Privacy Policy

1. Definitions

The following terms carry the meanings set out below throughout this Privacy Policy:

• "zoom55," "we," "us," or "our" — the zoom55 online gaming platform accessible at https://zoom55.cam and its operating entity.
• "You" or "User" — any individual who visits, registers on, or interacts with the zoom55 website or services.
• "Personal Data" — any information that identifies or could reasonably be used to identify a living individual, directly or in combination with other data.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, or deletion.
• "Controller" — the entity that determines the purposes and means of processing Personal Data; in this context, zoom55.
• "Processor" — a third party that processes Personal Data on behalf of zoom55 under a written data-processing agreement.
• "KYC" — Know Your Customer; the identity verification procedures required by applicable anti-money-laundering and gaming regulations.
• "Services" — all gaming, betting, lottery, and related services offered through the zoom55 platform.

2. Who We Are and How to Contact Us

zoom55 is a premier online gaming platform dedicated to serving players across Indonesia. We operate under international gaming licences and adhere to internationally recognised data-protection principles.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your Personal Data, please contact our Data Protection Officer:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week through your account dashboard
• WhatsApp: +62 812-3456-7890 (plain text — not a clickable link)

We aim to acknowledge all privacy-related enquiries within 48 hours and resolve them fully within 30 calendar days.

3. What Personal Data We Collect

The categories of Personal Data zoom55 collects depend on how you interact with our Services. We collect only what is reasonably necessary for the purposes described in Section 5.

3.1 Account and Identity Information

• Full legal name (as it appears on your government-issued ID)
• Date of birth (to verify you are at least 21 years of age)
• Email address and mobile phone number
• Indonesian National Identity Number (NIK from KTP) — collected as part of mandatory KYC verification
• Residential address (province, city, district, postal code)
• Username and encrypted password hash

3.2 Identity Verification (KYC) Documents

• Scanned or photographed copy of your Indonesian National ID (KTP) or other accepted government-issued photo ID
• Proof of current residential address (recent utility bill, bank statement, or equivalent document dated within the last 90 days)
• Selfie photograph taken while holding your identity document
• Source-of-funds documentation where required by our compliance team for transactions above defined thresholds

3.3 Financial and Transactional Data

• Bank account details (account holder name, bank name such as BCA, BRI, BNI, Mandiri, CIMB Niaga, or BSI, and account number) provided for deposits and withdrawals
• E-wallet identifiers (OVO, DANA, GoPay, ShopeePay, or LinkAja account references)
• Transaction history — deposit amounts, withdrawal amounts, dates, and statuses
• Bonus and promotional activity records

3.4 Gaming Activity Data

• Bets placed, game sessions, win/loss records, and game preferences
• Sports events wagered on (e.g., BRI Liga 1 matches, EPL, La Liga, Champions League fixtures)
• Lottery (togel) ticket purchases and draw results
• Session durations, login timestamps, and last-active dates

3.5 Technical and Device Data

• IP address and approximate geographic location derived from it
• Device type, operating system, browser type and version
• Cookies and similar tracking identifiers (see Section 6)
• Referring URLs and on-site navigation paths
• Error logs and performance diagnostics

3.6 Communications Data

• Content of live chat conversations, email correspondence, and WhatsApp messages with our support team
• Feedback, complaint, and dispute records
• Survey responses and voluntary information you provide through our platform

4. How We Collect Your Data

zoom55 collects Personal Data through the following channels:

• Direct Submission: Information you provide when registering an account, completing KYC, making a deposit, contacting support, or participating in promotions.
• Automatic Collection: Technical data gathered automatically when you visit our website or use our mobile platform, including through cookies, server logs, and analytics tools.
• Third-Party Verification Providers: Identity and document verification services that confirm the authenticity of KYC documentation submitted during account opening or at periodic review intervals.
• Payment Processors: Transaction confirmation data received from Indonesian banking partners and e-wallet providers when you make deposits or withdrawals.
• Fraud Prevention Partners: Risk signals and device fingerprint data from trusted fraud detection services used to protect our platform and players.

