Privacy Policy — Perdana4D

This Privacy Policy ("Policy") sets out the manner in which Perdana4D ("the Platform", "we", "us", "our") collects, uses, processes, stores, and protects the personal data of users ("you", "User", "Player", "Member") who access or use the Perdana4D website at perdana4d.cam and all associated platform services (collectively, the "Services").

Perdana4D is committed to safeguarding the privacy of every player on our platform — whether you are logging in from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, or anywhere else in Malaysia. We understand that personal data is sensitive, and we take our responsibilities as a data controller seriously.

By accessing the Perdana4D platform, creating an account, or using any of our Services — including sports betting, live casino, 4D lottery, and slot games — you acknowledge that you have read and understood this Privacy Policy, and you consent to the collection and processing of your personal data as described herein.

For the purposes of this Privacy Policy, the following terms carry the meanings assigned below:

• "Personal Data" — Any information that, alone or in combination with other data, can be used to identify a natural person, including name, email address, date of birth, payment details, and device identifiers.
• "Processing" — Any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Controller" — Perdana4D, as the entity that determines the purposes and means of processing personal data collected through the platform.
• "Third-Party Processor" — Any external service provider that processes personal data on behalf of Perdana4D pursuant to a written data processing agreement.
• "KYC" — Know Your Customer verification — the identity verification process required before withdrawal processing and at other defined compliance checkpoints.
• "Cookie" — A small data file stored on a user's device by the platform's web server, used to recognise returning visitors and maintain session state.

Perdana4D collects personal data from users through several channels — directly from you when you register or contact us, automatically as you use the platform, and from third-party identity verification and payment service providers. The categories of data we collect are described in the table below.

We collect only the minimum data necessary to provide our Services, comply with applicable legal obligations, and maintain platform security. We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data, unless legally required to do so in a specific compliance context.

Perdana4D processes personal data for the following specific purposes:

• Account Management: To register and maintain your Perdana4D account, verify your identity, and ensure account security including password resets and two-factor authentication.
• Service Delivery: To process deposits and withdrawals via supported Malaysian payment channels (Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, and cryptocurrency), settle wagers, and provide access to all platform games and features.
• KYC and AML Compliance: To verify user identity and age (21+), screen against sanctions and politically exposed persons lists, and comply with applicable anti-money laundering and counter-terrorism financing obligations.
• Customer Support: To respond to queries, process complaints, manage self-exclusion requests, and provide responsible gambling assistance.
• Platform Security: To detect, investigate, and prevent fraudulent activity, bonus abuse, multi-accounting, and other prohibited conduct as defined in our Terms and Conditions.
• Platform Improvement: To analyse aggregated usage data to improve the platform's user experience, game selection, and payment flow performance.
• Marketing Communications: To send promotional offers, bonus notifications, and platform updates to users who have opted in to marketing communications. You may opt out at any time via your account preferences.
• Legal Obligations: To comply with applicable data protection laws, respond to lawful regulatory requests, and retain records as required by law.

Perdana4D does not use personal data to make automated decisions that produce legal or similarly significant effects on users without human oversight, except where required by applicable AML or fraud prevention regulations.

Perdana4D processes personal data under the following legal bases:

• Contractual Necessity: Processing required to fulfil our contractual obligations to you as a registered platform user — including account management, payment processing, and bet settlement.
• Legal Obligation: Processing required to comply with applicable regulatory requirements, including KYC verification, AML reporting, and age verification under gaming regulations.
• Legitimate Interests: Processing that is necessary for our legitimate business interests, where those interests are not overridden by your rights — including fraud prevention, platform security, and service improvement.
• Consent: Where we rely on your consent — primarily for direct marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal. Opt-out options are available in your account settings or by contacting support.

Perdana4D does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share personal data with the following categories of recipients only to the extent strictly necessary for the purposes described in this Policy:

• Payment Service Providers: Including the operators of Touch 'n Go eWallet, DuitNow, FPX, Boost, and banking networks (Maybank, CIMB, Public Bank, Hong Leong Bank), to facilitate deposit and withdrawal transactions.
• Identity Verification Providers: Third-party KYC and AML screening services engaged to verify user identity and comply with regulatory obligations. All such providers operate under data processing agreements consistent with applicable privacy law.
• Game Content Providers: Licensed game developers and live casino platform providers who supply game software and live dealer infrastructure to the Perdana4D platform.
• Cloud Infrastructure and Hosting Providers: Entities that provide the technical infrastructure on which the Perdana4D platform operates, under strict data security and confidentiality obligations.
• Regulatory and Law Enforcement Authorities: Where required by applicable law, court order, or regulatory directive, Perdana4D may disclose personal data to competent authorities without prior notice to the affected user.

