Encrypted Connections
All data exchanged between your device and Zorro4D — including login credentials, payment details, and personal information — is protected by 256-bit SSL/TLS encryption.
1. Introduction
Zorro4D ("the Company", "we", "us", "our") operates the online casino and sports betting platform accessible at https://zorro4d.cam. We recognise that the personal information you share with us carries significant responsibility, and we take that responsibility seriously.
This Privacy Policy applies to all Players, visitors, and prospective customers who access or use the Zorro4D platform, whether through a desktop browser, mobile device, or any other interface. By accessing the platform, registering an Account, or interacting with any Zorro4D service, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.
This Policy should be read alongside our Terms & Conditions and Responsible Gambling guidelines, both of which form part of our overall service agreement with you.
Scope: This Policy covers personal data collected through the Zorro4D website, account registration process, deposits and withdrawals, customer support interactions, marketing communications, and platform usage analytics. It does not apply to third-party services, payment providers, or external websites that may be linked from or interact with the Zorro4D platform.
2. Definitions
For the purposes of this Privacy Policy, the following terms carry the meanings defined below:
"Personal Data" — any information that identifies or can reasonably be used to identify a living individual, directly or in combination with other data. This includes name, email address, mobile number, date of birth, and financial account details.
"Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, and deletion.
"Data Controller" — Zorro4D, the entity that determines the purposes and means of processing your Personal Data.
"Data Processor" — a third party that processes Personal Data on behalf of Zorro4D, such as payment service providers or IT infrastructure suppliers.
"KYC" — Know Your Customer: identity and document verification required under anti-money-laundering (AML) obligations and platform security policies.
"Cookies" — small text files stored on your device by the platform to maintain session state, analytical data, and preference settings.
3. Data We Collect
Zorro4D collects personal data through several channels during the ordinary course of providing its services. The categories of data we collect are described below.
3.1 Registration and Account Data
When you create a Zorro4D Account, we collect your full legal name, date of birth, email address, mobile phone number, and chosen username. You may also be asked to provide your residential address, including street, city (such as Kuala Lumpur, Petaling Jaya, Penang, Shah Alam, or Johor Bahru), postcode, and country.
3.2 Identity Verification (KYC) Data
To comply with anti-money-laundering obligations and verify your eligibility to use the platform, we may request a copy of a government-issued photo identity document (such as a Malaysian MyKad, passport, or driving licence), a recent utility bill or bank statement as proof of address, and documentation confirming ownership of your nominated payment method.
3.3 Financial and Transaction Data
We record all deposits, withdrawals, bonus credits, and wager histories associated with your Account. This includes the payment method used (such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX via Maybank or CIMB, or cryptocurrency wallet addresses), transaction amounts in MYR or cryptocurrency equivalent, timestamps, and transaction status.
3.4 Device and Technical Data
When you access the platform, we automatically collect certain technical information including your IP address, browser type and version, operating system, device type, screen resolution, session duration, pages visited, and referring URL. This data is used for platform security, fraud prevention, and improving service performance.
3.5 Communication Data
Records of your communications with Zorro4D — including Live Chat transcripts, WhatsApp messages sent through our support channels, and any email correspondence addressed to our support team — are retained for quality assurance, dispute resolution, and regulatory compliance purposes.
3.6 Behavioural and Gameplay Data
We collect data about your activity on the platform, including game selections, bet amounts, session lengths, sports betting market preferences (such as EPL, Liga Super Malaysia, or UFC), and responsible gambling tool usage. This data helps us monitor for problem gambling indicators and improve the relevance of platform features.
