Privacy Policy 4000d – Transparent Personal Data Protection for Malaysian Members

1 Introduction & 4000d's Privacy Commitment

4000d understands that your personal data is something both valuable and sensitive. In today's digital age, the trust you place in an online platform when sharing personal information is a significant responsibility — one we never take lightly.

As an online casino platform serving hundreds of thousands of active members across Malaysia, 4000d handles a wide range of personal data on a daily basis — from basic registration details to sensitive financial transaction data. Every piece of this data is managed with the highest level of care and protection we can provide.

This Privacy Policy has been drawn up to meet the requirements of Personal Data Protection Act 2010 (PDPA) Malaysia and reflects our genuine commitment 4000d to transparency in managing members' personal data. We believe every member deserves to know exactly what happens to their information — and that is the purpose of this document.

This Policy applies to all personal data collected through the website 4000d.my, mobile application (if applicable), email and WhatsApp communications, and any other channels used to interact with the platform 4000d.

2 Types of Personal Data We Collect

4000d collects your personal data through various means — directly when you register or interact with the platform, automatically as you use our services, and in certain cases, from legitimate third parties. The following are the categories of data we collect:

We do not collect sensitive data categories such as biometric data, medical records, religious information, or political affiliations, unless specifically required by applicable Malaysian law in certain circumstances.

3 How 4000d Uses Your Personal Data

Personal data collected by 4000d used for the following purposes, all of which are directly related to the operation of the platform and the services you receive:

• Account Management: Creating, verifying and maintaining your member account, including the identity verification (KYC) process required under anti-money laundering regulations.
• Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as withdrawals of winnings to your registered payment method in Malaysian Ringgit (MYR).
• Gaming Services Provision: Provides access to all games on the 4000d platform, processes game outcomes, and manages your account balance.
• Service Communications: Sending important notices regarding your account, transactions, terms updates, security alerts, and other relevant service information.
• Responsible Gambling: Monitoring gameplay patterns to identify signs of problem gambling and providing appropriate assistance or limits to protect member wellbeing.
• Fraud Detection & Security: Detecting and preventing fraudulent activity, money laundering, unlawful collusion between players, and other security threats to the platform 4000d.
• Legal Compliance: To fulfil our legal and regulatory obligations applicable to the operation of our platform, including reporting requirements to the relevant authorities.
• Service Improvement: Analysing aggregated and anonymised usage data to understand usage patterns and improve the gaming experience on the platform 4000d.

4000d will not use your personal data for any third-party marketing purposes without first obtaining your explicit consent.

4 Legal Basis for Data Processing

Under Malaysia's PDPA 2010, 4000d processes your personal data on one or more of the following lawful bases:

5 Data Sharing with Third Parties

4000d does not sell members' personal data. However, in the course of operating our platform, there are limited situations where data must be shared with certain parties:

• Payment Service Providers: Payment processors handling Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX transactions require minimal transaction information to securely process your deposits and withdrawals.
• Game Providers: Companies such as Evolution, Pragmatic Play, and other providers may receive the minimum technical data required to deliver games to your account. All such providers are bound by strict confidentiality agreements.
• Identity Verification Services: Authorised third-party KYC service providers assist us in verifying member identities in accordance with anti-money laundering legal requirements.
• Authorities: 4000d will disclose data to Malaysian authorities such as the PDRM, Bank Negara Malaysia, or any other relevant statutory body when required by law, court order, or a legitimate investigative requirement.
• Professional Advisors: Lawyers, accountants, and security consultants who are bound by strict professional confidentiality obligations may need to access certain data in the course of providing their services to 4000d.

6 Data Storage & Retention Period

4000d stores members' personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable Malaysian law.

• Active Account Data: Retained for as long as your account remains active on the platform 4000d. This data is necessary for us to provide services to you on an ongoing basis.
• Financial Transaction Data: Retained for a minimum of 7 years from the transaction date in compliance with Malaysian anti-money laundering laws and financial reporting requirements.
• Identity Verification Data (KYC): Retained for a minimum of 5 years following account closure, in accordance with the Anti-Money Laundering Act 2001.
• Support Communication Data: Retained for 2 years after the last interaction for reference purposes and to facilitate the resolution of any disputes that may arise.
• Technical & Log Data: Retained for 1 year for security purposes, fraud detection, and system analysis.
• Gaming Data: Retained for the duration of the active account period plus 3 years for verification purposes and the resolution of any game-related disputes.

Once the applicable retention period has expired, your personal data will be securely deleted or anonymised using methods that ensure it cannot be recovered or re-identified.

