Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") describes how lk21x ("we", "us", "our", or "the Platform"), operating the website located at https://lk21x.cam, collects, uses, processes, stores, shares, and protects personal information provided by users ("you", "your", or "Player") who access or use our online gaming services. This Policy applies to all personal data collected through the lk21x website, mobile-responsive interface, customer support channels, and any other touchpoints through which you interact with our Services.

By creating an account, depositing funds, placing bets, or otherwise using the lk21x Platform, you acknowledge that you have read, understood, and consent to the collection and processing of your personal information as described in this Privacy Policy. If you do not agree with our data practices, you must immediately discontinue use of the Services. This Policy should be read in conjunction with our Terms & Conditions and Responsible Gaming Policy, which govern your overall relationship with lk21x.

We are committed to protecting your privacy and maintaining the confidentiality of your personal information in compliance with applicable international data protection regulations. We implement robust technical and organizational security measures to safeguard your data against unauthorized access, disclosure, alteration, or destruction. This Privacy Policy is transparent about what data we collect, why we need it, how we use it, and your rights regarding your personal information.

2. Information We Collect

lk21x collects various categories of personal information necessary to provide our gaming services, verify your identity, process transactions, prevent fraud, and comply with legal and regulatory obligations. The types of information we collect include:

2.1 Registration and Account Information

When you create an lk21x account, we collect the following mandatory information:

• Full legal name as it appears on your Indonesian KTP (Kartu Tanda Penduduk)
• Date of birth (to verify you are at least 21 years of age)
• Email address
• Mobile phone number
• Residential address (street address, city, province, postal code)
• Username and password (encrypted)
• Preferred language and currency settings

2.2 Identity Verification (KYC) Documents

To comply with Know Your Customer (KYC) regulations and prevent identity fraud, we require you to submit:

• Photograph or scan of your Indonesian KTP showing your face, full name, NIK (Nomor Induk Kependudukan), date of birth, and residential address
• Additional proof of address documents such as utility bills or bank statements (if requested)
• Selfie photograph or video verification (for enhanced security verification)

These documents are securely stored in encrypted format and used solely for identity verification, age confirmation, and fraud prevention purposes. We never share your KTP or identity documents with third parties except when required by law enforcement or regulatory authorities.

2.3 Financial and Transaction Information

To process deposits and withdrawals, we collect:

• Bank account details (bank name, account number, account holder name) for Indonesian banks including BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, and BSI
• E-wallet account information for OVO, DANA, GoPay, ShopeePay, and LinkAja
• Transaction history including deposit amounts, withdrawal requests, dates, times, and payment methods used
• Source of funds documentation (bank statements, proof of income) when required for large transactions or suspicious activity investigations

2.4 Gaming Activity and Behavioral Data

We automatically collect information about your gaming activities, including:

• Game selection preferences (sports betting, live casino, slots, table games)
• Betting history (amounts wagered, outcomes, winnings, losses)
• Session duration and frequency of play
• Bonus claims and wagering requirement progress
• Responsible gaming tool usage (deposit limits, self-exclusion settings)

This behavioral data helps us personalize your experience, identify responsible gaming concerns, detect fraudulent patterns, and improve our Services.

2.5 Technical and Device Information

When you access lk21x, we automatically collect technical information including:

• IP address and geographic location (city-level, not precise GPS)
• Device type, operating system, and browser type
• Screen resolution and device identifier
• Referring website URL and navigation paths through our site
• Cookies and similar tracking technologies (see Section 7 for details)

2.6 Communications and Support Interactions

When you contact customer support via live chat, email, or WhatsApp, we retain records of:

• Content of your messages and inquiries
• Support ticket history and resolution outcomes
• Any documents or screenshots you provide to support staff
• Call recordings (if phone support is offered, with your consent)

3. How We Use Your Information

lk21x processes your personal information for the following legitimate purposes:

