Privacy Policy

1 Introduction

Melayu4D ("we", "us", "our", "melayu4d") operates the online gaming platform accessible at melayu4d.cam (the "Platform"). We are committed to protecting the privacy and personal data of all individuals who interact with our Platform, including registered players, visitors, and prospective users (collectively, "you", "your").

This Privacy Policy ("Policy") explains in detail how melayu4d collects, processes, stores, shares, and protects your personal data when you use or access the Platform. It also explains the rights you hold in relation to your personal data and how to exercise those rights.

By registering an account, accessing the Platform, or otherwise providing your personal data to melayu4d, you acknowledge that you have read and understood this Policy. If you do not agree with this Policy, please do not use the Platform or submit any personal data to us.

2 Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial information, and online identifiers.
• "Processing" — any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Controller" — melayu4d, the entity that determines the purposes and means of processing your personal data.
• "Data Processor" — a third party that processes personal data on behalf of and under the instructions of melayu4d.
• "Consent" — any freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a specified purpose.
• "KYC" — Know Your Customer; the identity verification process required for regulatory compliance and account security.
• "Cookies" — small text files stored on your device by your browser when you access the Platform.

3 Data We Collect

3.1 Data You Provide Directly

When you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or otherwise interact with the Platform, you may provide us with the following categories of personal data:

• Identity data: Full legal name, date of birth, nationality, and government-issued identification (e.g., MyKad number, passport number).
• Contact data: Email address, mobile phone number, and residential address (including city, state, and postcode within Malaysia).
• Financial data: Payment method details, bank account information (e.g., Maybank, CIMB, Public Bank, Hong Leong account numbers for withdrawal processing), e-wallet identifiers (e.g., Touch 'n Go eWallet, Boost, GrabPay), and transaction history.
• Account data: Username, password (stored in encrypted form), account preferences, and communication history with our support team.
• Verification documents: Copies of identity documents, proof of address, and payment method ownership confirmations submitted for KYC purposes.

3.2 Data Collected Automatically

When you access the Platform, certain technical data is collected automatically through cookies, server logs, and similar technologies:

• Device data: Device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage data: Pages visited, game sessions initiated, bet history, click patterns, session duration, and referral source.
• Network data: IP address, approximate geographic location (country and city level), and internet service provider information.
• Cookie data: Session identifiers, preference settings, and analytics tracking identifiers. See Section 9 for full cookie details.

3.3 Data from Third Parties

We may receive additional personal data about you from third parties in limited circumstances, including:

• Identity verification and fraud screening service providers during the KYC process.
• Payment processing partners (e.g., DuitNow, FPX operators, e-wallet providers) to confirm transaction status.
• Analytics partners providing aggregated insights about Platform usage patterns.

4 How We Use Your Data

Melayu4D uses your personal data for the following purposes:

5 Legal Basis for Processing

Melayu4D processes your personal data on the following legal bases, which vary depending on the specific processing activity:

• Contractual necessity: Processing required to perform our contract with you (the Terms & Conditions), including account management, transaction processing, and customer support.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML), counter-terrorism financing (CTF), and age verification requirements.
• Legitimate interests: Processing carried out for the legitimate interests of melayu4d, such as fraud prevention, platform security, and service improvement, where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for purposes where you have provided explicit consent, such as receiving direct marketing communications. Where consent is the legal basis, you may withdraw it at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 Sharing Your Data

Melayu4D does not sell, rent, or trade your personal data. We may share your personal data with the following categories of third parties, solely to the extent necessary for the purposes described in this Policy:

6.1 Service Providers and Data Processors

We engage carefully selected third-party service providers who process personal data on our behalf under binding data processing agreements. These include payment gateway operators (DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong), identity verification providers, cloud hosting services, customer support platforms, and analytics tools.

6.2 Legal and Regulatory Authorities

We may disclose personal data to competent legal, regulatory, or law enforcement authorities where required to do so by applicable law, court order, or binding regulatory requirement. We will, where legally permissible, notify you of such disclosures.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or a portion of melayu4d's assets, your personal data may be transferred to the successor entity, subject to that entity assuming equivalent data protection obligations.

