Privacy Policy — 4d888

This Privacy Policy ("Policy") describes how 4d888 ("the Platform", "we", "us", "our") collects, processes, uses, stores, and discloses personal data relating to users ("you", "your", "the User") of the 4d888 website at https://4d888.cam and all associated services.

4d888 operates as an online casino and sports betting platform primarily serving Malaysian users across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and beyond. In the course of providing our services, we necessarily collect certain personal data. This Policy explains how that data is handled and what protections are in place.

By registering an account, making a deposit, or otherwise using the Platform in any capacity, you confirm that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the Platform.

For the purposes of this Policy, the following terms are defined as follows:

• "Personal Data" — Any information relating to an identified or identifiable natural person, including but not limited to name, date of birth, email address, phone number, IP address, and payment details.
• "Processing" — Any operation performed on Personal Data, including collection, recording, organisation, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" — The entity that determines the purposes and means of processing Personal Data. For this Platform, the Data Controller is 4d888.
• "Data Processor" — A third party that processes Personal Data on behalf of the Data Controller, such as payment service providers or KYC verification services.
• "Consent" — A freely given, specific, informed, and unambiguous indication of the User's agreement to the processing of their Personal Data.
• "Cookies" — Small text files stored on your device by the Platform to enable session management, analytics, and personalisation features.
• "KYC" — Know Your Customer verification procedures, including the collection and review of identity documents and payment method ownership evidence.

We collect Personal Data across the following categories. All collection is limited to what is necessary for the stated purposes:

We do not collect sensitive data categories such as health records, biometric data, or political opinions, except where expressly required for responsible gambling compliance purposes (e.g., recording a self-exclusion request).

4d888 collects Personal Data through the following channels:

• Direct Collection: Data you provide during account registration, identity verification, deposit or withdrawal requests, support interactions, or when updating your profile.
• Automated Collection: Technical and usage data collected automatically when you access the Platform, including via cookies, web beacons, and server logs. See Section 8 for full details on our cookie practices.
• Third-Party Sources: Data received from payment service providers (such as Touch 'n Go eWallet, GrabPay, Boost, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, and RHB) when you initiate transactions, and from identity verification services used to fulfil KYC obligations.
• Fraud Prevention Partners: We may receive flagged data from fraud prevention and anti-money-laundering screening services where our Terms require such checks.

We process your Personal Data on one or more of the following legal grounds, depending on the nature of the processing activity:

• Contractual Necessity: Processing required to perform our contract with you — for example, processing a withdrawal to your DuitNow account or verifying your identity before activating your account.
• Legal Obligation: Processing required to comply with applicable laws and regulatory obligations, including anti-money-laundering (AML) obligations, KYC requirements, and responsible gambling mandates.
• Legitimate Interests: Processing carried out for our legitimate business interests, such as fraud prevention, platform security, service improvement, and responsible gambling monitoring — provided these interests are not overridden by your fundamental rights.
• Consent: Where we rely on your consent as the legal basis — for example, for optional marketing communications — you may withdraw that consent at any time by contacting our support team.

Your Personal Data is used for the following specific purposes:

• To create, verify, and manage your 4d888 account, including age verification to enforce our 21+ policy.
• To process deposits and withdrawals through your chosen Malaysian payment methods and to maintain accurate transaction records.
• To fulfil KYC obligations and prevent financial crime, including money laundering and fraud.
• To provide customer support via live chat and email, including resolving disputes and responding to account enquiries.
• To send transactional communications — such as deposit confirmations, withdrawal status updates, and account security alerts. These communications are not marketing and cannot be opted out of while your account is active.
• To personalise your platform experience, including surfacing relevant promotions, game recommendations, and sporting events (such as EPL or Liga Super Malaysia matches) relevant to your usage patterns.
• To monitor for problem gambling behaviour and to enforce responsible gambling tool requests (deposit limits, self-exclusion, cool-off periods).
• To maintain platform security, detect technical anomalies, and conduct internal analytics to improve service quality.
• To comply with legal and regulatory requirements, including responding to lawful requests from competent authorities.

4d888 does not sell, rent, or otherwise commercially disclose your Personal Data to third parties for their own marketing purposes. Your data may be shared only in the following limited circumstances:

• Payment Processors: We share financial data with payment service providers — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and connected Malaysian banks — solely to process your deposit and withdrawal transactions.
• KYC and Identity Verification Providers: We engage third-party identity verification services to fulfil our legal KYC obligations. These providers process identity documents under contractual data protection obligations.
• Fraud Prevention & AML Services: We may share data with anti-money-laundering screening and fraud detection services where required under our compliance obligations.
• Technology and Infrastructure Partners: Our hosting, database, and platform infrastructure providers process technical data solely to support the operation of the Platform and are bound by data processor agreements.
• Legal and Regulatory Authorities: We will disclose Personal Data when legally required to do so — for example, in response to a valid court order, regulatory investigation, or law enforcement request from a competent authority.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of our business, your Personal Data may be transferred as part of the transaction. We will notify registered users via email prior to any such transfer taking effect.

All third parties to whom we disclose Personal Data are required to handle it in accordance with applicable data protection standards and are prohibited from using it for any purpose beyond what is strictly necessary for the service they provide to 4d888.

