Privacy Policy

4d98 (hereinafter referred to as "the Platform", "we", "us", or "our") is committed to protecting and respecting the privacy of all individuals who access or use our website at https://4d98.cam and any associated services. This Privacy Policy ("Policy") sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by 4d98.

We operate as an online betting and gaming platform serving users across Malaysia, including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam. In delivering our services — which include sports betting, live casino, 4D lottery, and slot games — we necessarily collect and process certain personal data. This Policy is designed to be transparent about those practices so that you can make informed decisions about your use of 4d98.

This Privacy Policy should be read alongside our Terms & Conditions, which govern the overall relationship between you and 4d98. By using the Platform, you acknowledge that you have read and understood this Policy.

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial information, and usage data.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, erasure, or destruction.
• "Data Controller" refers to 4d98 as the entity that determines the purposes and means of processing Personal Data.
• "Data Subject" refers to you, the individual whose Personal Data is being processed.
• "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your Personal Data.
• "KYC" means Know Your Customer — the identity verification procedures required under applicable anti-money laundering and responsible gambling regulations.
• "Cookies" means small text files placed on your device by the Platform to enable core functionality, analytics, and personalisation.
• "Third Party" means any natural or legal person other than you and 4d98 who processes Personal Data under the direction of 4d98 as a processor or sub-processor.

4d98 collects only the data necessary to provide a functional, secure, and legally compliant betting and gaming service. The categories of Personal Data we may collect include:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is strictly required for KYC identity verification purposes.

4d98 collects Personal Data through the following channels:

• Direct Registration: Information you provide when creating a 4d98 account, including name, date of birth, email address, and Malaysian mobile number.
• KYC Submissions: Identity documents (MyKad, passport) and selfie images submitted during the identity verification process before your first withdrawal.
• Payment Transactions: Financial data associated with deposits and withdrawals made via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, and USDT TRC20.
• Automated Technologies: Technical and usage data collected automatically when you access the Platform, including via cookies, web beacons, and server logs.
• Support Interactions: Information you provide when contacting our customer support team via live chat or email.
• Third-Party Verification Services: Identity and fraud verification data from authorised KYC service providers acting as our data processors.

4d98 processes your Personal Data only where a lawful basis for such processing exists. The legal bases on which we rely are as follows:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions you accepted at registration — including account management, deposit and withdrawal processing, and bet settlement.
• Legal Obligation: Processing required to comply with anti-money laundering (AML) regulations, responsible gambling obligations (including age verification and self-exclusion management), and any lawful directions from regulatory or law enforcement authorities.
• Legitimate Interests: Processing necessary for fraud prevention, platform security, technical performance monitoring, and internal analytics — provided such interests are not overridden by your fundamental privacy rights.
• Consent: Processing for optional purposes such as marketing communications (promotional emails, bonus notifications) where you have explicitly opted in. You may withdraw this consent at any time by contacting our support team.

4d98 uses your Personal Data for the following specific purposes:

• To create, verify, maintain, and administer your player account on the 4d98 Platform.
• To process your deposits and withdrawals via your chosen Malaysian payment method (Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and participating banks).
• To settle bets and gaming transactions and maintain accurate account balances denominated in Malaysian Ringgit (MYR).
• To conduct KYC identity verification in accordance with our legal obligations under applicable anti-money laundering and responsible gambling frameworks.
• To monitor for and prevent fraud, money laundering, and other prohibited activities outlined in our Terms & Conditions.
• To enforce our responsible gambling programme, including age verification (21+), deposit limit management, loss limit management, self-exclusion processing, and at-risk player interventions.
• To provide customer support and resolve disputes, complaints, or technical issues.
• To send transactional communications, including account verification, deposit confirmations, withdrawal notifications, and security alerts.
• To send promotional communications and personalised bonus offers — only where you have provided express consent.
• To analyse Platform usage and performance to improve features, stability, and user experience for players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam.

4d98 does not sell or trade your Personal Data to third parties. We may share your data only in the following limited circumstances:

• Service Providers (Data Processors): Authorised third parties who process data on our behalf under strict contractual obligations — including KYC verification providers, payment processors (for transactions via Touch 'n Go, Boost, Maybank, CIMB, FPX, DuitNow, and cryptocurrency networks), cloud hosting providers, fraud detection services, and analytics platforms.
• Regulatory and Law Enforcement Authorities: Where required or permitted by applicable law, we may disclose Personal Data to government agencies, regulatory bodies, financial intelligence units, or law enforcement authorities — for example, in connection with AML investigations or court orders.
• Responsible Gambling Schemes: In circumstances where a player's data is required to be shared with an approved self-exclusion or problem gambling registry in connection with a voluntary or mandatory exclusion request.
• Business Transfers: In the event of a merger, acquisition, or sale of 4d98 or substantially all of its assets, your Personal Data may be transferred to the successor entity subject to equivalent privacy protections.

