is confirmed, relevant data may be shared with law enforcement agencies or industry fraud-prevention networks.
98zk does not sell, rent, or trade your Personal Data. We share data only in the limited circumstances described below, and only to the minimum extent necessary for the specified purpose:
Transaction-level data is shared with our banking and e-wallet partners solely to execute payment instructions. Each payment processor operates under a data processing agreement with 98zk and is prohibited from using shared data for any purpose other than completing the relevant transaction.
Identity document data and selfie images submitted during KYC may be processed by a third-party identity verification provider engaged by 98zk. This provider acts as a Data Processor under a formal agreement and is bound by the same data protection standards applicable to 98zk itself.
Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive anonymised or pseudonymised session identifiers to facilitate gameplay and report game outcomes to 98zk. These providers do not receive your name, contact details, or financial information.
98zk may disclose Personal Data to competent legal or regulatory authorities — including law enforcement agencies and financial intelligence units — where required to do so by law, court order, or binding regulatory directive. 98zk will notify affected Players of such disclosures where it is legally permissible to do so.
In the event of a merger, acquisition, restructuring, or sale of all or substantially all of 98zk's assets, Personal Data held by the Platform may be transferred to the successor entity. Affected Players will be notified in advance of any such transfer and of any material change to the privacy terms applicable to their data.
No Data Sales, Ever: 98zk has never sold Player Personal Data to a third party and has no intention of doing so. If this policy is ever amended to permit data sales, affected Players will be notified with a minimum of 30 days' advance notice and will have the opportunity to close their accounts before the change takes effect.
98zk's primary server infrastructure is hosted in a jurisdiction with established data protection frameworks. However, given the international nature of our game provider and payment partner network, some Personal Data may be transferred to and processed in countries outside Indonesia. Where such international transfers occur, 98zk ensures that appropriate safeguards are in place, including:
Players may request further details about specific international transfer arrangements by contacting the 98zk Data Protection team at the address provided in Section 15.
98zk retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The standard retention periods applicable to each data category are as follows:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | Legal obligation (AML record-keeping) |
| KYC identity documents | Duration of account + 5 years post-closure | Legal obligation |
| Transaction records | 7 years from transaction date | Financial regulatory obligation |
| Gaming and betting history | 5 years from account closure | Dispute resolution; regulatory compliance |
| Customer support records | 3 years from last interaction | Legitimate interests; dispute resolution |
| Marketing consent records | Until consent withdrawn + 3 years | Legal obligation to evidence consent |
| Technical / device logs | 90 days (rolling) | Security monitoring; fraud prevention |
Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised in accordance with 98zk's data disposal procedures. Anonymised aggregate data (from which no individual can be identified) may be retained indefinitely for statistical and business planning purposes.
98zk implements a layered security architecture to protect Personal Data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our technical and organisational security measures include:
Your Role in Security: While 98zk takes extensive measures to protect your data, the security of your account also depends on the strength and confidentiality of your login credentials. We recommend using a unique, strong password for your 98zk account, enabling 2FA, and never sharing your login details with any third party. 98zk staff will never ask for your password via any communication channel.
98zk uses cookies and similar tracking technologies to operate the Platform effectively, remember your preferences, maintain your login session, and gather aggregate analytical data about how the Platform is used. We do not use third-party advertising cookies or behavioural tracking technologies that profile you across external websites.
| Category | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Essential for Platform operation: session authentication, security tokens, load balancing, and fraud-prevention signals. The Platform cannot function correctly without these cookies. | No — required for basic functionality |
| Functional | Remember your language preference, display settings, and last visited game category to personalise your experience on return visits. | Yes — disabling reduces personalisation |
| Analytical | Aggregate, anonymised data on page views, navigation paths, session duration, and error rates, used to improve Platform performance and user experience. | Yes — opt out via browser settings |
| Security | Device fingerprinting signals used exclusively for fraud detection and account protection — for example, identifying login attempts from unfamiliar devices. | No — required for account security |
You can manage cookie preferences through your browser settings. Most modern browsers allow you to view, block, or delete cookies stored by specific websites. Please note that disabling strictly necessary or security cookies will impair your ability to use the Platform, as these are integral to session management and account protection. Instructions for managing cookies in popular browsers are available in each browser's help documentation.
