Privacy Policy 4d98 — Personal Data Protection for Malaysia Players

1. Information We Collect

4d98 collects your personal information to provide a secure, seamless, and responsible online gaming service. We only collect data that is strictly necessary for platform operations.

Information you provide directly:

• Identity Information: Full name as per MyKad or passport, date of birth, MyKad or passport number (for KYC verification purposes).
• Contact Information: Active Malaysian mobile number and a valid email address.
• Banking Information: Bank name, Malaysian bank account number, and account holder name for deposit and withdrawal processing.
• Verification Document: Copy of MyKad, utility bill, or bank statement as proof of address when required for the KYC process.
• Communications: Any messages or information you send to our support team via Live Chat, WhatsApp, or email.

Information collected automatically:

• IP address, browser type, operating system, and device information used to access the platform.
• Game session data including betting records, wins, transaction history, and time spent playing.
• Activity logs for login and logout events, including date, time, and approximate location based on IP.
• Platform interaction data such as pages visited, buttons clicked, and time spent in each section.

Data types by category:

2. How We Use Your Data

Every piece of data we collect is used for a clear and lawful purpose. 4d98 adheres to the principle of data minimisation — we only process information that is genuinely necessary for the stated purpose.

• Account Management: Creating, verifying, and managing your player account, including the KYC process and two-factor authentication (2FA) via OTP.
• Transaction Processing: Verifying and processing deposits via DuitNow, FPX, Touch 'n Go eWallet, GrabPay, and Boost, as well as managing withdrawals to your bank account.
• Customer Support: Addressing enquiries, resolving complaints, and providing the technical support you need via Live Chat or other channels.
• Platform Security: Detecting and preventing fraudulent activity, money laundering, bot usage, and any activity that violates applicable law or our Terms and Conditions.
• Legal Compliance: Fulfilling our obligations under Malaysian law, including reporting requirements to the relevant authorities.
• Platform Improvements: Analysing usage patterns in aggregate and anonymised form to improve user experience, platform performance, and various game features.
• Service Communications: Sending important notifications related to your account, transactions, promotions you have subscribed to, and platform updates via SMS, email, or in-app notifications.
• Responsible Gaming: Monitoring gameplay patterns to identify players who may need support and to enforce limits set by the players themselves.

3. Information Sharing

4d98 does not sell your personal data. However, in certain limited situations, we may share your information with the following parties:

• Payment Service Providers: Required transaction information is shared with payment processors such as DuitNow, FPX, Touch 'n Go, GrabPay, and Boost solely to process your payments.
• Game Providers: Username and basic game session data are shared with licensed game providers to enable you to play third-party games available on our platform.
• KYC and Identity Verification Services: Identity verification documents may be processed through licensed third-party verification services that comply with PDPA.
• Legal Authorities: Information will be disclosed to law enforcement agencies, courts, or regulatory bodies when required by Malaysian law or a valid court order.
• Auditors and Professional Advisors: Lawyers, accountants, or auditors bound by professional confidentiality obligations may access certain data within the scope of their work.

4. Data Security

Protecting your personal data is among 4d98's highest priorities. We continuously invest in robust security infrastructure to ensure your information remains safe at all times.

• Data Encryption in Transit: All communications between your browser or app and 4d98 servers are secured using TLS 1.3 protocol with AES-256 encryption.
• Stored Data Encryption: Sensitive data such as bank account numbers and identity documents are encrypted before being stored in our database.
• Access Controls: A role-based access control (RBAC) system ensures only authorised personnel can access specific data categories.
• 24/7 Monitoring: An intrusion detection system (IDS) and real-time security monitoring operate around the clock to detect suspicious activity.
• Penetration Testing: Security audits and penetration testing are conducted regularly by independent security experts to identify and address any vulnerabilities.
• Data Backup: Data is automatically backed up to separate server locations to ensure rapid recovery in the event of a system failure.

5. Cookies and Tracking Technologies

4d98 uses cookies and similar tracking technologies to enhance your experience on our platform. Below is an explanation of the types of cookies we use:

You can manage cookie settings through your browser preferences. Please note that disabling essential cookies may affect core platform functionality, such as the ability to log in and maintain your game session.

We do not use third-party cookies for advertising or marketing profiling purposes. All analytics cookies we use process data in aggregate and anonymised form.

6. Your Rights as a Player

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have several important rights regarding the personal data we hold about you. 4d98 is committed to respecting and facilitating the exercise of these rights.

7. Data Retention Period

4d98 retains your personal data for as long as necessary to fulfil the purpose for which it was collected, or for as long as required by applicable Malaysian law.

• Active Account Data: For the duration of your active account and 5 years after account closure, in line with Malaysia's financial legal requirements.
• Financial Transaction Records: Minimum 7 years from the date of transaction, as required under Malaysia's Anti-Money Laundering laws (AMLA).
• KYC Documents: For the duration of the active account and 5 years after closure, or longer if required by regulatory authorities.
• Security Logs: 12 months for standard access logs; up to 5 years for logs related to investigated security incidents.
• Customer Support Data: 3 years from the date of last interaction to allow reference to service history if needed.
• Analytics Cookie Data: Up to 90 days in raw data form; anonymised aggregate data may be retained longer for trend analysis purposes.

When data is no longer needed and there is no legal obligation to retain it, 4d98 will securely delete or anonymise that data using methods that ensure it cannot be recovered.

8. Links to Third Parties

The 4d98 platform may contain links or integrations to third-party services such as game providers, payment platforms, and support channels. This Privacy Policy applies only to information collected and processed directly by 4d98.

When you interact with third-party services integrated within our platform, the privacy policy of that third party applies to the data they process. We encourage you to read and understand the privacy policy of each service provider you use.

9. Child Protection

4d98 services are strictly for individuals aged 18 and above. We do not knowingly collect, process, or store personal data from individuals under the age of 18.

During registration, applicants are required to confirm they are at least 18 years of age. Our KYC process using official identity documents also helps verify the applicant's age before the first withdrawal is processed.

If we find that we have inadvertently collected personal data from a minor, we will take immediate action to delete that data and close the account in question without notice.

10. Amendments to the Privacy Policy

4d98 reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements in how we communicate information to players.

• You will be notified of any significant amendments via in-platform notifications, your registered email, or a login pop-up notice.
• The "Last Updated" date at the top of this document will be revised whenever amendments are made.
• Continued use of the 4d98 platform after amendments take effect constitutes your acceptance of the updated terms.
• If an amendment involves a significant change in how we use your data, we will seek your consent again where required by law.

We encourage you to review this page periodically to stay informed on how we protect your privacy. A version history of this document is available upon request.

11. Contact Us

If you have any questions, concerns, or wish to exercise your privacy rights, the 4d98 data protection team is ready to assist you through the following channels:

• Privacy Email: [email protected] — for all personal data enquiries, access requests, and privacy complaints. Response time within 2 business days.
• Support Email: [email protected] — for general service enquiries and technical support. Response time within 24 business hours.
• Live Chat: Available 24/7 via the chat icon on the platform. For urgent privacy matters, include "PRIVACY" at the start of your message to be prioritised.
• WhatsApp: A WhatsApp support number is available on the platform after login for communication in Bahasa Malaysia.

For privacy complaints that cannot be resolved through our internal channels, you have the right to refer the matter to Department of Personal Data Protection Malaysia (JPDP) under the Ministry of Digital.