Privacy Policy — 363zk

363zk operates as an internationally licensed online sportsbook and casino platform serving Members primarily based in Indonesia. As a platform that handles sensitive financial transactions and personal identity data on behalf of our Members, we recognize that responsible data stewardship is inseparable from the trust that underpins every aspect of the 363zk experience.

This Privacy Policy has been drafted in accordance with internationally recognized data protection principles. It governs the collection, use, storage, transfer, and deletion of personal data relating to Members, prospective Members, and visitors to the 363zk website. It should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which form part of the overall framework of your relationship with 363zk.

We do not sell your personal data. We do not share it with unaffiliated third parties for their own commercial purposes. Every piece of data we collect serves a defined purpose directly related to operating the 363zk platform safely, legally, and effectively for your benefit.

The following terms carry the meanings assigned here throughout this Privacy Policy and all supplementary data protection notices published by 363zk:

363zk collects only the categories of Personal Data that are necessary for the purposes described in this policy. We do not collect data speculatively or beyond what is required to deliver, maintain, and improve the 363zk platform. The categories of data we collect are as follows:

• Identity Data: Full legal name, date of birth, gender, nationality, Indonesian national identity card number (KTP number), and a photograph of the identity document submitted during KYC verification.
• Contact Data: Email address, registered mobile telephone number, and residential address (including city — e.g., Jakarta, Surabaya, Bandung, Medan, Bali, Yogyakarta — and postal code).
• Account Data: Username, hashed password, account creation date, account status, preferred language, and responsible gaming settings (deposit limits, session limits, self-exclusion status).
• Financial Data: Bank account details (bank name — e.g., BCA, BRI, BNI, Mandiri — and account number), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay), deposit and withdrawal transaction history, and account balance records. Full payment card numbers are never stored by 363zk.
• Transaction Data: Details of all wagers placed, games accessed, bonus funds received and consumed, and settlement records associated with your account.
• Technical Data: IP address, device type, operating system, browser type and version, screen resolution, time zone (WIB/WITA/WIT), session duration, pages viewed, and referring URL.
• Communications Data: Records of all communications between you and the 363zk support team, including live chat transcripts, email correspondence, and any documents or attachments you submit.
• Marketing Preferences: Your opt-in or opt-out status for promotional communications, preferred communication channels, and records of promotions claimed.

363zk collects Personal Data through the following channels and mechanisms:

• Direct Submission: Data you provide voluntarily when registering an account, completing KYC verification, making a deposit or withdrawal request, contacting customer support, or participating in a promotion.
• Automated Collection: Technical and usage data collected automatically when you interact with the 363zk website through cookies, server logs, and similar tracking technologies. This occurs as a standard function of web platform operation and is described in detail in the Cookies section of this policy.
• Payment Processors: Limited transactional confirmation data returned to 363zk by our authorised banking and e-wallet partners (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay) when a deposit or withdrawal is processed. 363zk receives only the data required to verify and record the transaction; it does not receive your full bank account credentials.
• KYC Verification Providers: Where 363zk uses third-party identity verification services to assist with KYC checks, those providers may return verification status and document authentication results to 363zk. All such providers operate under data processing agreements that prohibit secondary use of your data.
• Publicly Available Sources: In limited circumstances related to fraud prevention and account integrity, 363zk may supplement account data with information from publicly available databases, such as sanctions screening lists or fraud intelligence registries.

363zk processes Personal Data for the following clearly defined purposes. Where a new purpose arises that is materially different from those listed below, we will notify affected Members and, where required, seek fresh consent before proceeding.

363zk processes Personal Data on the following legal bases, consistent with internationally recognised data protection principles:

• Contractual Necessity: The majority of 363zk's data processing is necessary to perform our contract with you as a Member — including account management, payment processing, KYC verification, and the delivery of wagering services. Without this processing, we cannot provide the 363zk platform to you.
• Legitimate Interests: 363zk processes certain data on the basis of legitimate interests, including fraud prevention, platform security, AML monitoring, and internal analytics used to improve the Member experience. We apply a balancing test to ensure our legitimate interests do not override your fundamental privacy rights.
• Legal Obligation: Certain data processing activities — particularly those relating to identity verification, financial record-keeping, and sanctions screening — are required by applicable international regulations and the terms of 363zk's operating licences. 363zk is obligated to retain and process this data regardless of Member preference.
• Consent: Where 363zk processes data for purposes that go beyond contractual necessity or legitimate interests — specifically, the sending of marketing communications and the use of non-essential cookies — we rely on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

363zk does not sell, rent, or trade your Personal Data. We share data with third parties only in the circumstances described below, and only to the minimum extent necessary for each defined purpose:

• Payment Partners: To process deposits and withdrawals, 363zk shares the minimum necessary transactional data with our authorised payment partners: BCA, BRI, BNI, and Mandiri (bank transfers), and OVO, DANA, GoPay, and ShopeePay (e-wallets). These partners are contractually prohibited from using your data for any purpose other than processing the specific transaction.
• KYC and Fraud Prevention Providers: To fulfil our identity verification and age-check obligations, 363zk may share identity document data with accredited third-party KYC providers. All such providers operate under strict data processing agreements and internationally recognised security standards.
• Technology Infrastructure Providers: 363zk uses cloud infrastructure and hosting services to operate the platform. These providers process data on 363zk's behalf and are bound by data processor agreements that restrict data use to infrastructure operations only.
• Legal and Regulatory Authorities: 363zk will disclose Personal Data to competent authorities — including law enforcement agencies, financial intelligence units, and regulatory bodies — where required to do so by applicable law, a valid court order, or in connection with the prevention or investigation of fraud, money laundering, or other serious offences.
• Professional Advisers: In limited circumstances, 363zk may share data with legal counsel, auditors, or compliance consultants under binding confidentiality obligations, where necessary to protect 363zk's legal rights or to comply with regulatory obligations.
• Corporate Transactions: In the event of a merger, acquisition, or transfer of substantially all of 363zk's assets to a successor entity, Member Personal Data may be transferred as part of the transaction. Affected Members will be notified in advance and provided with an opportunity to request account closure if they do not consent to the transfer.

