Privacy Policy

1 Definitions

For the purposes of this Privacy Policy, the following terms shall carry the meanings set out below:

• "zona88" / "we" / "us" / "our" — refers to the online gaming platform operated at https://zona88.cam and all associated sub-domains and interfaces.
• "Player" / "Member" / "User" / "you" / "your" — any individual who visits, registers on, or otherwise interacts with the zona88 platform.
• "Personal Data" — any information relating to an identified or identifiable natural person; this includes data that, alone or in combination with other information, can be used to identify an individual.
• "Processing" — any operation or set of operations performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, restriction, or erasure.
• "Data Controller" — zona88, the entity that determines the purposes and means of processing Personal Data collected through this platform.
• "Data Processor" — any third party engaged by zona88 to process Personal Data on its behalf under a written data-processing agreement.
• "KYC" — Know Your Customer; the identity and age-verification process required before withdrawals may be processed.
• "Cookie" — a small text file placed on a Player's device by the zona88 platform for purposes of session management, preferences, and analytics.
• "IDR" — Indonesian Rupiah, the sole transaction currency of the zona88 platform.

2 Scope & Application

2.1 This Privacy Policy applies to all Personal Data collected, processed, and stored by zona88 in connection with the operation of its online gaming platform. It covers data obtained through the zona88 website (https://zona88.cam), any mobile-optimised interfaces, live chat sessions, email correspondence, and any other channel through which a Player communicates with zona88.

2.2 This policy is directed primarily at residents of Indonesia who engage with zona88 as registered Players. By accessing the platform or submitting a registration application, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your Personal Data in the manner described herein.

2.3 This Privacy Policy should be read in conjunction with our Terms & Conditions, which govern your overall use of the zona88 platform. In the event of any conflict between the two documents regarding the handling of Personal Data, this Privacy Policy shall prevail.

3 Data We Collect

3.1 Categories of Personal Data. The following table summarises the categories of Personal Data that zona88 collects and the primary reason for collecting each category:

3.2 Sensitive Data. zona88 does not intentionally collect sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, or health information) unless such data is volunteered by a Player in the context of a responsible gaming self-exclusion request or a support query, in which case it is handled with the highest level of confidentiality and is not used for any commercial purpose.

4 How We Collect Data

4.1 Directly From You. The majority of Personal Data processed by zona88 is provided directly by Players through the following interactions:

• Completing the account registration form (name, email, mobile number, date of birth);
• Submitting KYC documentation (KTP, selfie, proof of address, payment method evidence);
• Making deposits or requesting withdrawals via local Indonesian payment channels;
• Contacting our support team via live chat or email;
• Responding to promotional surveys or opting into marketing communications;
• Updating account profile settings or payment method details.

4.2 Automatically From Your Device. When you access the zona88 platform, certain technical data is collected automatically through cookies, server logs, and similar tracking technologies. This includes your IP address, browser fingerprint, device identifiers, session duration, and in-platform navigation patterns. This data is collected regardless of whether you are logged into an account.

4.3 From Third-Party Sources. zona88 may receive Personal Data about you from third-party service providers engaged to assist with platform operations, including:

• KYC and identity verification partners who cross-check submitted documents against official databases;
• Payment processors (including those facilitating transactions via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja) who provide transaction confirmation data;
• Fraud prevention and anti-money-laundering (AML) screening services that flag high-risk profiles based on publicly available watchlists;
• Analytics providers who aggregate anonymised behavioural data to help zona88 understand platform usage patterns.

5 Purpose & Legal Basis for Processing

5.1 zona88 processes Personal Data only where a legitimate legal basis exists for doing so. The table below maps each primary processing activity to its corresponding legal basis:

5.2 Withdrawal of Consent. Where processing is based on your consent (such as receiving marketing emails or SMS promotions), you may withdraw that consent at any time by contacting our support team or updating your notification preferences within your account settings. Withdrawal of consent will not affect the lawfulness of processing carried out prior to withdrawal.

6 Data Sharing & Disclosure

6.1 Service Providers. zona88 engages carefully vetted third-party Data Processors who assist in delivering platform services. These include payment gateway operators, KYC verification firms, cloud hosting providers, fraud detection vendors, and customer support software providers. All such parties are bound by written data-processing agreements that restrict their use of your data to the specific services they provide to zona88.

6.2 Game Content Providers. Game studios whose products are featured on the zona88 platform — including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Habanero, Spribe, and Pocket Games Soft — may receive anonymised session data necessary to operate and settle their games. These providers do not receive your personally identifiable information unless required by a specific regulatory or contractual obligation.

6.3 Regulatory and Law Enforcement Disclosure. zona88 may disclose your Personal Data to competent regulatory authorities, law enforcement agencies, or courts where such disclosure is required by applicable law, a valid court order, or a lawful regulatory request. In such cases, zona88 will disclose only the minimum information necessary to satisfy the obligation.

6.4 Business Transfers. In the event that zona88 undergoes a merger, acquisition, restructuring, or sale of assets, your Personal Data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material changes to this Privacy Policy that arise as a result.

6.5 No Sale of Data. zona88 will never sell, rent, or otherwise transfer your Personal Data to unaffiliated third parties for their own marketing or commercial purposes. This commitment is absolute and applies regardless of the commercial value of the data involved.

7 Data Retention

7.1 Retention Periods. zona88 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active account data (identity, contact, financial records): retained for the duration of the account relationship plus a minimum of 5 years following account closure, in accordance with standard AML record-keeping obligations;
• KYC documentation (KTP copies, selfies, proof of address): retained for 5 years from the date of submission or from the date of last use, whichever is later;
• Transaction records (deposits, withdrawals, bet history): retained for a minimum of 5 years in accordance with financial record-keeping requirements;
• Support and communications records (live chat logs, email transcripts): retained for 3 years from the date of the interaction;
• Technical and usage logs (IP logs, session data): retained for 12 months unless flagged for fraud investigation, in which case retention may be extended.

7.2 Post-Retention Deletion. Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual. Anonymised data may be retained indefinitely for statistical and analytical purposes.

7.3 Self-Exclusion Records. Where a Player has requested permanent self-exclusion, a minimal record of that exclusion (sufficient to enforce it) will be retained indefinitely to prevent the individual from re-registering on the platform.

8 Data Security

8.1 Technical Measures. zona88 implements a layered security architecture to protect your Personal Data against unauthorised access, loss, alteration, or disclosure. Key technical safeguards include:

• 256-bit SSL/TLS encryption on all data transmissions between Players' devices and zona88 servers;
• AES-256 encryption for Personal Data and financial records stored at rest;
• Multi-factor authentication (MFA) requirements for all administrative access to production systems;
• Automated intrusion detection and real-time threat monitoring;
• Regular third-party penetration testing and security audits;
• Strict role-based access controls ensuring staff can only access data relevant to their specific job functions.

8.2 Organisational Measures. All zona88 personnel with access to Personal Data are subject to confidentiality obligations and receive regular data protection training. Access rights are reviewed quarterly and revoked immediately upon a staff member's departure from the organisation.

8.3 Data Breach Response. In the event of a Personal Data breach that is likely to result in a risk to Players' rights and freedoms, zona88 will notify affected Players without undue delay and will take all reasonable steps to contain, investigate, and remediate the breach. A breach response plan is maintained and tested annually.

9 Cookies & Tracking Technologies

9.1 What Are Cookies. Cookies are small text files stored on your device when you visit the zona88 platform. They allow the platform to remember your session, preferences, and certain usage behaviours between visits. zona88 uses only first-party cookies; no third-party advertising or cross-site tracking cookies are deployed.

9.2 Cookie Categories Used by zona88.

• Strictly Necessary Cookies: Required for core platform functionality including login session management, security tokens, and shopping cart equivalents (e.g., active bet slips). These cannot be disabled without impairing platform functionality.
• Functional Cookies: Store your preferences such as language settings, preferred deposit method (e.g., BCA or OVO), and display preferences. Disabling these does not prevent platform access but may reduce the quality of your experience.
• Analytics Cookies: Aggregate anonymised data on how Players navigate the platform — which game categories are visited most frequently, average session duration, and common exit points. This data is used solely to improve the zona88 experience and is never linked to your individual identity.

9.3 Managing Cookies. You may manage cookie preferences through your browser settings at any time. Most modern browsers allow you to block or delete cookies, though doing so may affect the functionality of the zona88 platform. For detailed instructions specific to your browser, consult your browser's help documentation.

