Privacy Policy — 332zk

Overview & Scope

This Policy applies to all personal data processed by 332zk in connection with the operation of its online gambling platform, including the website at https://332zk.net, any mobile-optimised interface accessible through that domain, and all associated customer support, payment processing, and identity verification services.

This Policy covers data relating to: registered Members; visitors who browse the platform without registering; individuals who contact our support team; and former Members whose data we are legally required to retain after account closure.

This Policy does not cover the data practices of third-party game studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Pocket Games Soft), payment providers, or any other external services that operate under their own independent privacy policies. Where those third parties process your data as part of delivering their services through the 332zk platform, we will identify them in Section 7 and direct you to their respective policies.

332zk is committed to handling all personal data with the care, transparency, and security that our Indonesian members deserve. We operate to standards consistent with internationally recognised data protection principles, including purpose limitation, data minimisation, storage limitation, accuracy, integrity, and confidentiality.

Definitions

In this Policy, the following terms carry the meanings set out below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including names, ID numbers, location data, IP addresses, and any factors specific to the physical, economic, or social identity of that person.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Member" — a natural person who has completed registration and holds an active or suspended account on the 332zk platform.
• "Visitor" — any individual who accesses the 332zk website without completing registration.
• "KYC" — Know Your Customer: the identity and address verification process required before a Member's first withdrawal and at other points determined by 332zk's compliance procedures.
• "Cookie" — a small text file placed on your device by the 332zk platform to store session state, preferences, or analytical data.
• "Third-Party Processor" — any external company engaged by 332zk to process Personal Data on 332zk's behalf under a written data processing agreement.
• "Sensitive Data" — a subset of Personal Data warranting heightened protection, including government-issued identity document numbers, financial account details, and any data that could reveal religious affiliation or health status.

Data We Collect

332zk collects only the Personal Data that is strictly necessary for the purposes described in Section 5. The categories we collect are set out in the table below:

How We Collect Data

4.1 Data You Provide Directly

The majority of Personal Data we hold is provided by you voluntarily when you: register an account; complete KYC verification; make a deposit or request a withdrawal; contact our customer support team; respond to a promotional survey; or update your account profile settings. You are not obliged to provide this data, but failure to do so may limit your ability to use certain features — for example, KYC completion is required before your first withdrawal can be processed.

4.2 Data Collected Automatically

When you access the 332zk platform — whether logged in or as a Visitor — our servers and analytics systems automatically record Technical Data and Behavioural Data. This collection is inherent to the operation of any web-based service and cannot be fully disabled without preventing access to the platform entirely. Where we use cookies or similar tracking technologies for this automated collection, please refer to Section 11 for full details.

4.3 Data from Third Parties

In certain circumstances we may receive Personal Data about you from third-party sources, including: payment processors and Indonesian banks confirming transaction status; KYC verification service providers validating your identity documents; fraud detection and AML screening services cross-referencing your details against watchlists; and game studios providing certified game outcome logs for dispute resolution. We use such third-party data only for the specific purpose for which it was shared with us.

Purposes of Processing

332zk processes your Personal Data for the following clearly defined purposes:

• Account Management: Creating, maintaining, and securing your Member account, including password resets, session authentication, and profile updates.
• Identity Verification & KYC: Confirming that you are at least 21 years of age and a resident of Indonesia, and verifying the identity of payment method holders to prevent fraud.
• Transaction Processing: Receiving deposits from and issuing withdrawals to your nominated Indonesian bank account or e-wallet accurately and promptly.
• Customer Support: Responding to your enquiries, resolving disputes, and providing assistance with technical issues or account matters.
• Responsible Gaming Compliance: Monitoring account activity for indicators of problem gambling behaviour, enforcing deposit limits and self-exclusion instructions, and fulfilling our duty of care to Members.
• Fraud Prevention & AML: Detecting, investigating, and preventing fraudulent activity, money laundering, account takeover, bonus abuse, and other prohibited conduct described in our Terms & Conditions.
• Platform Personalisation: Tailoring the platform experience — such as recommending relevant game categories, displaying preferred payment methods, and adjusting time-zone references (WIB as default) — to improve usability for individual Members.
• Promotional Communications: Sending you information about bonuses, seasonal promotions (Idul Fitri, Imlek, Ramadhan, and other events), and platform updates, subject to your notification preferences.
• Legal Compliance: Fulfilling obligations imposed by applicable laws and international gaming licence conditions, including record-keeping requirements and responses to legitimate enforcement requests.
• Platform Security & Integrity: Maintaining the technical security of the platform, detecting unauthorised access, and ensuring fair game outcomes through audit logging.

