Visa4d Privacy Policy — Personal Data Protection for Malaysian Members

This Privacy Policy applies to all users and members who access the visa4d website, register an account, or use any services offered by visa4d — including sports betting on Malaysian Super League, EPL, and badminton, Live Casino, slots, Baccarat, poker, Virtual Sports, and all related promotions and bonuses.

This policy is to be read together with Terms & Conditions visa4d and other related policy documents. By using the visa4d platform, you agree to the data collection and usage practices described in this document.

Visa4d operates in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards. We have appointed an internal Data Protection Officer (DPO) who is responsible for ensuring all data management practices comply with legal requirements and best-practice privacy principles.

Visa4d collects several categories of personal data depending on the nature of your interaction with the platform. Below is a detailed breakdown of the data collected and the purposes it serves:

• Full name as per identity card (MyKad)
• Active email address
• Malaysian mobile number
• Date of birth (for age verification, 18+ requirement)
• Username and password (stored in an unreadable hashed format)

• Copy of identity card (MyKad) — front and back
• Bank statement or proof of current address
• Selfie or facial photo for identity verification (where required)

• Deposit records via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, Maybank2u, CIMB Clicks, and all other accepted payment methods
• Withdrawal records and payment destinations
• Betting history and winnings records

• IP address and general location information
• Device type, operating system, and web browser used
• Platform activity logs, including pages visited and session duration
• Cookie data and related tracking technologies

Personal data collected by visa4d is used exclusively for legitimate purposes directly related to platform operations. Below is a full explanation of how your data is used:

• Account Management: Creating and maintaining your member account, processing logins, and managing your profile.
• Transaction Processing: Verifying and processing deposits via Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, FPX, and all your winning withdrawals.
• Legal Compliance: Meeting KYC, AML (Anti-Money Laundering), and reporting obligations as required by regulatory authorities.
• Platform Security: Detecting and preventing fraud, multi-account abuse, and suspicious activity that could affect other members.
• Customer Support: Providing effective technical support and issue resolution via live chat, email, and WhatsApp in Bahasa Malaysia.
• Service Communications: Sending important notices about your account, changes to our terms, or security issues relevant to your account.
• Platform Enhancements: Analysing usage patterns in aggregate — without identifying individuals — to improve the visa4d user experience.
• Responsible Gaming: Monitoring betting patterns that may require intervention in line with visa4d's commitment to Responsible Gaming.

Visa4d does not sell, rent, or trade members' personal data to any third party for their marketing purposes. This is a commitment we uphold without exception.

However, to keep the platform running smoothly, visa4d may need to share certain data with the following parties under limited and controlled circumstances:

To process your deposits and withdrawals via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, Maybank2u, CIMB Clicks, and other FPX providers, the necessary transaction details must be shared with the respective payment provider. All payment providers used by visa4d are licensed entities subject to strict data protection requirements.

To deliver high-quality Live Casino games, slots, baccarat, poker, and virtual sports, visa4d works with licensed game providers. Minimum information required to enable gameplay — such as anonymous session IDs, with no full name or financial details — may be shared with these providers.

Visa4d is legally required to disclose information to authorised authorities when compelled through proper legal processes — such as investigations into financial crime, fraud, or money laundering. Any such data sharing is carried out solely on the basis of legal obligation.

Member data security is one of visa4d's most significant and ongoing investments. Below are the technical and organisational measures we have in place to protect your personal data:

• 256-bit SSL Encryption: All data transmitted between your device and visa4d's servers is encrypted using industry-standard TLS/SSL protocols. This covers login credentials, payment information, and all platform communications.
• Password Encryption: Your account password is never stored in plain text. We use a strong hashing algorithm with salt to keep your password secure, even in the event of a database breach.
• Two-Factor Authentication (2FA): Members are encouraged to enable two-factor authentication to add an extra layer of security to their visa4d account.
• Internal Access Controls: Only authorised visa4d staff may access member data, and only to the extent required for their role. All access is logged and regularly audited.
• Continuous Monitoring: visa4d's security monitoring system operates 24 hours a day, 7 days a week to detect any suspicious activity or unauthorised access attempts.
• Regular Penetration Testing: visa4d conducts regular security assessments by independent third parties to identify and address any vulnerabilities before they can be exploited.

While we take all reasonable steps to protect your data, no security system is entirely infallible. You also play an important role in keeping your account secure — use a strong and unique password, do not share your login credentials, and report any suspicious activity to visa4d immediately.

Visa4d uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and understand how the platform is used in aggregate.

• Session Cookies (Required): Required to allow you to log in and remain logged in during your gaming session. These cookies are deleted automatically when you close your browser or log out.
• Preference Cookies: Saving your preferences such as language, theme, and display settings to provide a more comfortable experience on your next visit to visa4d.
• Security Cookies: Helping detect and prevent fraud, and verifying that you are a legitimate user during every session.
• Analytics Cookies: Helps us understand how visitors use the platform in aggregate — without identifying any individual — so we can continue improving visa4d.

You can manage cookie preferences through your web browser settings. Please note that disabling certain cookies may affect the functionality of the visa4d platform — particularly session cookies required for login and security.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and visa4d's privacy policy, you have the following rights regarding your personal data. We are committed to making it straightforward for you to exercise these rights:

To exercise any of the rights above, please contact visa4d's Data Protection Officer by email at privacy@visa4d.site or through our 24/7 customer support. We will respond to your request within 30 business days.

Visa4d retains your personal data for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required by applicable laws and licensing obligations.

• Active Account Data: Retained for as long as your visa4d account remains active, and for any additional period required by law following account closure.
• Financial Transaction Records: Retained for a minimum of 7 years following the transaction date, in accordance with applicable financial reporting and anti-money laundering legal requirements.
• KYC Documents: Retained for as long as required for legal compliance purposes, typically no longer than 5 years after account closure.
• Support Communication Logs: Customer support conversation records are retained for 2 years for reference and service improvement purposes.
• Technical Data & Logs: Technical system logs are typically retained for 90 days for security and troubleshooting purposes.

Once the defined retention period expires, data will be securely deleted or anonymised in accordance with visa4d's standard procedures.

Visa4d reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements to how we protect your data.

When material changes are made to this Privacy Policy, visa4d will notify you by email to the address registered on your account, and/or via a prominent notice on the platform's main page at least 14 days before the changes take effect.

The "Updated" date at the top of this document reflects the date of the most recent revision. Continued use of the visa4d platform after any amendment takes effect constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, please contact us to discuss your options.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data at visa4d, we encourage you to reach out to us directly.

The visa4d Data Protection Officer (DPO) can be reached by email at privacy@visa4d.site. For general account enquiries or technical support, our customer support team is available 24 hours a day via in-platform live chat, or by email at support@visa4d.site, or WhatsApp.

We are committed to responding to all privacy-related enquiries within 5 business days, and to data rights requests within 30 business days, in accordance with Malaysia's PDPA requirements. We take every privacy enquiry seriously and will provide a clear, helpful response.