Privacy Policy

zk7apk ("we", "us", "our", or "the Company") operates the online sports betting and casino platform accessible at https://zk7apk.cam (the "Platform"). This Privacy Policy explains how we collect, use, disclose, store, and protect personal information relating to individuals who visit, register on, or transact through the Platform ("you", "User", or "Player").

This policy is intended to be read alongside our Terms & Conditions and our Responsible Gaming guidelines, both of which form part of the contractual relationship between you and zk7apk. By creating an Account or continuing to use the Platform following any update to this policy, you acknowledge that you have read and understood how your personal data is handled.

zk7apk is committed to handling your personal information with transparency, integrity, and care. We collect only the data that is genuinely necessary to deliver our services, meet our legal obligations, and protect the security of all users on the Platform. We do not engage in indiscriminate data collection, and we apply proportionality as a guiding principle in every data-processing decision we make.

We collect personal data through several channels: directly from you when you register or transact; automatically as you navigate the Platform; and, where necessary, from trusted third-party verification providers. The categories of data we collect are set out below.

2.1 Registration & Account Data

When you create an Account, we collect: your full legal name as it appears on your national identity document (KTP or passport); date of birth; residential address; email address; and mobile phone number. This information is required to establish your identity, comply with age-verification requirements (21+), and maintain the integrity of your account.

2.2 KYC & Identity Verification Documents

To comply with our Know Your Customer (KYC) obligations and to authorise withdrawal requests, we may collect scanned copies or photographs of your Indonesian National Identity Card (KTP), passport, driver's licence (SIM), proof of address documents, and selfie photographs taken alongside your identity documents. We may also collect information about your payment method accounts (e.g., bank account holder name and last four digits) to verify ownership.

2.3 Transactional Data

We record details of all deposits, withdrawals, and wagers made through your Account. This includes transaction amounts in Indonesian Rupiah (IDR / Rp), timestamps, payment channel used (e.g., BCA, BRI, OVO, DANA, GoPay), and bet history including markets, odds, stake amounts, and settlement outcomes. Transactional data is essential for account management, dispute resolution, and regulatory compliance.

2.4 Technical & Device Data

When you access the Platform, our servers automatically log certain technical information: your IP address, device type and operating system, browser type and version, referring URL, pages visited within the Platform, session duration, and clickstream data. This data is used for security monitoring, fraud detection, and Platform performance optimisation.

2.5 Communication Data

If you contact our customer support team by email or live chat, we retain records of those communications, including the content of your messages, timestamps, and any attachments you provide. These records allow us to track and resolve your queries efficiently and to improve our support services.

2.6 Marketing Preferences

Where you have explicitly opted in to receive promotional communications from zk7apk, we record that consent and your stated communication preferences. You may withdraw this consent at any time by contacting our support team.

zk7apk processes your personal data for the following specific, lawful purposes:

• Account Administration: Creating and managing your Player Account, authenticating logins, processing password resets, and communicating important account notifications such as deposit confirmations, withdrawal approvals, and security alerts.
• Identity & Age Verification: Verifying that you are a real person, that you are at least 21 years of age, and that you are not a restricted individual (e.g., a self-excluded player or a sanctioned person).
• Payment Processing: Facilitating deposits and withdrawals via your chosen Indonesian payment channel — including local bank transfers (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallet services (OVO, DANA, GoPay, ShopeePay, LinkAja) — and maintaining an accurate record of all financial transactions in your Account.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, multi-accounting, money laundering, and other Prohibited Activities as defined in our Terms & Conditions. This includes automated risk-scoring of transactions and sessions.
• Legal & Regulatory Compliance: Complying with applicable laws, regulatory requirements, court orders, and requests from competent authorities. This may include retaining transaction records for the minimum statutory period and reporting suspicious transactions where required by applicable anti-money laundering regulations.
• Responsible Gaming: Monitoring account activity to identify patterns that may indicate problem gambling behaviour, enforcing self-exclusion and deposit limit requests, and proactively reaching out to players who exhibit markers of harm.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve the Platform's features, performance, user interface, and product range.
• Customer Support: Responding to your queries, resolving disputes, and maintaining records of all support interactions for training and quality assurance purposes.
• Marketing (with consent only): Sending promotional offers, bonus notifications, and product updates via your preferred channel (email) where you have explicitly opted in. We do not send unsolicited marketing communications.

Every instance of personal data processing at zk7apk is grounded in one of the following legal bases:

• Contractual Necessity: Processing is required to perform our contractual obligations to you — specifically, to operate your Account, process your deposits and withdrawals, settle your wagers, and deliver the services you have requested.
• Legal Obligation: Certain processing activities — notably KYC verification, transaction record retention, and suspicious-activity reporting — are required by applicable law and regulation. We must perform these activities regardless of your consent.
• Legitimate Interests: We process some categories of data (particularly technical and device data) on the basis of our legitimate interests in maintaining Platform security, preventing fraud, and improving our services, provided those interests are not overridden by your rights and freedoms.
• Consent: Where we cannot rely on any of the above bases — most notably for direct marketing communications — we will request your explicit, freely given consent before processing your data for that purpose. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

zk7apk does not sell your personal data. We share your information only in the limited circumstances described below, and only with parties who are contractually required to handle your data securely and in accordance with applicable privacy law.