Legal Basis for Processing

332zk processes your Personal Data on one or more of the following legal grounds depending on the specific processing activity involved:

• Contractual Necessity: Processing required to perform the contract between you and 332zk — including account management, deposit and withdrawal processing, game delivery, and KYC verification — is undertaken on the basis that it is necessary to fulfil our contractual obligations to you as a Member.
• Legitimate Interests: Processing for fraud prevention, platform security, anti-money laundering screening, responsible gaming monitoring, and analytical improvement of the platform is undertaken on the basis of 332zk's legitimate interest in operating a safe, fair, and commercially viable platform. We have assessed that these interests are not overridden by your privacy rights in each case.
• Legal Obligation: Processing necessary to comply with international gaming licence conditions, financial crime regulations, and other applicable legal frameworks is undertaken on the basis of legal obligation.
• Consent: Processing for direct marketing communications (promotional emails, bonus notifications) is undertaken on the basis of your consent, which you may withdraw at any time without affecting the lawfulness of prior processing.

Data Sharing

7.1 Third-Party Processors

332zk engages the following categories of Third-Party Processors who may access your Personal Data strictly to perform services on our behalf, under written data processing agreements that bind them to confidentiality and appropriate security standards:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive transaction data necessary to execute deposits and withdrawals.
• KYC & Identity Verification Providers: Specialist third-party services that receive document scans and identity data to confirm age, name, and address on our behalf.
• Fraud & AML Screening Services: Services that cross-reference Member identity data against sanctions lists, politically exposed person (PEP) databases, and fraud risk registries.
• Game Studios: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive minimal session data (Member ID, game session identifier, bet/win amounts) necessary to deliver certified game outcomes and resolve technical disputes.
• Cloud Infrastructure & Security Providers: Data centre and content delivery network operators who host the 332zk platform infrastructure and protect it against distributed denial-of-service (DDoS) attacks and other threats.
• Customer Support Platform: The live chat and ticketing system provider who stores support communications on 332zk's behalf.

7.2 Disclosure to Authorities

332zk may disclose Personal Data to law enforcement agencies, regulatory bodies, or other governmental authorities where we are legally required to do so — for example, in response to a court order, subpoena, or mandatory reporting obligation under our international gaming licence. We will only disclose the minimum data necessary to comply with the specific legal request and, where permitted by law, will notify the affected Member.

7.3 No Commercial Sale of Data

332zk does not sell, rent, licence, or otherwise commercially transfer your Personal Data to any third party for that party's own marketing or commercial purposes. Any sharing of data beyond the categories described in Sections 7.1 and 7.2 will only occur with your explicit prior consent.

International Data Transfers

332zk operates an internationally hosted platform, which means that some of the Third-Party Processors described in Section 7.1 — particularly game studios and cloud infrastructure providers — may be located outside Indonesia. Where Personal Data is transferred to processors in other countries, 332zk takes the following measures to ensure adequate protection:

• Entering into data processing agreements that incorporate internationally recognised standard contractual clauses or equivalent contractual protections requiring the recipient to apply data security standards at least equivalent to those described in this Policy.
• Conducting due diligence on the data protection practices of each Third-Party Processor before engagement and periodically thereafter.
• Limiting the data shared with international processors to the minimum necessary for the specific service they provide.

Data Retention

332zk retains your Personal Data for as long as your account remains active and for a defined period thereafter, depending on the category of data and the applicable legal retention requirement. The key retention periods are as follows:

At the end of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be linked back to an individual. Where anonymisation is not technically feasible, the data is securely destroyed.

Security Measures

332zk implements a multi-layered security architecture to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction. Key measures include:

• Encryption in Transit: All data transmitted between your browser or app and the 332zk servers is encrypted using TLS 1.2 or higher, providing 256-bit encryption at the transport layer.
• Encryption at Rest: Sensitive Personal Data — including KYC documents, financial account details, and password hashes — is encrypted at rest using AES-256 encryption in secure, access-controlled storage environments.
• Password Security: Member passwords are never stored in plain text. They are hashed using a strong, salted cryptographic algorithm (bcrypt). 332zk staff cannot read your password.
• Two-Factor Authentication (2FA): Members are strongly encouraged to enable 2FA on their accounts to add a second layer of protection against unauthorised login.
• Access Controls: Internal access to Personal Data is restricted on a need-to-know basis. Only staff whose roles require access to specific data categories are granted that access, and all access is logged for audit purposes.
• Penetration Testing: 332zk's platform undergoes regular independent security assessments, including penetration testing and vulnerability scanning, to identify and remediate potential weaknesses before they can be exploited.
• Incident Response: 332zk maintains a documented data breach response procedure. In the event of a breach that poses a risk to Members' rights and freedoms, affected Members will be notified without undue delay using their registered contact method.

Cookies & Tracking Technologies

11.1 What We Use

The 332zk platform uses cookies and similar technologies — including local storage objects and session tokens — to deliver a functional, secure, and personalised experience. We do not use third-party advertising trackers, social media pixels, or cross-site behavioural profiling technologies.

11.2 Cookie Categories

• Strictly Necessary Cookies: Required for the platform to function. They manage your login session, maintain your account state across pages, and protect against cross-site request forgery (CSRF). These cannot be disabled without breaking core platform functionality.
• Performance & Analytics Cookies: Collect anonymised data about how Members interact with the platform — which pages are visited most, where sessions begin and end, and how game categories are navigated. This data is used solely to improve the platform experience. No individual is identified in these reports.
• Functional Cookies: Store your preferences — such as language display settings and preferred deposit method — so you do not need to re-enter them on each visit.
• Responsible Gaming Cookies: Track session duration locally to support reality-check reminders and session time-limit tools enabled by Members in their account settings.

11.3 Managing Cookies

You can control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies, or to be notified before a cookie is placed. Please note that disabling cookies beyond the strictly necessary category may impair certain platform features, including saved preferences and session continuity. Refer to your browser's help documentation for instructions on cookie management.

Your Rights Over Your Personal Data

As a Member of 332zk, you hold the following rights with respect to your Personal Data. To exercise any of these rights, contact us using the details in Section 16, clearly identifying yourself and the specific right you wish to invoke. We will respond within 30 calendar days of a verified request.

• Right of Access: You may request a copy of all Personal Data we hold about you, together with information about how it is being processed and shared.
• Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you may request that it be corrected. For identity-critical data such as your name or date of birth, correction may require re-submission of KYC documentation.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where: (a) it is no longer necessary for the purposes for which it was collected; (b) you withdraw consent and no other legal basis applies; or (c) the data has been unlawfully processed. This right is subject to overriding legal retention obligations described in Section 9.
• Right to Restriction: You may request that we restrict processing of your Personal Data in certain circumstances — for example, while the accuracy of the data is contested, or while you have objected to processing and we are assessing that objection.
• Right to Data Portability: You may request a machine-readable export of Personal Data you have provided to us directly (e.g., account profile data and transaction history) to facilitate transfer to another service provider.
• Right to Object: You may object to processing based on our legitimate interests (see Section 6) where you believe your rights and freedoms override those interests. You also have an unconditional right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time without penalty. Withdrawal does not affect the lawfulness of processing that occurred before the withdrawal.

Protection of Minors

The 332zk platform is strictly intended for adults who are 21 years of age or older. We do not knowingly collect Personal Data from, or provide services to, any person under the age of 21. Age verification is a mandatory step in our registration and KYC process.

If 332zk discovers or has reasonable grounds to believe that a Member is under 21, the account will be immediately suspended, all Personal Data associated with that account will be reviewed, and — following any legally required retention period — the data will be securely deleted. Any real-money balance will be returned to the deposit source following AML compliance review, and no winnings will be paid out.

If you are a parent or guardian and believe that a person under 21 in your care has registered an account on 332zk, please contact us immediately at support@332zk.net with details of the account. We will investigate and act promptly.

Third-Party Services & Links

The 332zk platform may display informational references to third-party brands — such as game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft), payment networks (Visa, Mastercard), and Indonesian financial institutions — in the course of delivering its services. These references do not constitute endorsements, and 332zk is not responsible for the privacy practices of any third-party entity.

Game studios that power live casino, slot, and other game categories on the 332zk platform operate their own certified random number generation (RNG) and game delivery infrastructure. While they receive minimal session data from 332zk for game delivery purposes (as described in Section 7.1), their independent privacy policies govern how they handle data within their own systems. We recommend reviewing the privacy policies of major studios if you have specific concerns about game-level data handling.

332zk does not embed third-party advertising networks, social media widgets, or external tracking scripts on its platform. The only third-party scripts loaded by the 332zk platform are those directly necessary for platform functionality and security, such as payment gateway scripts operating within secure iframes.

Policy Amendments

332zk reserves the right to update this Privacy Policy at any time to reflect changes in our data processing activities, applicable legal requirements, or improvements to our privacy practices. When we make material changes — those that significantly affect your rights or how your data is used — we will provide at least 14 days' advance notice via a prominent banner on the platform and, where practicable, via your registered email address.

The current version of this Policy is always accessible at https://332zk.net/privacy-policy and is identified by the version number and "Last Updated" date displayed at the top of this page. We recommend reviewing this page periodically. If you continue to use the 332zk platform after a revised Policy takes effect, your continued use constitutes acceptance of the updated terms. If you object to any material change, you must cease use and request account closure before the effective date.

Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or the way 332zk handles your Personal Data, please contact our support team. All privacy-related correspondence should be submitted in writing so that a complete and accurate record can be maintained.

If you are not satisfied with how we have handled a privacy concern after raising it with us directly, you have the right to escalate the matter to the relevant supervisory authority under the jurisdiction of 332zk's international gaming licence. Details of the relevant supervisory authority are available upon request from our support team.

For responsible gaming concerns — including self-exclusion, deposit limits, or problem gambling support — please visit our dedicated Responsible Gaming page or contact support directly. For general platform questions, our FAQ page provides quick answers to the most common Member enquiries.