zolo88 Privacy Policy

1. Introduction and Scope

zolo88 ("we", "us", "our", or the "Company") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you access or use our online gaming platform and related services (collectively, the "Service").

This Privacy Policy applies to all users of zolo88, including residents of Indonesia and other jurisdictions where we operate. By creating an account, accessing the Service, or providing us with your personal information, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy.

We adhere to internationally recognized data protection principles and implement security measures that meet or exceed industry standards. Our data handling practices comply with applicable privacy laws and regulations governing online gaming services, including requirements specific to the Indonesian market. If you have concerns about how your data is processed or wish to exercise your privacy rights, please refer to Section 13 for contact information.

2. Information We Collect

2.1 Information You Provide Directly

When you register for a zolo88 account, we collect the following personal information:

• Identity Information: Full legal name, date of birth, and gender as required for age verification and regulatory compliance.
• Contact Information: Email address, mobile phone number, and residential address.
• Identity Verification Documents: Copies of your Indonesian national identity card (KTP) or other government-issued identification submitted for KYC (Know Your Customer) verification purposes.
• Financial Information: Bank account details (bank name, account number, account holder name) for BCA, BRI, BNI, Mandiri, or other Indonesian banks, and e-wallet information (OVO, DANA, GoPay account identifiers) for processing deposits and withdrawals.
• Account Credentials: Username, password (stored in encrypted form), and security questions you create to access your account.
• Communication Data: Any information you provide when contacting customer support, including chat transcripts, email correspondence, and support tickets.

2.2 Information Collected Automatically

When you use the zolo88 Service, we automatically collect certain technical and usage information:

• Device Information: Device type, operating system, browser type and version, device identifiers, and mobile network information.
• Usage Data: Pages visited, features used, time spent on pages, games played, bets placed, deposit and withdrawal history, and other activity logs.
• Connection Information: IP address, geographic location (city and region level, not precise GPS coordinates), internet service provider, and connection timestamps.
• Performance Data: Application crash reports, error logs, and performance metrics to help us identify and fix technical issues.

2.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Payment Processors: Transaction confirmation, payment method validation, and fraud screening data from banks and payment service providers.
• Identity Verification Services: Verification results and risk assessment data from third-party KYC and anti-fraud services.
• Gaming Providers: Game play data, outcomes, and statistics from third-party casino game and sports betting providers whose content we host.

3. How We Use Your Information

zolo88 processes your personal data for the following purposes:

3.1 Service Provision and Account Management

• Creating, maintaining, and managing your gaming account
• Authenticating your identity and verifying your age (21+ requirement)
• Processing deposits, withdrawals, and other financial transactions
• Enabling you to place bets, play games, and use platform features
• Managing your VIP tier status and loyalty program participation
• Providing customer support and responding to your inquiries

3.2 Regulatory Compliance and Security

• Verifying your identity to comply with KYC and anti-money laundering (AML) regulations
• Detecting, preventing, and investigating fraud, unauthorized access, and other illegal activities
• Monitoring for problem gambling behaviors and enforcing responsible gaming policies
• Complying with legal obligations, court orders, and regulatory requirements
• Maintaining security logs and audit trails for regulatory inspections

3.3 Marketing and Communications

• Sending you promotional offers, bonus notifications, and marketing communications (with your consent where required)
• Informing you about new games, features, and platform updates
• Conducting surveys and soliciting feedback to improve our services
• Personalizing your experience based on your gaming preferences and history

3.4 Analytics and Improvement

• Analyzing user behavior and platform performance to optimize the Service
• Conducting statistical analysis to understand player preferences and trends
• Testing new features, games, and promotional strategies
• Improving security measures and fraud detection systems

4. Legal Basis for Processing

Under applicable data protection laws, we process your personal information based on the following legal grounds:

• Contractual Necessity: Processing is necessary to fulfill our Terms & Conditions and provide the gaming services you have requested (account creation, deposits, withdrawals, game play).
• Legal Obligation: Processing is required to comply with laws and regulations governing online gaming, including age verification, KYC/AML requirements, tax reporting, and regulatory audits.
• Legitimate Interests: Processing serves our legitimate business interests in preventing fraud, maintaining platform security, improving our services, and conducting analytics, provided these interests do not override your fundamental privacy rights.
• Consent: For certain processing activities such as marketing communications and non-essential cookies, we rely on your explicit consent, which you may withdraw at any time.

5. Data Sharing and Disclosure

5.1 When We Share Your Information

zolo88 does not sell, rent, or trade your personal information to third parties for their own marketing purposes. However, we may share your data with the following categories of recipients under strict confidentiality obligations:

• Payment Service Providers: Indonesian banks (BCA, BRI, BNI, Mandiri, etc.), e-wallet providers (OVO, DANA, GoPay), and payment gateways that process your deposits and withdrawals. We share only the minimum information necessary to complete transactions (account holder name, account number, transaction amount).
• Gaming Content Providers: Third-party game developers and sports data providers (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, and others) whose games and betting markets are integrated into our platform. These providers receive anonymized or pseudonymized gameplay data for game operation and performance monitoring.
• KYC and Fraud Prevention Services: Identity verification platforms and anti-fraud screening services that help us comply with regulatory requirements and detect suspicious activity. These services receive identity documents, transaction patterns, and other verification data.
• Cloud Service Providers: Third-party infrastructure providers that host our servers, databases, and backup systems. All data is encrypted in transit and at rest, and providers are bound by strict data processing agreements.
• Customer Support Tools: Live chat platforms, ticketing systems, and communication tools used to provide customer support. Support agents access only the information necessary to resolve your inquiries.
• Analytics and Marketing Platforms: Tools that help us analyze user behavior, measure marketing campaign effectiveness, and improve the Service. These platforms receive anonymized or aggregated data wherever possible.

5.2 Legal Disclosures

We may disclose your personal information without your consent when required by law or in response to valid legal processes, including:

• Complying with court orders, subpoenas, or other legal demands from government authorities
• Responding to regulatory inquiries from gaming authorities or financial crime enforcement agencies
• Protecting zolo88's legal rights, defending against claims, or enforcing our Terms & Conditions
• Preventing or investigating suspected fraud, illegal activity, or security threats
• Protecting the safety and security of our users, employees, or the public

5.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of assets, your personal information may be transferred to the acquiring entity or successor. We will notify you via email and/or prominent notice on our website before your data becomes subject to a different privacy policy.

6. Data Security Measures

zolo88 implements comprehensive technical and organizational security measures to protect your personal information against unauthorized access, loss, misuse, alteration, or destruction:

• Encryption: All data transmitted between your device and our servers is protected by 256-bit SSL/TLS encryption, the same standard used by banks. Passwords are hashed using industry-standard cryptographic algorithms and are never stored in plain text.
• Secure Storage: Personal data and financial records are stored on encrypted databases with restricted access controls. Production databases are separated from development environments to prevent data leaks.
• Access Controls: Employee access to personal data is strictly limited based on job function and necessity. All access is logged and audited regularly. Support staff can only view information needed to resolve your specific issue.
• Network Security: Our infrastructure is protected by firewalls, intrusion detection systems, and DDoS mitigation services. We conduct regular security scans and penetration testing to identify vulnerabilities.
• Cold Wallet Storage: 95% of player funds are stored in offline cold wallets that are not accessible via the internet, protecting against hacking attempts.
• Regular Audits: We undergo periodic security audits by independent third-party experts and maintain ISO 27001 information security management certification.
• Incident Response: We have a documented security incident response plan to quickly detect, contain, and remediate any data breaches. In the unlikely event of a breach affecting your data, we will notify you promptly as required by law.

7. Data Retention and Deletion

7.1 How Long We Keep Your Data

zolo88 retains your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations, and resolve disputes:

• Active Accounts: Personal data of active users is retained for the duration of your account relationship with us.
• Closed Accounts: After voluntary account closure, we retain certain data for 7 years to comply with Indonesian financial record-keeping requirements, tax regulations, and anti-money laundering laws. This includes transaction history, KYC documents, and account activity logs.
• Marketing Data: If you opt out of marketing communications, we retain your email address and opt-out preference indefinitely to ensure we do not contact you again.
• Support Communications: Customer support records (chat transcripts, emails) are typically retained for 3 years for quality assurance and dispute resolution purposes.
• Security Logs: Technical logs, IP addresses, and security-related data are retained for 1-2 years for fraud prevention and regulatory audit purposes.

7.2 Data Deletion Requests

You may request deletion of your personal data at any time, subject to legal and contractual obligations. Upon receiving a verified deletion request, we will delete or anonymize your personal information within 30 days, except for data we are legally required to retain (such as transaction records for tax and AML compliance). To request deletion, contact us using the information in Section 13.

8. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Right of Access: You may request a copy of the personal data we hold about you. We will provide this information in a commonly used electronic format.
• Right to Rectification: If your personal information is inaccurate or incomplete, you can update it directly in your account settings or request correction via customer support.
• Right to Erasure: You may request deletion of your personal data, subject to legal retention requirements as described in Section 7.
• Right to Restriction: You may request that we temporarily restrict processing of your data while we investigate a dispute or verify accuracy.
• Right to Data Portability: You may request a machine-readable copy of your data to transfer to another service provider.
• Right to Object: You may object to processing based on legitimate interests or direct marketing at any time.
• Right to Withdraw Consent: Where we process your data based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact us at [email protected] with "PRIVACY RIGHTS REQUEST" in the subject line. We will respond to verified requests within 30 days. We may request additional information to verify your identity before processing rights requests.

9. Cookies and Tracking Technologies

9.1 What Are Cookies

Cookies are small text files stored on your device when you visit websites. zolo88 uses cookies and similar tracking technologies (web beacons, pixels, local storage) to enhance your experience, maintain security, and analyze platform performance.

9.2 Types of Cookies We Use

• Essential Cookies: Required for core functionality such as login authentication, session management, and security features. These cannot be disabled without affecting your ability to use the Service.
• Performance Cookies: Collect anonymous usage statistics to help us understand how visitors interact with our platform and identify areas for improvement.
• Functionality Cookies: Remember your preferences (language selection, display settings) to provide a personalized experience.
• Marketing Cookies: Track your activity across websites to deliver relevant advertisements. These require your consent and can be disabled in your browser settings or via our cookie consent tool.

9.3 Managing Cookies

Most web browsers allow you to control cookies through their settings. You can typically configure your browser to accept all cookies, reject all cookies, or notify you when a cookie is set. Note that blocking essential cookies will prevent you from using certain features of zolo88. Disabling marketing cookies will not reduce the number of advertisements you see, but they may be less relevant to your interests.

10. International Data Transfers

zolo88 operates internationally and may transfer your personal data to servers and service providers located outside Indonesia. When we transfer data internationally, we ensure appropriate safeguards are in place:

• Data processing agreements with third-party providers that include standard contractual clauses approved by data protection authorities
• Encryption of data in transit and at rest
• Selection of service providers in jurisdictions with adequate data protection laws
• Regular audits of third-party compliance with security and privacy standards

By using zolo88, you consent to the transfer of your information to countries outside Indonesia that may have different data protection laws. We will always strive to ensure your data receives an equivalent level of protection regardless of where it is processed.

11. Children's Privacy

zolo88 is strictly an adults-only service. We do not knowingly collect personal information from anyone under 21 years of age, which is the minimum age requirement for online gambling in Indonesia. Our age verification processes are designed to prevent underage access.

If we become aware that we have inadvertently collected personal information from an individual under 21, we will take immediate steps to delete that information and close the associated account. If you believe we have collected information from an underage individual, please contact us immediately at [email protected] with "UNDERAGE ACCOUNT" in the subject line.

Parents and guardians should monitor their children's internet usage and use parental control tools to prevent access to gambling websites. We recommend configuring device-level restrictions and installing content filtering software to protect minors.

12. Changes to This Privacy Policy

zolo88 reserves the right to update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or technological developments. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you via email to the address registered in your account
• Display a prominent notice on our website for at least 30 days
• Request your consent if required by law

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of the Service after policy changes indicates acceptance of the updated terms. If you do not agree with any changes, you may close your account as described in Section 7.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: [email protected]
• Subject Line: "PRIVACY INQUIRY" for fastest routing to our data protection team
• Live Chat: Available 24/7 through your account dashboard
• Response Time: We aim to respond to privacy inquiries within 48 hours (business days)

For data protection rights requests (access, deletion, rectification), please use the subject line "PRIVACY RIGHTS REQUEST" and include:

• Your full name and zolo88 username
• The email address registered to your account
• A clear description of your request
• Proof of identity (for security purposes)