Privacy Policy — zenwin

This Policy applies to all personal data processed by zenwin in connection with the operation of its online betting and gaming platform. It covers data collected through the zenwin website, mobile-optimized browser interface, customer support channels, and any other means by which you interact with zenwin as an organization.

This Policy applies to:

• Registered players with active or inactive zenwin accounts.
• Visitors who browse zenwin.cam without registering an account.
• Individuals who contact zenwin via email, live chat, or other support channels without being registered players.
• Individuals who participate in zenwin promotions, surveys, or research activities.

This Policy does not apply to third-party websites, payment processors, or game studios whose own privacy policies govern how they handle data collected through their respective services. Where zenwin's platform links to or integrates with third-party services, we recommend reviewing those parties' privacy policies independently.

For the purposes of this Policy, zenwin acts as the data controller — meaning we determine the purposes and means by which your personal data is processed. Our primary contact point for all data-related inquiries is:

• Platform: zenwin (zenwin.cam)
• Data Inquiries Email: [email protected]
• Response Time: Within 30 calendar days for formal data subject requests; within 24–48 hours for general inquiries.

Certain data processing activities — particularly payment transaction processing and identity verification — are carried out by third-party processors acting on zenwin's behalf under data processing agreements. These processors are bound by confidentiality obligations and are only permitted to process your data for the specific purposes zenwin has authorized.

zenwin collects the following categories of personal data, depending on how you interact with the platform:

zenwin collects personal data through the following channels:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, participate in a promotion, or submit any form on the platform.
• Automatically — when you visit zenwin.cam, our servers and analytics systems automatically record technical data including your IP address, device identifiers, browser fingerprint, and session activity. This occurs on every page visit, regardless of whether you are logged in.
• From payment processors — when you initiate a transaction via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, or LinkAja, our payment processing partners share transaction confirmation data (amount, timestamp, reference number, account holder name) with zenwin to reconcile deposits and authorize withdrawals.
• From identity verification providers — during KYC, zenwin may use third-party identity verification services that return a verification result (pass/fail) and, where permitted, the verified data points used to reach that result.
• From fraud prevention services — zenwin receives risk scores and device intelligence data from third-party fraud prevention partners to protect the platform and its players from unauthorized account access and financial crime.

zenwin uses your personal data for the following purposes:

1. Account management — to create, maintain, and secure your zenwin account, including verifying your identity, resetting credentials, and communicating account-related information.
2. Transaction processing — to process your deposits and withdrawals in Indonesian Rupiah (IDR) via the payment methods you have registered, and to maintain an accurate record of your transaction history.
3. KYC and compliance — to verify your age (21+), identity, and source of funds as required by our internal compliance framework and applicable international anti-money-laundering standards.
4. Platform personalization — to tailor your zenwin experience based on your game preferences, betting history, and interaction patterns, including surfacing relevant promotions and match odds.
5. Customer support — to respond to your inquiries, resolve disputes, and investigate complaints raised through live chat or email.
6. Fraud prevention and platform security — to detect, investigate, and prevent unauthorized access, fraudulent activity, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
7. Responsible gaming — to monitor for indicators of problem gambling behavior, apply self-exclusion settings, enforce deposit limits, and provide intervention resources where appropriate.
8. Marketing communications — to send you promotional offers, bonus notifications, and match-day alerts by email or in-platform notification, where you have consented to receive such communications. You may withdraw consent at any time.
9. Analytics and platform improvement — to analyze aggregate usage patterns, identify technical issues, and improve the performance and usability of the zenwin platform.
10. Legal obligations — to comply with applicable legal requirements, respond to lawful requests from regulatory or law enforcement authorities, and enforce our contractual rights.

zenwin processes your personal data on one or more of the following legal bases, depending on the purpose of the processing:

• Contractual necessity — processing required to perform our contractual obligations to you under the Terms & Conditions, including account management, transaction processing, and customer support.
• Legal obligation — processing required to comply with applicable law, including anti-money-laundering regulations, age verification requirements, and responses to lawful requests from competent authorities.
• Legitimate interests — processing carried out for zenwin's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and aggregate analytics, where those interests are not overridden by your data protection rights.
• Consent — processing based on your freely given, specific, and informed consent, including the sending of marketing communications and the placement of non-essential cookies. Where consent is the legal basis, you may withdraw it at any time without affecting the lawfulness of processing carried out prior to withdrawal.

zenwin does not sell your personal data. We share personal data only in the circumstances described below, and only to the extent strictly necessary for the stated purpose:

• Payment processors — BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja, and other payment partners receive the minimum data required to process your financial transactions securely.
• Identity verification providers — third-party KYC service providers receive the identity documents and personal details you submit during verification, solely for the purpose of confirming your identity and age.
• Fraud prevention and security partners — risk management and cybersecurity vendors receive technical and behavioral data to help zenwin identify and prevent fraudulent activity, unauthorized access, and account takeover attempts.
• Game studios and content providers — studios such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft may receive a session token and game result data necessary to deliver and certify game outcomes. They do not receive your full identity or financial profile.
• Regulatory and law enforcement authorities — zenwin will disclose personal data to competent governmental, regulatory, or law enforcement bodies where required to do so by applicable law, court order, or where we believe disclosure is necessary to prevent serious harm or financial crime.
• Professional advisors — our legal counsel, auditors, and compliance consultants may access relevant personal data under strict confidentiality obligations when advising zenwin on legal, financial, or regulatory matters.
• Business transfers — in the event of a merger, acquisition, restructuring, or sale of all or part of zenwin's business, your personal data may be transferred to the successor entity, subject to equivalent privacy protections.

