4dgang Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how 4dgang ("we", "us", "the Operator") collects, uses, stores, discloses, and protects personal information relating to individuals ("you", "the Member", "the User") who visit, register with, or use the 4dgang online casino and sports betting platform accessible at 4dgang.cam.

We are committed to handling personal data with care, transparency, and respect. This Policy is written in plain English and structured to make your rights and our obligations as clear as possible. Where legal language is necessary to reflect applicable regulatory obligations, we have supplemented it with a plain-language summary.

This Policy should be read alongside our Terms & Conditions, which govern the overall Member agreement, and our Responsible Gambling page, which describes our duty-of-care obligations. Together, these documents form the complete framework under which 4dgang operates its Member-facing services.

2 Definitions

The following definitions apply throughout this Policy:

• "Personal Data" — any information that identifies, or could reasonably be used to identify, a living individual, whether directly (e.g., name, national identification number) or indirectly (e.g., device fingerprint, IP address combined with other data).
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, use, disclosure, transmission, erasure, or destruction.
• "Data Controller" — the entity that determines the purposes and means of processing Personal Data. For the purposes of this Policy, that entity is 4dgang.
• "Data Processor" — a third party that processes Personal Data on behalf of 4dgang, under contract and under our instructions.
• "Sensitive Data" — a sub-category of Personal Data warranting heightened protection, including but not limited to financial account details, copies of identity documents, and payment records.
• "Consent" — a freely given, specific, informed, and unambiguous indication of agreement to the processing of Personal Data for a stated purpose.
• "Cookie" — a small data file placed on a User's device by a website for purposes such as session management, preference storage, and analytics.

3 Data Controller

4dgang acts as the Data Controller for all Personal Data processed in connection with the platform. As Data Controller, we are responsible for ensuring that processing activities comply with applicable data protection laws and that your rights as a data subject can be exercised effectively.

Where we engage third-party Data Processors (for example, payment processing intermediaries or identity verification service providers), we enter into data processing agreements that impose equivalent obligations of security, confidentiality, and compliance on those parties.

Our designated point of contact for all privacy-related enquiries and formal data subject rights requests is described in Section 15 of this Policy.

4 Data We Collect

The categories of Personal Data we collect, and the primary source of each, are summarised in the table below. We collect only the minimum data necessary for the stated purpose.

We do not intentionally collect data concerning racial or ethnic origin, political opinion, religious belief, health conditions, or sexual orientation.

5 Lawful Basis for Processing

Every processing activity carried out by 4dgang is grounded in at least one recognised lawful basis. The principal bases we rely on are:

• Contractual Necessity: Processing required to perform the Member agreement — for example, verifying identity, processing MYR deposits and withdrawals, maintaining bet history, and providing account support.
• Legal Obligation: Processing required to comply with anti-money laundering regulations, age verification obligations, responsible gambling requirements, and related regulatory obligations applicable to licensed gaming operators.
• Legitimate Interests: Processing for fraud detection, platform security, abuse prevention, internal analytics, and improvement of the service — provided that such interests are not overridden by your privacy rights.
• Consent: Where we send optional marketing communications or deploy non-essential analytics cookies, we rely on your explicit and freely given consent, which you may withdraw at any time without detriment to your account standing.

6 How We Use Your Data

Personal Data collected by 4dgang is used for the following purposes:

6.1 Account Management

To create and maintain your Member account, authenticate your login sessions, enforce account security, and manage voluntary account closure or self-exclusion requests.

6.2 Payment Processing

To facilitate MYR deposits and withdrawals via supported Malaysian payment channels including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank online banking, and Hong Leong Connect. Transaction records are retained in accordance with the retention schedule in Section 9.

6.3 Identity & Age Verification (KYC)

To verify that you meet the minimum age requirement of 21 years and to confirm your identity as required under applicable licensing and anti-money laundering obligations. This includes reviewing government-issued identification and supporting proof-of-address documents.

6.4 Platform Operation & Improvement

To monitor platform performance, diagnose technical issues, identify patterns of fraud or abuse, improve game offerings, and enhance the overall Member experience.

6.5 Responsible Gambling

To detect indicators of potentially harmful gambling behaviour, administer deposit limits and self-exclusion requests, and maintain exclusion records where a Member has elected to self-exclude.

6.6 Customer Support

To respond to enquiries, resolve disputes, and maintain a record of support interactions for quality-assurance purposes.

6.7 Legal & Regulatory Compliance

To comply with applicable law, respond to lawful requests from regulatory authorities, and to detect, investigate, and prevent financial crime.

7 Sharing & Disclosure of Personal Data

4dgang does not sell, rent, or trade your Personal Data to any third party for their own commercial or marketing purposes. We may share your data only in the following defined circumstances:

• Payment Processors: Financial intermediaries, e-wallet operators (Touch 'n Go, Boost, GrabPay), and bank transfer systems (DuitNow, FPX) receive the minimum transaction data necessary to process your specific payment.
• Identity Verification Partners: Regulated KYC service providers who process your identification documents under strict data processing agreements and applicable law.
• Technology Infrastructure Providers: Hosting, content delivery, and security technology providers who process data on our behalf as Data Processors under binding contractual obligations.
• Regulatory & Law Enforcement Authorities: Where 4dgang is subject to a lawful order, regulatory requirement, or legal obligation to disclose information, we will comply within the bounds of applicable law.
• Fraud Prevention & Anti-Money Laundering: Accredited financial crime prevention services and relevant reporting bodies where a legal obligation to report exists.
• Corporate Transactions: In the event of a merger, acquisition, or other corporate restructuring, Personal Data may be transferred as part of that transaction, subject to equivalent privacy protections being contractually guaranteed.

