Privacy Policy — 4dchat

4dchat ("the Company", "we", "us", "our") is committed to protecting the privacy and personal data of all users ("User", "Player", "you", "your") of the 4dchat online gaming platform, accessible at https://4dchat.cam (the "Platform"). This Privacy Policy has been prepared in accordance with internationally recognised data protection principles, including those reflected in the General Data Protection Regulation (GDPR), and applies to all personal data collected through our Platform, customer support channels, and related communications.

This Policy describes the categories of personal data we collect, the purposes for which we process that data, the parties with whom we may share it, the security measures we apply to protect it, and the rights available to you in relation to your personal information. We encourage you to read this Policy carefully and contact our team at any time if you have questions.

By registering an Account on the Platform, depositing funds, or otherwise engaging with 4dchat's services, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein, to the extent that consent is the applicable legal basis for such processing.

For clarity throughout this Policy, the following terms are defined as follows:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, identification number, location data, email address, financial information, and any other data that can be used to identify you directly or indirectly.
• "Processing" — any operation performed on Personal Data, whether automated or manual, including collection, recording, storage, use, disclosure, alteration, or deletion.
• "Data Controller" — 4dchat, which determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" — a third party engaged by 4dchat to process Personal Data on its behalf, acting under 4dchat's documented instructions.
• "KYC Data" — identity and address verification documentation submitted by a Player as part of the Know Your Customer process, including government-issued identification and proof of address.
• "Cookies" — small data files stored on your device by the Platform to support functionality, analytics, and user experience improvements.
• "Sensitive Data" — a subset of Personal Data warranting heightened protection, including financial account details, identification document numbers, and data relating to problem gambling or self-exclusion status.

4dchat collects Personal Data through multiple touchpoints on the Platform. The categories of data we collect, and the circumstances in which each is collected, are detailed below.

We collect only data that is necessary for the stated purposes and do not seek to collect Sensitive Data beyond what is required for legal compliance, security, and responsible gambling obligations.

4dchat processes your Personal Data for the following purposes:

4.1 Account Administration

To create and maintain your Account, authenticate your identity at login, process KYC verification, manage account settings, and communicate account-related information including transaction confirmations and security alerts.

4.2 Payment Processing

To facilitate deposits and withdrawals via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX (Maybank, CIMB, Public Bank, Hong Leong Bank), cryptocurrency (BTC, ETH, USDT TRC20, BNB), and other supported payment methods. Financial data is processed in accordance with applicable payment security standards.

4.3 Legal Compliance & Anti-Money Laundering

To comply with applicable anti-money laundering (AML) laws, counter-terrorism financing obligations, KYC regulations, and the requirements of our gaming licence. This includes screening transactions against watchlists and reporting obligations where required by law.

4.4 Responsible Gambling

To monitor gaming behaviour for indicators of problem gambling, administer self-exclusion requests and deposit limits, send responsible gambling notifications, and maintain records of player protection measures in compliance with our licence conditions.

4.5 Platform Improvement & Analytics

To analyse how users interact with the Platform (using aggregated and anonymised data where possible), identify technical issues, improve user experience, and inform product development decisions.

4.6 Marketing Communications

Where you have consented to marketing communications, to send you information about promotions, new game launches, sports betting events (including Liga Super Malaysia and EPL fixtures), and platform updates. You may withdraw consent at any time through your Account settings or by contacting support.

4.7 Fraud Prevention & Security

To detect, investigate, and prevent fraudulent activity, account takeovers, bonus abuse, collusion, and other security threats. This may involve automated analysis of transaction patterns and behavioural data.

4dchat processes your Personal Data on the following legal bases, consistent with GDPR-aligned data protection principles:

• Contractual Necessity: Processing required to perform the contract between you and 4dchat — including account operation, payment processing, and KYC verification — is carried out on the basis that it is necessary for the performance of our agreement with you.
• Legal Obligation: Processing necessary to comply with applicable laws, including AML regulations, gaming licence requirements, and mandatory reporting obligations, is carried out on the basis of legal obligation.
• Legitimate Interests: Processing for fraud prevention, security monitoring, platform analytics, and responsible gambling monitoring is carried out where 4dchat's legitimate interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for marketing communications and non-essential cookies is carried out on the basis of your freely given, specific, and informed consent. Consent may be withdrawn at any time without affecting the lawfulness of processing prior to withdrawal.

4dchat does not sell, rent, or otherwise commercialise your Personal Data to third parties for their own marketing purposes. We may share your data only in the following limited circumstances:

• Payment Processors: Financial data is shared with payment service providers (including e-wallet operators such as Touch 'n Go and Boost, and banking partners) strictly to the extent required to complete transactions you have authorised.
• Gaming & Technology Suppliers: Game studios, platform infrastructure providers, and cybersecurity vendors who process data as Data Processors acting under our instructions and subject to contractual data protection obligations.
• KYC & Compliance Verification Providers: Third-party identity verification and AML screening services engaged to assist with our regulatory compliance obligations.
• Regulatory Authorities: Disclosures required by our gaming licence, applicable law, or a lawful order from a competent regulatory or law enforcement authority.
• Professional Advisors: Legal counsel, auditors, and insurers, subject to binding confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or asset sale, Personal Data may be transferred to the acquiring entity, subject to at least equivalent data protection safeguards and prior notice to affected users where practicable.

