zan88 Privacy Policy

1 Definitions

In this Privacy Policy, the following terms carry the meanings set out below:

2 Scope & Application

This Privacy Policy applies to all Personal Data collected by zan88 in connection with:

• Your registration and use of an account on zan88.cam;
• Any transaction — deposit, withdrawal, or bonus redemption — processed through the platform;
• Your interactions with zan88 customer support, live chat, or email;
• Your use of any zan88 mobile application or associated service;
• Visits to zan88.cam even without a registered account (e.g., via cookies and analytics).

This policy applies regardless of the device or network you use to access zan88. It covers data collected from players located in Indonesia, and applies to all personal information processed by zan88 as Data Controller. Where zan88 acts as a Data Processor for a third party, a separate agreement governs that processing.

This Privacy Policy is incorporated by reference into zan88's Terms & Conditions. By registering an account or otherwise using zan88, you acknowledge that you have read and understood this policy.

3 Data We Collect

3.1 Registration Data

When you create a zan88 account, we collect the following information as part of the standard registration process:

• Full legal name;
• Date of birth (used to verify the 21+ age requirement);
• Email address (used as your primary account identifier and for communications);
• Residential address in Indonesia (including city, province, and postal code);
• Username and encrypted password;
• Preferred currency (Indonesian Rupiah, IDR).

3.2 KYC & Identity Verification Data

To comply with our anti-money-laundering (AML) obligations and to confirm your eligibility to play, zan88 may request the following documents and data at various stages of your account lifecycle:

• Government-issued photo identification: KTP (Indonesian National ID), SIM (driving licence), or Passport — including the ID number, issue date, and expiry date;
• Proof of residential address (utility bill or bank statement issued within the past three months);
• Proof of ownership of your nominated payment method (bank account statement or e-wallet screenshot);
• Selfie photograph, or a photograph of you holding your identification document, where required for liveness checks.

3.3 Financial & Transaction Data

For every deposit and withdrawal processed through your account, zan88 records:

• Payment method type (e.g., BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja, Visa, Mastercard);
• Partial account or card number (masked — we never store full card numbers);
• Transaction amount in IDR;
• Transaction timestamp (WIB, UTC+7);
• Transaction reference number and status.

3.4 Gameplay & Betting Data

We record all wagering activity on your account, including:

• Bets placed, game type, stake, odds, and outcome;
• Session start and end times;
• Bonus activations, wagering progress, and bonus settlements;
• Responsible gaming tool activations (deposit limits, session limits, self-exclusion requests).

3.5 Technical & Device Data

When you access zan88, our servers automatically collect:

• IP address and approximate geolocation (country and city level);
• Device type, operating system, and browser version;
• Screen resolution and language settings;
• Session duration, pages visited, and navigation path;
• Referring URL and exit URL;
• Cookie identifiers and analytics tags (see Clause 7).

3.6 Communications Data

When you contact zan88 support, we record the content of your messages, the channel used (email, live chat), the timestamp, and the resolution outcome. Call recordings, where applicable, are stored for a maximum of 90 days.

4 How We Use Your Data

zan88 uses collected Personal Data for the following purposes:

5 Legal Basis for Processing

zan88 processes your Personal Data on one or more of the following legal bases, depending on the specific purpose:

• Contractual necessity: Processing required to perform our contract with you — specifically, operating your account, processing bets, and handling deposits and withdrawals.
• Legal obligation: Processing required to comply with applicable law, including AML record-keeping, KYC verification, and responses to lawful authority requests.
• Legitimate interests: Processing carried out in zan88's legitimate business interests — such as fraud detection, platform security, and aggregated analytics — where those interests are not overridden by your privacy rights.
• Consent: Processing carried out based on your freely given, specific, and informed consent — primarily for marketing communications. You may withdraw this consent at any time without affecting any other processing.

6 Data Sharing & Disclosure

6.1 Categories of Recipients

zan88 may share your Personal Data with the following categories of third parties, strictly on a need-to-know basis and subject to written data processing agreements where required:

• Payment service providers and banking partners: BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, Bank Danamon, and the operators of OVO, DANA, GoPay, ShopeePay, and LinkAja — to process your financial transactions;
• KYC and identity verification providers: Third-party services that perform document verification, liveness checks, and sanctions screening;
• Game content providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive only the anonymised session token required to load your game session — they do not receive your name, email, or financial data;
• IT infrastructure and hosting providers: Cloud and server infrastructure partners who store and process data on our behalf under strict data processing agreements;
• Analytics providers: Web analytics tools processing pseudonymised technical data to help us improve platform performance;
• Legal and regulatory authorities: Where zan88 is required by law or court order to disclose data to regulators, law enforcement, or judicial authorities.

