At 368zk, your privacy is a foundational commitment, not a compliance checkbox. This Privacy Policy explains precisely what personal data we collect, how we use it, who we share it with, how long we keep it, and what rights you hold over your own information as a player on the 368zk platform.
All personal data held by 368zk is protected by 256-bit SSL encryption in transit and AES-256 encryption at rest. Access to player data is restricted to authorised personnel only, under strict need-to-know controls.
368zk does not sell, rent, or trade your personal information to third parties for advertising, marketing profiling, or any commercial purpose outside the operation of your account and the delivery of our platform services.
You have the right to access, correct, export, and request deletion of your personal data held by 368zk at any time. Submit a data request to our support team and we will respond within 14 calendar days of receipt.
368zk retains player data only for as long as necessary to operate your account, comply with legal obligations, and resolve disputes. Inactive accounts are subject to a defined data lifecycle and archival policy described in this document.
368zk uses cookies strictly for session management, platform analytics, and relevant promotional content delivery. We do not use third-party advertising cookies. Full details of cookie categories and opt-out options are set out in Section 9 of this Policy.
If 368zk ever experiences a data security incident that affects your personal information, we will notify you promptly via the email address registered to your account and describe the nature of the incident, the data affected, and the steps we have taken.
The following terms carry specific meanings in this Privacy Policy:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person — including name, identification number, contact details, financial data, device identifiers, and behavioural data — processed by 368zk in connection with a Player's account. |
| "Processing" | Any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, and destruction, whether by automated or manual means. |
| "Data Controller" | 368zk, as the entity that determines the purposes and means of processing Personal Data collected through the 368zk.net platform. |
| "Data Processor" | Any third party that processes Personal Data on behalf of 368zk under a contractual data processing agreement, including payment processors, KYC verification providers, and cloud infrastructure providers. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of a Player's agreement to the processing of their Personal Data for a stated purpose. |
| "KYC" | Know Your Customer — the identity verification process conducted by 368zk to confirm a Player's identity and age in compliance with applicable anti-money laundering and responsible gaming obligations. |
| "Sensitive Data" | A subset of Personal Data that warrants heightened protection, including financial account details, government-issued identification numbers, and information about problem gambling self-exclusion status. |
2.1 The Data Controller responsible for your Personal Data in connection with use of the 368zk platform is the operating entity behind 368zk.net. References to "368zk", "we", "us", or "our" in this Privacy Policy refer to that entity.
2.2 All data protection enquiries, access requests, and complaints may be directed to the 368zk Data Protection contact via the email address specified in Section 15 of this Policy.
2.3 368zk is committed to processing Player data in a manner that is lawful, fair, transparent, accurate, and limited to what is necessary for the purposes described in this Privacy Policy. These principles inform every data handling decision we make.
368zk collects Personal Data through several distinct channels. The categories of data collected, together with their source and the circumstances of collection, are set out below.
When you create a 368zk account, we collect: full legal name, date of birth, gender, Indonesian mobile phone number, email address, and a chosen username. This information is required to create and administer your account. You cannot register without providing this data.
To process withdrawals above threshold amounts and to comply with our responsible gaming obligations, 368zk may require you to submit a copy of a valid Indonesian government-issued identity document (KTP or passport) and a live selfie photograph. This Sensitive Data is processed solely for identity and age verification purposes and is handled under enhanced security controls.
We collect data relating to all deposit and withdrawal transactions on your account, including: transaction date and time, amount in IDR, payment method type (e.g., BCA bank transfer, GoPay e-wallet), and transaction reference numbers. We do not store full bank account numbers or e-wallet credentials — payment credentials are processed directly by our certified payment processor partners and are not retained on 368zk systems.
368zk records your betting and gaming history on the platform, including: games played, wager amounts, outcomes, session timestamps, and bonus usage. This data is used to administer your account, settle bets, apply responsible gaming controls, and improve the platform experience.
When you access the 368zk platform, our systems automatically collect: IP address, device type and operating system, browser type and version, referring URL, session duration, and page interaction data. This data is used for platform security, fraud detection, and aggregate analytics. It is not used to build individual advertising profiles.
If you contact 368zk customer support via live chat or email, we retain records of those communications, including the content of messages, timestamps, and resolution outcomes. These records are used to manage your enquiry, train support staff, and maintain service quality standards.
Where you set voluntary deposit limits, activate session reminders, or initiate a self-exclusion request, 368zk records those elections as part of your account profile. This data is classified as Sensitive Data and is processed for the sole purpose of honouring your responsible gaming preferences and keeping you safe on the platform.
368zk processes your Personal Data only for specific, documented purposes. The table below maps each purpose to the data category used and the legal basis for that processing.
| Purpose | Data Categories Used |
|---|---|
| Account creation and administration | Registration Data, Device Data |
| Identity and age verification (KYC) | KYC Data, Registration Data |
| Processing deposits and withdrawals | Financial Transaction Data, KYC Data |
| Settling bets and gaming outcomes | Gaming Activity Data, Financial Transaction Data |
| Fraud detection and account security | Device Data, Financial Transaction Data, Gaming Activity Data |
| Responsible gaming controls | Responsible Gaming Data, Gaming Activity Data |
| Customer support and dispute resolution | Communications Data, Registration Data, Gaming Activity Data |
| Legal and regulatory compliance | All categories as required by applicable law |
| Platform improvement and analytics | Device Data, Gaming Activity Data (aggregated and anonymised) |
| Promotional communications (where consented) | Registration Data, Gaming Activity Data (for relevance) |
4.1 Marketing Communications. 368zk may send you promotional emails, SMS notifications, or in-platform messages about bonuses, new games, and special events. You can opt out of marketing communications at any time by adjusting your notification preferences in account settings or by contacting support. Opting out of marketing does not affect operational communications related to your account.
4.2 Automated Decision-Making. 368zk uses automated systems for fraud detection and responsible gaming monitoring. Where an automated decision results in account restriction or suspension, you have the right to request a human review of that decision by contacting the support team.
368zk processes your Personal Data on one or more of the following legal bases:
6.1 Service Providers. 368zk shares Personal Data with trusted third-party service providers who process data on our behalf under contractual data processing agreements that bind them to confidentiality and security obligations equivalent to those described in this Policy. These providers include:
6.2 Regulatory and Legal Disclosures. 368zk may disclose Personal Data to regulatory authorities, law enforcement agencies, or courts of competent jurisdiction where required to do so by applicable law, court order, or to protect the legal rights of 368zk or third parties. Such disclosures are made on a minimum-necessary basis.
6.3 Business Transfers. In the event of a merger, acquisition, or sale of all or substantially all of 368zk's assets, Player Personal Data may be transferred to the successor entity, subject to equivalent data protection obligations. Players will be notified of any such transfer via in-platform notification prior to the effective date.
6.4 No Sale of Data. 368zk does not sell, rent, or otherwise transfer Personal Data to third parties for their own marketing or commercial purposes. This prohibition applies regardless of compensation offered by any third party.
7.1 The 368zk platform is operated for the primary benefit of players resident in Indonesia (WIB, WITA, and WIT time zones). The majority of player data processing occurs on infrastructure within or near the Asia-Pacific region.
7.2 Certain service provider relationships — including cloud infrastructure, game studio integrations, and fraud detection services — may involve transfer of Personal Data to servers located outside Indonesia. Where such transfers occur, 368zk ensures they are subject to contractual data protection safeguards that provide a level of protection equivalent to that described in this Policy.
7.3 If you require further information about the specific international transfer mechanisms applicable to your data, please submit a request to the contact address in Section 15.
8.1 Active Accounts. 368zk retains Personal Data for the duration of your active account relationship, as it is necessary for the ongoing operation of your account and the delivery of platform services.
8.2 Post-Closure Retention. Following voluntary account closure or 368zk-initiated account termination, we retain the following data categories for the periods specified:
| Data Category | Retention Period After Closure | Reason |
|---|---|---|
| Registration & KYC Data | 5 years | Anti-money laundering and regulatory compliance obligations |
| Financial Transaction Data | 5 years | Financial record-keeping and dispute resolution |
| Gaming Activity Data | 3 years | Dispute resolution and responsible gaming audit requirements |
| Communications Data | 2 years | Support quality assurance and dispute evidence |
| Self-Exclusion Status | Indefinite (until expiry of exclusion period) | Responsible gaming enforcement obligations |
| Device & Technical Data | 12 months | Security and fraud investigation purposes |
8.3 Inactive Accounts. Accounts with no login activity for 24 consecutive months are classified as inactive. 368zk will notify you via the registered email address 30 days before applying an inactivity archival policy, at which point non-essential data is anonymised while financial and compliance data is retained for the periods specified above.
9.1 What Are Cookies. Cookies are small text files stored on your device when you visit the 368zk platform. They allow the platform to recognise your browser, maintain your session, and deliver a consistent experience across pages and visits.
9.2 Cookie Categories Used by 368zk.
| Category | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Session authentication, security tokens, load balancing. Without these, the platform cannot function. | No — required for platform operation |
| Functional | Remembering your language preferences, game settings, and notification preferences between sessions. | Yes — disabling may affect experience |
| Analytics | Aggregate, anonymised platform usage data — page views, feature engagement, error rates — used to improve the platform. No individual profiling. | Yes — opt out via account settings |
| Promotional | Tracking which promotions you have viewed or claimed to ensure you receive relevant offers and are not shown promotions you have already used. | Yes — opt out via account settings |
9.3 Third-Party Cookies. 368zk does not permit third-party advertising networks to place cookies on the platform. Any third-party scripts present on the platform (e.g., game studio embeds) are subject to data processing agreements that restrict their cookie use to session-level operational functions only.
9.4 Managing Cookies. You can control cookie settings via your browser's privacy controls. Note that disabling strictly necessary cookies will prevent you from logging into your 368zk account. For platform-specific cookie preferences, log in and navigate to Account Settings > Privacy.
As a player on the 368zk platform, you hold the following rights in respect of your Personal Data. To exercise any of these rights, contact us via the details in Section 15. We will respond within 14 calendar days.
Request a copy of all Personal Data held by 368zk in connection with your account. We will provide this in a structured, readable format within 14 days of a verified request.
Request correction of inaccurate or incomplete Personal Data held by 368zk. You can update many account details directly via the account settings panel without needing to contact support.
Request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent. This right is subject to our legal retention obligations described in Section 8.
Request that 368zk restricts processing of your Personal Data — for example, while a rectification request is being investigated — rather than erasing it. Restricted data is retained but not actively processed.
Request your Personal Data in a structured, machine-readable format (JSON or CSV) where processing is based on consent or contractual necessity and is carried out by automated means.
Object to processing based on legitimate interests, including profiling for analytics purposes. Where you object, 368zk will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests.
10.1 Verification. To protect your data, 368zk will verify your identity before processing any data rights request. Verification may require you to confirm details associated with your account. We will not process requests from unverified sources.
10.2 No Fees. 368zk does not charge a fee for handling data rights requests. Where requests are manifestly unfounded or excessive, we reserve the right to charge a reasonable administrative fee or to decline the request, in which case we will explain our reasons in writing.
11.1 The 368zk platform is strictly for adults aged 21 years and above. We do not knowingly collect Personal Data from individuals under the age of 21.
11.2 Age verification is conducted at registration through date-of-birth capture and, for withdrawal-eligible accounts, through KYC document review. Accounts found to belong to individuals under 21 years of age are closed immediately. Any deposited funds are returned to the original payment source; no winnings are released.
11.3 If you believe that a minor has registered an account on 368zk, please report this immediately to the support team via live chat or at the email address in Section 15. We will investigate and take appropriate action within 24 hours of receiving a credible report.
12.1 Technical Controls. 368zk implements industry-standard technical security measures to protect Personal Data against unauthorised access, accidental loss, alteration, and destruction. These measures include:
12.2 Organisational Controls. Access to Player Personal Data by 368zk staff is governed by a documented data access policy. All staff with access to Personal Data undergo data protection training and are bound by confidentiality obligations. Access logs are maintained and reviewed regularly.
12.3 Incident Response. In the event of a data security incident, 368zk has a documented incident response procedure. Affected Players will be notified via the email address registered to their account promptly following confirmation of the incident, the nature of the data affected, and the remediation steps taken. Where applicable law requires notification to a supervisory authority, 368zk will comply with that obligation.
12.4 Player Responsibility. While 368zk maintains strong platform-level security, the security of your account also depends on the strength of your password, the security of your registered email account, and the physical security of your device. Players are strongly encouraged to use a unique, complex password for their 368zk account and to enable two-factor authentication from account settings.
13.1 The 368zk platform integrates third-party game content from certified studios. These integrations are governed by data processing agreements that restrict studios' access to player data to what is strictly necessary for game operation. Game studios are not permitted to use 368zk player data for their own marketing purposes.
13.2 The 368zk platform does not contain links to external third-party websites. If you navigate away from the 368zk platform to any external site independently, 368zk is not responsible for the privacy practices of that site, and this Privacy Policy does not apply to any data collected by external sites.
14.1 368zk reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. The "Last Updated" date at the top of this Policy reflects the most recent revision.
14.2 For material changes — defined as changes that significantly affect how we process your Personal Data or reduce your data rights — 368zk will provide advance notice via in-platform notification and email to registered Players at least 14 days before the change takes effect.
14.3 Your continued use of the 368zk platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the updated Policy, you must cease using the platform and contact support to close your account and arrange withdrawal of your balance.
For data protection enquiries, access requests, rectification requests, erasure requests, or any other matter relating to this Privacy Policy, please contact the 368zk Data Protection team through the following channels:
15.1 Complaints. If you are not satisfied with 368zk's response to a data protection enquiry or believe that your Personal Data has been processed unlawfully, you have the right to lodge a complaint. Please first allow 368zk the opportunity to resolve the matter directly by contacting the support team. If the matter remains unresolved after 30 days, you may escalate to the relevant data protection supervisory authority in your jurisdiction.
15.2 Response Timeframe. 368zk targets a first-response acknowledgement within 48 hours of receiving any data protection enquiry. Full substantive responses to data rights requests are provided within 14 calendar days. Where a request is particularly complex, we may extend this period by a further 14 days, in which case we will notify you of the extension and the reason for it before the original deadline expires.
With your data rights clearly set out and our security commitments in place, you can enjoy everything 368zk has to offer with full confidence. Log in to your account, explore our games, or review our FAQ if you have further questions.