Privacy Policy

INTRODUCTION: z18com ("we", "us", "our", or "the Company") is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, store, share, and protect the personal data you provide when accessing or using the z18com platform and services (the "Service" or "Platform"). By using z18com, you consent to the data practices described in this Privacy Policy.

This Privacy Policy applies to all users of the z18com website, mobile applications, and associated services. It should be read in conjunction with our Terms & Conditions.

1. Information We Collect

1.1 Personal Information Provided by You

When you register for an account, use our services, or contact customer support, z18com collects personal information that you voluntarily provide, including but not limited to:

• Identity Data: Full legal name, date of birth, gender, nationality, and government-issued identification documents (Indonesian National Identity Card / KTP, Passport, or Driver's License) for age and identity verification purposes.
• Contact Information: Email address, phone number (mobile), residential address, and postal code.
• Financial Information: Bank account details (bank name, account number, account holder name), e-wallet information (OVO, DANA, GoPay, ShopeePay, LinkAja account identifiers), payment transaction records, deposit and withdrawal history, and account balance information.
• Account Credentials: Username, password (stored in encrypted form), security questions and answers, and any custom account settings or preferences.
• Communication Records: Correspondence with customer support, live chat transcripts, email communications, and any feedback or complaints you submit to us.

1.2 Information Automatically Collected

When you access the z18com Platform, we automatically collect certain technical and usage information through cookies, log files, and similar tracking technologies:

• Device Information: IP address, browser type and version, operating system, device type (desktop, mobile, tablet), screen resolution, and device identifiers.
• Usage Data: Pages visited, time spent on pages, clickstream data, referring/exit pages, date and time stamps, gaming activity (games played, bets placed, wins and losses), session duration, and interaction patterns.
• Location Data: Approximate geographic location derived from IP address to verify compliance with geo-restrictions and ensure you are accessing the Service from within Indonesian territory.
• Cookies and Similar Technologies: We use cookies, web beacons, and local storage to enhance user experience, remember your preferences, maintain session state, and analyze platform performance. You can control cookie settings through your browser, but disabling cookies may limit certain platform functionality.

1.3 Information from Third Parties

z18com may receive personal information from third-party sources including:

• Payment Processors: Transaction verification data from Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallet providers to confirm deposit and withdrawal transactions.
• Identity Verification Services: Age verification and identity authentication data from third-party KYC (Know Your Customer) service providers to comply with regulatory requirements.
• Gaming Providers: Game outcome data, RTP statistics, and session information from licensed game providers including Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Ezugi, Spribe, and Pocket Games Soft.
• Fraud Prevention Services: Risk assessment data and fraud detection signals from specialized security providers to protect against account takeover, payment fraud, and money laundering.

2. How We Use Your Information

z18com uses the collected personal information for the following purposes:

2.1 Service Provision and Account Management

• Create, maintain, and manage your user account
• Process deposits, withdrawals, and financial transactions
• Provide access to casino games, sports betting markets, and togel lottery draws
• Verify your identity, age (21+ requirement), and residency status
• Maintain account security and prevent unauthorized access
• Track gaming history, transaction records, and account balances
• Apply bonuses, promotions, and loyalty rewards to your account

2.2 Legal and Regulatory Compliance

• Comply with international gaming licensing requirements and regulations
• Perform Know Your Customer (KYC) and Anti-Money Laundering (AML) checks
• Respond to legal requests, court orders, or law enforcement inquiries
• Detect and prevent fraud, money laundering, collusion, and other illegal activities
• Enforce our Terms & Conditions and investigate breaches
• Maintain records as required by applicable gaming regulations and financial laws

2.3 Communication and Customer Support

• Respond to your inquiries, support requests, and complaints
• Send transactional notifications (deposit confirmations, withdrawal updates, account alerts)
• Provide customer support in English and Indonesian (Bahasa Indonesia) via live chat, email, and phone
• Communicate important platform updates, policy changes, or service announcements
• Send promotional communications, bonus offers, and marketing materials (with your consent, and you may opt-out at any time)

2.4 Platform Improvement and Analytics

• Analyze user behavior and preferences to improve platform design and functionality
• Monitor platform performance, uptime, and technical issues
• Conduct research and statistical analysis to enhance user experience
• Test new features, games, and services before full deployment
• Personalize content, game recommendations, and promotional offers based on your activity

2.5 Responsible Gaming

• Monitor gameplay patterns to identify potential problem gambling behavior
• Implement and enforce deposit limits, session time-outs, and self-exclusion requests
• Provide resources and support for responsible gaming practices
• Comply with 21+ age restrictions and prevent underage gambling

3. How We Share Your Information

z18com does not sell your personal information to third parties. However, we may share your data with the following categories of recipients under strict confidentiality obligations:

3.1 Service Providers and Business Partners

• Payment Processors: Indonesian banks and e-wallet providers to process deposits and withdrawals
• Gaming Providers: Licensed game studios (Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Ezugi, Spribe, Pocket Games Soft, Habanero) to deliver casino games, live dealer tables, and sports betting platforms
• Identity Verification Services: Third-party KYC providers to verify age and identity
• Customer Support Tools: Live chat platforms and ticketing systems to manage customer inquiries
• Cloud Hosting Providers: Secure data storage and server infrastructure providers
• Analytics Services: Platform analytics tools to monitor performance and user behavior (data is anonymized where possible)

3.2 Legal and Regulatory Authorities

We may disclose your personal information to law enforcement, regulatory bodies, courts, or government agencies when required by law or when we believe in good faith that disclosure is necessary to:

• Comply with legal obligations, subpoenas, court orders, or regulatory requests
• Investigate suspected fraud, money laundering, or illegal activity
• Protect the rights, property, or safety of z18com, our users, or the public
• Enforce our Terms & Conditions or other agreements

3.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, your personal information may be transferred to the acquiring entity or successor organization. We will notify you via email and/or prominent notice on our Platform of any change in ownership or control of your personal data.

