lk21x Privacy Policy

In this Privacy Policy, the following terms have the meanings set out below:

• "lk21x", "we", "us", "our" — the lk21x online gaming platform and its operating entity, accessible via lk21x.net.
• "Member", "you", "your" — any individual who has registered an Account on lk21x or who uses any part of the lk21x Platform.
• "Personal Data" — any information that identifies or could reasonably identify a natural person, including name, email address, date of birth, national identity number, bank account details, IP address, and device identifiers.
• "Processing" — any operation performed on Personal Data, whether or not by automated means, including collection, recording, storage, adaptation, retrieval, use, disclosure, or deletion.
• "Data Controller" — the entity that determines the purposes and means of Processing Personal Data. lk21x acts as the Data Controller in respect of all Personal Data collected through the Platform.
• "Third-Party Processor" — any external service provider engaged by lk21x to process Personal Data on lk21x's behalf, under a binding data processing agreement that restricts the processor's use of the data.
• "KYC" — Know Your Customer; the identity and age verification process conducted by lk21x before authorising significant transactions.
• "Cookies" — small text files placed on your device by lk21x's web infrastructure to support Platform functionality, analytics, and session management.

This Privacy Policy applies to all Personal Data collected, stored, or processed by lk21x in connection with your use of the Platform, regardless of whether you access lk21x via a desktop browser, a mobile browser, or any other device. It applies to Members, prospective Members who have partially completed registration, and visitors who browse lk21x.net without registering an Account.

This Policy does not govern the privacy practices of any third party whose services may be accessible through links or integrations on the Platform — including Game Providers, payment processors , and identity verification partners. We encourage you to review the privacy policies of any third-party services you interact with independently of lk21x.

By registering an Account on lk21x or by continuing to use the Platform after this Policy has been updated, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your Personal Data as described herein.

lk21x collects Personal Data through several channels — directly from you during registration and account management, automatically through your use of the Platform, and from trusted third-party sources where permitted by applicable law.

Registration & Account Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used to verify that you meet the 21+ age requirement).
• Email address and mobile telephone number (Indonesian number required for SMS verification).
• Chosen username and encrypted password hash.
• Residential address, including city (e.g., Jakarta, Surabaya, Bandung, Bali, Medan) and postal code.
• Nationality and, where applicable, national identity number (NIK from your Indonesian KTP or passport number).

Financial & Payment Data

• Bank account name, account number, and bank name (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, or other nominated bank).
• E-wallet account identifiers for DANA, OVO, GoPay, ShopeePay, or LinkAja where nominated as a payment method.
• Transaction history, including deposit amounts, withdrawal amounts, dates, and payment channel used.
• We do not store full card numbers or full bank account credentials. Payment processing is handled by PCI-DSS-compliant Third-Party Processors; lk21x retains only the references necessary to process withdrawals to your verified account.

KYC Verification Data

• Scanned or photographed copies of government-issued photo identification (KTP, SIM, or passport).
• Selfie photographs submitted for liveness verification, where required.
• Proof of address documents (utility bill, bank statement, or similar).
• Source-of-funds documentation for high-volume accounts, where required by our compliance framework.

Usage & Behavioural Data

• IP address, device type, operating system, browser type and version, and screen resolution.
• Pages visited, session duration, click-through paths, and features accessed within the Platform.
• Game session data, including games played, bet amounts, win/loss outcomes, and session timestamps (recorded in WIB, UTC+7).
• Responsible gaming tool usage, including any deposit limits, loss limits, or self-exclusion arrangements you have configured.

Communications Data

• Content of live chat transcripts, email correspondence, and support ticket submissions with lk21x's customer support team.
• Survey responses and feedback provided voluntarily.
• Promotional preferences and opt-in/opt-out records for marketing communications.

lk21x uses the Personal Data we collect exclusively for the purposes described below. We do not use your data for any purpose that is incompatible with these stated purposes without first obtaining your explicit consent.

lk21x will not use your Personal Data for automated decision-making that produces legal or similarly significant effects on you without first providing a meaningful opportunity for human review, unless such automated processing is strictly necessary for fraud prevention or regulatory compliance and is permitted under applicable law.

lk21x processes your Personal Data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing is required to perform the contract between lk21x and the Member — for example, processing a deposit or crediting a withdrawal to your nominated account.
• Legal Obligation: Processing is required to comply with applicable law — for example, retaining KYC documentation and transaction records for AML regulatory purposes.
• Legitimate Interests: Processing is necessary for lk21x's legitimate business interests, provided those interests are not overridden by your fundamental rights — for example, analysing Platform usage data to improve game performance and detect fraud.
• Consent: Where processing is not otherwise justified under the bases above, lk21x will seek your explicit consent — for example, before sending promotional email communications. You may withdraw consent at any time by contacting [email protected] or updating your notification preferences in your Account settings, without affecting the lawfulness of processing carried out prior to withdrawal.

lk21x uses cookies and similar tracking technologies to support the operation of the Platform, improve your experience, and gather aggregated analytics data. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in during an active session and security cookies that protect against cross-site request forgery. These cookies cannot be disabled without preventing you from using the Platform.
• Functional Cookies: Remember your preferences, such as language settings, preferred game lobby view, and responsible gaming tool configurations. Disabling these cookies may reduce the personalisation of your experience but will not prevent core Platform functionality.
• Analytics Cookies: Collect aggregated, anonymised data on how Members navigate and use the Platform, enabling lk21x to identify performance bottlenecks, popular game categories, and areas for improvement. Analytics data is not linked to your individual Account identity without your consent.
• Marketing Cookies: Used only where you have provided explicit consent to receive personalised promotional communications. These cookies help lk21x tailor bonus offers and promotions to your gaming interests. You may opt out at any time via your Account settings.