6.2 No Sale of Data

zan88 does not sell, lease, or exchange your Personal Data with third-party marketers, data brokers, or advertising networks under any circumstances. Any third-party sharing is strictly limited to the operational purposes described in Clause 6.1.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of zan88's assets, Personal Data may be transferred to the acquiring entity as part of the transaction. In such cases, zan88 will notify affected players by email prior to any transfer and ensure that the acquiring entity is bound by privacy commitments at least equivalent to those in this policy.

7 Cookies & Tracking Technologies

7.1 Types of Cookies Used

zan88 uses the following categories of cookies and similar tracking technologies on zan88.cam:

• Strictly necessary cookies: Essential for the platform to function — they enable login sessions, shopping cart functionality, and security features. These cannot be disabled without breaking core functionality.
• Functional cookies: Remember your preferences (e.g., preferred language, last-used payment method) to personalise your experience across sessions.
• Analytics cookies: Collect anonymised data about how visitors use the site — pages visited, time on site, error rates — to help us improve the platform.
• Fraud-prevention cookies: Used to identify suspicious login patterns, detect device fingerprints associated with known fraudulent activity, and protect your account from unauthorised access.

7.2 Managing Cookies

You can control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies. Note that disabling strictly necessary cookies will impair your ability to use the zan88 platform. Detailed instructions for managing cookies in popular browsers are available in each browser's help documentation.

8 Data Retention

zan88 retains Personal Data only for as long as necessary to fulfil the purpose for which it was collected, or to comply with applicable legal obligations. The following retention periods apply:

After the applicable retention period expires, Personal Data is securely deleted or anonymised so that it can no longer be attributed to any individual.

9 Your Rights

As a player on zan88, you have the following rights in relation to your Personal Data. To exercise any of these rights, contact our Data Protection Officer at [email protected]. We will respond within 30 calendar days.

10 Data Security

zan88 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, alteration, disclosure, or destruction:

• Transport Layer Security (TLS 1.3): All data transmitted between your device and zan88's servers is encrypted in transit;
• AES-256 encryption at rest: Sensitive fields including identity documents, payment references, and passwords (stored as salted hashes) are encrypted in storage;
• Access controls: Role-based access controls ensure that only authorised personnel with a documented business need can access player data. All access events are logged;
• Multi-factor authentication: All internal administrative access to player data systems requires multi-factor authentication;
• Regular penetration testing: zan88 commissions independent security audits and penetration tests at least annually;
• Incident response plan: In the event of a confirmed data breach affecting your Personal Data, zan88 will notify affected players within 72 hours of discovery and provide guidance on protective steps.

Despite these measures, no internet transmission or electronic storage method is 100% secure. zan88 cannot guarantee absolute security, but commits to acting promptly and transparently in the event of any confirmed incident.

11 Children & Minors

zan88 is strictly an adult platform. We do not knowingly collect Personal Data from any individual under the age of 21. Our registration process requires date-of-birth confirmation and KYC verification specifically to enforce this restriction.

If zan88 discovers that Personal Data has been collected from a person under 21 — whether through misrepresentation at registration or any other means — we will immediately and permanently suspend the associated account, void all balances and winnings, and securely delete all Personal Data collected from that individual within 30 days, subject only to any data we are legally required to retain for AML reporting purposes.

12 International Data Transfers

zan88's primary server infrastructure is located outside of Indonesia. By using zan88 and providing your Personal Data, you acknowledge that your data may be transferred to, stored in, and processed in jurisdictions outside Indonesia. These jurisdictions may have different data protection laws than those in Indonesia.

Where such transfers occur, zan88 ensures appropriate safeguards are in place, including:

• Standard contractual clauses requiring the recipient to handle data to a standard equivalent to this Privacy Policy;
• Transfers only to jurisdictions with adequate data protection frameworks as assessed by zan88's legal team;
• Data processing agreements with all third-party processors that specify security requirements, permitted purposes, and deletion obligations.

For information about the specific countries to which your data may be transferred, or to obtain a copy of the relevant contractual safeguards, contact our Data Protection Officer at [email protected].

13 Amendments to This Policy

zan88 may update this Privacy Policy periodically to reflect changes in our practices, applicable law, or the services we offer. The "Last updated" date at the top of this page reflects the date of the most recent revision.

Where a change is material — meaning it substantively affects how we collect or use your data or the rights available to you — zan88 will notify you by email to your registered address no less than seven (7) calendar days before the change takes effect. Minor clarifications or corrections may be made without advance notice.

Your continued use of zan88 after the effective date of any revision constitutes your acceptance of the updated Privacy Policy. If you do not accept a material change, you should close your account before the change takes effect. Instructions for account closure are in our Terms & Conditions, Clause 4.4.

14 Contact & Data Protection Officer

If you have questions about this Privacy Policy, wish to exercise any of your data rights, or want to report a privacy concern, please contact zan88 through the following channels:

Our support team operates 24 hours a day, 7 days a week, from our primary operations centre on Western Indonesia Time (WIB, UTC+7). For non-privacy queries, live chat is available directly through the zan88 platform.