9.4 No Cross-Site Tracking. zona88 does not participate in advertising networks or place cookies designed to track your behaviour across unrelated websites. Our analytics data is processed internally and is not shared with social media platforms or advertising exchanges.

10 Your Rights

10.1 As a Player on the zona88 platform, you hold the following rights in relation to your Personal Data. To exercise any of these rights, contact our support team at [email protected]. We will respond to all valid requests within 30 calendar days.

• Right of Access: You may request a copy of the Personal Data zona88 holds about you, along with information on how it is being used.
• Right to Rectification: You may request the correction of any inaccurate or incomplete Personal Data held in your account profile.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to zona88's legal retention obligations (see Section 7).
• Right to Restriction of Processing: You may request that zona88 limit the processing of your Personal Data in certain circumstances, such as while a data accuracy dispute is being resolved.
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract, you may request a structured, machine-readable copy of the Personal Data you have provided to zona88.
• Right to Object: You may object to processing carried out on the basis of zona88's legitimate interests, including profiling for responsible gaming monitoring, at any time. zona88 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

10.2 Identity Verification for Requests. To protect your privacy, zona88 will verify your identity before processing any rights request. You may be asked to provide the email address associated with your account and a copy of a government-issued ID.

11 Protection of Minors

11.1 zona88 is strictly an adults-only platform. Individuals under the age of 21 are not permitted to register, deposit, or participate in any gaming activity on the platform. zona88 does not knowingly collect Personal Data from individuals below this age threshold.

11.2 Where zona88 discovers or is notified that Personal Data has been collected from an individual under 21 years of age, it will take immediate steps to:

• Suspend and permanently close the affected account;
• Return any real-money balance to the funding payment method, net of any bonus credits which will be forfeited;
• Purge all Personal Data associated with the account from live systems within 72 hours, subject to any mandatory AML-related retention obligations.

11.3 If you are a parent or guardian and believe a minor in your care has accessed zona88 using your credentials or has otherwise created an account, please contact our support team immediately at [email protected]. We recommend installing parental control software on shared devices to prevent unauthorised access.

12 International Data Transfers

12.1 As an internationally operating platform, zona88 may transfer your Personal Data to servers or service providers located outside Indonesia. Such transfers are undertaken only where adequate protections are in place to ensure that your data receives a standard of protection equivalent to that described in this Privacy Policy.

12.2 Safeguards Applied. Where Personal Data is transferred internationally, zona88 relies on one or more of the following safeguards:

• Data-processing agreements incorporating standard contractual clauses that impose equivalent data protection obligations on the receiving entity;
• Transfers to jurisdictions that maintain data protection standards recognised as adequate by internationally accepted frameworks;
• Binding corporate rules where the recipient is part of the same corporate group as zona88.

12.3 You may request further information about the specific safeguards applied to any international transfer of your Personal Data by contacting our support team.

13 Amendments to This Policy

13.1 zona88 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. The effective date at the top of this document indicates when the current version took effect.

13.2 Where changes are material — meaning they significantly affect the way in which your Personal Data is used or your rights in relation to it — zona88 will notify registered Players by email no fewer than 14 calendar days prior to the new version taking effect. For minor or administrative updates, the revised policy will be published on this page without individual notice.

13.3 Your continued use of the zona88 platform following the effective date of any amendment constitutes acceptance of the revised Privacy Policy. If you do not accept the revised terms, you should contact our support team to request account closure in accordance with our Terms & Conditions.

14 Contact & Data Enquiries

For any questions, concerns, or formal requests relating to this Privacy Policy or the handling of your Personal Data by zona88, please contact our support team through the following channels:

• Email: [email protected]
• Live Chat: Available 24 hours a day, 7 days a week, directly through the zona88 platform interface
• Response Target — Privacy Matters: Within 6 hours via email; under 2 minutes via live chat during peak hours (WIB)
• Formal Rights Requests: Completed within 30 calendar days of receipt of a verified request

When contacting us regarding a data rights request, please include your registered email address, the nature of your request, and (where applicable) the relevant data categories concerned. This will allow us to locate your records promptly and respond within the required timeframe.

For matters specifically related to responsible gaming, self-exclusion, or problem gambling, please visit our dedicated Responsible Gaming page for comprehensive guidance and self-management tools.