zona66 Privacy Policy

1. Introduction & Scope

zona66 is committed to protecting the privacy and security of your personal information. This Privacy Policy applies to all data collected through the zona66 website, mobile applications, and any related services (collectively, the "Platform"). It covers:

• Information collected during account registration and identity verification (KYC)
• Data generated through your use of betting, casino, and gaming services
• Payment and transaction information
• Communications with customer support
• Technical data such as IP addresses, browser types, and device identifiers

This Privacy Policy should be read in conjunction with our Terms & Conditions. By using zona66 services, you acknowledge that you have read and understood this Privacy Policy and agree to the processing of your personal data as described herein.

If you have questions or concerns about how we handle your personal information, please contact our Data Protection Officer using the contact details provided at the end of this document.

2. Data Controller Information

For the purposes of applicable data protection laws, zona66 acts as the data controller for personal information collected through the Platform. This means we determine how and why your personal data is processed.

Data Controller: zona66 Platform Services
Contact Email: [email protected]
Data Protection Officer Email: [email protected]

If you have concerns about how your personal data is being processed, you have the right to contact our Data Protection Officer or lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.

3. Information We Collect

zona66 collects several categories of personal information to operate the Platform, comply with legal obligations, and provide you with a secure and personalized betting experience.

3.1 Information You Provide Directly

When you create an account or use zona66 services, you provide us with the following information:

• Registration Data: Full legal name, date of birth, email address, mobile phone number, residential address, username, and password
• Identity Verification (KYC) Data: Government-issued ID documents (KTP, passport), proof of address documents (utility bills, bank statements), and selfie photographs for facial verification
• Payment Information: Bank account numbers, e-wallet account identifiers, transaction history, deposit and withdrawal requests
• Communications: Any messages, emails, or live chat conversations you have with our customer support team
• Responsible Gaming Data: Self-exclusion requests, deposit limits, loss limits, and session time limits you configure

3.2 Information Collected Automatically

When you access or use the Platform, we automatically collect certain technical and usage data:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers (UDID, IMEI)
• Connection Data: IP address, internet service provider, connection type, geolocation data (country, region, city derived from IP address)
• Usage Data: Pages visited, features used, time spent on pages, bet placement data, game play history, login timestamps, referral sources
• Cookies & Tracking: Session cookies, persistent cookies, web beacons, and similar tracking technologies (see Section 9 for details)

3.3 Information from Third Parties

zona66 may receive information about you from third-party sources including:

• Payment Processors: Transaction confirmation, fraud detection signals, and payment method verification from banks and e-wallet providers (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, etc.)
• Identity Verification Services: Document authentication, facial recognition matching, and anti-fraud databases used for KYC compliance
• Affiliate Partners: If you accessed zona66 through an affiliate link, we may receive referral information to properly credit the affiliate

4. How We Use Your Information

zona66 processes your personal data for the following purposes, each grounded in a lawful basis under data protection regulations:

4.1 Account Operation & Service Delivery

• Creating and maintaining your zona66 account
• Authenticating your identity when you log in
• Processing deposits, withdrawals, and bet settlements
• Providing customer support and responding to inquiries
• Managing your responsible gaming settings and self-exclusion requests

Lawful Basis: Performance of contract. We need this information to deliver the services you have requested.

4.2 Legal & Regulatory Compliance

• Verifying your age (21+ requirement) and identity (KYC)
• Complying with Anti-Money-Laundering (AML) and Counter-Terrorism-Financing (CTF) regulations
• Detecting and preventing fraud, collusion, and bonus abuse
• Maintaining transaction records as required by gaming regulators
• Responding to lawful requests from government authorities or regulatory bodies

Lawful Basis: Legal obligation. We are required by law to perform these activities.

4.3 Platform Security & Integrity

• Monitoring for suspicious activity, multi-accounting, and unauthorized access
• Preventing hacking attempts, DDoS attacks, and technical exploits
• Detecting arbitrage betting, matched betting, and other prohibited patterns
• Protecting against payment fraud and chargebacks

Lawful Basis: Legitimate interests. We have a legitimate interest in maintaining a secure and fair gaming environment.