7 Data Security Measures at 4000d

4000d invests seriously in data security infrastructure to ensure that the personal and financial information of our Malaysian members is protected at all times. The technical and organisational security measures we implement include:

• Data Encryption in Transit: All communications between your device and the 4000d is secured with TLS 1.3 protocol and 256-bit SSL encryption — no data is transmitted in plain text that could be intercepted.
• Encryption of Stored Data: Sensitive data such as financial information and identity verification records is stored using AES-256 encryption on secure servers with strict, multi-layered access controls.
• Role-Based Access Control: Only 4000d who are granted specific access based on their job roles and are permitted to access member data, with all access logged and continuously audited.
• Two-Factor Authentication (2FA): 2FA is available for member accounts and is mandatory for all internal staff access to systems containing members' personal data.
• Regular Security Audits: Penetration testing and independent security audits are conducted periodically by accredited third parties to identify and address any vulnerabilities before they can be exploited.
• Incident Response Plan: 4000d maintains a tested and proven security incident response plan to ensure any data breach is addressed promptly and effectively.

That said, no security system is 100% foolproof. We therefore encourage members to play an active role in protecting their own accounts — by using strong, unique passwords, enabling 2FA, and never sharing login credentials with anyone.

8 Your Rights as a Data Subject at 4000d

Under Malaysia's PDPA 2010 and our own policies, you as a member 4000d have the following rights regarding your personal data:

To submit any request relating to your data rights, please contact the privacy team 4000d via email at [email protected] stating the type of request and your account details. We will process your request within 21 business days and may require identity verification before carrying it out.

9 Cookies, Logs & Tracking Technologies

4000d uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. The following are the types of cookies we use:

• Essential Cookies: Required for core platform operations — such as maintaining your login session and ensuring account security. These cookies cannot be disabled as they are critical to platform functionality 4000d.
• Functional Cookies: Enables the platform to remember your preferences — such as your preferred language, display settings, and game preferences — to deliver a more personalised experience.
• Analytics Cookies: Collecting information about how you use the platform 4000d in aggregate and anonymised form to help us understand usage patterns and improve our services.
• Security Cookies: Helping to detect and prevent fraudulent activity, unauthorised access, and other security threats to the platform 4000d and member accounts.

You may manage cookies through your browser settings. However, disabling certain cookies may affect the functionality of the platform 4000d. Third-party cookies are used to a minimum and only from service providers that have passed our security review.

10 Protection of Children's Data

4000d is a platform exclusively intended for users aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18.

All account registrations require strict age verification. Should we discover or suspect that personal data from a minor has been inadvertently collected, we will take immediate steps to:

• Immediately suspending the relevant account while an investigation is carried out
• Immediately delete all personal data associated with the underage individual
• Reporting the incident to the appropriate authorities where necessary
• Returning any funds in the account to the original payment method after verification

If you have reason to believe that a minor has registered at 4000d, please contact us immediately at [email protected] so that appropriate action can be taken without delay.

11 International Data Transfers

In the course of operating the platform, members' personal data 4000d may be processed on servers located outside Malaysia. In all such cases, 4000d ensures that protection equivalent to or exceeding the standards set by Malaysia's PDPA 2010 is fully upheld.

The measures we take to safeguard international data transfers include:

• Engaging only international service providers that hold recognised data security certifications such as ISO 27001
• Including standard data protection clauses in all contracts with international service providers
• Ensuring all data transfers are limited strictly to what is genuinely necessary
• Conducting data protection impact assessments (DPIAs) before any new data transfer is implemented

12 Amendments to This Privacy Policy

4000d reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our operations, legal requirements, or industry best practices. Members will be notified of any material amendments through:

• A prominent notice on the platform's main page 4000d before the amendment takes effect
• Notification email sent to the registered email address on your account
• Update the "Last Updated" date at the top of this page

We encourage you to review this Privacy Policy periodically. Continued use of the 4000d after the amendments take effect will be considered acceptance of the revised policy. If you do not agree with the changes made, you have the right to close your account and withdraw any eligible balance before the new policy comes into force.

13 Contact the 4000d Privacy Officer

For any enquiries, concerns, or requests relating to this Privacy Policy or the management of your personal data at 4000d, please contact us through the following channels:

If you are not satisfied with the way 4000d handling requests or complaints relating to your personal data, you have the right to lodge a complaint with Department of Personal Data Protection, Ministry of Communications and Digital, Malaysia or any relevant regulatory body under applicable Malaysian law.