Privacy Policy

Introduction

4dyes ("we", "us", "our", or "the Platform") operates the online sports betting and live casino platform accessible at https://4dyes.cam. We are headquartered in Kuala Lumpur, Malaysia, and our services are directed at adult players aged 21 years and above residing in Malaysia and other jurisdictions where access to the Platform is lawful.

This Privacy Policy ("Policy") describes the types of personal data we collect from users ("you", "the Player", "the User"), the purposes for which that data is processed, the conditions under which it may be shared, and the rights available to you in relation to your personal data.

By registering an account on 4dyes, accessing the Platform, or using any of our services — including sports betting on Liga Super Malaysia, EPL, and UFC markets, live casino games, slot games, 4D lottery, and payment services via Touch 'n Go eWallet, DuitNow, Maybank, CIMB, and FPX — you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

Data We Collect

4dyes collects personal data through multiple channels, including direct submission by the Player during registration and use of the Platform, automated collection through cookies and analytics tools, and from third-party service providers such as payment processors and identity verification services. The categories of personal data we collect include the following:

3.1 Registration & Identity Data

• Full legal name as it appears on your official identity document
• Date of birth (for age verification — you must be aged 21 or above)
• Residential address in Malaysia (e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, or other locations)
• Email address and mobile phone number
• Chosen username and encrypted password

3.2 Identity Verification (KYC) Data

• Scanned or photographed copy of your Malaysian MyKad, passport, or driver's licence
• Proof of address document (e.g., Tenaga Nasional utility bill, Telekom Malaysia statement, or bank statement dated within 3 months)
• Selfie photograph taken while holding your identity document, where requested

3.3 Financial & Transaction Data

• Deposit and withdrawal history, including payment method details (e-wallet account identifiers, bank account details via DuitNow or FPX — no full card or banking credentials are stored by 4dyes directly)
• Transaction timestamps, amounts in MYR, and payment processor references
• Betting and gaming activity including wager amounts, game selections, and outcomes
• Bonus usage, VIP tier status, and loyalty programme activity

3.4 Technical & Usage Data

• IP address and device identifiers
• Browser type, operating system, and device model
• Session duration, pages visited, and interaction logs on the Platform
• Login timestamps and geographical access data

3.5 Communication Data

• Live chat transcripts and support ticket correspondence
• Email communications between you and 4dyes
• Any information you voluntarily provide in feedback or survey responses

How We Process Your Data

4dyes processes your personal data for the following specific purposes. In each case, we have identified the data category relied upon and the legitimate basis for that processing:

Legal Basis for Processing

4dyes processes personal data on the following legal grounds, depending on the specific processing activity:

• Performance of a Contract: Processing that is necessary to register your account, manage your gameplay, process financial transactions in MYR, and provide the services you have contracted with us to receive.
• Legal Obligation: Processing required to comply with applicable laws, including anti-money laundering (AML) legislation, know-your-customer (KYC) requirements, responsible gambling obligations, and tax or financial reporting duties.
• Legitimate Interests: Processing carried out in pursuit of 4dyes's legitimate business interests, including fraud detection, platform security, abuse prevention, and service improvement, provided these interests are not overridden by your rights and freedoms.
• Consent: Where we rely on your consent to process data — for example, for optional marketing communications or non-essential cookies — you have the right to withdraw that consent at any time without prejudice to processing already carried out.

Data Sharing & Disclosure

4dyes does not sell, rent, or trade your personal data to third parties for marketing purposes. Personal data may be disclosed to the following categories of recipients strictly where necessary:

• Payment Processors: Malaysian payment service providers including Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB Bank, Public Bank, Hong Leong Bank, RHB Bank, DuitNow, and FPX, for the purpose of processing MYR deposits and withdrawals on your behalf.
• Identity Verification Providers: Licensed KYC and AML service providers who assist us in verifying the identity and age of players. These providers are contractually bound to process data only for the stated purpose.
• Game & Platform Technology Providers: Third-party software providers who supply casino games, sports betting engines, or live dealer technology. These providers may access aggregated or pseudonymised game activity data as part of service delivery.
• Fraud Prevention & Cybersecurity Partners: Specialist providers who assist 4dyes in detecting and preventing fraudulent activity, account takeovers, and other security threats.
• Legal and Regulatory Authorities: Where required by law, court order, or regulatory instruction, 4dyes may disclose personal data to law enforcement agencies, tax authorities, or other governmental bodies.
• Professional Advisors: Legal counsel, auditors, and financial advisors who are bound by professional confidentiality obligations.

Cookies & Tracking Technologies

4dyes uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and analyse usage patterns. By continuing to use the Platform after being notified of our cookie use, you consent to the placement of cookies on your device in accordance with this Policy.

The types of cookies we use include:

• Strictly Necessary Cookies: Essential to the functioning of the Platform, including session management, login authentication, and security features. These cannot be disabled without preventing core Platform functionality.
• Analytical Cookies: Used to collect anonymised information about how visitors interact with the Platform — pages visited, time spent, navigation paths — to help us improve the user experience. Data is aggregated and not linked to individual player identities.
• Functional Cookies: Enable the Platform to remember your preferences such as language settings and previously used payment methods to provide a more personalised experience.
• Performance Cookies: Monitor Platform performance, including page load times and error reporting, to support ongoing technical improvements.

You may manage or disable non-essential cookies at any time through your browser settings. Please note that disabling certain cookies may affect the functionality of some Platform features. 4dyes does not use third-party advertising cookies or cross-site tracking for commercial profiling purposes.

Data Retention

4dyes retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention guidelines apply:

• Account and Identity Data: Retained for the duration of the account's active status and for a minimum period of five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements.
• Transaction and Financial Data: Retained for a minimum of seven (7) years from the date of the transaction, in compliance with financial record-keeping obligations.
• KYC Verification Documents: Retained for the duration of the account relationship and for the statutory period thereafter, typically five (5) years from account closure, unless a longer period is required by applicable law.
• Customer Support Records: Live chat transcripts and support correspondence are retained for up to three (3) years from the date of the interaction.
• Technical and Usage Logs: Aggregated analytics data may be retained indefinitely in anonymised form. Individually identifiable session logs are retained for up to twelve (12) months.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in a manner that prevents re-identification.

Data Security

4dyes implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• Encryption in Transit: All data transmitted between your device and the 4dyes Platform is encrypted using TLS/SSL (256-bit) protocols. You can verify this by the padlock icon in your browser's address bar when visiting https://4dyes.cam.
• Encryption at Rest: Sensitive personal data — including identity documents and financial records — is encrypted at rest within our secure data storage systems.
• Access Controls: Access to personal data within 4dyes's systems is restricted on a strict need-to-know basis. Staff are granted access only to the data categories required to perform their specific role.
• Security Audits: 4dyes conducts regular internal and third-party security assessments to identify and remediate vulnerabilities in our systems and data handling processes.
• Incident Response: In the event of a data breach that poses a risk to Player rights and freedoms, 4dyes will notify affected individuals and relevant authorities in accordance with applicable data protection law.

Your Rights

As a player whose personal data is processed by 4dyes, you hold the following rights in respect of your personal data. These rights may be subject to limitations where the processing is required by law or is necessary for the performance of our contractual obligations to you:

To exercise any of these rights, please submit a written request to [email protected] (plain text contact only). We will acknowledge your request within seven (7) business days and aim to fulfil it within thirty (30) days, subject to identity verification and any applicable legal limitations.

Minors & Age Verification

4dyes is strictly an adult platform. Our services are exclusively available to individuals aged 21 years and above. We do not knowingly collect personal data from persons below the age of 21. Age verification is a mandatory step in the registration and KYC process.

Where 4dyes discovers or is notified that personal data has been collected from a person below the age of 21, we will immediately suspend the relevant account, delete the associated personal data without delay, and refund any real-money funds to the deposit source where verifiably possible.

If you are a parent or guardian and believe that a minor in your care has registered an account on 4dyes, please contact us immediately at [email protected]. We take underage gambling very seriously and will act on such reports promptly.

Third-Party Services

The 4dyes Platform may use or integrate with third-party services, including payment processors, game providers, and analytics tools. Each of these third parties operates its own privacy policy and data handling practices, which are independent of this Policy. Categories of third-party service providers involved in data processing include:

• Payment Infrastructure Providers: Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, RHB Bank, DuitNow, and FPX payment networks operate their own data protection frameworks. When you initiate a deposit or withdrawal through these channels, data is transmitted to the relevant provider in accordance with their terms.
• Casino & Sports Betting Technology Providers: Third-party game studios and sports data feed providers who supply game content and live odds data to the Platform. These providers may collect anonymised game telemetry data as part of operating their software.
• Analytics & Performance Tools: Platform performance and user behaviour analytics tools that process session and usage data in aggregated or pseudonymised form to help us improve service quality.

4dyes takes reasonable steps to ensure that all third-party providers who access personal data through our Platform maintain appropriate data protection standards. However, 4dyes accepts no liability for the independent data practices of third-party providers once data leaves our Platform systems in the course of a transaction or interaction initiated by the Player.

Policy Changes

4dyes reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or business operations. Where changes are material — meaning they significantly affect how we process your personal data or your rights in respect of it — we will provide notice via the email address registered to your account and/or via a prominent notice on the Platform, at least seven (7) days prior to the effective date of the amended Policy.

Your continued use of the Platform after the effective date of any update constitutes your acknowledgement of and agreement to the revised Privacy Policy. We recommend that you review this Policy periodically to remain informed about how 4dyes handles your personal data. The current version of this Policy is always accessible at https://4dyes.cam/privacy-policy.

The version number and effective date at the top of this document reflect the most recent revision. Prior versions of this Policy may be requested from our support team.

Contact Us

For any questions, requests, or concerns relating to this Privacy Policy or our data processing practices, please contact the 4dyes team using the details provided below. Data subject rights requests should be submitted in writing for proper handling and documentation.

When submitting a data rights request, please include your registered email address, a description of the specific right you wish to exercise, and a copy of a valid identity document so that we may verify your identity before processing the request. This verification step is required to prevent unauthorised access to personal data.