As a data subject, you hold the following rights with respect to your Personal Data held by 98zk. To exercise any of these rights, please contact our Data Protection team using the details in Section 15. We will respond to all verified rights requests within 30 calendar days.
98zk's services are strictly restricted to adults aged 21 years and above. The Platform does not knowingly collect Personal Data from individuals under the age of 21. The KYC verification process is designed specifically to confirm that each registered Player meets this age requirement before withdrawal rights are activated.
If 98zk becomes aware — whether through KYC review, a third-party report, or any other means — that an account is held by a person under the age of 21, the account will be immediately closed, all deposited funds returned to the original payment source, and all associated Personal Data deleted from active systems within the time frames permitted by our legal retention obligations.
If you are a parent or guardian and believe that a person under 21 in your care has registered an account on 98zk, please contact our support team immediately at [email protected]. We will investigate and take appropriate action promptly.
21+ Only: By registering an account on 98zk, you represent and warrant that you are at least 21 years of age. Providing a false date of birth during registration is a breach of our Terms & Conditions and may constitute fraud under applicable law.
The 98zk Platform integrates with a range of third-party service providers to deliver its full suite of products and features. While 98zk takes care to engage only reputable providers bound by appropriate data protection agreements, it is important to understand that third-party providers operate under their own privacy policies and terms of service. The third-party categories engaged by 98zk include:
98zk is not responsible for the privacy practices of third-party providers operating outside the scope of a formal data processing agreement with 98zk. Players are encouraged to review the privacy policies of any third-party service they interact with independently of the 98zk Platform.
98zk reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Where a change is material — meaning it substantively affects how we collect, use, or share your Personal Data — we will provide at least 14 days' advance notice by displaying a prominent notice on the Platform and sending an email to your registered address.
Non-material amendments — such as corrections of typographical errors, clarifications that do not alter the substan ce of a clause, or updates required by minor regulatory changes — may take effect immediately upon publication. The "Effective Date" displayed at the top of this page reflects the date on which the current version entered into force. We recommend reviewing this Privacy Policy periodically to remain informed of how 98zk protects your data.
Your continued use of the Platform after the effective date of any amended Privacy Policy constitutes your acceptance of the revised terms. If you do not accept a material change to this policy, you may close your account in accordance with the account closure procedure described in our Terms & Conditions without penalty, and any remaining Real Money Balance will be returned to your verified payment method.
If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which 98zk handles your Personal Data, or if you wish to exercise any of the data rights described in Section 11, please contact our Data Protection team using the details below:
| Contact Channel | Details | Response Time |
|---|---|---|
| Email — Data Protection | [email protected] Subject line: "Data Protection Request — [Your Username]" |
Acknowledgement within 3 business days; full response within 30 calendar days |
| Live Chat | Available via the Platform interface for general privacy enquiries | 24/7 — immediate connection to support agent |
When submitting a data rights request, please include your registered username and email address so that our team can locate your account and verify your identity before processing the request. We may ask you to provide additional proof of identity where we have reasonable doubt about the identity of the requester — this is a security measure designed to protect your data from unauthorised access.
Complaints Procedure: If you are not satisfied with 98zk's response to a privacy concern or data rights request, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction. Indonesian Players may also seek recourse through applicable consumer protection channels available under Indonesian law. 98zk takes all privacy complaints seriously and is committed to resolving them promptly and fairly.
Review our full Terms & Conditions, learn about our Responsible Gaming tools, or visit our FAQ for quick answers. Our support team is available 24/7 to assist with any data-related enquiry.