Privacy Policy — visa4d

This Privacy Policy ("Policy") sets out the basis on which visa4d ("we", "us", "the Operator", "the Platform") collects, processes, stores, and shares personal data relating to individuals ("you", "Player", "User") who access or use the visa4d website at https://visa4d.lat and any associated services, features, or products made available therein.

visa4d takes its obligations as a data controller seriously. We are committed to handling your personal information in a lawful, fair, and transparent manner, consistent with applicable data protection legislation and internationally recognised privacy standards.

By registering an account, depositing funds, or otherwise using the visa4d platform, you acknowledge that you have read, understood, and consented to the data practices described in this Policy. This Policy should be read alongside our Terms & Conditions.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person — for example, your name, email address, date of birth, or payment details.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing personal data. For users of visa4d, the Data Controller is the visa4d Operator.
• "Data Processor" means any third party that processes personal data on behalf of visa4d under a data processing agreement.
• "KYC" means Know Your Customer — the identity and age verification process conducted by visa4d as required by applicable regulations.
• "Cookie" means a small text file placed on your device by a website to record information about your browsing session and preferences.
• "PDPA" refers to Malaysia's Personal Data Protection Act 2010, which governs the processing of personal data in commercial transactions in Malaysia.

visa4d collects personal data in several categories. The specific data we hold about you depends on how you use the platform and what information you have provided during registration and ongoing account activity.

visa4d collects personal data through the following channels and mechanisms:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or respond to a survey or promotion.
• Automatically: When you use the platform, our servers and analytics tools automatically log technical data including IP addresses, session duration, pages visited, device type, and browser information via cookies and similar technologies.
• From payment processors: When you deposit or withdraw using Malaysian payment methods such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, or Public Bank, we receive transaction confirmation data from the relevant payment processor sufficient to verify and record the transaction.
• From identity verification providers: Where third-party KYC verification services are used to confirm your identity and age, we receive the results of those verification checks.
• From fraud prevention services: We may receive data from third-party risk and fraud detection partners to help identify and prevent fraudulent account activity.

visa4d processes your personal data on one or more of the following legal bases:

• Contractual Necessity: Processing is necessary to perform our contractual obligations to you as a registered player — including account management, payment processing, game provision, and customer support.
• Legal Obligation: Processing is required to comply with applicable legal and regulatory requirements, including anti-money laundering (AML) obligations, KYC verification requirements, and responsible gambling regulations.
• Legitimate Interests: Processing is necessary for the legitimate interests of visa4d, including fraud prevention, platform security, service improvement, and responsible gambling monitoring — provided those interests are not overridden by your data protection rights.
• Consent: Where processing is based on your consent — for example, direct marketing communications — you may withdraw that consent at any time by contacting our support team or updating your account preferences.

The personal data we collect is used for the following purposes:

• Account creation and management: To register your account, verify your identity and age, maintain your account settings, and manage your relationship with visa4d as a platform user.
• Payment processing: To facilitate deposits and withdrawals in MYR via your chosen payment method, reconcile transactions, and maintain accurate financial records.
• KYC and compliance: To verify that you are aged 21 or above, confirm your identity, and satisfy our anti-money laundering and responsible gambling obligations under applicable law.
• Customer support: To respond to your enquiries, resolve complaints, process responsible gambling requests (such as deposit limit changes or self-exclusion), and maintain a record of our communications with you.
• Platform security and fraud prevention: To detect, investigate, and prevent fraudulent activity, unauthorised access, money laundering, and abuse of our platform or bonus systems.
• Responsible gambling monitoring: To monitor gameplay patterns for indicators of problem gambling behaviour and, where appropriate, initiate welfare outreach or apply responsible gambling measures.
• Marketing communications: Where you have opted in, to send you promotional offers, bonus notifications, and news about new features at visa4d. You may opt out at any time.
• Platform improvement: To analyse aggregate usage data, identify areas for improvement, and enhance the overall player experience on the visa4d platform.

visa4d does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate confidentiality and data protection safeguards:

• Payment processors: Malaysian payment service providers including DuitNow operators, FPX network participants, and e-wallet platforms (Touch 'n Go eWallet, Boost, GrabPay) receive the transaction data necessary to process your deposits and withdrawals.
• KYC and identity verification providers: Third-party identity verification services receive the documents and data necessary to confirm your identity and age as part of our KYC process.
• Fraud and risk management partners: Third-party fraud detection services may receive limited account and behavioural data to assist with identifying and preventing fraudulent activity.
• Technology and infrastructure providers: Cloud hosting, database management, and software service providers who process data on our behalf under binding data processing agreements are granted only the minimum access necessary to deliver their contracted services.
• Regulatory and law enforcement authorities: Where required by applicable law, a court order, or a lawful request from a competent authority, visa4d may disclose personal data to regulators, law enforcement agencies, or other public bodies. We will notify you of such disclosure where legally permitted to do so.
• Professional advisers: Lawyers, auditors, and accountants engaged by visa4d may access personal data where necessary to perform their professional services, subject to professional confidentiality obligations.