The 4d888 Platform uses cookies and similar tracking technologies to operate core platform functions and to improve your experience. The types of cookies used are as follows:

• Strictly Necessary Cookies: Required for core platform functionality, including session authentication, bet placement, and account security. These cannot be disabled without impairing platform usability.
• Performance Cookies: Used to collect anonymised data on platform usage — such as which pages are most visited, average session duration, and error frequency — to improve overall service performance.
• Functional Cookies: Enable enhanced personalisation features, such as remembering your preferred language settings, display preferences, or last-visited game category.
• Analytics Cookies: Used with third-party analytics tools to understand aggregate user behaviour on the Platform. Data collected via analytics cookies is anonymised and used for internal reporting only.

You can manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will affect your ability to use core Platform features, including login and account management.

We retain Personal Data for the minimum period necessary to fulfil the purpose for which it was collected, subject to the following retention guidelines:

• Account and Identity Data: Retained for the duration of your active account, and for a period of five (5) years following account closure, in accordance with standard AML record-keeping requirements.
• Financial Transaction Records: Retained for a period of seven (7) years from the date of the relevant transaction, as required by applicable financial record-keeping regulations.
• Support and Communication Records: Retained for three (3) years from the date of the interaction, for dispute resolution and service quality purposes.
• Technical and Usage Data: Retained for a rolling period of twelve (12) months from collection, after which data is aggregated or anonymised.
• Responsible Gambling Records: Self-exclusion and deposit limit records are retained for the duration of the restriction plus five (5) years to prevent circumvention.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with our data destruction protocols.

4d888 implements a range of technical and organisational security measures designed to protect your Personal Data against unauthorised access, loss, misuse, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Encrypted storage of all Personal Data at rest, using industry-standard encryption protocols.
• Role-based access controls limiting employee access to Personal Data to those with a specific operational need.
• Regular internal security audits and penetration testing conducted by qualified security professionals.
• Multi-factor authentication (MFA) options available for user accounts to protect against unauthorised login.
• Incident response procedures in place to detect, contain, and notify affected parties in the event of a data breach, in accordance with applicable legal requirements.

While we take every reasonable precaution to secure your data, no digital platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for reporting any suspected unauthorised access to our support team immediately.

As a registered user of 4d888, you have the following rights with respect to your Personal Data. To exercise any of these rights, please contact our support team via live chat or by email at the address provided in Section 16.

• Right of Access: You have the right to request a copy of all Personal Data we hold about you. We will respond to verified access requests within 30 days.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete Personal Data. Certain corrections (e.g., name changes) may require supporting documentation.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations. Accounts with open balances or pending regulatory requirements cannot be fully deleted until those obligations are resolved.
• Right to Restrict Processing: You may request that we limit the processing of your Personal Data while a dispute regarding its accuracy or lawfulness is pending.
• Right to Data Portability: You may request that your Personal Data be provided to you in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing carried out on the basis of legitimate interests where you believe your rights and interests override ours. You may also opt out of direct marketing communications at any time.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

The 4d888 Platform is strictly intended for users aged 21 years and above. We do not knowingly collect, process, or retain Personal Data from persons under the age of 21.

If we discover or are notified that an account has been registered by a person under the age of 21, we will immediately suspend the account, void all associated activity, and permanently delete the associated Personal Data, except where retention is required for legal or regulatory purposes.

If you are a parent or guardian and believe that a minor in your care has provided Personal Data to 4d888 without your consent, please contact our support team immediately via live chat so that we can take prompt remedial action.

4d888 may transfer Personal Data to service providers and infrastructure partners located outside of Malaysia. Where such transfers occur, we take steps to ensure that appropriate safeguards are in place to protect your data to a standard equivalent to what would apply within Malaysia.

Safeguards for international transfers include:

• Data processing agreements incorporating standard contractual clauses with all third-party processors located outside Malaysia.
• Restricting transfers to service providers in jurisdictions recognised as providing an adequate level of data protection.
• Encryption of all data in transit, regardless of the destination jurisdiction.

By using the Platform, you consent to your Personal Data being transferred to and processed in jurisdictions outside Malaysia where our service providers operate, subject to the safeguards described above.

The 4d888 Platform integrates with third-party payment providers — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, and RHB — to facilitate deposits and withdrawals. When you initiate a transaction, you are subject to those providers' own privacy policies in addition to ours.

4d888 is not responsible for the privacy practices of third-party service providers. We encourage you to review the privacy policies of any payment service or third-party platform you interact with in connection with your use of 4d888.

The Platform does not contain links to external websites for advertising or affiliate purposes. All links visible on the Platform lead to internal 4d888 pages only.

4d888 reserves the right to update or amend this Privacy Policy at any time. Material changes — those that affect how we collect, use, or share your Personal Data in a meaningful way — will be communicated to registered users via email notification and/or a prominent notice on the Platform, at least 14 days before the changes take effect.

Minor clarifications or non-material updates may be made without advance notice. The effective date at the top of this Policy will always reflect the most recent revision.

Your continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you must stop using the Platform and may request account closure by contacting our support team.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact us through the following channels:

• Live Chat: Available 24/7 directly on the 4d888 Platform. This is the most responsive channel for data rights requests and privacy enquiries.
• Email: [email protected] — Please include "Privacy Request" in the subject line for data rights matters. Response time is typically within 2 business hours during GMT+8 business hours, and within 30 days for formal data subject requests.

To exercise a formal data right (access, erasure, portability, restriction, or objection), please provide your full registered name, account email address, and a brief description of your request. We may require proof of identity before processing your request.

For concerns about our data practices that cannot be resolved through direct contact, you may also refer the matter to the relevant data protection authority in your jurisdiction.