Privacy Policy 4dmoon –
Member Personal Data Protection

Welcome to the 4dmoon Privacy Policy. This document is published by 4dmoon ("we", "our platform") and applies to all users who access or register on the website 4dmoon.onl as well as our mobile app. We understand that your trust is the foundation of our relationship, and we are fully committed to managing your personal information in a transparent, responsible, and legally compliant manner.

This Privacy Policy details the types of personal data we collect, the reasons it is collected, how it is used and protected, who it may be disclosed to, and what rights you hold as the data owner. Please read this document carefully before using our services.

By registering an account, accessing the platform, or continuing to use 4dmoon's services, you are deemed to have read, understood, and agreed to the terms set out in this Privacy Policy. If you do not agree with any part of this policy, we advise you not to use our services.

4dmoon collects your personal data through several channels — including during the registration process, while using our services, through interactions with our support team, and automatically via technology embedded in our platform. Below is a complete breakdown of the data types we collect and their purposes:

In certain situations, particularly during the KYC (Know Your Customer) verification process, we may request a copy of official identification documents such as your MyKad or passport, as well as recent bank statements. These documents are used solely for identity verification and legal compliance purposes.

The personal data we collect is used solely for legitimate, clearly stated purposes. 4dmoon will not use your data for any purpose other than those described below without first obtaining your renewed consent.

The primary purposes for using your data:

• Account Management: Creating, verifying, and managing your member account, including secure login and password recovery.
• Service Delivery: Enables you to access all games, make deposits, withdraw wins, and use all platform features seamlessly.
• KYC Verification: Meeting legal requirements related to identity verification, anti-money laundering (AML), and financial regulatory compliance.
• Customer Support: Providing accurate technical assistance and responses when you contact our support team.
• Platform Security: Detecting and preventing fraud, unauthorized access, bonus abuse, and any suspicious activity.
• Product Improvement: Analyzing aggregate usage patterns to improve the user experience, interface, and new platform features.
• Service Communications: Sending important notifications related to your account, transaction confirmations, policy updates, and promotional information you have consented to receive.
• Legal Compliance: Fulfilling reporting obligations to the relevant authorities when required by law.

4dmoon does not sell, rent, or disclose your personal data to third parties for commercial purposes without your explicit consent. However, in the course of operating the platform, certain third parties may receive limited access to your data solely to perform services we have contracted with them.

Categories of third parties that may receive your data:

• Payment Gateway Providers: To securely process deposits and withdrawals. They only receive the data necessary to complete financial transactions.
• KYC Service Providers: Licensed third-party identity verification companies are used to perform automated document checks.
• Game Providers: Game studios and content providers may receive game session data that cannot directly identify any individual.
• Competent Authority: We will disclose your data if required by Malaysian law, court order, or official investigation by a law enforcement agency.
• Technical & IT Consultant: Technical infrastructure providers bound by strict confidentiality agreements with only the minimum necessary access.

All third parties working with 4dmoon are required to sign strict data processing agreements, ensuring they handle your information with the same level of protection we apply. We do not permit any third party to use your data for their own purposes.

4dmoon uses cookies and similar tracking technologies to enhance user experience, maintain session security, and analyse platform usage patterns. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session verification, account security, and basic navigation. These cookies cannot be disabled.
• Performance Cookies: Collecting anonymous information about how visitors use our website — most frequently visited pages, errors encountered, and page load times. This data is used solely to improve platform performance.
• Functional Cookies: Saving your preferences such as language, display settings, and login information you have chosen to retain for convenience.
• Analytics Cookies: Helps us understand aggregate user behavior to make better product decisions. This information cannot identify you individually.

You can manage your cookie preferences through your browser settings. However, disabling certain cookies may affect the functionality of some platform features. Please refer to your browser's documentation for detailed guidance on managing cookies.

Protecting your personal data from unauthorized access, loss, alteration, or disclosure is our highest technical priority. 4dmoon continuously invests in cutting-edge security infrastructure to keep your data safe at all times.

Technical security measures we implement:

• Data encryption in transit using TLS 1.3 and 256-bit SSL protocols.
• Data encryption at rest for all sensitive records.
• Two-factor authentication (2FA) is available and encouraged for all member accounts.
• Real-time security threat monitoring 24 hours a day, 7 days a week.
• Regular security audits conducted by independent third-party cybersecurity experts.
• Clear and tested incident response procedures for data breach situations.
• Role-based access control (RBAC) for all internal staff.
• Regular data backups and tested disaster recovery procedures.

While we take all reasonable precautions, no security system can guarantee 100% protection at all times. You also play an important role in keeping your account secure — please use a strong password, do not share your login details, and ensure your device is always updated with the latest security patches.

4dmoon does not retain your personal data longer than necessary for the purposes stated in this policy or as required by applicable law. Retention periods vary depending on the data type and the relevant operational or legal compliance requirements.

• Active Account Data: Retained for as long as your account is active, plus an additional period after account closure to meet legal requirements.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's financial compliance and anti-money laundering legal requirements.
• Support Communication Logs: Retained for 3 years from the date of last interaction for reference and service continuity purposes.
• Usage Data & Technical Logs: Retained for a maximum of 12 months, after which it is anonymised or automatically deleted.
• KYC Documents: Retained for the duration of the active account period plus 5 years after account closure, in accordance with legal compliance requirements.

When your data is no longer needed and there is no legal obligation to retain it, we will securely delete it using methods that ensure it cannot be recovered.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as the data owner hold certain rights regarding the personal information we hold. 4dmoon respects and facilitates the exercise of all such rights. Your rights are as follows:

4dmoon services are exclusively for individuals aged 18 years and above. We do not intentionally collect, store, or process personal data of any individual under the age of 18.

All new registrants are required to confirm that they have reached the legal age. If we determine that collected data belongs to a minor, we will immediately delete that data and close the account in question without notice.

If you are a parent or guardian who believes your child has registered an account on our platform, please contact our support team immediately. We will take prompt action to resolve the matter.

4dmoon reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new platform features. Whenever material amendments are made, we will notify you via in-app notification or your registered email before the changes take effect.

The "Updated" date shown at the top of this page will always reflect the latest version of our Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your information.

If you have any questions, concerns, or complaints regarding how we handle your personal data, we encourage you to reach out to us directly. Our data protection team is ready to assist you at any time.

You can reach us via:

• Live Chat: Available 24 hours a day, 7 days a week through our platform. This is the fastest way to get an immediate response.
• Support Email: [email protected] — for detailed privacy enquiries and data rights requests. We aim to respond within 2 business days.
• FAQ Page: For frequently asked questions, please visit our FAQ page covering a wide range of topics related to privacy and account security.

We take every privacy-related complaint seriously and are committed to resolving each issue within a reasonable timeframe. If you are not satisfied with our response, you also have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia or the relevant authority in your jurisdiction.