Purpose	Description
Account Management	Creating, maintaining, and authenticating your gaming account; processing login requests; managing account settings and preferences.
Transaction Processing	Processing deposits and withdrawals; verifying payment methods; reconciling financial transactions; maintaining accurate balance records.
Identity Verification (KYC)	Confirming your identity, age (21+), and residency in Indonesia; preventing identity fraud, underage gambling, and duplicate accounts.
Fraud Prevention & Security	Detecting suspicious activity, unauthorized access, collusion, bonus abuse, and money laundering; protecting Platform integrity and other players.
Game Provision & Management	Delivering gaming services; recording bets and outcomes; calculating winnings; resolving disputes; maintaining game history and statistics.
Responsible Gaming Protection	Monitoring for problem gambling indicators; enforcing deposit limits, loss limits, and self-exclusion; providing intervention when concerning patterns emerge.
Customer Support	Responding to inquiries; troubleshooting technical issues; resolving complaints; providing assistance in Indonesian and English languages.
Marketing Communications	Sending promotional offers, bonus announcements, and newsletters (only with your consent; you may opt out anytime).
Legal Compliance	Meeting regulatory reporting requirements; responding to law enforcement requests; complying with anti-money laundering (AML) obligations; defending legal claims.
Platform Improvement	Analyzing usage patterns; conducting A/B testing; optimizing user interface; developing new features; improving game selection based on player preferences.

4. Legal Basis for Processing

Under international data protection frameworks, we process your personal information based on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform our contract with you (the Terms & Conditions), including account management, transaction processing, and game provision.
• Legal Obligation: Processing is required to comply with legal and regulatory requirements, such as KYC verification, anti-money laundering checks, and reporting to licensing authorities.
• Legitimate Interests: Processing serves our legitimate business interests in fraud prevention, platform security, customer support, service improvement, and business analytics, provided these interests do not override your fundamental rights.
• Consent: For marketing communications and non-essential cookies, we obtain your explicit consent, which you may withdraw at any time without affecting the lawfulness of processing based on consent before withdrawal.

5. Data Sharing and Disclosure

lk21x does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your data with the following categories of recipients under strict confidentiality obligations:

5.1 Payment Service Providers

We share necessary transaction information (account numbers, amounts, transaction IDs) with Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process your deposits and withdrawals. These financial institutions are bound by banking secrecy laws and their own privacy policies.

5.2 Game Studio Partners

When you play games from third-party studios, certain technical information (user ID, game session data, bet amounts) may be shared with those studios solely for game operation and integrity purposes. Game studios do not receive your full personal details such as name, KTP, or contact information.

5.3 Identity Verification Services

We may use third-party identity verification and document authentication services to analyze KTP submissions and detect fraudulent documents. These services process data on our behalf under strict data processing agreements.

5.4 Cloud Infrastructure Providers

Our website and databases are hosted on secure cloud infrastructure. These hosting providers have access to encrypted data storage but are contractually prohibited from accessing or using the data for any purpose other than providing hosting services to lk21x.

5.5 Legal and Regulatory Authorities

We may disclose your personal information to law enforcement agencies, regulatory bodies, or courts when required by law, court order, or subpoena; to investigate fraud or security incidents; to protect the rights, property, or safety of lk21x, our users, or the public; or to comply with anti-money laundering and counter-terrorism financing regulations.

5.6 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets involving lk21x, your personal information may be transferred to the acquiring entity, subject to the same privacy protections outlined in this Policy.

6. Data Security Measures

lk21x employs industry-standard technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

• SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using bank-grade 256-bit SSL (Secure Sockets Layer) technology, the same standard used by major financial institutions.
• Database Encryption: Personal information stored in our databases is encrypted at rest using AES-256 encryption algorithms. Passwords are hashed using bcrypt with salt to prevent exposure even in the event of a database breach.
• Access Controls: Strict role-based access controls limit employee access to personal data on a need-to-know basis. Only authorized personnel involved in account verification, customer support, or compliance functions can view sensitive information.
• Regular Security Audits: Our systems undergo periodic security audits and penetration testing by independent cybersecurity firms to identify and remediate vulnerabilities.
• Firewall Protection: Enterprise-grade firewalls and intrusion detection systems monitor network traffic for suspicious activity and block unauthorized access attempts.
• Data Backup and Recovery: Regular encrypted backups ensure data can be restored in the event of hardware failure or disaster, minimizing risk of permanent data loss.
• Employee Training: All lk21x staff receive mandatory data protection and cybersecurity training to ensure compliance with privacy policies and security best practices.

While we implement comprehensive security measures, no internet-based system can be guaranteed 100% secure. You also play a role in protecting your account by maintaining the confidentiality of your password, not sharing login credentials, and promptly reporting any suspected unauthorized access.

