Privacy Policy

555zk operates the online gaming and sportsbook platform accessible at 555zk.pro. For the purposes of this Privacy Policy, 555zk acts as the data controller in respect of all personal data collected from players who access the platform. References to "555zk", "we", "us", and "our" throughout this document refer to the 555zk platform and the entity that operates it.

555zk's primary target market is Indonesia. Our platform is designed specifically for Indonesian players who prefer an English-language premium gaming environment with full local payment integration. The personal data processing practices described in this policy are calibrated to the Indonesian context, including the payment methods used (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja), the time zones of our player base (WIB, WITA, WIT), and the identity verification requirements appropriate to Indonesia-resident players.

If you have questions about how 555zk processes your personal data, please contact our support team via live chat within the platform dashboard or by email at support@555zk.pro (plain text — not a clickable link).

555zk collects personal data across several categories, depending on the nature of your interaction with the platform. The full scope of data we may collect is set out in the table below:

555zk collects personal data through the following channels and mechanisms:

3.1 Data You Provide Directly

The majority of personal data held by 555zk is provided directly by you during the following interactions:

• Account registration: name, date of birth, email address, mobile number, username, and password.
• KYC and identity verification: government-issued ID documents, selfie photographs, and proof of address documentation submitted through the verification flow within your Account dashboard.
• Payment operations: bank account details or e-wallet identifiers provided when setting up a deposit or withdrawal method.
• Customer support interactions: information you share during live chat sessions or email exchanges with the 555zk support team.
• Responsible gaming tool activation: limit preferences, cool-off requests, and self-exclusion requests submitted through the Account dashboard.

3.2 Data Collected Automatically

When you access 555zk.pro, certain technical data is collected automatically by our servers and analytics infrastructure:

• IP address and approximate geographic location (city/region level, not precise GPS coordinates).
• Device type, operating system, and browser information collected via standard HTTP request headers.
• Session duration, pages visited, and in-platform navigation patterns collected via server-side logging and first-party session analytics.
• Device fingerprint data assembled from a combination of browser attributes, used exclusively for fraud detection and account security purposes.

3.3 Data From Third-Party Sources

In limited circumstances, 555zk may receive or cross-reference personal data from third-party sources for fraud prevention and AML compliance purposes:

• Payment providers (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja) may return transaction status data and account holder name confirmation data as part of the deposit and withdrawal settlement process.
• Fraud intelligence databases may be queried to verify that a player's identity details have not been flagged in connection with prior financial crime activity. No data is shared with these services beyond the minimum necessary for a verification query.

555zk processes your personal data for the following specific purposes. We do not process personal data for any purpose not listed below without first obtaining your explicit consent or as required by applicable law.

• Service Delivery: To create and manage your Account, process deposits and withdrawals, settle bets and game outcomes, and deliver all gaming and sportsbook products available on the platform.
• Identity Verification (KYC): To verify your identity, age (21+ requirement), and ownership of the payment methods associated with your Account, in accordance with our obligations under applicable international anti-money laundering standards.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, account takeovers, bonus abuse, money laundering, and other prohibited conduct as defined in the 555zk Terms & Conditions.
• AML and Compliance: To monitor transactions for indicators of money laundering or terrorist financing and to fulfil any mandatory reporting obligations to relevant regulatory or law enforcement authorities.
• Customer Support: To respond to your queries, resolve complaints, and deliver responsible gaming tool activation and account management assistance through the 555zk support team.
• Responsible Gaming: To administer player-set limits, cool-off periods, and self-exclusion requests; to monitor account activity for indicators of problem gambling behaviour and proactively reach out where the platform's responsible gaming protocols are triggered.
• Platform Improvement: To analyse aggregated, anonymised usage data to identify performance bottlenecks, improve game loading times on Indonesian 4G networks, and prioritise product development decisions.
• Promotional Communications: To send you promotional offers, bonus notifications, and platform news by email or in-platform messaging, where you have opted in to receive such communications. You may withdraw this consent at any time from your Account notification preferences.
• Legal Obligations: To comply with any applicable legal obligation, court order, or lawful request from a government or regulatory authority.

