At zora4, protecting your personal data is a core responsibility — not an afterthought. This Privacy Policy explains precisely what information we collect, how we use it, who we may share it with, and what rights you hold over your own data as a Member of our Platform.
Last Updated: 1 January 2026Our Commitment: zora4 is committed to handling your personal data with transparency, integrity, and care. This Privacy Policy is incorporated by reference into our Terms & Conditions. By registering an account or using the Platform, you acknowledge that you have read and understood this policy. For any privacy-related enquiry, contact [email protected].
This Privacy Policy ("Policy") sets out the basis on which zora4 ("we", "us", "our") collects, processes, stores, and shares personal data in connection with the operation of the zora4 online gaming Platform at https://zora4.cam ("Platform"). It applies to all users who visit, register on, or transact through the Platform, including Indonesian Members and any other users in jurisdictions where the Platform is accessible.
zora4 acts as the data controller for all personal data collected through the Platform. We are responsible for determining the purposes and means of processing your personal data and for ensuring that all processing activities comply with applicable data protection law.
We recognize that our Members in Indonesia and across the region place significant trust in us when they share their personal information. That trust is something we take seriously. We do not sell your personal data to third-party marketers, and we do not use it for purposes beyond those described in this Policy.
zora4 collects only the personal data that is necessary for the purposes described in this Policy. The categories of personal data we collect are set out in the table below.
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, government-issued ID number (KTP / passport) | Account registration, KYC verification, age verification |
| Contact Data | Email address, mobile phone number, city / province of residence | Account communications, support, notifications |
| Financial Data | Bank account details (BCA, BRI, BNI, Mandiri account numbers), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history, deposit and withdrawal amounts in IDR | Payment processing, fraud prevention, KYC compliance |
| KYC Documents | Scanned copies of KTP, passport, driver's license; proof of address; selfie with document | Regulatory compliance, identity verification prior to withdrawals |
| Gaming Activity Data | Wager history, game sessions, bet amounts, win/loss records, bonus usage, responsible gaming preferences | Service delivery, fraud detection, responsible gaming monitoring, product improvement |
| Technical Data | IP address, device type, browser type and version, operating system, session timestamps, login history | Security, fraud prevention, platform optimization |
| Communications Data | Support chat transcripts, email correspondence, WhatsApp messages sent to our support number | Customer support, dispute resolution, quality assurance |
| Marketing Preferences | Promotional opt-in/opt-out status, preferred contact channel, language preference | Delivering promotional communications where consent has been given |
The majority of the personal data we hold is provided directly by you during account registration, KYC submission, deposit and withdrawal transactions, customer support interactions, and when you complete any profile update or preference setting on the Platform.
When you access the Platform, certain technical data is collected automatically by our servers and analytics systems. This includes your IP address, device fingerprint, browser characteristics, session duration, pages visited, and click-stream data. This information is collected via server logs, cookies, and similar tracking technologies described in Section 11.
In certain circumstances, zora4 may receive personal data about you from third parties, including:
zora4 processes your personal data only where we have a valid lawful basis to do so. The lawful bases we rely on are as follows:
zora4 uses the personal data we collect for the following purposes:
zora4 engages third-party service providers to assist in delivering the Platform's services. These providers act as data processors and are contractually bound to process personal data only on our instructions and in accordance with appropriate data protection standards. Categories of service provider include:
zora4 may disclose personal data to regulatory authorities, law enforcement agencies, or other competent bodies where required to do so by applicable law, court order, or regulatory direction. We will notify you of any such disclosure where we are legally permitted to do so.
In the event of a merger, acquisition, restructuring, or sale of all or part of zora4's business, personal data held by zora4 may be transferred to the acquiring entity as part of the transaction. We will notify affected Members prior to any such transfer and ensure that appropriate data protection safeguards are in place.
zora4 does not sell, rent, or trade your personal data to any third-party advertiser, data broker, or marketing organization. Your personal data is used solely for the purposes described in this Policy.
As an internationally operated platform serving Indonesian Members, zora4 may transfer certain personal data to servers, service providers, or affiliated entities located outside Indonesia. In all cases, we ensure that such transfers are subject to adequate safeguards, including contractual data processing agreements that impose data protection obligations equivalent to those described in this Policy.
Where personal data is transferred to jurisdictions with different data protection regimes, zora4 takes all reasonable steps to ensure that your data receives an equivalent level of protection to that which it would receive within Indonesia.
zora4 retains personal data only for as long as is necessary for the purposes for which it was collected, unless a longer retention period is required by law. Our standard retention periods are as follows:
At the end of the applicable retention period, personal data is securely deleted or anonymized in accordance with our internal data disposal procedures.
As a Member of the zora4 Platform, you hold a number of rights in relation to your personal data. zora4 is committed to facilitating the exercise of these rights promptly and without undue restriction. To exercise any of the rights listed below, please contact us at [email protected].
Right of Access You may request a copy of all personal data we hold about you, along with information about how it is being processed.
Right to Rectification You may request correction of any personal data that is inaccurate, incomplete, or out of date.
Right to Erasure You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
Right to Restriction You may request that we restrict the processing of your personal data in certain circumstances, such as while a rectification request is pending.
Right to Data Portability You may request a structured, machine-readable copy of the personal data you have provided to us, for the purpose of transferring it to another service.
Right to Object You may object to processing based on legitimate interests or for direct marketing purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds.
Right to Withdraw Consent Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
Right to Complain You have the right to lodge a complaint with a competent supervisory authority if you believe we have processed your personal data unlawfully.
We will respond to all rights requests within 30 days of receipt. Where a request is complex or we have received a large volume of requests, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it. We will not charge a fee for handling rights requests unless they are manifestly unfounded or excessive.
Cookies are small text files placed on your device when you visit the Platform. They allow the Platform to recognise your device on subsequent visits, remember your preferences, and collect analytical information about how the Platform is used. zora4 also uses similar technologies such as web beacons, pixel tags, and local storage objects for comparable purposes.
You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. For strictly necessary cookies, no opt-out is available as they are integral to the Platform's operation. Continued use of the Platform following your review of this Policy constitutes acknowledgment of our use of cookies as described above.
zora4 implements a comprehensive set of technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security infrastructure includes:
Your Role in Security: You are responsible for keeping your account password confidential and for ensuring that your registered email address remains under your sole control. If you suspect that your account has been accessed without your authorization, contact [email protected] immediately so that we can take protective action.
The zora4 Platform is strictly for adults aged 21 years and over. We do not knowingly collect, process, or retain personal data from individuals under the age of 21. All registration attempts are subject to age verification, and identity documents submitted during KYC are reviewed to confirm that the Member meets this requirement.
If zora4 becomes aware that personal data has been collected from an individual under 21 years of age without appropriate parental consent, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the Platform, please notify us immediately at [email protected].
The Platform integrates with a number of third-party services to deliver its full functionality, including game content providers such as Pragmatic Play, Evolution Gaming, PG Soft, Habanero, and others; payment infrastructure partners; and customer support technology platforms. Each of these third parties operates under its own privacy policy and data protection practices.
While zora4 contractually requires all third-party data processors to maintain appropriate data protection standards, we are not responsible for the privacy practices of third-party services that operate independently and are not acting as data processors on our behalf. We recommend reviewing the privacy policies of any third-party service you interact with outside of the zora4 Platform directly.
The Platform does not contain links to external third-party websites. All navigation remains within the zora4 domain.
zora4 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or operational requirements. When we make material changes, we will notify registered Members by email to their registered address and will display a prominent notice on the Platform prior to the changes taking effect. The "Last Updated" date at the top of this page reflects the date of the most recent revision.
Your continued use of the Platform following the effective date of any amendment constitutes your acknowledgment of the updated Policy. If you do not agree to the revised terms, you may request account closure in accordance with Section 12 of our Terms & Conditions.
If you have any questions, concerns, or requests relating to this Privacy Policy or the way zora4 handles your personal data, please contact our Data Protection team through the following channels:
Our support team operates 24 hours a day, 7 days a week, and includes Indonesian-speaking agents. All privacy-related requests will be acknowledged within 3 business days and resolved within 30 days. Operating timezone: WIB (UTC+7).
Our privacy framework is built on six core principles that govern every decision we make about your personal information.
Every byte of data exchanged between your device and the zora4 Platform travels over an encrypted TLS connection. KYC documents and financial records are stored encrypted at rest using AES-256, meaning they are unreadable without the correct decryption keys.
Access to Member personal data inside zora4's systems is limited to authorized personnel with a specific operational need. Every internal access event is logged and audited. Multi-factor authentication is mandatory for all staff with data access privileges.
zora4 has a firm, unconditional policy against selling, renting, or trading your personal data to third-party advertisers or data brokers. Your data is used exclusively to deliver, secure, and improve the services you have signed up for.
You retain full control over your marketing and communication preferences through your account settings. Consent to promotional communications can be withdrawn at any point, and rights requests — including data access and erasure requests — are processed within 30 days.
Our security team conducts routine vulnerability assessments and third-party penetration tests to identify and remediate weaknesses before they can be exploited. Security findings are tracked through a formal remediation process with defined resolution timelines.
In the unlikely event of a personal data breach, zora4 commits to notifying affected Members promptly and transparently, in accordance with the notification obligations prescribed by applicable data protection law. We maintain a documented incident response plan for exactly this scenario.
Our support team is available around the clock to address any data protection question or rights request. You can also review our Terms & Conditions or visit the FAQ for answers to common account and security questions.