4. Data Processing
Zorro4D processes your personal data for the following purposes. We do not process personal data beyond what is reasonably necessary for the purposes described below.
| Purpose | Data Categories Used |
|---|---|
| Account creation and management | Registration data, identity data, contact data |
| Identity verification (KYC / AML compliance) | KYC documents, financial data, transaction history |
| Processing deposits and withdrawals | Financial data, payment method data, transaction records |
| Fraud prevention and security monitoring | Device data, IP address, behavioural data, transaction patterns |
| Customer support and dispute resolution | Communication records, account history, transaction data |
| Responsible gambling monitoring and intervention | Gameplay data, session data, deposit and loss patterns |
| Regulatory reporting and legal obligations | Identity data, transaction records, KYC documentation |
| Platform analytics and service improvement | Technical data, behavioural data (anonymised or aggregated) |
| Marketing communications (where consent given) | Contact data, preference data, gameplay data |
5. Legal Basis for Processing
Zorro4D processes personal data under one or more of the following legal bases, depending on the nature of the processing activity:
- Contractual necessity: Processing required to perform the services you have registered for, including account management, payment processing, and wagering activity.
- Legal obligation: Processing required to comply with applicable laws, including anti-money-laundering regulations, age verification requirements, and regulatory reporting obligations.
- Legitimate interests: Processing undertaken for Zorro4D's reasonable business interests, including fraud detection, platform security, internal analytics, and responsible gambling monitoring, provided such interests are not overridden by your fundamental rights.
- Consent: Processing for optional purposes such as direct marketing communications, where your prior explicit consent has been obtained. You may withdraw consent at any time by contacting the support team.
6. Cookies and Tracking Technologies
6.1 What Cookies We Use
Zorro4D uses cookies and similar tracking technologies to maintain session continuity, remember your preferences, and collect anonymous analytical data about platform usage. Cookie categories include:
- Essential cookies: Necessary for the platform to function. These include session authentication cookies and security tokens. They cannot be disabled without affecting platform access.
- Analytical cookies: Used to measure page visits, traffic sources, and user behaviour patterns in an aggregated, anonymised form to improve platform performance.
- Preference cookies: Store your language preference, display settings, and other customisable configurations to improve your experience across sessions.
- Marketing cookies: Only placed with your consent, used to understand which promotional content or campaigns you have engaged with.
6.2 Cookie Control
Most web browsers allow you to review, block, or delete cookies through their settings. Disabling essential cookies will affect your ability to log in and use the platform. Disabling analytical or marketing cookies will not prevent access to core services. For guidance on managing cookies in common browsers, refer to your browser's help documentation.
7. Data Sharing and Disclosure
Zorro4D does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your data in the following limited circumstances:
7.1 Payment Service Providers
When you deposit or withdraw funds, your transaction data and relevant account details are shared with the applicable payment processor, such as the FPX network, DuitNow, Touch 'n Go eWallet operator, Boost, GrabPay, or cryptocurrency network validators. These providers receive only the data necessary to complete the transaction and are bound by their own privacy and security obligations.
7.2 Identity Verification Partners
KYC documents submitted during verification may be processed by contracted identity verification service providers. These partners operate under confidentiality agreements and process data solely for the verification purpose.
7.3 Legal and Regulatory Disclosure
Zorro4D may disclose personal data to law enforcement authorities, regulatory bodies, or courts where required by a valid legal order, court summons, or statutory reporting obligation. We will notify the affected Player of such disclosure where legally permissible.
7.4 Corporate Transactions
In the event of a merger, acquisition, restructuring, or sale of assets involving Zorro4D, personal data held by the Company may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.
8. International Data Transfers
Zorro4D operates internationally and may transfer your personal data to jurisdictions outside Malaysia, including to servers, service providers, or partners located in other countries. Where such transfers occur, Zorro4D takes reasonable steps to ensure that receiving entities apply data protection standards substantially equivalent to those described in this Policy. Transfers are carried out using appropriate safeguards including contractual data protection clauses or equivalent legal mechanisms.
9. Data Retention
Zorro4D retains personal data for as long as your Account remains active and for a minimum period thereafter as required by applicable anti-money-laundering, tax, or licensing regulations. The following general retention principles apply:
- Account and transaction records are retained for a minimum of five years following account closure, or longer if required by applicable law or ongoing investigation.
- KYC documentation is retained in accordance with anti-money-laundering regulatory requirements applicable to our operational jurisdiction.