555zk processes personal data on the following legal bases:

• Contractual necessity: Processing required to deliver the Service as agreed in the 555zk Terms & Conditions — including account creation, transaction processing, game outcome settlement, and customer support. Without this processing, 555zk cannot provide the platform to you.
• Legitimate interests: Processing for fraud detection, security monitoring, device fingerprinting, abuse prevention, and platform performance analytics, where our legitimate interests in operating a secure and reliable platform are not overridden by your privacy interests.
• Legal obligation: Processing required to comply with AML obligations, mandatory KYC standards, and any applicable data retention requirements imposed by law.
• Consent: Processing for optional promotional communications and non-essential analytics, where your explicit opt-in consent has been obtained. You may withdraw consent for such processing at any time without affecting the legality of processing carried out prior to withdrawal.

555zk does not sell your personal data to third parties. We share personal data only in the circumstances described below, and only to the extent strictly necessary for the stated purpose:

6.1 Payment Processors

When you initiate a deposit or withdrawal, 555zk transmits the minimum necessary payment information directly to the relevant payment provider (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay, ShopeePay, or LinkAja) to complete the transaction. Each payment provider is subject to their own privacy policy and data security standards.

6.2 Game Software Providers

To render live casino tables and slot games within the 555zk platform, technical session data (including player session token and wager amounts) is transmitted to the relevant game providers (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Pocket Games Soft) under data processing agreements that restrict the use of this data to game-rendering purposes only. Game providers do not receive your name, contact details, or payment information.

6.3 Identity Verification Services

For KYC purposes, identity document images and biographic data may be processed by a contracted third-party identity verification service. This service operates under a data processing agreement with 555zk and is prohibited from using your data for any purpose beyond the verification query.

6.4 Legal and Regulatory Authorities

555zk may disclose personal data to law enforcement agencies, regulatory bodies, or other government authorities where required to do so by applicable law, court order, or lawful government request. Where legally permissible, 555zk will notify the affected player before making such a disclosure.

6.5 Business Transfers

In the event of a merger, acquisition, or sale of all or part of 555zk's business, player personal data may be transferred to the acquiring entity as part of the transaction, subject to equivalent privacy protections being maintained by the acquirer. Affected players will be notified of any such transfer via their registered email address prior to the transaction completing.

555zk operates a platform that serves Indonesian players through an internationally distributed technology infrastructure. This means that personal data collected from players in Indonesia may be stored on servers located outside of Indonesia, including in jurisdictions within Southeast Asia, East Asia, or internationally recognised data centre regions.

Where personal data is transferred internationally, 555zk ensures that appropriate safeguards are in place to protect the data to a standard at least equivalent to that required under applicable Indonesian data protection principles, including:

• Contractual clauses in agreements with data processors that require them to protect personal data to a standard consistent with 555zk's privacy commitments.
• Technical measures including end-to-end encryption in transit (TLS 1.3) and encryption at rest for sensitive data categories.
• Restrictions on sub-processing that prevent third-party processors from further transferring your data without 555zk's prior written approval.

555zk retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law. The following retention principles apply:

• Active Account Data: Personal data associated with an active Account is retained for the lifetime of the Account and for a period of 5 years following Account closure, to satisfy AML record-keeping obligations and to handle any post-closure disputes or regulatory enquiries.
• Transaction and Gaming Records: All deposit, withdrawal, and wagering transaction records are retained for a minimum of 5 years following the date of the transaction, consistent with standard financial record-keeping requirements for online gambling operators.
• KYC and Identity Documents: Identity verification documents are retained for the duration of the Account and for 5 years post-closure. After this period, document images are securely deleted and only anonymised verification status records are maintained.
• Customer Support Records: Live chat transcripts and email correspondence are retained for 3 years from the date of the interaction, unless the record is relevant to an ongoing investigation or dispute, in which case retention is extended until the matter is resolved.
• Technical and Device Data: Server logs and device fingerprint data are retained for 90 days for fraud detection and security monitoring purposes, after which they are automatically purged unless flagged as relevant to an active security investigation.
• Marketing Preferences: Records of your marketing consent or opt-out are retained indefinitely to ensure 555zk can honour your preferences and demonstrate compliance with consent requirements.

When data reaches the end of its retention period, 555zk deletes or anonymises it using secure deletion procedures that render recovery of the original data computationally infeasible.

