4dyes2 Privacy Policy

1. Introduction

Welcome to 4dyes2. This Privacy Policy ("Policy") describes how 4dyes2 ("we", "us", "our") collects, processes, stores, and protects personal data relating to users ("you", "your", "Player") of our online sports betting and casino platform accessible at 4dyes2.lat and its associated mobile applications and services (collectively, the "Platform").

By registering an account, accessing the Platform, or using any of our services — including our Sportsbook, Slots, live casino, or any promotional features — you acknowledge that you have read, understood, and agreed to the practices described in this Policy. If you do not agree, you should discontinue use of the Platform immediately.

4dyes2 operates under an internationally recognised gaming licence and takes its obligations under applicable data protection laws seriously. While Malaysia does not yet enforce a comprehensive standalone data protection act in the same mould as GDPR, we voluntarily align our practices with globally recognised privacy standards to give our Malaysian players the highest level of protection.

2. Data We Collect

We collect the following categories of personal data when you interact with 4dyes2:

a. Registration & Identity Data

• Full legal name as per your Malaysian IC or passport
• Date of birth (used to verify you are 21 years of age or older)
• Residential address (including postcode and state in Malaysia)
• Email address and mobile number
• Username and encrypted password

b. Financial & Transaction Data

• Deposit and withdrawal records in MYR
• Payment method identifiers (e.g., Touch n Go eWallet reference ID, FPX transaction ID, Boost wallet ID, bank account last four digits for Maybank / CIMB / Public Bank)
• Cryptocurrency wallet address for USDT TRC20 transactions

c. Usage & Behavioural Data

• Betting history, wagering amounts, game session logs
• Platform navigation patterns, pages visited, session duration
• Device type, operating system, browser version, and IP address
• Geolocation data (city-level only, used for compliance screening)

d. Communications Data

• Live chat transcripts, email correspondence, and support tickets
• Responses to promotional surveys and feedback forms

e. KYC Verification Data

• Copies of government-issued identification documents
• Selfie images for liveness checks where required for account verification
• Proof of address documents (e.g., utility bills, bank statements)

3. How We Use Your Data

4dyes2 processes your personal data for the following legitimate purposes:

• Account Administration: Creating, maintaining, and securing your 4dyes2 account; verifying identity in line with Know Your Customer ("KYC") requirements.
• Service Delivery: Processing bets, sports wagers, casino gameplay, deposits, and withdrawals in MYR and other accepted currencies.
• Legal Compliance: Fulfilling obligations under applicable anti-money laundering ("AML") regulations, sanctions screening, and responding to lawful requests from regulatory authorities.
• Fraud Prevention: Detecting and investigating suspicious activity, unauthorised access attempts, or policy violations.
• Responsible Gaming: Monitoring gameplay patterns to identify at-risk behaviour and applying self-exclusion or deposit limit tools where appropriate.
• Customer Support: Responding to your enquiries via live chat or email ([email protected]).
• Platform Improvement: Analysing aggregated, anonymised usage data to optimise features, fix bugs, and improve the overall player experience.
• Marketing Communications: Sending relevant promotional offers and bonus notifications by email or in-platform messages, provided you have not opted out.

We do not use your data for automated decision-making that produces legally binding outcomes without human oversight.

4. Sharing of Data

4dyes2 does not sell, rent, or trade your personal information to any third party for commercial gain. We may, however, share your data in the following limited and lawful circumstances:

• Payment Processors: To facilitate MYR deposits and withdrawals via Touch n Go, Boost, GrabPay, FPX-linked banks, and crypto gateways. These providers are contractually bound to handle your data securely and only for the stated transaction purpose.
• KYC & AML Verification Services: Identity document verification and liveness check providers engaged by 4dyes2 to fulfil our compliance obligations.
• Regulatory Authorities: Where we are compelled by law, court order, or a regulatory body with jurisdiction over our operations to disclose specific data.
• Technology Partners: Cloud infrastructure and data hosting providers, all of whom are vetted and contractually required to maintain data confidentiality.
• Fraud Detection Partners: Third-party fraud analytics services may receive hashed or anonymised device and behavioural signals. No raw personally identifiable information is transmitted.

Any third party engaged by 4dyes2 is subject to strict data processing agreements that prohibit them from using your information for any purpose beyond the specific service they are contracted to perform.

5. Data Retention

4dyes2 retains personal data only for as long as is necessary to fulfil the purposes outlined in this Policy, or as required by applicable law. Our general retention schedule is as follows:

• Active Account Data: Retained for the full duration of your account's active status on the Platform.
• Transaction Records: Retained for a minimum of seven (7) years following each transaction, in line with standard financial record-keeping and AML compliance requirements.
• KYC Documents: Retained for five (5) years from the date of account closure or the last transaction, whichever is later.
• Support & Communication Logs: Retained for two (2) years from the date of the last interaction, unless a dispute or investigation requires longer retention.
• Marketing Preferences: Retained until you opt out or request deletion, after which your unsubscribe record is kept indefinitely to honour your preference.