5. Purposes and Legal Bases for Processing

We process your Personal Data only where we have a valid legal basis to do so. The table below summarises our key processing activities:

6. Cookies and Tracking Technologies

zoom55 uses cookies and similar technologies to operate the platform, remember your preferences, and understand how players interact with our services. The types of cookies we deploy are:

• Strictly Necessary Cookies: Essential for the website to function. These enable core features such as session management, login state, and security checks. They cannot be disabled without impacting platform functionality.
• Functional Cookies: Remember your preferences (such as language, time-zone displayed as WIB by default, and display settings) so you do not have to reconfigure them on each visit.
• Analytics Cookies: Collect anonymised data about how pages are used — page views, click paths, session duration — helping us improve platform performance and user experience.
• Security and Fraud-Prevention Cookies: Detect unusual activity, protect against cross-site request forgery, and support our responsible gaming monitoring obligations.

Most browsers allow you to manage or block cookies through their settings. Please note that disabling certain cookies may affect the functionality of the zoom55 platform. We do not use cookies to serve third-party advertising or to track you across unrelated websites.

7. Sharing and Disclosure of Personal Data

zoom55 does not sell, rent, or exchange your Personal Data with third parties for their own marketing purposes. We share data only in the following circumstances and only to the minimum extent necessary:

7.1 Service Providers (Processors)

We engage trusted third-party processors — including KYC verification providers, payment gateway operators (Indonesian banks such as BCA, BRI, BNI, Mandiri, and e-wallet providers such as OVO, DANA, and GoPay), cloud hosting partners, and customer support technology vendors — who process data solely on our documented instructions and under binding data-processing agreements.

7.2 Regulatory and Law Enforcement Authorities

We may disclose Personal Data to competent authorities, regulators, or law enforcement agencies where required by law, court order, or to protect the rights, property, or safety of zoom55, our users, or the public.

7.3 Anti-Money Laundering and Fraud Prevention

Transaction data and identity information may be shared with licensed fraud prevention and AML screening services as part of our legal compliance obligations. Results are used solely to assess risk and fulfil regulatory reporting requirements.

7.4 Business Transfers

In the event of a merger, acquisition, reorganisation, or sale of assets, your Personal Data may be transferred as part of that transaction. We will notify affected users in advance and ensure the acquiring entity maintains equivalent privacy protections.

8. International Data Transfers

The majority of your Personal Data is stored on servers located in data centres that serve the Asia-Pacific region. On occasion, data may be accessed from or transferred to a jurisdiction outside Indonesia — for example, when a cloud-hosted support system is operated from another country.

Whenever such transfers occur, zoom55 implements appropriate contractual safeguards — including Standard Contractual Clauses or equivalent mechanisms — to ensure your data receives a level of protection consistent with this Privacy Policy and applicable international data-protection standards.

9. Data Retention

zoom55 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected and to comply with our legal obligations. Our general retention framework is:

• Active Account Data: Retained for the lifetime of your account and for a period of five (5) years following permanent account closure, in compliance with anti-money-laundering record-keeping requirements.
• KYC and Identity Documents: Retained for a minimum of five (5) years from the date of verification or account closure (whichever is later), as mandated by applicable regulatory frameworks.
• Transaction Records: Retained for five (5) years to support audit, fraud investigation, and regulatory reporting obligations.
• Customer Support Communications: Retained for three (3) years from the date of the interaction to enable dispute resolution and service quality review.
• Marketing Preferences and Consent Records: Retained until you withdraw consent or for three (3) years following your last interaction, whichever occurs first.
• Technical Logs: Retained for up to twelve (12) months for security monitoring and platform diagnostics.

When Personal Data reaches the end of its retention period, it is securely deleted or irreversibly anonymised so that it can no longer be linked to an identifiable individual.