4. Data Security and Protection

z18com employs industry-standard security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

4.1 Technical Security Measures

• SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL (Secure Sockets Layer) encryption, the same technology used by banks and financial institutions.
• Secure Data Storage: Personal information is stored on secure servers with restricted access, firewalls, and intrusion detection systems.
• Password Protection: User passwords are hashed and salted using advanced cryptographic algorithms. z18com staff cannot access your password in plain text.
• Two-Factor Authentication (Optional): Enhanced account security through optional 2FA for login and withdrawals.
• Regular Security Audits: Periodic penetration testing and vulnerability assessments conducted by independent cybersecurity firms.
• Data Backup: Regular encrypted backups to prevent data loss in the event of system failure or disaster.

4.2 Organizational Security Measures

• Access Controls: Personal data is accessible only to authorized employees and contractors who require access to perform their job functions. All personnel are bound by confidentiality agreements.
• Security Training: Regular staff training on data protection, privacy regulations, and security best practices.
• Data Minimization: We collect and retain only the personal information necessary to provide our services and comply with legal obligations.
• Incident Response Plan: Established procedures for detecting, responding to, and reporting data breaches in accordance with applicable data protection laws.

4.3 Your Responsibility

While we implement robust security measures, you also play a critical role in protecting your account:

• Use a strong, unique password and do not share it with anyone
• Log out of your account when using shared or public devices
• Enable two-factor authentication if available
• Be cautious of phishing emails or fake websites impersonating z18com
• Contact us immediately if you suspect unauthorized account access

5. Data Retention

z18com retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal, regulatory, accounting, or reporting requirements. Specific retention periods include:

Data Category	Retention Period
Account Information	Duration of account plus 7 years after closure
Transaction Records	7 years (financial and tax compliance)
Gaming History	7 years (regulatory compliance)
KYC Documents	7 years after account closure
Customer Support Records	5 years
Marketing Consent	Until consent withdrawn, then deleted within 30 days
Website Cookies	Varies by cookie type (session to 2 years)

After the applicable retention period expires, personal data is securely deleted or anonymized so that it can no longer be associated with you.

6. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

6.1 Right to Access

You have the right to request a copy of the personal information we hold about you. We will provide this information in a structured, commonly used, and machine-readable format within 30 days of your request.

6.2 Right to Rectification

If you believe any personal information we hold is inaccurate or incomplete, you may request correction or update. You can also update most account information directly through your account settings.

6.3 Right to Erasure ("Right to be Forgotten")

You may request deletion of your personal data under certain circumstances. However, we may be required to retain certain information for legal, regulatory, or legitimate business purposes (e.g., fraud prevention, financial auditing).

6.4 Right to Restriction of Processing

You may request that we limit how we use your personal information in specific situations, such as while we investigate a data accuracy dispute.

6.5 Right to Data Portability

You have the right to receive your personal data in a portable format and transmit it to another service provider where technically feasible.

6.6 Right to Object

You may object to processing of your personal data for direct marketing purposes at any time. You can opt-out of marketing communications by clicking the "unsubscribe" link in emails or contacting customer support.

6.7 Right to Withdraw Consent

Where we process your personal data based on consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

6.8 Exercising Your Rights

To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Rights Request." We will respond within 30 days and may require identity verification to protect your data from unauthorized disclosure.

7. International Data Transfers

z18com operates internationally and may transfer your personal information to countries outside Indonesia, including jurisdictions that may not provide the same level of data protection as Indonesian law. When we transfer data internationally, we implement appropriate safeguards such as:

• Standard contractual clauses approved by data protection authorities
• Binding corporate rules
• Data processing agreements with third-party service providers
• Compliance with EU GDPR standards where applicable

By using z18com, you acknowledge and consent to such international data transfers.

8. Children's Privacy

z18com services are strictly for adults aged 21 and older. We do not knowingly collect personal information from individuals under the age of 21. If we become aware that a minor has provided personal information, we will immediately delete such information and close the account. Parents or guardians who believe their child has provided information to z18com should contact us immediately.

9. Updates to This Privacy Policy

z18com reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or operational needs. Material changes will be communicated via email, platform notification, or prominent notice on the website. The "Last Updated" date at the top of this page indicates when the policy was last revised. Your continued use of the Service after such notice constitutes acceptance of the updated Privacy Policy.

10. Contact Us

If you have questions, concerns, or complaints regarding this Privacy Policy or our data practices, please contact our Data Protection team:

• Email: [email protected]
• Subject Line: "Privacy Policy Inquiry"
• Live Chat: Available 24/7 through the Platform
• Language Support: English and Indonesian (Bahasa Indonesia)
• Response Time: We aim to respond to all privacy inquiries within 72 hours