The Perdana4D platform uses cookies and similar tracking technologies to deliver a functional, personalised, and secure user experience. The following types of cookies are employed on the platform:

• Essential Cookies: Strictly necessary for the platform to function — including session management, authentication state, and security tokens. These cannot be disabled without impairing platform functionality.
• Functional Cookies: Used to remember your preferences such as language settings, default view configuration, and last-visited game category to improve your experience on return visits.
• Analytics Cookies: Used to collect aggregated, anonymised data about how users interact with the platform — page views, time on page, navigation paths — to inform platform improvement decisions.
• Security Cookies: Used to detect and prevent fraudulent activity, multi-accounting, and other suspicious session behaviour.

You may manage or disable non-essential cookies through your browser settings. Please note that disabling cookies may affect the functionality of certain platform features. We do not use third-party advertising cookies or cross-site tracking technologies for commercial advertising purposes.

Perdana4D retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our general retention guidelines are as follows:

• Account Data: Retained for the duration of your active account, plus a minimum of five (5) years following permanent account closure, in compliance with AML record-keeping requirements.
• Transaction and Betting Records: Retained for a minimum of five (5) years from the date of each transaction to satisfy financial records obligations.
• KYC Documents: Retained for a minimum of five (5) years from the date of submission or from the date of last use, whichever is later.
• Support and Communications Records: Retained for two (2) years from the date of the last communication, unless a longer retention period is required for legal proceedings.
• Technical and Usage Logs: Retained for up to ninety (90) days in active log systems, after which they are archived or anonymised for analytics purposes.

When personal data is no longer required and no legal retention obligation applies, Perdana4D securely deletes or irreversibly anonymises it in accordance with our internal data destruction procedures.

Perdana4D implements a multi-layered data security framework designed to protect personal data against unauthorised access, accidental loss, alteration, disclosure, and destruction. Key security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Perdana4D platform.
• Encryption at rest for databases containing personal and financial data.
• Role-based access controls limiting internal access to personal data to authorised personnel with a legitimate operational need.
• Regular security audits, penetration testing, and vulnerability assessments conducted by qualified third-party security specialists.
• Multi-factor authentication (MFA) enforcement for all internal administrative systems.
• Incident response and data breach notification procedures compliant with applicable regulatory requirements.

Notwithstanding the above, no digital platform can guarantee absolute security. In the event of a data security incident that is likely to result in a high risk to your rights and freedoms, Perdana4D will notify affected users without undue delay and in accordance with applicable legal obligations.

Subject to applicable law, you have the following rights with respect to the personal data Perdana4D holds about you. To exercise any of these rights, please contact our support team at [email protected].

• Right of Access: You may request a copy of the personal data we hold about you, together with information about how it is processed.
• Right to Rectification: You may request the correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to overriding legal retention obligations.
• Right to Restriction of Processing: You may request that we restrict the processing of your personal data in certain circumstances, such as while the accuracy of data is being contested.
• Right to Data Portability: You may request that we provide your personal data in a structured, machine-readable format where processing is based on consent or contract.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests on grounds relating to your particular situation.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

Perdana4D will respond to all valid data subject requests within thirty (30) calendar days. We may request proof of identity before processing a request to ensure your data is protected from third-party access.

Perdana4D strictly prohibits access to or use of the platform by any individual under the age of 21. We do not knowingly collect personal data from individuals under the age of 21. All accounts are subject to age verification as part of the KYC process.

If we become aware that personal data has been collected from a person under the age of 21 without verified parental consent, we will immediately suspend the relevant account, delete all associated personal data, and return any deposited funds via the original payment method where technically possible.

If you believe that a minor has registered an account on the Perdana4D platform, please notify us immediately at [email protected] so that we can take prompt action.

In the course of providing our Services, Perdana4D may transfer personal data to servers or third-party processors located outside of Malaysia. Where such transfers occur, Perdana4D implements appropriate safeguards to ensure that your personal data receives an adequate level of protection, including:

• Data processing agreements incorporating standard contractual clauses equivalent to those recognised under applicable data protection frameworks.
• Technical and organisational security measures appropriate to the nature of the data and the risks associated with the transfer.
• Transfer only to jurisdictions or processors that provide an adequate level of data protection as assessed by our compliance team.

Perdana4D reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform services. The date of the most recent revision is displayed prominently at the top of this page.

Where changes to this Policy are material, we will endeavour to notify registered users via email or via a prominent notice on the platform prior to the changes taking effect. Your continued use of the Perdana4D platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms.

We encourage you to review this page periodically to stay informed of how Perdana4D handles your personal data. If you have any concerns about a change to this Policy, please contact us before continuing to use the platform.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way Perdana4D processes your personal data, please contact our Data Protection team using the details below. All privacy-related communications are treated with strict confidentiality.

• Email: [email protected] (subject line: "Privacy Enquiry")
• Live Chat: Available 24/7 via the Perdana4D homepage — request to speak with the Data Protection team
• Response Time: Privacy enquiries are acknowledged within 1 business day and responded to in full within 30 calendar days

For requests relating to self-exclusion, responsible gambling support, or account closure, please contact our Customer Support team via the same channels and specify the nature of your request.