In all cases where data is shared with a third party, we take reasonable steps to ensure those parties maintain appropriate technical and organisational security measures.

8 International Data Transfers

4dgang operates an internationally distributed technology infrastructure. Your Personal Data may be stored on or transmitted to servers located outside Malaysia. Where such transfers occur, we ensure that appropriate safeguards are in place, which may include:

• Data processing agreements incorporating standard contractual clauses with equivalent protections to those required under applicable Malaysian data protection law.
• Transfer to jurisdictions that have been assessed as providing an adequate level of data protection for the categories of data involved.
• Binding corporate rules or equivalent frameworks where transfers occur within a group of companies.

If you would like further information about the safeguards applied to a specific international transfer of your data, please contact us using the details in Section 15.

9 Data Retention

4dgang retains Personal Data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law and regulatory obligations. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your active membership and for a minimum of five years following account closure, as required under anti-money laundering regulations.
• Transaction Records (deposits, withdrawals, bet history): Retained for a minimum of seven years from the date of the transaction, in accordance with financial record-keeping obligations.
• KYC Documents: Retained in accordance with applicable regulatory requirements, typically for five to seven years following account closure or the completion of the relevant verification exercise.
• Support Communications: Retained for up to three years from the date of the interaction, or longer where the communication is relevant to an ongoing dispute or compliance matter.
• Technical & Log Data: Typically retained for a period of 12 months, unless retention for a longer period is required for fraud investigation or security purposes.
• Self-Exclusion Records: Retained for the duration of the self-exclusion period and for a reasonable period thereafter, to prevent inadvertent re-registration during an active exclusion.

At the end of the applicable retention period, Personal Data is deleted or anonymised in a manner that prevents re-identification.

10 Security Measures

4dgang maintains a set of technical and organisational security measures designed to protect your Personal Data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Transport Layer Security (TLS/SSL) encryption for all data in transit between your device and our servers.
• Encryption at rest for sensitive records including KYC documentation and payment method information.
• Access controls and role-based authorisation ensuring that only personnel with a legitimate operational need can access Personal Data.
• Regular security assessments and monitoring of platform infrastructure.
• Incident response procedures that include timely notification to affected Members and relevant authorities in the event of a material data security breach.

11 Cookies & Tracking Technologies

4dgang uses cookies and similar tracking technologies to operate and improve the platform. The principal categories of cookies we use are:

• Strictly Necessary Cookies: Required for core platform functionality — authentication sessions, security tokens, account-state management. These cookies cannot be disabled without impairing your ability to use the platform.
• Functional Cookies: Remember your preferences such as language settings, display options, and recently visited game categories, so you do not need to reset them each session.
• Performance & Analytics Cookies: Collect aggregated, anonymised data about how visitors interact with the 4dgang platform — page views, session duration, error rates — to help us improve the service. These cookies do not identify you personally.
• Marketing Cookies: Used only where you have provided explicit consent, and only to measure the effectiveness of promotional campaigns. We do not deploy third-party behavioural advertising cookies.

You may manage cookie preferences through your browser settings. Note that disabling certain categories of cookies beyond strictly necessary ones may affect the functionality of some platform features. Withdrawing consent for marketing cookies will not affect your account standing or access to games.

12 Your Rights as a Data Subject

Subject to applicable data protection law, you hold the following rights with respect to your Personal Data held by 4dgang. Requests should be submitted using the contact details in Section 15. We will respond without undue delay and at no charge in the majority of cases.

Certain rights are subject to limitations — for example, the right to erasure does not apply where retention is mandated by anti-money laundering regulations, legal proceedings, or regulatory compliance obligations. We will explain any applicable limitation clearly when responding to your request.

13 Children, Minors & Age Verification

The 4dgang platform is strictly intended for adults aged 21 years and above. We do not knowingly collect Personal Data from individuals below this age threshold. If we become aware that a Member has falsely declared their age during registration or that an account belongs to a person below the minimum age, we will:

• Immediately suspend the account pending investigation.
• Conduct enhanced identity and age verification.
• Permanently close the account if the underage use is confirmed.
• Retain a minimum record necessary to prevent future registration attempts, in accordance with responsible gambling obligations.
• Where required by law, report the matter to relevant authorities.

If you have reason to believe that a person under 21 has registered or is using an account on the 4dgang platform, please contact us immediately using the details in Section 15.

14 Changes to This Privacy Policy

4dgang may update this Privacy Policy from time to time to reflect changes in law, regulatory guidance, operational practice, or the services we offer. All changes are reviewed internally before publication.

Where a change is material — meaning it significantly affects how we collect or use your Personal Data, or materially impacts your rights — we will notify registered Members via email or a prominent platform notice at least fourteen days before the revised Policy takes effect.

Non-material updates (such as typographic corrections, improved clarity of existing descriptions, or updated contact details) may be made without prior notice. The date of the most recent review appears at the top of this document. Continued use of the 4dgang platform after a revised Policy has been published constitutes your acceptance of the updated terms.

15 Contact & Complaints

To exercise any of your data subject rights, to ask a question about this Policy, or to raise a concern about how your Personal Data has been handled, please contact the 4dgang privacy team using the following details:

• Live Chat (fastest): Available 24/7 through your Member account dashboard. Typical response time under two minutes.
• Email (plain text — not a link): [email protected] — mark the subject line "Privacy Request". Typical response within four hours; formal data subject rights requests responded to within 30 calendar days.

We aim to resolve all privacy-related concerns promptly and fairly at the first point of contact. If you are not satisfied with our response, you have the right to escalate your concern to the relevant data protection supervisory authority in your jurisdiction.