zenwin operates as an international platform, and some of the third-party service providers we work with — including identity verification, fraud prevention, and cloud hosting partners — may process your personal data in countries outside Indonesia. Where such transfers occur, zenwin takes steps to ensure that your data receives an equivalent level of protection to that afforded within Indonesia, including by:

• Using service providers who are contractually bound by data processing agreements that include internationally recognized data protection standards.
• Transferring data only to countries or organizations that provide an adequate level of data protection as assessed by zenwin's compliance team.
• Applying technical safeguards — including encryption in transit and at rest — to all data transferred internationally.

By using the zenwin platform, you acknowledge that your personal data may be transferred to and processed in countries other than Indonesia. zenwin will not transfer your personal data internationally in a manner that removes the protections set out in this Policy.

zenwin retains personal data for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law. Our general retention periods are as follows:

At the end of the applicable retention period, personal data is either permanently deleted or irreversibly anonymized so that it can no longer be associated with any individual. Anonymized aggregate data may be retained indefinitely for statistical purposes.

zenwin implements a comprehensive set of technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security infrastructure includes:

• 256-bit SSL/TLS encryption on all data transmitted between your browser and zenwin's servers.
• Encryption at rest for all sensitive personal and financial data stored in zenwin's databases.
• Multi-factor authentication options for player accounts and mandatory two-factor authentication for all zenwin administrative systems.
• Role-based access controls limiting staff access to personal data strictly to those roles that require it for legitimate business purposes.
• Continuous intrusion detection and prevention systems monitoring zenwin's infrastructure for unauthorized access attempts and anomalous activity.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Staff training on data protection responsibilities, phishing awareness, and secure data handling procedures.

While zenwin takes all reasonable precautions to protect your data, no online system is completely immune from security threats. In the event of a data breach that poses a risk to your rights and freedoms, zenwin will notify affected players without undue delay and take all necessary remedial action.

zenwin uses cookies and similar tracking technologies (including local storage and session storage) to operate and improve the platform. The cookies we use fall into the following categories:

zenwin does not use third-party behavioral advertising cookies or cross-site tracking technologies. You can manage cookie settings through your browser's built-in controls. Note that disabling essential or security cookies will impair your ability to use the zenwin platform.

Depending on your jurisdiction, you may have some or all of the following rights with respect to your personal data held by zenwin:

• Right of Access — you may request a copy of the personal data zenwin holds about you, together with information about how it is used.
• Right to Rectification — if any personal data we hold about you is inaccurate or incomplete, you may request that we correct it. For account details (name, date of birth, address), please contact support with supporting documentation.
• Right to Erasure — you may request that zenwin delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to zenwin's legal obligation to retain certain data as described in Clause 9.
• Right to Restrict Processing — you may request that zenwin temporarily suspend processing of your data in certain circumstances, for example while the accuracy of the data is being investigated.
• Right to Data Portability — you may request that zenwin provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to Object — you may object to processing of your personal data where that processing is based on zenwin's legitimate interests, including profiling for marketing purposes.
• Right to Withdraw Consent — where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time by updating your communication preferences in your account settings or contacting support.

To exercise any of these rights, please contact our support team via live chat or email at [email protected]. We will respond within 30 calendar days. We may need to verify your identity before processing your request to ensure the security of your data.

The zenwin platform is strictly intended for adults aged 21 and over. We do not knowingly collect or process personal data relating to individuals under the age of 21. If you believe that a person under 21 has registered an account or provided personal data to zenwin, please notify us immediately at [email protected]. We will investigate the matter promptly and, if confirmed, will close the account, delete all associated data to the extent legally permissible, and return any deposited funds.

zenwin employs age verification controls at the point of registration and during the KYC process specifically to prevent underage access to the platform. Parents and guardians who are concerned about minors accessing online gambling services are encouraged to review our Responsible Gaming page for guidance on parental control tools and filtering software.

zenwin reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or platform functionality. The date of the most recent revision is displayed at the top of this page.

Where changes are material — meaning they significantly affect how we collect or use your personal data, or the rights available to you — we will provide advance notice to active players via their registered email address at least 14 days before the changes take effect. For minor clarifications or corrections that do not materially affect your rights, we may update the Policy without prior notice.

Your continued use of the zenwin platform following the effective date of any revised Privacy Policy constitutes your acknowledgment of the updated terms. If you disagree with any changes, you may request account closure and cessation of data processing by contacting our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or zenwin's handling of your personal data, please reach out through the following channels:

• Live Chat: Available 24/7 directly within the zenwin platform — our fastest support channel, staffed by Indonesian-speaking agents around the clock.
• Email: [email protected] — for formal data subject access requests, erasure requests, complaints, or any written privacy inquiry. Please include "Privacy Request" in your subject line to ensure prompt routing to our data team.

Our team operates across all Indonesian time zones — WIB (UTC+7), WITA (UTC+8), and WIT (UTC+9) — 24 hours a day, 7 days a week, including during Idul Fitri, Nyepi, and all other national public holidays. We aim to acknowledge all privacy-related inquiries within 48 hours and to provide a substantive response within 30 calendar days.