zara4 Privacy Policy

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "zara4," "We," "Us," or "Our" — the operator of the zara4 Platform and the data controller for personal data collected through zara4.bet.
• "Platform" — the zara4 website at zara4.bet and all associated pages, sub-sections, and services made available through it.
• "Player" or "You" — any individual who accesses, registers on, or uses the zara4 Platform.
• "Personal Data" — any information that identifies or can reasonably be used to identify a natural person, including name, email address, date of birth, financial account details, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, erasure, or destruction.
• "Third-Party Service Provider" — any external company or individual engaged by zara4 to provide services in support of the Platform, such as payment processors, KYC verification providers, hosting providers, and fraud detection services.
• "KYC" — Know Your Customer; the identity verification process applied to Player accounts, including review of government-issued identification and proof of address.
• "Cookies" — small text files placed on your device by the Platform to facilitate session management, analytics, and fraud prevention.

zara4 is the data controller responsible for Personal Data collected through the Platform. As data controller, zara4 determines the purposes for which Personal Data is processed and the means by which that processing takes place.

All data-related enquiries, access requests, correction requests, and deletion requests should be directed to the zara4 support team at [email protected] with the subject line "Privacy Request — [Your Account Username]". zara4 will acknowledge receipt within five business days and respond substantively within 30 days of receiving a complete request.

zara4 collects the following categories of Personal Data from Players:

3.1 Registration Data

When you create a zara4 account, we collect your full legal name, date of birth, email address, phone number, and chosen username. This information is required to open and administer your account.

3.2 Identity Verification (KYC) Data

To comply with anti-money-laundering (AML) obligations and to verify that you meet the minimum age requirement of 21 years, we may collect copies of government-issued photo identification (such as the Indonesian National Identity Card — KTP — or a valid passport), proof of residential address, and documentation confirming ownership of the payment method you use on the Platform.

3.3 Financial Transaction Data

We record details of all deposits and withdrawals made through your account, including transaction amounts in IDR, timestamps, and the payment channel used (for example, BCA bank transfer, BRI bank transfer, OVO, DANA, GoPay, ShopeePay, or LinkAja). We do not store full bank account numbers or full card numbers on our servers.

3.4 Gameplay and Betting Data

We maintain records of all bets, wagers, game rounds, and outcomes associated with your account. This data is used for account statement purposes, dispute resolution, and responsible gaming monitoring.

3.5 Technical and Device Data

When you access the Platform, we automatically collect your IP address, browser type and version, operating system, device identifiers, session duration, and pages visited within the Platform. This data is used for security monitoring, fraud detection, and Platform performance optimisation.

3.6 Communications Data

If you contact zara4 support via live chat or email, we retain records of that correspondence, including the content of your messages and the resolution reached, for quality assurance and audit purposes.

3.7 Responsible Gaming Data

Any deposit limits, session time settings, self-exclusion periods, or cooling-off requests you submit through the Platform are recorded and form part of your account record. This data is maintained to enforce the settings you have chosen and to comply with responsible gaming obligations.

zara4 collects Personal Data through the following means:

• Directly from you — through account registration forms, KYC document uploads, deposit and withdrawal requests, support communications, and voluntary participation in surveys or promotions.
• Automatically through the Platform — via server logs, session cookies, browser fingerprinting, and analytics tools that record your interaction with the Platform during each visit.
• From Third-Party Service Providers — including payment processors who confirm transaction status, KYC verification services who return identity check results, and fraud detection providers who flag unusual activity patterns.

zara4 uses the Personal Data it collects for the purposes listed in the table below. Each purpose is linked to a legal basis, which is explained in Section 6.

zara4 does not use automated decision-making that produces legal or similarly significant effects on Players without human review. Where algorithmic tools are used for fraud detection or responsible gaming monitoring, flagged accounts are reviewed by a member of the compliance team before any restrictive action is taken.

zara4 relies on the following legal bases when processing your Personal Data:

• Contract performance — processing is necessary to perform the contract between you and zara4 (i.e., to operate your account, process your bets, and pay out your winnings).
• Legal obligation — processing is required to comply with applicable law, including anti-money-laundering regulations, age verification requirements, and regulatory reporting obligations.
• Legitimate interest — processing is necessary for zara4's legitimate business interests, including fraud prevention, security monitoring, and Platform improvement, provided those interests are not overridden by your data protection rights. zara4 has conducted legitimate interest assessments for all processing activities under this basis and the outcomes are documented internally.
• Consent — where zara4 relies on consent as the legal basis (for example, for promotional email communications), you may withdraw that consent at any time by contacting support or using the unsubscribe link in any promotional email. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

The zara4 Platform uses cookies and similar technologies. The following categories of cookies are in use:

• Strictly necessary cookies — required for the Platform to function. These include session authentication cookies that keep you logged in during your visit. They cannot be disabled without disrupting the operation of the Platform.
• Functional cookies — store your preferences (such as language or display settings) so they are remembered across sessions. These are not essential but improve your experience.
• Analytics cookies — collect aggregated, anonymised data on how Players navigate the Platform. This data helps zara4 identify usability issues and improve content. No individually identifiable data is included in analytics reports.
• Security and fraud-detection cookies — used to identify unusual device behaviour, detect account takeover attempts, and prevent bonus abuse. These are classified as legitimate interest processing.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to your zara4 account. Disabling analytics or functional cookies will not prevent you from using the Platform but may reduce the quality of your experience.

zara4 does not sell your Personal Data. We share your data only in the following limited circumstances:

• Payment processors — to facilitate deposits and withdrawals via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja. These providers receive only the data necessary to execute the transaction.
• KYC and identity verification providers — to verify your identity, age, and the legitimacy of your payment method during the account verification process.
• Fraud prevention and security providers — to detect and prevent fraudulent activity, including suspicious login attempts, collusion, and bonus abuse.
• Hosting and infrastructure providers — the technical infrastructure underlying the Platform is operated by third-party cloud and server providers who process data on behalf of zara4 under data processing agreements.
• Regulatory and law enforcement authorities — where required by applicable law, court order, or regulatory directive, zara4 may disclose Personal Data to relevant authorities. zara4 will notify affected Players of such disclosures where legally permitted to do so.

All Third-Party Service Providers engaged by zara4 are bound by contractual data protection obligations that restrict their use of your data to the specific services they provide to zara4. They are not permitted to use your data for their own marketing or commercial purposes.

As an internationally operated platform, some of zara4's Third-Party Service Providers — including hosting infrastructure and KYC verification services — may process your Personal Data in countries outside Indonesia. Where such transfers occur, zara4 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to international data protection best practices.

These safeguards include contractual data processing agreements with all international service providers and, where applicable, the use of standard contractual clauses recognised under applicable data protection frameworks. zara4 does not transfer Personal Data to jurisdictions that do not offer an adequate level of data protection without first implementing appropriate safeguards.

zara4 retains Personal Data for no longer than is necessary for the purposes for which it was collected, subject to any legal obligation to retain data for a longer period. The following general retention periods apply:

• Active account data — retained for the duration of the account and for a period of five years following account closure, in line with standard AML record-keeping obligations.
• KYC documentation — retained for a minimum of five years from the date of verification in accordance with anti-money-laundering regulatory requirements.
• Transaction records — retained for five years from the date of each transaction.
• Support communications — retained for three years from the date of the interaction.
• Technical and analytics data — aggregated analytics data is retained indefinitely in anonymised form. Raw server log data is retained for 90 days before deletion.

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised. If you have requested account closure, your data will be retained for the applicable statutory period before deletion, after which it cannot be recovered.

Subject to applicable law, you hold the following rights in relation to your Personal Data held by zara4:

• Right of access — you may request a copy of the Personal Data zara4 holds about you. Requests will be fulfilled within 30 days.
• Right of correction — if any Personal Data held about you is inaccurate or incomplete, you may request that it be corrected.
• Right to erasure — you may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, provided no overriding legal obligation requires its retention.
• Right to restriction of processing — in certain circumstances you may request that processing of your data be restricted while a dispute or correction request is under review.
• Right to data portability — you may request your Personal Data in a structured, commonly used, machine-readable format where processing is based on consent or contract performance.
• Right to withdraw consent — where processing is based on your consent (for example, for promotional communications), you may withdraw consent at any time. Withdrawal does not affect prior lawful processing.
• Right to object — you may object to processing based on legitimate interest at any time. zara4 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.

To exercise any of the above rights, contact [email protected] with the subject line "Privacy Request — [Your Account Username]" and a clear description of your request. zara4 may ask you to verify your identity before processing the request.

The zara4 Platform is intended solely for adults aged 21 years and over. zara4 does not knowingly collect Personal Data from individuals under the age of 21. If zara4 becomes aware that a Player is under the minimum age, the account will be closed immediately, all funds will be withheld pending investigation, and the relevant Personal Data will be deleted as soon as legally permissible.

If you have reason to believe that an individual under 21 has registered an account on zara4, please report this immediately to [email protected]. zara4 treats all reports of underage gambling with the highest priority.

zara4 implements a range of technical and organisational security measures to protect your Personal Data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your browser and the Platform.
• Encrypted storage of sensitive data, including KYC document files, at rest.
• Role-based access controls ensuring that internal staff access Personal Data only to the extent required for their specific job function.
• Automated intrusion detection and anomaly monitoring across Platform infrastructure.
• Regular internal security reviews and penetration testing of the Platform.
• Two-factor authentication available for all Player accounts.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, zara4 will notify affected Players without undue delay and will take immediate steps to contain and remediate the breach.

The zara4 Platform may reference or display content from third-party game providers (such as Pragmatic Play, Evolution Gaming, PG Soft, and NetEnt). While these providers deliver game content within the zara4 Platform environment, they operate under their own privacy policies in respect of any data collected through their game interfaces.

This Privacy Policy applies exclusively to data processed by zara4 as data controller. zara4 is not responsible for the privacy practices of third-party game studios or any external website that may be referenced in Platform content. Players are encouraged to review the privacy policies of any third-party services they interact with.

zara4 reviews this Privacy Policy periodically and reserves the right to update it to reflect changes in applicable law, regulatory guidance, or the way the Platform operates. When material changes are made, the "Last updated" date at the top of this document will be revised and a notice will be displayed on the Platform.

Continued use of the Platform following publication of an updated Privacy Policy constitutes your acknowledgement of the changes. If you have objections to any changes, you may request account closure in accordance with zara4's Terms & Conditions. We recommend reviewing this Policy each time you access the Platform if you have privacy concerns.

For all privacy-related enquiries, data subject access requests, correction requests, or complaints, please contact the zara4 support team using the details below. All communications are handled in English and Indonesian.

• Email: [email protected] — subject line: "Privacy Request — [Your Account Username]"
• Response time: zara4 will acknowledge receipt within five business days and provide a substantive response within 30 days of receiving a complete request.
• Identity verification: To protect your data, zara4 may ask you to verify your identity before processing any data subject request.
• No fees: Standard data access, correction, and deletion requests are handled at no cost. Where a request is manifestly unfounded or excessive in scope, zara4 reserves the right to charge a reasonable administrative fee or decline the request, with written reasons provided.

For further information about your rights, or for concerns about how zara4 handles your data, you may also refer to our Terms & Conditions and Responsible Gaming pages for additional context on how we operate the Platform.