5.1 Service Providers

We engage carefully vetted third-party service providers to assist with specific Platform functions. These include KYC and identity verification platforms, payment processors (for routing transactions to BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja), fraud-detection and risk-scoring engines, IT infrastructure and hosting providers, and customer support tooling. Each service provider receives only the minimum data necessary to perform their specific function and is bound by a data processing agreement prohibiting them from using your data for any purpose beyond the contracted service.

5.2 Game Studio & Content Providers

Some games on the Platform are powered by third-party studios such as Pragmatic Play, Evolution Gaming, Pocket Games Soft, Spribe, NetEnt, and Microgaming. These providers may receive a Player session token and anonymised session data necessary to render the game and maintain game state. Full personal identity data is not shared with game studios.

5.3 Regulatory & Law Enforcement Authorities

We may disclose your personal data to competent government authorities, regulators, courts, or law enforcement agencies where we are legally required or compelled to do so, or where we determine in good faith that disclosure is necessary to protect the safety of any individual or to prevent fraud or other criminal activity.

5.4 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of the Company's assets, your personal data may be transferred to the acquiring or successor entity as part of that transaction. We will notify affected Users of any such transfer and of any material change to how their data will be handled under the new entity's privacy policy.

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The table below summarises our standard retention periods by data category.

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised so that it can no longer be attributed to any identifiable individual. Where anonymisation is used in place of deletion, the anonymised data may be retained indefinitely for statistical and analytical purposes.

zk7apk implements a layered, defence-in-depth approach to information security. Our key technical and organisational measures include:

• TLS/SSL Encryption in Transit: All data exchanged between your browser or device and the Platform is encrypted using TLS 1.2 or higher. We enforce HTTPS across every page and API endpoint.
• Encryption at Rest: Sensitive personal data and KYC documents stored on our servers are encrypted at rest using AES-256 or equivalent encryption standards.
• Access Controls: Personal data is accessible only to authorised Company personnel and contracted service providers who have a demonstrated need to access it for their job function. Role-based access controls (RBAC) and multi-factor authentication (MFA) are enforced for all administrative access.
• PCI-DSS Compliant Payment Processing: Payment card data is handled exclusively by PCI-DSS-certified payment processors. zk7apk does not store, process, or transmit full card numbers on its own infrastructure.
• Intrusion Detection & Monitoring: We operate continuous network monitoring and intrusion detection systems to identify and respond to anomalous access patterns or security events in real time.
• Vulnerability Management: Regular security assessments, penetration testing, and patch management cycles are conducted to identify and address security vulnerabilities before they can be exploited.

While we apply all reasonable and industry-standard measures to protect your data, no transmission over the internet or electronic storage system is completely immune to risk. You also have a role to play in keeping your Account secure: use a strong, unique password, do not share your login credentials with anyone, and log out of the Platform when using a shared device.

zk7apk uses cookies and similar tracking technologies (collectively "cookies") to operate the Platform, remember your preferences, and analyse usage patterns. A cookie is a small text file placed on your device by a website you visit.

8.1 Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They manage your authenticated session, maintain your account login state, and enable core security features such as CSRF protection. You cannot opt out of strictly necessary cookies without losing functionality.
• Functional Cookies: These cookies remember your preferences — such as your preferred language, display settings, and last-used payment method — so that you do not need to re-enter them on each visit.
• Analytics Cookies: We use privacy-respecting analytics tools to collect aggregated, anonymised data about how users navigate the Platform — which pages are visited most frequently, where users encounter errors, and how long sessions last. This data is used solely to improve the Platform experience and is never linked back to individual identities.

8.2 Managing Cookies

You can manage or disable non-essential cookies at any time through your browser's settings. Please note that disabling functional or analytics cookies may affect some aspects of your experience on the Platform but will not prevent you from accessing core features. Strictly necessary cookies cannot be disabled without fundamentally impairing the Platform's functionality.

As a User of the zk7apk Platform, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected] with a clear description of your request. We will respond within 30 calendar days.

Please note that some rights are subject to limitations where we are required by law to retain or process certain data (for example, transaction records held for AML compliance). In such cases, we will clearly explain the reason and scope of any limitation when responding to your request.

zk7apk is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 21. Our registration process includes a mandatory date-of-birth declaration, and our KYC process requires documentary proof of age before withdrawals are enabled.

The Company operates internationally, and some of the service providers we engage (for example, cloud hosting infrastructure or KYC verification platforms) may process or store your data on servers located outside Indonesia. Where personal data is transferred outside your country of residence, we take steps to ensure an adequate level of protection is in place, including:

• Entering into data processing agreements with all international service providers that impose obligations equivalent to those required under applicable Indonesian data protection law.
• Restricting international transfers to service providers located in jurisdictions that maintain adequate data protection standards, or that have agreed to equivalent contractual safeguards.
• Conducting due diligence on the security certifications and compliance posture of all international service providers before engagement.

By using the Platform, you acknowledge that your data may be transferred to and processed in countries outside Indonesia for the purposes described in this Privacy Policy.

We may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or the services we offer. When we make material changes, we will update the "Last updated" date at the top of this page and, where the changes significantly affect your rights or our use of your data, we will notify you directly by email to your registered address.

We encourage you to review this Privacy Policy periodically. Your continued use of the Platform following the publication of an updated policy constitutes your acceptance of the revised terms, except where applicable law requires us to obtain fresh consent for the new processing activities.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way zk7apk handles your personal data, please contact our dedicated privacy support team:

When submitting a data rights request, please include your registered Account username, the specific right you wish to exercise, and any supporting information that will help us locate and verify your data. We may ask you to verify your identity before processing any request that involves access to, or deletion of, personal data.