4dchat uses cookies and similar tracking technologies to enhance your experience on the Platform. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function, including session authentication, security tokens, and maintaining your login state. These cookies cannot be disabled without affecting Platform functionality.
• Performance & Analytics Cookies: Used to collect anonymised information about how users interact with the Platform — pages visited, time on site, error occurrences — to help us improve performance and user experience.
• Functional Cookies: Used to remember your preferences such as language settings, preferred currency (MYR), and previously selected payment methods, to provide a more personalised experience.
• Marketing Cookies: Where you have consented, used to deliver relevant promotional content related to 4dchat's services. These cookies do not track your activity across third-party websites and are limited to the 4dchat Platform.

You may manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Platform. By continuing to use the Platform after acknowledging this Policy, you consent to our use of strictly necessary and functional cookies. Marketing and analytics cookies require separate opt-in consent.

4dchat retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, and to meet our legal and regulatory obligations. The following general retention periods apply:

• Account Data & KYC Documents: Retained for the duration of the Account and for a minimum of five (5) years following Account closure, in compliance with AML and gaming licence requirements.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, consistent with financial record-keeping obligations.
• Gaming Activity Logs: Retained for a minimum of three (3) years to support dispute resolution, responsible gambling monitoring, and regulatory compliance.
• Communication Records: Live chat transcripts, email correspondence, and support records are retained for up to two (2) years from the date of the communication.
• Marketing Consent Records: Retained for the duration of your Account and for three (3) years following Account closure or consent withdrawal, as evidence of your consent decisions.
• Self-Exclusion Records: Retained indefinitely to prevent re-registration during exclusion periods and to support responsible gambling compliance.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised in accordance with our data disposal procedures.

4dchat implements a comprehensive suite of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and the 4dchat Platform is encrypted using industry-standard SSL/TLS protocols, protecting your information in transit.
• Encrypted Data Storage: Personal Data and sensitive financial information stored on our servers is encrypted at rest using AES-256 encryption or equivalent standards.
• Access Controls: Access to Personal Data is restricted to authorised personnel on a strict need-to-know basis. All staff with access to Personal Data are subject to confidentiality obligations and regular security training.
• Two-Factor Authentication (2FA): Available to players for Account logins and large withdrawal requests, providing an additional layer of identity verification.
• Real-Time Fraud Monitoring: Automated systems monitor account activity and transactions in real time to detect and respond to suspicious activity indicative of fraud or account compromise.
• Regular Security Audits: The Platform undergoes periodic third-party security assessments and penetration testing to identify and remediate vulnerabilities.
• Incident Response: In the event of a personal data breach that poses a risk to your rights and freedoms, 4dchat will notify relevant authorities and affected individuals in accordance with applicable data protection law.

While we maintain robust security measures, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. You are also responsible for maintaining the security of your Account credentials and for notifying us promptly of any suspected unauthorised access.

Subject to applicable law and certain legal exceptions, you have the following rights in relation to your Personal Data held by 4dchat. You may exercise any of these rights by contacting our support team:

We aim to respond to all valid data subject requests within 30 calendar days. For complex or multiple requests, the response period may be extended by up to a further 60 days, with notice provided to you. We will not charge a fee for handling reasonable requests.

4dchat operates as an internationally licensed platform and may transfer your Personal Data to recipients located outside Malaysia, including in countries where data protection laws may differ from those applicable in Malaysia. Such transfers occur where necessary to provide our services, process payments, or fulfil legal obligations.

Where Personal Data is transferred internationally, 4dchat implements appropriate safeguards to ensure that your data receives an adequate level of protection, including:

• Standard contractual clauses approved by relevant data protection authorities, binding the recipient to appropriate data protection obligations;
• Transfers to recipients in countries recognised as providing an adequate level of data protection;
• Other legally approved mechanisms for international data transfers where applicable.

You may request further information about the specific safeguards applied to international transfers of your Personal Data by contacting us at the details provided in Section 15.

4dchat operates mandatory age verification through our KYC process, requiring submission of a government-issued identification document for all registered accounts prior to first withdrawal. This measure is designed not only to comply with our licence conditions but to fulfil our genuine duty of care to prevent access by vulnerable individuals.

If you are a parent or guardian and believe that a person under 21 in your care has registered an Account on the 4dchat Platform, please contact us immediately via the support email address in Section 15. We will investigate promptly and take appropriate action.

The 4dchat Platform may reference or integrate with third-party services, including payment gateways such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and banking partners like Maybank, CIMB, Public Bank, and Hong Leong Bank. When you are redirected to a third-party service to complete a transaction, you are subject to that party's own privacy policy and terms of use.

4dchat is not responsible for the privacy practices of third-party services. We encourage you to review the privacy policies of any external services you use in connection with transactions on our Platform. Our Privacy Policy applies only to data collected and processed directly by 4dchat.

4dchat reserves the right to update or amend this Privacy Policy from time to time, including to reflect changes in applicable law, regulatory requirements, our data processing activities, or best-practice data protection standards. The effective date at the top of this document indicates when the current version was last updated.

Where amendments are material — that is, where they significantly affect how we use your Personal Data or your rights in relation to it — we will provide advance notice by email to your registered address or through a prominent notice on the Platform, at least 14 days before the changes take effect. For non-material amendments, the updated Policy will take effect immediately upon publication.

Your continued use of the Platform following the effective date of an amended Policy constitutes your acceptance of the changes. If you do not agree to the revised Policy, you must cease using the Platform and contact us to close your Account.

For any questions, concerns, or requests relating to this Privacy Policy or your Personal Data rights, please contact the 4dchat Data Protection team using the following details. We are committed to responding to all privacy-related enquiries within 5 business days and resolving substantive data subject requests within 30 calendar days.

When submitting a data subject request, we may need to verify your identity before processing the request to protect against fraudulent access to another person's data. Please be prepared to provide reasonable verification information when prompted.