7 Data Retention

We retain your personal data for as long as is necessary to fulfil the purposes for which it was collected, including to satisfy legal, regulatory, accounting, or reporting obligations. The following retention periods apply as a general guide:

• Active account data: Retained throughout the duration of your account registration and for a period of at least five (5) years following account closure, in accordance with AML and financial record-keeping requirements.
• Transaction records: Retained for a minimum of seven (7) years following each transaction, in compliance with applicable financial regulations.
• KYC and identity verification documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant verification process.
• Support communications: Retained for a period of three (3) years following the resolution of a support request, unless required longer for ongoing disputes.
• Marketing preferences: Retained until you withdraw consent or request deletion.

Where personal data is no longer required for the purposes for which it was collected and no legal retention obligation applies, we will securely delete or anonymise it.

8 Data Security

Melayu4D implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Encryption of sensitive data fields at rest, including passwords (stored as salted hashes) and financial account details.
• Two-factor authentication (2FA) available on all player accounts.
• Role-based access controls ensuring that only authorised personnel can access personal data for specified purposes.
• Regular security audits, penetration testing, and vulnerability assessments of our systems.
• Real-time fraud monitoring and anomaly detection on all transaction and login activity.

Whilst we take all reasonable precautions, no method of electronic transmission or storage is 100% secure. In the event of a data breach that poses a material risk to your rights and freedoms, melayu4d will notify affected individuals and, where required by law, relevant regulatory authorities in a timely manner.

9 Cookies & Tracking Technologies

9.1 What Are Cookies?

Cookies are small text files placed on your device by your web browser when you visit a website. They are widely used to make websites function correctly, improve user experience, and provide reporting information to website operators.

9.2 Types of Cookies We Use

You can control and manage cookies through your browser settings. Please note that disabling non-essential cookies may affect certain features of the melayu4d Platform.

10 International Data Transfers

Some of our third-party service providers may process personal data in jurisdictions outside of Malaysia. Where personal data is transferred internationally, melayu4d ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required within Malaysia. Such safeguards may include standard contractual clauses, binding corporate rules, or transfers to jurisdictions with equivalent data protection frameworks.

11 Your Rights

Subject to applicable data protection laws, you have the following rights in relation to your personal data held by melayu4d:

• Right of Access: You may request a copy of the personal data we hold about you, including information about how it is processed.
• Right of Rectification: You may request that we correct any inaccurate or incomplete personal data we hold about you.
• Right of Erasure: In certain circumstances, you may request the deletion of your personal data. Note that some data must be retained to comply with legal obligations and cannot be deleted upon request.
• Right to Restrict Processing: You may request that we limit the way in which we process your personal data in certain situations.
• Right to Data Portability: You may request that we provide your personal data in a structured, commonly used, and machine-readable format for transfer to another service provider.
• Right to Object: You may object to processing of your personal data where the legal basis is legitimate interests, or to the use of your data for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.

To exercise any of these rights, please contact our Data Protection team. We will respond to verified requests within 30 calendar days. Some requests may take longer if they are complex or if you have submitted multiple requests simultaneously. In such cases, we will notify you of the extended timeframe.

12 Minors & Age Verification

The melayu4d Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect personal data from persons under the age of 21. Age verification is a mandatory component of our registration process. All accounts are subject to KYC checks that include documentary proof of age.

If melayu4d becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that information and close the relevant account. If you believe that a minor has registered on the Platform, please contact our support team immediately.

13 Third-Party Links

The melayu4d Platform may contain links to third-party websites or services. This Privacy Policy applies solely to the melayu4d Platform and does not extend to any third-party website or service. We are not responsible for the privacy practices or the content of any third-party sites. We encourage you to review the privacy policies of any third-party sites you visit.

14 Policy Amendments

Melayu4D reserves the right to update or amend this Privacy Policy at any time. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered players via the email address associated with their account or via a prominent notice on the Platform.

Your continued use of the melayu4d Platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the revised Policy, you should discontinue use of the Platform and contact our support team to discuss your account and data.

15 Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or our personal data processing practices, please contact the melayu4d data protection team. We are committed to resolving all privacy-related enquiries promptly and transparently.

If you are not satisfied with our response to a privacy complaint, you may have the right to escalate the matter to the relevant data protection authority in your jurisdiction.