4.4 Service Improvement & Personalization

• Analyzing usage patterns to improve platform performance and user experience
• Personalizing game recommendations and promotional offers based on your preferences
• Testing new features and conducting A/B tests
• Understanding which sports, games, and features are most popular

Lawful Basis: Legitimate interests. We have a legitimate interest in improving our services and providing a better experience for all users.

4.5 Marketing Communications (With Your Consent)

• Sending promotional emails about new bonuses, games, and features
• Delivering SMS or push notifications about special offers
• Providing personalized bonus offers based on your betting history

Lawful Basis: Consent. You can opt out of marketing communications at any time by clicking the unsubscribe link in emails or adjusting your account communication preferences.

5. Data Sharing & Third Parties

zona66 does not sell your personal information to third parties. However, we may share your data with trusted service providers and partners in the following circumstances:

5.1 Payment Service Providers

To process deposits and withdrawals, we share necessary transaction information with:

• Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata)
• E-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja)
• Payment gateway operators and transaction processors

These providers receive only the information required to complete the transaction (e.g., account identifiers, transaction amounts) and are contractually obligated to protect your data.

5.2 Identity Verification Services

To comply with KYC regulations, we share identity documents and verification data with third-party verification services that perform:

• Document authentication (checking ID validity)
• Facial recognition matching
• Cross-referencing against fraud databases

5.3 Game Providers

When you play casino games or live dealer tables, certain data (username, bet amounts, game outcomes) is shared with game studio providers such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, Spribe, and Pocket Games Soft. This data sharing is necessary to deliver the games and is governed by each provider's own privacy policies.

5.4 Marketing & Analytics Partners

With your consent, we may share anonymized or aggregated usage data with analytics platforms (Google Analytics, Mixpanel, etc.) to understand user behavior and improve the Platform. These partners do not receive personally identifiable information.

5.5 Legal & Regulatory Authorities

zona66 may disclose your personal information to law enforcement, regulatory bodies, or government authorities when:

• Required by law or legal process (court orders, subpoenas)
• Necessary to comply with gaming license obligations
• Required to investigate suspected fraud, money laundering, or illegal activity
• Necessary to protect the safety and rights of zona66, our users, or the public

5.6 Business Transfers

In the event that zona66 is acquired by or merged with another entity, your personal information may be transferred to the acquiring entity as part of the transaction. You will be notified of any such change in ownership or control.

6. Data Security Measures

zona66 employs industry-standard technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction:

6.1 Encryption

• SSL/TLS Encryption: All data transmitted between your device and zona66 servers is encrypted using 256-bit SSL (Secure Sockets Layer) technology
• Database Encryption: Sensitive personal data stored in our databases is encrypted at rest
• Password Hashing: User passwords are hashed using bcrypt with salt, ensuring that even zona66 staff cannot access your plain-text password

6.2 Access Controls

• Personal data is accessible only to authorized zona66 employees who require access to perform their job functions
• All staff with data access undergo background checks and data protection training
• Multi-factor authentication is required for administrative access to sensitive systems
• Access logs are maintained and regularly audited

6.3 Infrastructure Security

• zona66 servers are hosted in secure data centers with 24/7 physical security and monitoring
• Multi-layer firewall protection prevents unauthorized network access
• Regular security audits and penetration testing are conducted by independent cybersecurity firms
• Automated intrusion detection systems monitor for suspicious activity

6.4 Incident Response

In the unlikely event of a data breach that compromises your personal information, zona66 will:

• Notify affected users within 72 hours of discovering the breach
• Report the breach to relevant data protection authorities as required by law
• Take immediate steps to contain the breach and prevent further unauthorized access
• Provide guidance on steps you can take to protect yourself (e.g., password reset)

7. Data Retention & Deletion

7.1 Retention Periods

zona66 retains personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law:

• Active Accounts: Personal data is retained for the duration of your account's active status and for 5 years after account closure (required for regulatory compliance and dispute resolution)
• Transaction Records: Deposit, withdrawal, and bet history are retained for 7 years as required by Anti-Money-Laundering regulations
• KYC Documents: Identity verification documents are retained for 7 years after account closure
• Marketing Communications: If you opt out of marketing, your opt-out preference is retained indefinitely to honor your request

7.2 Data Deletion

You may request deletion of your personal data by contacting [email protected]. Please note:

• zona66 will honor deletion requests to the extent permitted by law
• Certain data must be retained to comply with legal obligations (AML, tax reporting, regulatory audits)
• Anonymized or aggregated data that cannot be linked back to you may be retained indefinitely for analytical purposes

8. Your Privacy Rights

Under applicable data protection laws, you have the following rights regarding your personal information:

8.1 Right to Access

You have the right to request a copy of all personal data zona66 holds about you. To exercise this right, contact [email protected] with your request. We will provide the data in a structured, commonly used, and machine-readable format within 30 days.

8.2 Right to Correction

If any personal information we hold about you is inaccurate or incomplete, you have the right to request correction. You can update most information directly in your account settings, or contact customer support for assistance.

8.3 Right to Deletion ("Right to be Forgotten")

You may request deletion of your personal data under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected. We will comply with deletion requests to the extent permitted by law (see Section 7.2).

8.4 Right to Object

You have the right to object to processing of your personal data based on legitimate interests. For example, you may object to profiling for personalized marketing. Contact [email protected] to exercise this right.

8.5 Right to Restrict Processing

You may request that we temporarily restrict processing of your personal data in certain situations, such as when you contest the accuracy of the data or object to processing.

8.6 Right to Data Portability

You have the right to receive your personal data in a portable format and to transmit that data to another service provider. We will provide data in CSV or JSON format upon request.

8.7 Right to Withdraw Consent

Where processing is based on your consent (e.g., marketing communications), you have the right to withdraw consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

8.8 Right to Lodge a Complaint

If you believe zona66 has violated your privacy rights, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.

9. Cookies & Tracking Technologies

9.1 What Are Cookies?

Cookies are small text files stored on your device when you visit the zona66 Platform. They help us remember your preferences, keep you logged in, and understand how you use the Platform.

9.2 Types of Cookies We Use

• Essential Cookies: Required for the Platform to function (e.g., session management, security). These cannot be disabled.
• Performance Cookies: Collect anonymous data about how visitors use the Platform (e.g., page load times, error messages). Used to improve performance.
• Functional Cookies: Remember your preferences (language, region, display settings) to provide a personalized experience.
• Marketing Cookies: Track your activity across websites to deliver targeted advertising. These are only set with your consent.

9.3 Managing Cookies

You can manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. Note that disabling essential cookies may impair Platform functionality (e.g., you may not be able to log in).

10. Children's Privacy

zona66 services are strictly intended for adults aged 21 and older. We do not knowingly collect personal information from individuals under 21 years of age. If we discover that we have inadvertently collected data from a minor, we will immediately delete that data and close the associated account.

If you are a parent or guardian and believe your child has provided personal information to zona66, please contact us immediately at [email protected] so we can take appropriate action.

11. Policy Updates

zona66 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or regulatory requirements. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Notify you via email or prominent notice on the Platform
• Request your renewed consent if required by law

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data. Continued use of zona66 services after changes are published constitutes acceptance of the updated Privacy Policy.

12. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or how zona66 handles your personal data, please contact:

• Data Protection Officer Email: [email protected]
• General Support Email: [email protected]
• Live Chat: Available 24/7 via the zona66 website

We aim to respond to all privacy-related inquiries within 5 business days. For data subject access requests, we will provide a response within 30 days as required by law.

Last Updated: January 2026  |  Policy Version: 2.3  |  Effective Date: January 1, 2026