4d98 retains Personal Data for no longer than is necessary for the purposes for which it was collected, subject to any longer retention period required by applicable law or regulation. Our general retention principles are as follows:

• Active Account Data: Retained for the duration of your account being active on the Platform, plus a minimum of five (5) years following account closure — in compliance with applicable AML and financial record-keeping requirements.
• KYC Documents: Retained for a minimum of five (5) years from the date of submission, or as otherwise required by applicable regulatory guidance.
• Transaction Records: Deposit, withdrawal, and bet records retained for a minimum of five (5) years to satisfy financial reporting and audit obligations.
• Support Communications: Retained for up to three (3) years from the date of the last interaction for dispute resolution and training purposes.
• Technical and Usage Data: Retained in anonymised or aggregated form for analytical purposes indefinitely; identifiable technical data deleted after twelve (12) months.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised such that it can no longer be associated with any identifiable individual.

The 4d98 Platform uses cookies and similar tracking technologies to ensure the website functions correctly and to improve your experience as a player. The types of cookies we use are:

• Strictly Necessary Cookies: Essential for the Platform to operate. These include session management cookies that keep you logged in while you navigate the site, and security cookies that protect your account from CSRF attacks. These cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Remember your preferences (such as preferred language, display settings, and recently viewed games) to provide a more personalised experience across sessions.
• Analytics Cookies: Collect anonymised data about how players navigate the Platform — which pages are visited most frequently, how long sessions last, and where users drop off. This data helps us improve Platform performance and usability.
• Fraud Prevention Cookies: Detect and flag unusual behavioural patterns that may indicate fraudulent activity, account sharing, or multi-accounting — protecting both 4d98 and genuine players.

4d98 implements industry-standard technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. Key security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the 4d98 Platform is encrypted using Transport Layer Security (TLS), equivalent to the encryption used by major financial institutions.
• Secure Server Infrastructure: 4d98 operates on enterprise-grade, access-controlled server infrastructure with redundant systems and regular security audits.
• Access Controls: Internal access to Personal Data is restricted on a strict need-to-know basis. Staff with access to sensitive data are subject to confidentiality obligations and regular data security training.
• Password Hashing: Account passwords are never stored in plain text. They are hashed using industry-standard one-way cryptographic algorithms.
• Fraud Detection Systems: Automated monitoring tools flag unusual account activity, suspicious login patterns, and potential data breaches in real time.

While 4d98 takes all reasonable precautions to protect your Personal Data, no method of transmission over the internet or electronic storage is 100% secure. We encourage you to use a strong, unique password for your 4d98 account and to contact our support team immediately if you suspect unauthorised access.

Subject to applicable law and any overriding legitimate interests or legal obligations of 4d98, you have the following rights with respect to your Personal Data:

• Right of Access: You may request a copy of the Personal Data we hold about you, along with information about how it is processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete Personal Data we hold about you.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data in certain circumstances — for example, where it is no longer necessary for the purpose for which it was collected and no overriding legal retention obligation applies.
• Right to Restrict Processing: You may request that we limit the processing of your Personal Data in certain circumstances, for example while the accuracy of the data is being contested.
• Right to Data Portability: Where processing is based on your consent or on a contract, you may request a copy of your Personal Data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing of your Personal Data where that processing is based on our legitimate interests — for example, direct marketing communications. Objections to marketing will be processed immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact our Privacy Team using the details set out in Section 15 (Contact Us). We will respond to all verified data subject requests within thirty (30) calendar days of receipt.

All prospective account holders are required to confirm their age during registration and to submit identity documentation for KYC verification confirming they are at least 21 years of age. This is an absolute eligibility requirement and not merely a declaration.

If 4d98 discovers or has reasonable grounds to believe that Personal Data has been collected from a person under the age of 21, the associated account will be immediately suspended, all activity on that account will be frozen, and the relevant data will be handled in accordance with applicable child data protection obligations, which may include secure deletion and notification to relevant authorities.

If you are a parent or guardian and believe your child under the age of 21 may have registered on the Platform, please contact us immediately at the address provided in Section 15.

The 4d98 Platform may contain references to or integrations with third-party services — including payment gateways (Touch 'n Go eWallet, Boost, GrabPay, FPX, DuitNow, and others) and gaming software providers. Where you are redirected to a third-party service to complete a payment or authentication step, the privacy practices of that third party govern the data collected during that interaction.

4d98 is not responsible for the privacy practices or content of any third-party websites or services. We encourage you to review the privacy policy of any third-party service you interact with in connection with your use of the 4d98 Platform.

4d98 reserves the right to update or amend this Privacy Policy at any time. We will notify registered users of material changes by email or via a prominent notice on the Platform. The "Last Updated" date at the top of this page will always reflect the most recent revision.

We recommend checking this page periodically to stay informed about how 4d98 protects and uses your Personal Data. Where changes to this Policy require fresh consent (for example, where a new category of processing is introduced that was not covered by your original consent), we will seek that consent before proceeding with the new processing.

Your continued use of the 4d98 Platform following notification of non-material amendments constitutes your acknowledgment of the updated Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by 4d98, please contact our Privacy Team using the following details. All data subject requests should clearly state the nature of your request and include sufficient information for us to verify your identity before actioning the request.

We take every privacy enquiry seriously. If you are not satisfied with our response to a privacy complaint, you may have the right to escalate the matter to the appropriate data protection authority or regulatory body in your jurisdiction.