4d218 Privacy Policy – Data Protection & Member Privacy

1. Introduction & Scope of the Privacy Policy

This Privacy Policy ("Policy") is published by 4d218 ("we", "Platform", or "4d218") and applies to all users who access or use our platform via the official website and mobile app. It clearly outlines our commitment to privacy protection and how we manage your personal information.

We understand that your trust is our most valuable asset. As such, we take every aspect of data protection seriously and continuously strive to ensure your personal information is managed in a transparent, responsible, and secure manner.

This Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and recognised international privacy standards. In the event of any conflict between this Policy and applicable law, the provisions of the law shall prevail.

2. Types of Personal Information Collected

4d218 collects various types of personal information depending on how you interact with our platform. Below is a summary of the data categories we collect:

We only collect data that is strictly necessary for the stated purposes. We do not collect sensitive data such as health information or biometric data unless required by law or a regulatory authority.

3. How Personal Information Is Collected

We collect your personal information through the following methods:

• Account Registration: When you register a new account at 4d218, you provide basic information such as your name, email, phone number, and date of birth.
• KYC Verification Process: During identity verification, you will be required to submit documents such as a copy of your identification card or passport along with proof of address.
• Financial Transactions: Each time you make a deposit or withdrawal, our system records the transaction details including the payment method and amount.
• Platform Usage: Data is collected automatically while you use the platform, including games played, time spent, and preference settings.
• Support Communications: When you contact our support team via Live Chat or WhatsApp, conversations are stored for training and service improvement purposes.
• Cookies and Similar Technologies: Our platform uses cookies and other tracking technologies to collect usage data and improve the user experience.

4. Purpose of Personal Data Processing

4d218 processes your personal information solely for the following legitimate and stated purposes:

• Account Management: Creating, verifying, and maintaining your account while ensuring it is protected against any unauthorised access.
• Transaction Processing: Processing deposits, withdrawals, and all financial activities related to your account efficiently and securely.
• Legal Compliance: Fulfilling legal and regulatory obligations, including KYC requirements, anti-money laundering (AML) compliance, and reporting to relevant authorities when required.
• Fraud Prevention: Detecting, investigating, and preventing any fraudulent activity, money laundering, or security breaches that may occur.
• Service Improvement: Analysing usage patterns to improve platform performance, enhance the user interface, and develop more useful new features.
• Marketing Communications: Sending you promotional information, exclusive offers, and platform updates — only if you have consented to receive them.
• Responsible Gaming: Monitoring gameplay patterns to identify members who may need responsible gaming support and offering appropriate assistance.

5. Data Sharing & Disclosure

4d218 does not sell, rent, or share your personal information with third parties for commercial purposes. However, in certain circumstances, we may need to share your information with the following parties:

• Payment Service Providers: Banks, e-wallet operators, and payment processors directly involved in carrying out your financial transactions. All such providers are bound by strict confidentiality agreements.
• Gaming Service Providers: Game software developers working with 4d218 may receive the minimum data necessary to operate the games correctly.
• Regulatory Authority: When required by law, court order, or a lawful request from a law enforcement agency.
• Identity Verification Services: Trusted third-party KYC service provider that helps us verify member identities for AML compliance purposes.
• IT Infrastructure Providers: Cloud computing and data storage provider that manages our platform's technical infrastructure, subject to strict data processing agreements.

In all cases of data sharing, we ensure that the receiving parties are subject to confidentiality and data protection obligations equal to or stricter than our own standards.

6. Data Retention & Security

4d218 retains your personal information only for as long as necessary to fulfil the purposes stated in this Policy or as required by applicable law.

• Active Account Data: Retained for the duration of your active account plus any period required by law (typically 7 years for financial records).
• Data After Account Closure: Certain information is retained for up to 5 years after account closure for AML compliance purposes and the resolution of any outstanding claims.
• Communication Logs: Customer support records are retained for 2 years after the last interaction.

On the technical security front, 4d218 implements the following protective measures:

• 256-bit SSL encryption for all data in transit.
• Data-at-rest encryption for all databases storing sensitive information.
• Role-based access control (RBAC) — only authorised staff may access members' personal data.
• Real-time security monitoring and automated threat detection systems.
• Regular data backups and a tested disaster recovery plan.
• Independent security audits conducted at least once a year.

7. Cookies & Tracking Technologies

The 4d218 platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions properly. Below are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login verification and session security. These cookies cannot be disabled as they are essential to platform operations.
• Functional Cookies: Saving your preferences such as language, time zone, and display settings to provide a more personalised experience.
• Analytics Cookies: Collecting information on how you use the platform to help us understand usage patterns and improve our services.
• Security Cookies: Used to detect suspicious activity, prevent fraud, and protect your account from unauthorised access.

You can manage your cookie settings through your browser settings. However, disabling essential cookies may affect platform functionality. Continued use of our platform after a cookie notice is displayed constitutes your consent to the use of cookies as described.

8. Your Rights as a Member

Under Malaysia's PDPA and our policy, you have the following rights regarding your personal information:

To exercise any of the above rights, please contact our support team via Live Chat or WhatsApp. We will process your request within 14 business days. In complex cases, this period may be extended up to 30 days with notice to you.

9. Protection of Children's Data

The 4d218 platform is exclusively for individuals aged 18 years and above only. We do not knowingly collect or process personal information from individuals under the age of 18.

If you believe a minor has registered on our platform or provided us with their personal information, please contact our support team immediately. We will take prompt action to delete the information and close the account in question.

Parents and guardians are encouraged to monitor their children's online activities and ensure they do not access platforms that are not age-appropriate.

10. Links to Third-Party Websites

The 4d218 platform may contain links or integrations with third-party services such as payment providers or game developers. Our Privacy Policy does not apply to those third-party websites or services.

We encourage you to read the privacy policy of every third-party platform or service you use. 4d218 is not responsible for the privacy practices or content of any third party.

11. Amendments to the Privacy Policy

4d218 reserves the right to amend or update this Privacy Policy at any time to reflect changes in our business practices, new legal requirements, or improvements in industry data protection standards.

Any material amendments will be communicated to you via in-account notification or email at least 14 days before taking effect. Continued use of the platform after the amendments take effect will be considered your acceptance of the updated Policy.

The "Updated" date at the top of this page indicates when this Privacy Policy was last reviewed. We recommend checking this page periodically to stay informed about how we protect your data.

12. Contact Us Regarding Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal information, please contact our privacy team through the following channels: