Privacy Policy — zara4

Welcome to the zara4 Privacy Policy. This document governs the collection, use, storage, and disclosure of personal information by zara4 ("we", "us", "our"), an online betting platform operated under the domain https://zara4.cam. We are committed to protecting your privacy and handling your data transparently and responsibly.

This Privacy Policy applies to all users ("you", "user", "player", "member") who access or use zara4's services, including those who visit our website, register an account, place bets, or engage with our customer support channels. By using zara4, you acknowledge that you have read, understood, and agreed to the practices described in this Privacy Policy.

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, address, date of birth, email address, phone number, national ID number, payment information, IP address, device identifiers, and account credentials.
• "Processing" means any operation performed on Personal Data, including collection, recording, organization, storage, adaptation, alteration, retrieval, consultation, use, disclosure, dissemination, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data. In the context of zara4, we act as the Data Controller.
• "Data Processor" means any third-party entity that processes Personal Data on behalf of the Data Controller under specific instructions.
• "KYC" means Know Your Customer — identity and age verification procedures designed to prevent underage gambling, fraud, and money laundering.
• "AML" means Anti-Money Laundering — policies and procedures designed to detect and prevent the use of zara4 for money laundering or terrorist financing.
• "Cookies" means small text files placed on your device by the zara4 website to store preferences, track activity, and improve user experience.

zara4 collects and processes several categories of Personal Data to provide, maintain, and improve our services. The data we collect includes:

3.1 Registration Data

• Full legal name (as it appears on your government-issued ID)
• Date of birth (to verify you are at least 21 years of age)
• Residential address (street, city, province, postal code)
• Email address and mobile phone number
• Username and encrypted password
• Preferred language and currency (IDR/Rupiah)

3.2 Identity Verification (KYC) Data

• Government-issued photo identification (KTP, SIM, or Passport)
• Proof of address documents (utility bill, bank statement, or official correspondence)
• Selfie photographs holding identification documents (where required for enhanced verification)
• Copies of payment cards or e-wallet screenshots (to verify ownership of payment methods)

3.3 Financial Transaction Data

• Deposit and withdrawal transaction histories
• Bank account details (account holder name, bank name, account number) for BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata
• E-wallet account details (OVO, DANA, GoPay, ShopeePay, LinkAja)
• Transaction amounts, dates, times, and statuses
• Payment processor reference numbers

3.4 Betting and Gaming Activity Data

• Bet placement data (stake amounts, odds, bet types, markets selected)
• Game session data (slots, live casino, togel, sabung ayam, crash games)
• Bonus participation and wagering requirement progress
• Win/loss history and account balance snapshots
• Responsible gaming tool usage (deposit limits, session limits, self-exclusion status)

3.5 Technical and Device Data

• IP address, geolocation data (country, city)
• Device type, operating system, browser type and version
• Device identifiers (IMEI, MAC address, advertising ID where applicable)
• Screen resolution, browser language, time zone
• Referring URLs, clickstream data, pages visited, time spent on pages

3.6 Communication Data

• Support ticket contents (live chat logs, email correspondence, WhatsApp messages)
• Feedback, survey responses, and complaint submissions
• Marketing preference selections and opt-in/opt-out statuses

We collect Personal Data through the following channels:

• Directly from You: When you register an account, submit KYC documents, make deposits or withdrawals, place bets, contact customer support, or fill out surveys or forms on the zara4 platform.
• Automatically: Through cookies, log files, and similar tracking technologies as you navigate and interact with the zara4 website. This includes recording IP addresses, device information, and behavioral data.
• From Third Parties: From payment processors (to verify transaction success), identity verification services (to confirm the authenticity of KYC documents), fraud prevention agencies, and game providers (to deliver win/loss data and RNG results).
• Publicly Available Sources: Where permitted by law, we may collect additional information from publicly accessible sources such as social media profiles to verify identity or detect duplicate accounts.

zara4 processes your Personal Data for the following purposes:

zara4 does not sell, rent, or lease your Personal Data to third parties for marketing purposes. However, we may share your data with the following categories of recipients under strict confidentiality obligations:

• Payment Processors: BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, LinkAja, and international payment gateways to process deposits and withdrawals.
• Identity Verification Providers: Third-party KYC/AML service providers to verify the authenticity of government-issued IDs and detect fraudulent documents.
• Game Providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Ezugi, Habanero, and other licensed studios to deliver game content and record win/loss results.
• Fraud Prevention & Security Agencies: Cybersecurity firms and fraud detection platforms to analyze transaction patterns, detect duplicate accounts, and prevent money laundering.
• Legal & Regulatory Authorities: Law enforcement agencies, courts, tax authorities, and gaming regulators where disclosure is required by law or necessary to protect zara4's legal rights.
• Professional Advisors: Lawyers, auditors, accountants, and consultants who require access to Personal Data to provide professional services to zara4.
• Business Successors: In the event of a merger, acquisition, or sale of zara4's business, your Personal Data may be transferred to the acquiring entity, subject to the same privacy protections outlined in this policy.

zara4 employs industry-standard technical and organizational measures to protect your Personal Data against unauthorized access, loss, misuse, alteration, or destruction. Our security measures include:

• 256-bit SSL Encryption: All data transmitted between your device and zara4 servers is encrypted using Secure Socket Layer (SSL) technology — the same standard used by major Indonesian banks.
• Encryption at Rest: All Personal Data stored in our databases is encrypted at rest using AES-256 encryption standards.
• Access Controls: Strict role-based access controls ensure that only authorized personnel can access Personal Data, and only to the extent necessary to perform their job functions.
• Two-Factor Authentication (2FA): Players can enable 2FA on their accounts to add an extra layer of login security.
• Regular Security Audits: Independent third-party security audits are conducted annually to identify and remediate vulnerabilities in the zara4 platform.
• Firewalls & Intrusion Detection: Advanced firewalls, intrusion detection systems (IDS), and intrusion prevention systems (IPS) monitor and block malicious traffic in real-time.
• Secure Data Centers: All servers are hosted in ISO-certified, physically secure data centers with 24/7 monitoring, redundant power supplies, and disaster recovery protocols.
• Employee Training: All zara4 employees with access to Personal Data undergo mandatory privacy and security training and are bound by strict confidentiality agreements.

While we implement robust security measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and notifying us immediately if you suspect unauthorized access to your account.

zara4 uses cookies and similar tracking technologies to enhance your user experience, analyze platform performance, and deliver personalized content. The types of cookies we use include:

• Essential Cookies: Strictly necessary for the operation of the platform. These cookies enable core functionality such as account login, session management, and secure payment processing. You cannot opt out of essential cookies without disabling your ability to use zara4.
• Performance Cookies: Collect anonymized data on how users interact with zara4, including pages visited, time spent on site, and click patterns. This data helps us optimize platform performance and user experience.
• Functional Cookies: Remember your preferences (such as language selection, currency display, and game favorites) to provide a more personalized experience across sessions.
• Marketing Cookies: Track your activity across sessions to deliver targeted promotional offers and measure the effectiveness of marketing campaigns. You can opt out of marketing cookies through your browser settings or account dashboard.

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies if you prefer. However, disabling cookies may limit your ability to use certain features of the zara4 platform.

zara4 retains your Personal Data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal, regulatory, and contractual obligations. Our data retention periods are as follows:

After the applicable retention period expires, your Personal Data will be securely deleted or anonymized such that it can no longer be associated with you. Anonymized data may be retained indefinitely for statistical and analytical purposes.

Under applicable data protection laws, you have the following rights regarding your Personal Data held by zara4:

• Right of Access: You may request a copy of the Personal Data we hold about you, including details of how it is processed and with whom it has been shared.
• Right to Rectification: If your Personal Data is inaccurate or incomplete, you may request that it be corrected or updated. You can update most registration data directly through your account dashboard.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected. Note that we may be legally required to retain certain data (e.g., KYC documents, transaction records) even after account closure.
• Right to Restriction of Processing: You may request that we temporarily restrict the processing of your Personal Data in specific situations, such as while we verify the accuracy of disputed data.
• Right to Data Portability: You may request a machine-readable copy of your Personal Data for transfer to another service provider.
• Right to Object: You may object to the processing of your Personal Data where we rely on legitimate interests as the legal basis, or where the data is used for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without penalty. Withdrawal does not affect the lawfulness of processing conducted before the withdrawal.

To exercise any of these rights, please contact our Data Protection Officer at support@zara4.cam with the subject line "Privacy Rights Request". We will respond to your request within 30 calendar days. You may also lodge a complaint with your local data protection authority if you believe your privacy rights have been violated.

The zara4 platform may contain links to third-party websites, game providers, or payment processors. This Privacy Policy applies only to Personal Data collected by zara4. We are not responsible for the privacy practices or content of third-party sites. We encourage you to review the privacy policies of any third-party services you access through zara4.

zara4 is an adult-only platform. You must be at least 21 years of age to register and use our services. We do not knowingly collect Personal Data from individuals under the age of 21. If we discover that we have inadvertently collected data from a minor, we will delete that data immediately and close the associated account. If you believe we have collected data from a person under 21, please contact us immediately at support@zara4.cam.

zara4 primarily serves players in Indonesia. However, some of our service providers (such as payment processors, game studios, and cloud hosting providers) may be located outside Indonesia. When we transfer your Personal Data internationally, we ensure that appropriate safeguards are in place, such as:

• Standard contractual clauses approved by data protection authorities
• Binding corporate rules for intra-group transfers
• Transfer to countries recognized as providing adequate data protection

By using zara4, you consent to the international transfer of your Personal Data to jurisdictions where our service providers operate, subject to these safeguards.

zara4 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal obligations, or operational requirements. When material changes are made, we will notify registered players by posting a prominent notice on the platform and, where appropriate, by email to the address on file.

The date of the most recent revision is displayed at the top of this page. Continued use of zara4 following notification of a policy update constitutes your acceptance of the revised Privacy Policy. If you do not agree with a material change, you must cease using the platform and contact our support team to request account closure and data deletion where applicable.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your Personal Data, please contact our Data Protection Officer using the details below. We will respond to all inquiries within 30 calendar days.

This Privacy Policy was last updated on 1 January 2026. All previous versions are superseded by this document.