10. Security Measures

zoom55 applies a defence-in-depth approach to data security, combining technical, organisational, and procedural controls:

• Transport Encryption: All data in transit between your device and our servers is encrypted using TLS 1.2 or higher (256-bit SSL).
• Encryption at Rest: Sensitive fields — including financial account references and identity document scans — are encrypted at rest using AES-256.
• Access Controls: Internal access to Personal Data is restricted on a strict need-to-know basis, with multi-factor authentication required for all staff accessing production systems.
• Intrusion Detection: Automated monitoring systems flag and alert on anomalous access patterns, potential data exfiltration, and other security events in real time.
• Regular Audits: Our security posture is reviewed through periodic internal audits and third-party penetration tests. Findings are remediated within defined risk-based timeframes.
• Incident Response: We maintain a documented data breach response procedure. In the event of a breach affecting your rights and freedoms, we will notify you and relevant authorities within the timeframes required by applicable law.

11. Your Rights and Choices

Depending on your location and the applicable legal framework, you may have the following rights with respect to your Personal Data held by zoom55:

• Right of Access: Request a copy of the Personal Data we hold about you, along with information about how it is processed.
• Right to Rectification: Ask us to correct inaccurate or incomplete Personal Data. You can update many details directly through your account profile page.
• Right to Erasure: Request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Restrict Processing: Ask us to pause processing of your data in certain circumstances — for example, while we verify the accuracy of information you have disputed.
• Right to Data Portability: Receive a structured, machine-readable copy of the Personal Data you have provided to us, and transmit it to another service provider where technically feasible.
• Right to Object: Object to processing based on our legitimate interests. We will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on consent (such as optional marketing communications), withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact our Data Protection Officer at [email protected] (plain text, not clickable) or via the 24/7 live chat in your account dashboard. We will verify your identity before processing any request and respond within 30 calendar days. We do not charge a fee for exercising your rights unless a request is manifestly unfounded or excessive.

12. Children and Minors

zoom55 does not knowingly collect Personal Data from individuals under the age of 21. Our Services are strictly for adults aged 21 and above. During registration, we collect date of birth and require KYC identity verification specifically to enforce this age restriction.

If we become aware that Personal Data has been submitted by or on behalf of a person under 21, we will promptly delete that data, close the associated account, and return any deposited funds to the source payment method. If you are aware of an underage individual who has registered with zoom55, please contact our support team immediately.

13. Third-Party Links and Services

The zoom55 platform may contain references to game providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, or Spribe) whose products are integrated directly within our platform. While we vet our game and technology partners carefully, each provider operates under its own privacy practices as they relate to their own websites and external products.

This Privacy Policy applies exclusively to data processed by zoom55 in connection with our platform and Services. We are not responsible for the privacy practices of external websites, even if linked from our platform. We encourage you to review the privacy policies of any third-party services you access independently.

14. Changes to This Policy

zoom55 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal obligations, or service offerings. When we make material changes, we will:

• Update the "Last Reviewed" date at the top of this page
• Display a prominent notice on the platform for a minimum of 14 days following the change
• Send an email notification to your registered address if the changes significantly affect your rights

Your continued use of zoom55 Services following the effective date of any revision constitutes acceptance of the updated Policy. If you do not agree with a material change, you may close your account and withdraw your remaining balance before the change takes effect.

15. Governing Law and Contact

This Privacy Policy is governed by internationally recognised data-protection principles and the laws of the jurisdiction in which zoom55 holds its gaming licence. In the event of a dispute regarding the handling of your Personal Data that we are unable to resolve directly, you may have the right to lodge a complaint with a relevant supervisory authority in your jurisdiction.

For all privacy-related enquiries, corrections, or deletion requests, please reach out to us through any of the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 through your account dashboard
• WhatsApp: +62 812-3456-7890 (plain text — not a clickable link)
• Response time: We acknowledge all privacy requests within 48 hours and aim to resolve them fully within 30 calendar days.