Trust Center

Welcome to Zentara's Trust Center. Here, we aim to provide a clear and accessible overview of our security and trust practices. Zentara (PT Mars Bumi Indonesia and/or our affiliates) offers various products and services through our website (https://zentara.co/ and its derivative sites). In providing these services, we may collect and process personal data from users of our site and applications.

This Trust Center serves as a foundational resource, outlining the boundaries and applicability of our privacy program and management systems. We are committed to protecting your data and maintaining your trust. Our practices include a formal review of our PCI DSS scope at least annually, and semi-annually for service providers, to ensure all data flows and system components are included in our compliance program. We also maintain visitor logs for our facilities, computer rooms, and data centers where sensitive data may be stored or transmitted, creating an audit trail of activity.

Zentara has implemented security mechanisms to ensure that only trusted keys and certificates are accepted during the transmission of sensitive data, confirming their validity and ensuring they are not expired or revoked. We also provide user guides and system documentation to share information about the design and operation of our systems and their boundaries. Our security awareness training materials include information on our security policy, phishing and social engineering awareness, and the role of personnel in protecting cardholder data. For service providers, we maintain a documented description of our cryptographic architecture, detailing algorithms, protocols, and keys used for protecting stored account data.

Our Privacy Policy details how we process your personal data, including how we obtain, collect, store, use, and protect it. We process data to improve your experience with our products, communicate with you, provide information about our services, and for various business operations such as accounting, auditing, and fraud prevention. We are transparent about how we use information and are committed to providing clear explanations. Upon customer request, we provide information on our PCI DSS compliance status and clarify shared responsibilities. We also regularly review information system activities.