363zk retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised. Anonymised data (from which no individual can be identified) may be retained indefinitely for statistical and product analytics purposes.

363zk implements a comprehensive, multi-layered information security programme designed to protect Member Personal Data against unauthorised access, disclosure, alteration, and destruction. Key security measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and the 363zk platform is encrypted using industry-standard 256-bit SSL/TLS protocols. This ensures that financial transactions, login credentials, and personal data cannot be intercepted in transit.
• Encrypted Data Storage: Sensitive data at rest — including identity documents, financial records, and account credentials — is stored in encrypted form on access-controlled servers. Password values are never stored in plain text; they are processed using industry-standard one-way hashing algorithms with salting.
• Access Controls: Access to Member Personal Data within the 363zk organisation is granted on a strict need-to-know basis. Role-based access controls, multi-factor authentication for internal systems, and comprehensive access audit logs are maintained.
• Intrusion Detection and Monitoring: The 363zk infrastructure is protected by real-time intrusion detection systems, web application firewalls, and 24/7 security monitoring. Anomalous access patterns trigger automated alerts and human review.
• Penetration Testing: 363zk engages qualified independent security professionals to conduct periodic penetration testing of the platform. Identified vulnerabilities are remediated according to a risk-prioritised schedule.
• Incident Response: In the event of a confirmed data breach that is likely to result in a risk to Members' rights and freedoms, 363zk will notify affected Members within a reasonable timeframe and take all necessary remediation steps, including notifying relevant authorities as required.

The 363zk website uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain the security of your session, and to improve the overall Member experience. The following categories of cookies are used on the 363zk platform:

• Strictly Necessary Cookies: These cookies are essential for the 363zk platform to operate. They maintain your login session, enforce security controls, and enable core functionality such as the bet slip and deposit flow. These cookies cannot be disabled without severely impairing platform functionality.
• Functional Cookies: These cookies remember your preferences — such as your preferred language and responsible gaming settings — so that you do not need to re-enter them on each visit. Disabling these cookies may mean that certain personalised features are no longer available.
• Performance and Analytics Cookies: These cookies collect anonymised or pseudonymised data about how Members interact with the 363zk platform — including which pages are most visited, where errors occur, and how load times affect usage. This data is used exclusively to improve platform performance and the Member experience. These cookies are only placed with your consent.
• Marketing Cookies: Where you have given consent to receive marketing communications, 363zk may use cookies to track engagement with promotional content and to avoid showing you the same promotion repeatedly. These cookies are only placed with your consent and can be withdrawn at any time.

You may manage your cookie preferences at any time through your browser settings. Disabling strictly necessary cookies will prevent you from using the 363zk platform. Disabling other cookie categories will not prevent platform access but may affect certain features and personalisation elements.

As a Member of 363zk, you hold the following rights in respect of your Personal Data. To exercise any of these rights, please contact the 363zk Data Protection team at [email protected] (plain text — not a clickable link). We will respond to all verified requests within 30 calendar days.

Please note that certain rights are subject to limitations where 363zk is required by law to retain or process data regardless of a Member's request — for example, financial records held for AML compliance or KYC documents retained under identity verification regulations. In such cases, we will clearly explain the applicable limitation in our response to your request.

The 363zk platform is strictly intended for adults aged 21 years and above. 363zk does not knowingly collect Personal Data from any individual under the age of 21. The 21+ age requirement is enforced through mandatory KYC verification at the point of account registration and at any subsequent point where 363zk has reason to doubt a Member's stated age.

If 363zk discovers that Personal Data has been collected from an individual under the age of 21, the following actions will be taken immediately:

• The associated account will be permanently closed.
• All Personal Data associated with the account will be deleted from active systems, subject only to any minimum retention obligations imposed by applicable law.
• Any winnings generated by the account will be forfeited.
• Any deposited funds will be returned to the verified payment source, subject to the satisfactory completion of identity verification confirming the rightful owner of the payment method.

If you are a parent or guardian and believe that a person under 21 may have registered an account on the 363zk platform using your or their personal details, please contact our support team immediately at [email protected] (plain text — not a clickable link) so that we can investigate and take action without delay.

363zk reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or the evolution of the 363zk platform. The "Last Updated" date displayed at the top of this page will be revised accordingly whenever a new version is published.

Where a proposed change is material — meaning it significantly alters how we collect, use, or share your Personal Data — 363zk will provide advance notice by publishing a prominent notification on the platform and, where practicable, by sending an alert to Members' registered email addresses at least 14 days before the change takes effect.

Your continued use of the 363zk platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any change to this policy, you should cease using the platform and may request account closure in accordance with the procedures described in our Terms & Conditions. We encourage all Members to review this policy periodically to stay informed of how 363zk protects their Personal Data.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or need to report a concern about the handling of your Personal Data, please contact the 363zk Data Protection team through any of the following channels. All privacy-related enquiries are handled with strict confidentiality.