Upon expiry of the applicable retention period, data is securely deleted or irreversibly anonymised so that it can no longer be attributed to you as an individual.

6. Cookies & Tracking Technologies

4dyes2 uses cookies and similar tracking technologies to operate the Platform effectively and to understand how players interact with our services. We use three categories of cookies:

• Strictly Necessary Cookies: Required for core Platform functionality — including session authentication, security tokens, and load balancing. These cannot be disabled without affecting your ability to use the Platform.
• Analytical Cookies: Used to collect aggregated, anonymised data on how players navigate 4dyes2. This helps us identify performance bottlenecks and popular features. No personally identifiable information is included in these reports.
• Functional Cookies: Store your preferences such as language selection, odds format, and display settings so you don't have to reconfigure them each visit.

We do not deploy third-party advertising or cross-site tracking cookies. You may manage your cookie preferences through your browser settings at any time, though disabling strictly necessary cookies may impair Platform functionality.

7. Your Rights

As a 4dyes2 player, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our support team via the in-platform live chat or at [email protected].

• Right of Access: You may request a copy of the personal data 4dyes2 holds about you at any time. We will respond within 30 calendar days of receiving a verified request.
• Right to Rectification: If any of your personal data is inaccurate or incomplete, you have the right to request that we correct it promptly.
• Right to Erasure: Subject to our legal retention obligations (particularly AML and transaction record requirements), you may request deletion of your personal data.
• Right to Restrict Processing: You may ask us to limit the way we use your data in certain circumstances, for example while a dispute is being investigated.
• Right to Data Portability: You may request that we provide your data in a structured, machine-readable format so you can transfer it to another service provider.
• Right to Object: You have the right to object to processing carried out for direct marketing purposes at any time. Simply update your communication preferences in your account settings or contact support.

Please note that some requests — particularly erasure requests — may not be fully fulfilled where we are legally required to retain certain data. We will always explain the specific reason if we are unable to honour a request in full.

8. Security Measures

4dyes2 implements a comprehensive set of technical and organisational security controls to protect your personal data against unauthorised access, alteration, disclosure, or destruction:

• Transport Layer Security (TLS 1.2 and above) for all data in transit between your device and our servers
• AES-256 encryption for sensitive data fields stored at rest, including KYC documents and payment credentials
• Multi-factor authentication (MFA) available and strongly encouraged for all 4dyes2 accounts
• Role-based access controls ensuring that only authorised staff with a legitimate business need can access player records
• Regular third-party penetration testing and vulnerability assessments of our platform infrastructure
• 24/7 automated intrusion detection and alerting systems monitoring for anomalous activity

While we apply industry-leading security practices, no system is entirely immune to risk. We encourage you to use a strong, unique password for your 4dyes2 account, enable MFA, and contact us immediately at [email protected] if you suspect unauthorised access.

9. Minors & Age Restriction

4dyes2 is strictly an adults-only platform. You must be 21 years of age or older to register an account and participate in any gambling or betting activity on the Platform, in accordance with the responsible gaming standards we uphold for Malaysian players.

We do not knowingly collect, process, or retain personal data from individuals under the age of 21. During registration, all players are required to confirm their age, and identity verification is performed to validate this declaration. If we become aware that a person under 21 has provided us with personal data or has registered an account, we will take immediate steps to close the account, refund eligible balances, and securely delete all associated data.

Parents or guardians who believe a minor may have accessed the Platform should contact us without delay at [email protected] so we can investigate and act accordingly.

10. Policy Changes

4dyes2 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our operations, technology, legal obligations, or applicable regulations. When material changes are made, we will notify you through one or more of the following channels:

• A prominent notice displayed on the Platform upon your next login
• An email notification sent to the address registered to your 4dyes2 account
• An update to the "Last Updated" date displayed at the top of this Policy

Your continued use of the Platform following the publication of a revised Policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you should cease using the Platform and may request account closure by contacting our support team.

We recommend bookmarking this page and reviewing it periodically, especially before making significant account actions such as large deposits or withdrawals.

11. Contact Us

For all privacy-related enquiries, data subject access requests, or complaints regarding how 4dyes2 handles your personal information, please reach out to our Data Protection team:

• Live Chat: Available 24/7 directly within the 4dyes2 Platform — the fastest way to get a response
• Email: [email protected] (plain text — not a clickable link)

We are committed to resolving all privacy concerns promptly and transparently. If you are not satisfied with our response, you retain the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction.