Privacy Policy

This Privacy Policy ("Policy") is published by Dana4D ("dana4d", "we", "us", "our") and applies to all users ("you", "your", "User", "Player") of the dana4d online gaming and sports betting platform accessible at dana4d.lat, including any associated web interfaces, mobile-optimised pages, or digital services operated under the dana4d brand.

Dana4d takes the privacy and security of your personal data seriously. This Policy sets out the categories of personal data we collect, the lawful bases on which we process that data, the purposes for which it is used, the circumstances under which it may be shared with third parties, and the rights available to you as a data subject.

By registering an account on the dana4d platform, accessing our services, or otherwise interacting with our platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. Where we rely on your consent as a legal basis for processing, you have the right to withdraw that consent at any time, subject to the provisions set out in Section 11 (Your Rights).

For the purposes of this Privacy Policy, the following terms shall have the meanings assigned below:

• "Personal Data" means any information relating to an identified or identifiable natural person — including but not limited to name, identification number, contact details, financial data, and online identifiers.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, transmission, erasure, or destruction.
• "Data Controller" means dana4d, which determines the purposes and means of processing personal data collected via the Platform.
• "Data Processor" means any third-party service provider that processes personal data on behalf of dana4d in accordance with dana4d's instructions.
• "KYC" means Know Your Customer — the regulatory-driven identity and document verification process applied during account registration and prior to withdrawal processing.
• "Cookies" means small data files stored on your device by your browser when you visit the Platform, used to maintain session state, track usage patterns, and support analytics functions.
• "Sensitive Personal Data" means personal data that warrants heightened protection, including identity document numbers, financial account details, and source-of-funds documentation.

Dana4d collects personal data across several categories, depending on how you interact with the Platform. The table below summarises the principal categories of data collected and typical examples within each category.

Dana4d collects personal data through the following means:

Direct Collection

Information you provide directly when registering an account, completing KYC verification, making deposits or withdrawal requests, contacting our customer support team, or participating in promotions and surveys. This includes all data entered into forms on the dana4d platform.

Automatic Collection

Technical and usage data collected automatically as you interact with the Platform. This includes IP addresses, device identifiers, browser session data, and in-platform behavioural data captured through cookies, web beacons, and server log files.

Third-Party Sources

We may receive data about you from third-party sources in the following circumstances:

• Identity verification providers — data returned during KYC document authentication checks.
• Payment processors — transaction confirmation and payment status data from providers including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, RHB, and cryptocurrency networks.
• Fraud prevention and AML services — risk-scoring data from compliance screening providers.
• Analytics platforms — aggregated and anonymised usage data to help us understand platform performance and user experience trends.

Dana4d processes personal data only where a lawful basis for doing so exists. Depending on the specific processing activity, the applicable legal basis will be one or more of the following:

• Contractual Necessity: Processing required to perform our contractual obligations to you — including account management, payment processing, and service delivery — forms the primary legal basis for most data processing on the Platform.
• Legal Obligation: Processing required to comply with applicable legal and regulatory obligations, including anti-money laundering (AML) regulations, identity verification requirements, and financial record-keeping obligations.
• Legitimate Interests: Processing carried out in furtherance of dana4d's legitimate business interests — including fraud prevention, platform security, product improvement, and responsible gambling monitoring — where these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily in relation to marketing communications and non-essential cookies. Where consent is the legal basis, you may withdraw it at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Dana4d uses your personal data for the following purposes:

Account Management & Service Delivery

To create and maintain your account, process deposits and withdrawals in MYR via your chosen payment method, settle bets and game outcomes, manage your VIP tier status and loyalty rewards, and provide customer support.

Identity Verification & Compliance

To conduct KYC verification, verify your age (21+ requirement), authenticate identity documents, conduct ongoing AML monitoring, screen against sanctions and PEP lists, and maintain required regulatory records.

Security & Fraud Prevention

To detect, investigate, and prevent fraudulent activity, account takeover attempts, money laundering, match-fixing, multi-account abuse, and other prohibited conduct. Technical data including IP addresses and device fingerprints are used for security monitoring.

Responsible Gambling

To monitor betting patterns that may indicate problem gambling behaviour, enforce self-imposed deposit limits and session controls, administer self-exclusion requests, and contact players where our monitoring identifies potential at-risk behaviour.

Platform Improvement & Analytics

To analyse usage patterns, measure platform performance, identify technical issues, and inform product development decisions — helping us continue to improve the dana4d experience for Malaysian players.

Communications

To send transactional communications (account confirmations, withdrawal notifications, security alerts), respond to support enquiries, and where you have consented, send promotional communications about relevant offers and products.

Dana4d does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share personal data with third parties only in the circumstances described below:

Service Providers (Data Processors)

We engage third-party service providers who process personal data on our behalf under binding data processing agreements. These providers operate strictly within dana4d's instructions and are not permitted to use your data for their own purposes. Categories of service providers include:

• Payment processors and e-wallet providers (Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, RHB, cryptocurrency networks)
• KYC and identity verification platform providers
• AML screening and compliance service providers
• Customer support platform providers
• Cloud infrastructure and hosting service providers
• Analytics and performance monitoring providers

Legal & Regulatory Authorities

We may disclose personal data to law enforcement agencies, regulatory authorities, courts, or other public bodies where required to do so by applicable law, court order, or regulatory obligation — or where we believe disclosure is necessary to protect the rights, property, or safety of dana4d, our players, or the public.

Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of dana4d's business, personal data held by dana4d may be transferred to the relevant acquiring or successor entity as part of that transaction, subject to the same privacy protections set out in this Policy.

Dana4d retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The specific retention period applied to each category of data is determined by the nature of the data and the legal basis for its retention.

As a general principle: account data is retained for the duration of the active account relationship and for a minimum of five (5) years following account closure, in compliance with AML and financial record-keeping obligations. KYC documentation and transaction records are typically retained for a minimum of five to seven years from the date of the relevant transaction or account closure, consistent with applicable regulatory requirements.

Technical and analytics data is retained for shorter periods appropriate to its use — typically 13 months for analytics data and 12 months for server log files. Upon expiry of the applicable retention period, personal data is securely deleted or anonymised.

Where you request deletion of your personal data under the right of erasure (Section 11), dana4d will assess the request against applicable legal retention obligations. Some categories of data may be required to be retained regardless of an erasure request — in which case we will inform you of the applicable legal basis for continued retention.

Dana4d implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• SSL/TLS encryption across all data transmissions between your device and the Platform.
• Data encryption at rest for sensitive personal data held in our databases.
• Access controls limiting access to personal data to authorised personnel only, based on the principle of least privilege.
• Two-factor authentication (2FA) available to all account holders and required for administrative access to production systems.
• Regular security assessments including vulnerability scanning and penetration testing of platform infrastructure.
• Incident response procedures for the detection, investigation, and notification of data security incidents.

Notwithstanding the above, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. You are responsible for maintaining the confidentiality of your account credentials and for notifying dana4d immediately if you suspect any unauthorised access to your account.

The dana4d platform uses cookies and similar tracking technologies to operate core platform functionality, analyse usage, and improve the user experience. Cookies are small text files stored on your device by your browser when you visit the Platform.

Categories of Cookies Used

• Strictly Necessary Cookies: Required for core platform functionality including user authentication, session management, and security. These cookies cannot be disabled without affecting your ability to use the Platform.
• Functional Cookies: Enable enhanced functionality such as remembering your language preferences, display settings, and localisation options.
• Analytics Cookies: Help us understand how users interact with the Platform — pages visited, time spent, navigation paths, and error occurrences. Data collected is aggregated and used solely for internal platform improvement.
• Security Cookies: Support fraud detection, bot prevention, and account security monitoring functions.

You can manage cookie preferences through your browser settings. Please note that disabling certain categories of cookies may impair your ability to use some features of the Platform. Dana4d does not use cookies to serve third-party advertising or to track your activity across external websites.

As a data subject, you hold the following rights in relation to the personal data that dana4d holds about you. Dana4d will respond to all valid data rights requests within 30 calendar days of receipt.

• Right of Access: You have the right to request confirmation of whether dana4d processes personal data about you and, if so, to receive a copy of that data together with information about how it is used.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to any overriding legal retention obligations applicable to dana4d.
• Right to Restrict Processing: You may request that dana4d restricts the processing of your personal data in certain circumstances — for example, while the accuracy of data is under dispute.
• Right to Data Portability: Where processing is based on consent or contractual necessity, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on legitimate interests, including direct marketing. Upon receipt of a valid objection to direct marketing, dana4d will cease such processing immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, please contact our data protection team via the email address provided in Section 15. Please include your full name, registered account username, and a clear description of the right you wish to exercise. We may request proof of identity before processing your request.

The dana4d platform integrates with third-party service providers to deliver payment processing, identity verification, customer support tooling, and analytics functions. Where such third parties process personal data on dana4d's behalf, they do so as Data Processors under binding agreements that require them to maintain appropriate security standards and process data only as instructed by dana4d.

The dana4d platform does not contain links to external websites for gaming, advertising, or commercial purposes. Any third-party services referenced in this Policy (such as payment processors including Maybank, CIMB, Public Bank, Touch 'n Go eWallet, Boost, and GrabPay) operate under their own privacy policies and terms of service. Dana4d is not responsible for the privacy practices of independent third-party organisations.

Where required by applicable data protection law, dana4d will only transfer personal data to third parties located outside Malaysia where adequate data protection safeguards are in place, including through standard contractual clauses or equivalent mechanisms.

The dana4d platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals below the age of 21. Age verification is conducted as part of the KYC registration process.

If dana4d discovers or is notified that an account has been registered by a person under 21 years of age, the account will be immediately suspended, all associated personal data will be deleted from our active systems (subject to any retention obligations arising from compliance requirements), and any funds held in the account will be handled in accordance with applicable law.

If you believe a minor has registered an account on the dana4d platform, please contact our support team immediately at the address provided in Section 15.

Dana4d reserves the right to amend or update this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal or regulatory requirements, or technological developments. The "Last Updated" date at the top of this page will be revised whenever material changes are made.

Where changes are material — meaning they significantly affect the nature of the data we collect, the purposes for which it is used, or the rights available to you — dana4d will provide advance notification via the email address registered to your account and/or through a prominent notice on the Platform prior to the changes taking effect.

Your continued use of the dana4d platform following the posting of any updated Privacy Policy constitutes your acknowledgement of and agreement to the revised terms. If you do not accept the revised Policy, you should discontinue use of the Platform and close your account.

For any queries, concerns, or requests relating to this Privacy Policy or the processing of your personal data by dana4d, please contact our data protection and support team using the details below. We will acknowledge your enquiry promptly and aim to provide a substantive response within 30 calendar days.

When submitting a data subject rights request, please include your registered account username, full name as it appears on your account, the specific right you wish to exercise, and any supporting detail relevant to your request. Dana4d may require proof of identity before processing sensitive data rights requests.

Alternatively, general enquiries about the platform, responsible gambling tools, or account management may be directed to the same email address or handled via the live chat feature available during operating hours.