On4d Privacy Policy – Malaysia Personal Data Protection

Welcome to the on4d Privacy Policy. This document is on4d's official statement on how we handle the personal data of members who use the on4d platform on on4d.xyz and all related services. This policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection best practices.

By registering an account, using any of our services, or simply browsing the on4d website, you consent to on4d collecting and processing your personal data as described in this Privacy Policy. If you do not agree with any part of this Policy, please stop using the on4d platform and contact us to close your account.

On4d may amend this Privacy Policy from time to time. Whenever significant changes are made, we will notify members via an in-platform notification or their registered email. The "Updated" date at the top of this page reflects the latest version in effect. You are encouraged to review this page periodically to stay informed about how on4d protects your information.

On4d collects several categories of personal data from members for the purposes set out in this Privacy Policy. We only collect data that is strictly necessary to deliver our services effectively and securely.

A. Data You Provide Directly

• Registration Information: Full name, active Malaysian phone number, email address, date of birth, and the password you created when registering your on4d account.
• Identity Verification Documents: A copy of your MyKad or Malaysian passport when on4d requires identity verification for security or financial compliance purposes.
• Financial Information: Details of the payment method you use, including your Touch 'n Go eWallet account number, DuitNow, GrabPay, Boost, ShopeePay, or FPX account number (Maybank2u, CIMB Clicks), to process deposits and withdrawals.
• Communications with on4d: Records of live chat conversations, emails, and any written communications between you and the on4d support team.

B. Automatically Collected Data

• Platform Usage Data: Records of all your betting activity on on4d — including date, time, bet type, amount, and outcome — are retained as valid transaction records.
• Technical Data: IP address, device type (Android, iPhone, laptop), web browser type, operating system, language settings, and time zone when you access on4d.
• Session Data: Login time, session duration, pages visited within the on4d platform, and general navigation patterns for the purpose of improving user experience.
• Cookie Data: Session cookies and preference cookies that help the on4d platform function more effectively and remember your settings.

On4d uses collected personal data solely for legitimate and necessary purposes. Below is the full list of data processing purposes we carry out:

• Service Provision: To create and manage your on4d account, grant you access to all games and platform features, and process deposits and withdrawals securely.
• Identity Verification: To verify that you meet on4d's membership eligibility requirements, including the minimum age of 18, and to ensure that you are registering under your own name.
• Security & Fraud Prevention: To detect and prevent suspicious activity, unauthorised login attempts, multiple account usage, and any form of fraud or exploitation of the on4d system.
• Legal Compliance: To fulfil applicable legal compliance obligations, including anti-money laundering (AML) requirements, know your customer (KYC) requirements, and reporting to the relevant authorities where required.
• Customer Support: To effectively and accurately handle enquiries, complaints, and assistance requests submitted to on4d's 24/7 support team.
• Service Communications: To send you important account-related notifications such as deposit confirmations, withdrawal confirmations, security updates, and changes to on4d's Terms or Privacy Policy.
• Platform Improvements: To analyse aggregated, anonymised usage patterns in order to identify areas for improvement in on4d's platform design, performance, and features.
• Responsible Gaming: To monitor betting patterns that may indicate signs of problem gambling and to provide relevant information or support to members who may need it.

On4d processes members' personal data on the basis of one or more lawful grounds as provided under Malaysia's Personal Data Protection Act 2010 and internationally recognised data protection principles:

• Consent: You have given your explicit consent to on4d to process your data for specific purposes, such as marketing, when you checked the consent box during registration or updated your account settings.
• Contract Performance: Processing is necessary for on4d to fulfil its service agreement with you — that is, to provide a functioning betting platform, process financial transactions, and manage your account.
• Legitimate Interest: on4d has a legitimate interest in processing certain data for platform security, fraud prevention, and service improvement purposes, in a manner that does not override members' privacy rights.
• Legal Obligation: Processing is necessary for on4d to comply with applicable legal obligations, including AML and KYC requirements, as well as any directives or orders from the relevant authorities.

On4d does not sell, rent, or trade members' personal data to any third party for marketing or commercial purposes. However, there are limited situations where on4d may need to share certain data with selected third parties:

All third parties working with on4d are required to comply with strict data protection standards and are prohibited from using on4d member data for any purpose other than what has been agreed upon in their service agreements with on4d.

On4d continuously invests in security infrastructure to protect members' personal data against unauthorised access, disclosure, alteration, or destruction. The following are the key security measures we have in place:

• 256-bit SSL Encryption: All communications between your web browser and on4d's servers are encrypted using 256-bit SSL/TLS — the same industry standard used by Malaysia's major banks.
• Data Encryption at Rest: Sensitive data stored in on4d's databases — including members' personal and financial information — is encrypted using robust encryption algorithms.
• Strict Access Controls: Only authorised on4d staff with a legitimate business need are permitted to access member personal data. All access is logged and regularly audited.
• Two-Factor Authentication (2FA): on4d offers 2FA for all member accounts as an added layer of security. Members are encouraged to enable 2FA through their account settings.
• 24/7 Security Monitoring: on4d's automated monitoring system runs around the clock to detect unauthorised access attempts, cyberattacks, and suspicious activity that may threaten the security of member data.
• Regular Security Audits: on4d undergoes regular security audits and penetration testing conducted by independent third parties to identify and address any system vulnerabilities before they can be exploited.
• Data Backup: on4d member data is automatically backed up to separate server locations to ensure service continuity and data recovery in the event of any technical incident.

On4d retains members' personal data only for as long as necessary to fulfil the original purpose for which it was collected, or for as long as required by applicable law. The following is a general guide to on4d's data retention periods:

• Active Account Data: For as long as your on4d account remains active and you continue using the platform. Your data will be retained throughout this period to ensure full access to all on4d features and services.
• Financial Transaction Data: A minimum of seven (7) years from the date of the transaction, in line with Malaysia's applicable financial record-keeping requirements.
• Betting Record Data: A minimum of five (5) years from the date of the bet, for dispute resolution, audit, and regulatory reporting compliance purposes.
• Identity Verification Data (KYC): For the duration of the active account and a minimum of five (5) years after account closure, in line with Malaysia's AML requirements.
• Support Communication Data: Two (2) years after the relevant issue is resolved, for reference purposes and to support quality audits of on4d's support services.

Once the relevant retention period has ended, personal data will be securely deleted or irreversibly anonymised so that it can no longer be linked to any specific individual. If you wish to request early deletion of your data, please refer to the Your Privacy Rights section below.

The on4d platform uses cookies and similar tracking technologies to enhance user experience, ensure the platform functions correctly, and gather information about how the platform is used. Cookies are small text files stored by your web browser when you visit the on4d website.

Types of cookies used by on4d:

• Mandatory Session Cookies: These cookies are necessary for the on4d platform to function properly. They store your login session information and allow you to navigate between pages without needing to log in repeatedly. These cookies are deleted when you close your browser.
• Preference Cookies: Used to remember your preferences — such as language, time zone, and display settings — so on4d can deliver a more personalised experience on your next visit.
• Analytics Cookies: on4d uses aggregated and anonymised analytics data to understand overall platform usage patterns — such as the most frequently visited pages and time spent in specific sections — for platform improvement purposes.
• Security Cookies: Used to detect suspicious activity, prevent fraud, and protect your on4d account from unauthorised access by recognising the devices you typically use.

Most web browsers allow you to manage cookies through your browser settings. You can choose to block all cookies, delete existing ones, or receive a notification before a new cookie is stored. However, blocking essential cookies may affect the functionality of the on4d platform and prevent you from logging in or using certain features correctly.

As an on4d member whose personal data is processed by us, you have several rights protected under Malaysia's PDPA and the data protection principles we adhere to. on4d is committed to respecting and facilitating the exercise of these rights:

• Right of Access: You have the right to request and receive a copy of the personal data on4d holds about you. We will process this request within 14 business days.
• Right to Rectification: If the personal data on4d holds about you is inaccurate or out of date, you have the right to request a correction. You can update most of your personal information directly through your on4d account settings.
• Right to Erasure: In certain circumstances, you have the right to request that on4d delete your personal data. Please note that this right may be limited where on4d has a legal obligation to retain certain data.
• Right to Restrict Processing: You have the right to request that on4d restrict the processing of your data in certain circumstances, such as when you are disputing the accuracy of your data or objecting to its processing.
• Right to Withdraw Consent: Where data processing is based on your consent (such as for marketing), you have the right to withdraw that consent at any time without affecting the validity of any processing that took place prior to your withdrawal.
• Right to Object: You have the right to object to the processing of your personal data for specific purposes, particularly for direct marketing by on4d.

There is one aspect of personal data use at on4d that sets it apart from typical digital platforms — its role in supporting our Responsible Gaming programme. on4d responsibly uses members' betting pattern data to help identify early signs of gambling-related issues and to deliver appropriate support.

Specifically, on4d may use your betting data to identify patterns such as a sudden spike in bet amounts, consecutive bets placed after significant losses, or usage that far exceeds limits you previously set yourself. When such patterns are detected, on4d may proactively reach out to you with information about available self-control tools or relevant support resources.

The use of your data for responsible gaming purposes is directly in your interest as an on4d member — it is not used for marketing or commercial purposes. You can access all of on4d's responsible gaming tools, including deposit limits, loss limits, session time limits, and account pause options, directly from your on4d account settings at any time.

On4d reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or platform developments. The "Updated" date displayed at the top of this page will always reflect the date the latest amendment takes effect.

When significant changes are made to this Privacy Policy — such as changes to how we use your data, new types of data being collected, or new third parties receiving member data — on4d will notify all active members via:

• An in-platform notification on on4d that will appear the first time you log in to your account after the changes take effect.
• Via email to the registered email address on your on4d account — please ensure your email address is always kept up to date in your account settings.

Your continued use of the on4d platform after any Privacy Policy amendment takes effect will be considered your acceptance of the updated terms. If you do not agree with the changes, you have the right to close your on4d account and request data deletion in accordance with the procedure set out in the Privacy Rights section above.

If you have any questions, concerns, or complaints about how on4d handles your personal data, or if you wish to exercise any of the privacy rights outlined in this Policy, please contact on4d through the following channels:

• Privacy Email: support@on4d.xyz — include the subject line "Privacy Enquiry" and your on4d account number to help us process your request faster.
• Live Chat: Available 24/7 directly within the on4d platform after logging in to your account. For privacy matters requiring identity verification, written communication via email is recommended.
• Response Time: on4d is committed to responding to all privacy-related enquiries within 14 business days. For urgent account security issues, our support team is available to assist you promptly via live chat.

On4d takes every privacy complaint seriously. If you feel that on4d has not responded to your request satisfactorily, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant regulatory authority as required by applicable law.