555zk implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• Encryption in Transit: All data exchanged between your browser or app and the 555zk platform is encrypted using TLS 1.3. Connections using older, insecure protocol versions (TLS 1.0, TLS 1.1, SSLv3) are rejected.
• Encryption at Rest: Sensitive personal data categories — including identity document images, verified identity records, and financial identifiers — are encrypted at rest using AES-256.
• Password Security: Passwords are never stored in plain text. 555zk hashes passwords using a modern adaptive hashing algorithm (bcrypt or Argon2) with a per-user salt. 555zk staff cannot retrieve or view your password.
• Access Controls: Access to player personal data within 555zk's internal systems is restricted on a strict need-to-know basis. All internal access events are logged and subject to periodic audit.
• Device Fingerprinting and Anomaly Detection: 555zk's fraud detection system monitors for login attempts from unrecognised devices, unusual geographic access patterns, and session behaviours inconsistent with a player's established usage profile. Anomalous activity triggers an automated secondary verification step.
• Incident Response: 555zk maintains a documented data breach response procedure. In the event of a confirmed personal data breach that poses a risk to affected players, 555zk will notify affected players via their registered email address within 72 hours of confirming the breach, and will take immediate remediation steps including forced password resets for affected accounts.

555zk uses a limited set of cookies and similar tracking technologies on the platform. The categories of cookies in use are as follows:

555zk does not use third-party advertising cookies, retargeting pixels, social media tracking pixels, or any other tracking mechanism that shares your browsing behaviour with external advertising platforms. You may manage cookie preferences through your browser settings; note that disabling strictly necessary cookies will prevent you from logging in to the platform.

Subject to applicable law and the limitations described below, you hold the following rights in respect of the personal data that 555zk holds about you. To exercise any of these rights, contact the 555zk support team via live chat or email.

The 555zk platform is strictly for individuals aged 21 years or older. 555zk does not knowingly collect personal data from anyone under the age of 21. If a minor has registered an Account on the platform by misrepresenting their age, the Account will be immediately closed upon discovery, all funds will be returned to the originating payment method after mandatory verification, and all personal data associated with the Account will be deleted, subject to any retention obligations required for fraud investigation purposes.

If you are a parent or guardian and believe that a minor has created an Account on the 555zk platform, please contact us immediately at support@555zk.pro so that we can investigate and take appropriate remediation action.

The 555zk platform may contain references to third-party game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft) whose software is embedded within the 555zk gaming environment. When you launch a game powered by one of these providers, a direct technical connection is established between your browser and the provider's game servers. This connection is governed by the provider's own data handling practices, which are separate from 555zk's Privacy Policy.

555zk does not control the data practices of third-party game providers beyond the contractual protections set out in our data processing agreements with each provider. We recommend reviewing the privacy documentation of the relevant game provider if you have specific questions about data handling within individual game sessions.

This Privacy Policy does not extend to any external website, platform, or service that you may access via a link from within the 555zk platform. 555zk is not responsible for the privacy practices of external sites and encourages you to review the privacy policy of any third-party site you visit.

555zk reviews this Privacy Policy at least annually and may update it at any time to reflect changes in our data processing practices, applicable law, or the services we offer. When material changes are made, we will provide advance notice to registered players via the email address on record, with a minimum of 7 days' notice before the updated policy takes effect.

The "Last Updated" date at the top of this document indicates when the most recent revision was made. Continued use of the 555zk platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you may request Account closure before the effective date; your real money balance will be processed for withdrawal in accordance with the standard withdrawal procedure.

Previous versions of this Privacy Policy are available upon written request to the 555zk support team.

For any questions, concerns, or requests relating to this Privacy Policy or to the personal data that 555zk holds about you, please reach out through one of the following channels:

• Live Chat: Available 24/7 from within your 555zk Account dashboard. Indonesian-speaking agents are available across all Indonesian time zones (WIB, WITA, WIT). This is the fastest channel for account-specific data requests.
• Email: support@555zk.pro — plain text address; not a clickable link. Please include "Privacy Request" in the subject line for data rights enquiries. We aim to acknowledge privacy-related emails within 4 business hours and to provide a substantive response within 30 days.