- Communication records (including Live Chat and support email correspondence) are retained for a minimum of two years from the date of the last interaction.
- Anonymised or aggregated analytical data may be retained indefinitely as it does not constitute personal data.
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised. You may request deletion of your data as described in Section 10, subject to any overriding legal retention obligations.
10. Your Rights
Subject to applicable law, you have the following rights in relation to your personal data held by Zorro4D. To exercise any of these rights, contact our support team with your registered account details and a clear description of the right you wish to exercise.
- Right of access: You may request a copy of the personal data we hold about you.
- Right to rectification: You may request correction of inaccurate or incomplete personal data without undue delay.
- Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes it was collected, subject to overriding legal retention obligations.
- Right to restriction of processing: You may request that we limit the processing of your data in certain circumstances, for example while a rectification request is under review.
- Right to data portability: Where processing is based on consent or contractual necessity and carried out by automated means, you may request your data in a structured, commonly used, machine-readable format.
- Right to withdraw consent: Where processing is based on your prior consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
- Right to object: You may object to processing based on legitimate interests, including direct marketing, at any time.
Zorro4D will respond to rights requests within a reasonable timeframe. We may need to verify your identity before processing a request. Some requests may be limited or declined where they conflict with legal obligations, ongoing investigations, or fraud prevention requirements.
11. Data Security
Zorro4D employs technical and organisational security measures designed to protect your personal data from unauthorised access, accidental loss, destruction, or disclosure. Security measures include, but are not limited to:
- 256-bit SSL/TLS encryption for all data transmitted between your device and the Zorro4D platform.
- Encryption of sensitive data fields at rest, including payment information and identity documents.
- Access controls and role-based permissions that limit data access to authorised personnel on a need-to-know basis.
- Regular security assessments, penetration testing, and monitoring of platform infrastructure for anomalous activity.
- Two-factor authentication availability for all registered Player accounts.
While Zorro4D takes reasonable and commercially appropriate steps to secure your data, no internet-based service can guarantee absolute security. You are encouraged to use a strong, unique password for your Zorro4D Account, enable two-factor authentication, and notify our support team immediately if you suspect unauthorised access.
12. Minors and Age Restriction
21+ Policy: Zorro4D is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or retain personal data from individuals below the age of 21. If we become aware that personal data has been collected from an individual below the minimum age, we will promptly delete that data and close the associated Account.
Parents and guardians who believe that a minor has accessed or registered on the Zorro4D platform are urged to contact our support team immediately. Age verification may be required at the point of registration or at any subsequent time in accordance with our KYC policy.
13. Third-Party Websites and Services
The Zorro4D platform may reference or describe third-party payment services, banking providers, or other services for informational purposes. This Privacy Policy applies solely to data collected and processed by Zorro4D. Any data you provide directly to a third-party service — including payment processors such as FPX operators, Maybank, CIMB, Public Bank, Hong Leong, or e-wallet platforms — is governed exclusively by that third party's own privacy policy. Zorro4D has no control over and accepts no responsibility for third-party data practices.
14. Amendments to This Policy
Zorro4D reserves the right to update or replace this Privacy Policy at any time. Material changes will be communicated through a notice published on the platform and, where appropriate, via registered email to active Account holders. The "Last updated" date at the top of this page indicates the most recent revision.
Continued use of the Zorro4D platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you disagree with any update, you may request voluntary Account closure as described in our Terms & Conditions.
15. Contact Us
If you have questions about this Privacy Policy, wish to exercise any of your data rights, or need to report a data security concern, please contact the Zorro4D data support team. Our team is available 24 hours a day, 7 days a week, through the following channels:
Support Email: [email protected]
Live Chat: Available on the Zorro4D platform at all times.
Languages supported: English, Bahasa Melayu, and 中文.
When contacting us regarding a data rights request, please include your registered username or email address and a clear description of your request. We may need to verify your identity before acting on the request. Zorro4D aims to acknowledge all privacy enquiries within five business days and resolve substantive requests within 30 days, or within the timeframe required by applicable law.