7. Cookies and Tracking Technologies

lk21x uses cookies and similar tracking technologies to enhance your browsing experience, remember your preferences, analyze site traffic, and deliver targeted content. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use:

• Essential Cookies: Necessary for core website functionality such as login authentication, session management, and security features. These cannot be disabled.
• Performance Cookies: Collect anonymous usage statistics (pages visited, time spent, errors encountered) to help us understand how users interact with the site and identify areas for improvement.
• Functionality Cookies: Remember your preferences such as language selection, currency settings, and customization choices to provide a personalized experience.
• Marketing Cookies: Track your activity across sites to deliver relevant promotional offers and measure marketing campaign effectiveness. These require your consent and can be disabled through cookie settings.

You can manage cookie preferences through your browser settings. Most browsers allow you to block all cookies, accept only first-party cookies, or receive a notification before a cookie is stored. Note that disabling essential cookies may impair site functionality and prevent you from accessing certain features.

8. Data Retention

lk21x retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods vary by data category:

• Account Information: Retained while your account is active and for 5 years after account closure to comply with financial record-keeping regulations.
• KYC Documents: Retained for 5 years after account closure for anti-money laundering and regulatory compliance purposes.
• Transaction Records: Retained for 7 years to meet tax reporting and financial audit requirements.
• Gaming History: Retained for 5 years for dispute resolution, fraud investigation, and regulatory reporting.
• Support Communications: Retained for 3 years for quality assurance and training purposes.
• Marketing Data: Deleted within 30 days if you withdraw consent or unsubscribe from marketing communications.

After the applicable retention period expires, personal data is securely deleted or anonymized so it can no longer be associated with you. Anonymized data may be retained indefinitely for statistical analysis and business intelligence purposes.

9. Your Privacy Rights

Under international data protection regulations, you have the following rights regarding your personal information:

• Right of Access: You may request a copy of the personal data we hold about you, including account information, transaction history, and gaming activity records.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data. Update your account information directly through your account settings or contact customer support.
• Right to Erasure (Right to be Forgotten): You may request deletion of your personal data in certain circumstances, such as when data is no longer necessary for the purposes collected or when you withdraw consent. Note that legal retention obligations may prevent immediate deletion.
• Right to Restrict Processing: You may request that we temporarily suspend processing of your personal data in specific situations, such as while we verify the accuracy of disputed data.
• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format for transfer to another service provider.
• Right to Object: You may object to processing of your personal data based on legitimate interests or for direct marketing purposes. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, contact our Data Protection team at [email protected] with subject line "Privacy Rights Request" and include your account username and specific request details. We will respond within 30 days. Identity verification may be required to prevent fraudulent requests.

10. International Data Transfers

As an internationally operated platform serving the Indonesian market, your personal information may be transferred to and processed in countries outside Indonesia where our servers, service providers, or business partners are located. These countries may have different data protection laws than Indonesia. When we transfer data internationally, we implement appropriate safeguards including standard contractual clauses, encryption, and data processing agreements to ensure your information receives adequate protection regardless of location.

11. Children's Privacy

lk21x services are strictly for adults aged 21 years and older. We do not knowingly collect personal information from individuals under 21 years of age. If we discover that a person under 21 has provided us with personal information, we will immediately delete such information and permanently close the associated account. Parents and guardians are encouraged to monitor their children's internet activity and prevent underage access to gambling websites. If you believe a minor has created an account on lk21x, please contact us immediately at [email protected] so we can investigate and take appropriate action.

12. Changes to This Privacy Policy

lk21x reserves the right to modify, update, or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will update the "Last Updated" date at the top of this document and may also notify you via email or through a prominent notice on the Platform. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information. Your continued use of the Services after changes are posted constitutes acceptance of the updated Privacy Policy.

13. Contact Information and Data Protection Officer

If you have questions, concerns, or complaints about this Privacy Policy or our data handling practices, or if you wish to exercise your privacy rights, please contact us through the following channels:

• Email: [email protected] (Subject: Privacy Inquiry)
• 24/7 Live Chat: Available after logging into your account
• WhatsApp Support: Number visible in your account dashboard (08:00-22:00 WIB)

Our customer support team is trained to handle privacy-related inquiries and will escalate complex matters to our Data Protection Officer. We aim to respond to all privacy inquiries within 30 days. For urgent security concerns such as suspected account breaches, contact us immediately via live chat for faster response.