4dgang Privacy Policy – Malaysia Member Personal Data Protection

To provide you with the best service, 4dgang collects several categories of personal information. We only collect strictly necessary data and do not collect information irrelevant to the operation of our platform.

A. Information You Provide Directly:

• Registration Information: Full name, date of birth, identification number (MyKad), email address, mobile number, and password.
• KYC Information (Identity Verification): Copies of identity documents such as MyKad or passport, and proof of current residential address.
• Financial Information: Bank account number, account holder name, and e-wallet details (such as Touch 'n Go eWallet, GrabPay, or Boost) for deposit and withdrawal processing.
• Communications: Records of conversations with our customer support team via live chat, email, or other channels.

B. Automatically Collected Information:

• Device & Technical Data: IP address, device type, operating system, browser version and screen resolution.
• Platform Activity Data: Login records, game history, transaction history, pages visited, and time spent in each session.
• Cookies & Tracking Technologies: Session cookies, preference cookies, and analytics cookies are used to enhance the user experience and understand platform usage patterns.
• Location Data: General location information derived from your IP address for legal compliance and fraud detection purposes.

The information we collect is used responsibly and only for legitimate purposes. Below is a summary of data usage by category:

We do not use your data to make automated decisions that materially affect you without human oversight. Any significant decisions relating to your account — such as suspensions or transaction limits — are reviewed manually by our team.

4dgang takes your trust seriously. Your personal information will not be shared, sold or transferred to any third party except in the following circumstances permitted by law:

• Payment Service Providers: Required financial information is shared with licensed payment gateway providers such as FPX, DuitNow, and e-wallet providers to process your transactions. All such providers are bound by strict confidentiality agreements.
• Game Software Providers: Limited game session data is shared with third-party game software providers solely to ensure games function correctly and fairly.
• Regulatory Authorities: 4dgang will disclose information as required by government authorities, law enforcement agencies or regulatory bodies when mandated under Malaysian law.
• Anti-Money Laundering (AML) Prevention: Some transaction data may be shared with financial crime prevention agencies as part of our compliance obligations.
• Your Consent: In specific cases where you have given explicit consent for data sharing for a defined purpose.

All third parties granted access to your data are required to meet data security standards equal to or higher than our own. They are not permitted to use your data for any purpose other than what has been agreed upon.

4dgang retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. The following are our data retention guidelines:

• Active Account Data: Retained for the duration your account is active plus 7 years after account closure to meet audit and legal requirements.
• Financial Transaction Records: Retained for a minimum of 7 years after the transaction occurs, in line with AML requirements and Malaysian tax law.
• KYC Documents: Retained for 5 years after the business relationship ends or after the last identity verification, whichever is later.
• Support Communication Logs: Retained for 3 years for reference and dispute resolution purposes.
• Cookie and Analytics Data: Session cookies are deleted once the session ends; analytics cookies are retained for no more than 13 months.

Upon expiry of the retention period, your data will be securely deleted using methods that ensure it cannot be recovered. In situations where data must be retained longer for legal reasons, we will notify you and minimise the scope of data kept.

The 4dgang platform uses cookies and similar tracking technologies to enhance the user experience, ensure platform security, and understand how our members use our services. Cookies are small text files stored on your device when you visit our platform.

We use four main types of cookies:

• Essential Cookies: Required for core platform functions such as login verification and session security. These cookies cannot be disabled without affecting platform functionality.
• Preference Cookies: Stores your preferences such as language, display theme, and game settings for a more personalised experience.
• Analytics Cookies: Helps us understand platform usage patterns, most visited pages, and technical issues — all data is processed in aggregate without individual identification.
• Marketing Cookies: Used only with your consent to deliver promotional content relevant to your interests.

Under Malaysia's Personal Data Protection Act 2010 and our privacy policy, you have the following rights regarding the personal data we hold about you:

To exercise any of these rights, please contact our privacy team via the support section in your account. We will respond within the timeframe stipulated by applicable law.

Your data security is our priority. 4dgang implements a comprehensive set of technical and organisational measures to protect your personal information from unauthorised access, alteration, disclosure, or destruction.

• End-to-End Encryption: All communications between your device and our servers are encrypted using TLS 1.3 protocol — the latest industry standard for data security in transit.
• Data-at-Rest Encryption: Sensitive data such as financial information and KYC documents are stored in encrypted form using AES-256 algorithms.
• Layered Access Controls: Access to members' personal data is strictly limited on a need-to-know basis — only staff who require access to perform their duties are authorised.
• Continuous Security Monitoring: Automated 24/7 monitoring detects and alerts on any suspicious activity or intrusion attempts.
• Regular Security Audits: We conduct regular internal and external security audits to identify and address any system vulnerabilities.
• Staff Training: All staff who handle personal data receive comprehensive data protection training and are required to comply with strict confidentiality policies.

The 4dgang platform is a service restricted to individuals aged 18 and above only. We do not knowingly collect or process any personal information from individuals under the age of 18. Should we discover that a child's personal data has been collected without our knowledge, that data will be deleted immediately and the associated account will be closed without delay.

If you are a parent or guardian and suspect that your child has registered an account on our platform, please contact our support team immediately. We will take appropriate action without delay.

4dgang reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements or platform improvements. When material changes are made, we will notify you via your registered email or in-platform notification at least 14 days before the changes take effect.

The "Updated" date at the top of this document indicates when this Privacy Policy was last reviewed. We encourage you to review this policy periodically to stay informed about how we protect your information. Continued use of the platform after any amendments indicates your acceptance of the updated policy.