visa4d retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including to satisfy applicable legal, regulatory, accounting, and reporting obligations. The following general retention periods apply:

Following the expiry of the applicable retention period, personal data will be securely deleted or anonymised in a manner that prevents identification of the individual.

visa4d uses cookies and similar tracking technologies to operate and improve the platform. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the basic operation of the platform, including maintaining your logged-in session, managing security tokens, and enabling core functionality. These cookies cannot be disabled without impairing platform usability.
• Performance & Analytics Cookies: Used to collect aggregated, anonymised data about how players interact with the platform — for example, which pages are most frequently visited and where errors occur. This data is used to improve platform performance and user experience.
• Functional Cookies: Used to remember your preferences, such as language settings and responsible gambling tool configurations, so that you do not need to re-enter them each session.
• Security Cookies: Used to detect and prevent fraudulent activity, including session hijacking and account takeover attempts.

visa4d does not deploy third-party advertising or targeting cookies on the platform without your explicit consent. You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies may affect platform functionality.

visa4d implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or destruction. Our security practices include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the visa4d platform.
• Encryption at rest for stored personal data, including KYC documents and payment information.
• Password hashing — account passwords are stored using industry-standard one-way hashing algorithms. visa4d staff cannot retrieve your plain-text password.
• Access controls — internal access to personal data is restricted to authorised personnel on a strict need-to-know basis, with all access logged and audited.
• Regular security audits and penetration testing of platform infrastructure and application code.
• Incident response procedures — in the event of a data breach that poses a risk to players, visa4d will notify affected individuals and relevant authorities as required by applicable law.

While visa4d implements robust security measures, no system is entirely immune to attack. Players are encouraged to use strong, unique passwords and to contact our support team immediately if they suspect any unauthorised access to their account.

visa4d may transfer personal data to, and process personal data in, countries outside of Malaysia where our third-party service providers or infrastructure partners are located. Where such transfers occur, visa4d ensures that appropriate safeguards are in place to protect your personal data, including:

• Entering into data processing agreements with third-party processors that require them to handle personal data in accordance with applicable data protection standards.
• Ensuring that recipient countries or service providers offer an adequate level of data protection, or implementing additional contractual protections where they do not.
• Limiting the scope of data transferred to only what is strictly necessary for the third party to perform its contracted services.

As a data subject, you hold the following rights in relation to the personal data that visa4d holds about you. To exercise any of these rights, please contact our support team at [email protected].

The visa4d platform is strictly intended for adults aged 21 years and above. visa4d does not knowingly collect, process, or retain personal data relating to persons under the age of 21.

Where visa4d discovers that personal data has been collected from a person under 21 — whether through misrepresentation during registration or otherwise — the relevant account will be immediately closed, all funds will be forfeited, and the associated personal data will be deleted in accordance with applicable data protection obligations, except where retention is required for legal or regulatory compliance purposes.

If you believe that visa4d may have inadvertently collected data relating to a person under 21, please contact us immediately at [email protected].

The visa4d platform may contain references to or integrations with third-party services, including payment providers such as Touch 'n Go eWallet, Boost, GrabPay, and Malaysian banking platforms. When you interact with these third-party services, you are subject to their respective privacy policies, over which visa4d has no control and for which visa4d accepts no responsibility.

We recommend reviewing the privacy policies of any third-party service provider before submitting personal data to them directly.

visa4d reserves the right to revise this Privacy Policy at any time. Any material changes to the way in which we process your personal data will be communicated to registered players via email or in-platform notification prior to the change taking effect, where reasonably practicable.

Minor or non-material amendments — such as typographical corrections or clarifications — may be made without separate notification. The "Last Updated" date at the top of this Policy will always reflect the date of the most recent revision.

Continued use of the visa4d platform following any published amendment to this Policy constitutes your acceptance of the revised terms. If you do not agree with any revision, you should cease using the platform and contact us to close your account.

For any questions, requests, or concerns relating to this Privacy Policy or the handling of your personal data by visa4d, please contact our Data Protection team using the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: Please use "Privacy Request – [Your Username]" for all data rights or privacy-related enquiries to ensure prompt routing to the correct team.
• Live Chat: Available 24/7 on the visa4d platform — for urgent data concerns, live chat allows the fastest initial response.
• Response Time: Privacy and data rights requests are acknowledged within 5 business days and fully resolved within 30 calendar days of receipt. Complex requests may require an extended period with prior notification.
• Support Hours: 24/7, with peak staffing aligned to Malaysia Time (MYT, UTC+8).