lk21x does not sell, rent, or otherwise transfer your Personal Data to unaffiliated third parties for their own commercial purposes. We may share your Personal Data with the following categories of recipients, strictly for the purposes described:

• KYC and Identity Verification Partners: Third-party service providers who assist lk21x in verifying Member identities and ages. These providers process your identification documents under binding data processing agreements and are prohibited from using your data for any purpose beyond identity verification.
• Payment Processors: Indonesian bank networks, DANA, OVO, GoPay, ShopeePay, LinkAja, and other payment infrastructure providers through which your deposits and withdrawals are routed. These providers operate under their own regulatory frameworks and privacy policies.
• Game Providers: Third-party software studios such as Evolution Gaming, Pragmatic Play, PG Soft, NetEnt, and Microgaming may receive pseudonymised session data (such as a Member's anonymised player ID and bet history within their games) solely for the purposes of game delivery, malfunction dispute resolution, and regulatory audit. Game Providers do not receive your full name, contact details, or financial account information.
• Regulatory and Law Enforcement Authorities: lk21x may be required to disclose Personal Data to governmental authorities, regulators, or law enforcement agencies where required by applicable law, a court order, or a binding regulatory direction. lk21x will notify you of any such disclosure where legally permitted to do so.
• Professional Advisers: Legal counsel, auditors, and compliance consultants engaged by lk21x may access Personal Data on a strictly need-to-know basis and are bound by professional confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of substantially all of lk21x's assets, your Personal Data may be transferred to the acquiring entity, provided that the acquiring entity agrees to honour the commitments set out in this Privacy Policy. lk21x will notify affected Members of any such transfer in advance.

lk21x retains Personal Data for no longer than is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law or regulatory obligation. The following retention periods apply as a general guide:

When the applicable retention period expires, lk21x will securely delete or anonymise the relevant Personal Data so that it can no longer be associated with an identified individual.

lk21x implements a comprehensive set of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Encryption at Rest: Sensitive data fields — including identity document images, bank account references, and password hashes — are encrypted at rest using industry-standard AES-256 encryption.
• Access Controls: Access to Personal Data is restricted on a strict need-to-know basis. lk21x employees, contractors, and Third-Party Processors are granted the minimum level of access required to perform their specific functions. All access is logged and auditable.
• Two-Factor Authentication: Administrative access to lk21x's data infrastructure requires multi-factor authentication. Members are strongly encouraged to enable two-factor authentication on their own Accounts via their Account settings.
• Regular Security Audits: lk21x engages independent security firms to conduct periodic penetration testing and vulnerability assessments of the Platform's infrastructure.
• Incident Response: lk21x maintains a documented data breach response procedure. In the event of a breach that is likely to result in a high risk to your rights and freedoms, lk21x will notify affected Members within 72 hours of becoming aware of the breach, to the extent practicable.

Despite these measures, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your Account credentials and should notify lk21x immediately at [email protected] if you suspect any unauthorised access to your Account.

Subject to applicable law and lk21x's legitimate operational and regulatory obligations, you have the following rights in respect of your Personal Data held by lk21x. To exercise any of these rights, contact [email protected] with the subject line "Data Rights Request" and specify the right you wish to exercise.

lk21x will respond to all Data Rights Requests within 30 calendar days of receipt. Where a request is complex or lk21x receives multiple requests simultaneously, this period may be extended by a further 60 days, with notification provided to you within the initial 30-day period. lk21x reserves the right to charge a reasonable administrative fee for manifestly unfounded or excessive requests.

The lk21x Platform is strictly intended for adults aged 21 and over. lk21x does not knowingly collect Personal Data from individuals under the age of 21. If lk21x discovers that it has inadvertently collected Personal Data from a person under 21, it will delete that data promptly and close any associated Account without delay.

If you are a parent or guardian and you believe that a person under the age of 21 in your care has registered an Account on lk21x or submitted Personal Data to lk21x, please contact [email protected] immediately so that we can take appropriate action. For detailed responsible gaming resources, including guidance on protecting minors, please visit our Responsible Gaming page.

The lk21x Platform may contain references or links to third-party services, including Game Provider interfaces and payment gateway portals. These third-party environments operate independently of lk21x and are governed by their own privacy policies. lk21x has no control over and accepts no responsibility for the content, privacy practices, or data handling of any third-party service. We encourage you to review the relevant privacy policy of any third-party service you access through or in connection with the Platform before providing any personal information to that third party.

lk21x reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory guidance. Where an amendment is material — meaning it significantly affects your privacy rights or how your Personal Data is used — lk21x will provide at least 14 calendar days' advance notice via email to your registered address before the revised Policy takes effect.

For minor amendments, including clarifications and corrections that do not alter the substance of the Policy, lk21x may update the Policy with immediate effect. The "Version" and "Effective Date" displayed at the top of this page will be updated to reflect each revision. Your continued use of the Platform after the effective date of any amendment constitutes acceptance of the revised Privacy Policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or lk21x's handling of your Personal Data, please contact our Data Protection team using the details below:

• Email: [email protected] (subject line: "Privacy Enquiry" or "Data Rights Request")
• Response Time: lk21x will acknowledge all privacy-related enquiries within 48 hours and provide a substantive response within 30 calendar days.
• Support Hours: 24 hours / 7 days a week (WIB, UTC+7), including Indonesian public holidays, with native Indonesian-speaking agents available on every shift.

If you are not satisfied with lk21x's response to your complaint, you may escalate the matter to the data protection authority or relevant supervisory body in the jurisdiction applicable to lk21x's licensing entity. Contact details for the relevant supervisory body will be provided in lk21x's substantive response to any unresolved complaint.