Privacy Policy bata4d — Personal Data Protection for Malaysia Members

This Privacy Policy applies to all services offered by bata4d — including the official website at bata4d.win, Android and iOS mobile apps, and any official communication channels including customer support via live chat.

By registering as a bata4d member, using any of our services, or simply browsing our website, you consent to the collection and use of your personal data in accordance with the terms set out in this document.

Bata4d collects your personal data through several means — directly during registration and platform use, and automatically through industry-standard tracking technologies.

Data You Provide Directly:

• Full name, date of birth, and gender upon account registration.
• Email address and mobile number for communication and verification purposes.
• Identity information (national ID or passport number) for the KYC process.
• Payment method information used for deposits and withdrawals.
• Current residential address for regulatory compliance.

Automatically Collected Data:

• IP address, device type, operating system, and web browser used.
• In-platform activity data — games played, session duration, and usage habits.
• Transaction data including deposit history, withdrawals, and wagering.
• Server access logs for security and fraud detection purposes.

Bata4d uses your personal data solely for legitimate purposes that have been communicated to you. We do not use your data for any other purpose without first obtaining your consent.

Your data is used for:

• Account Management — process registration, verify identity, and manage your account overall.
• Transaction processing — securely process deposits, withdrawals, and any other financial transactions.
• Platform Security — detect and prevent fraud, money laundering, and any suspicious activity.
• Service Communications — send important notifications relating to your account, transactions, and security updates.
• Product improvement — analyse aggregated usage data to enhance the gaming experience at bata4d.
• Legal Compliance — fulfil reporting obligations to the relevant regulatory bodies.

Bata4d does not sell, rent, or trade members' personal data to any third party for marketing or commercial purposes. However, there are certain situations where we need to share your information with specific parties:

• Payment service providers — data that must be shared with FPX, DuitNow, e-wallet providers, and crypto processors to securely process your transactions.
• Technical service providers — companies that assist us in platform operations such as server hosting, cybersecurity, and analytics — all subject to strict confidentiality agreements.
• Regulatory body — information required by law or authority directives such as the Malaysian Anti-Corruption Commission or law enforcement agencies where a court order exists.
• Game providers — minimum technical data required to operate games from third-party providers within the bata4d platform.

In all data sharing scenarios, bata4d ensures that recipients comply with data protection standards equal to or higher than our own.

Bata4d uses cookies and similar tracking technologies to enhance the user experience and ensure platform security. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential cookies — required for core platform functions such as login session authentication and security. Cannot be disabled.
• Performance cookies — helps us understand how members use the platform so we can improve it. Data is collected in non-personal form.
• Preference cookies — save your preferences such as language and display settings for ease of use.

You can manage cookie settings through your web browser. However, disabling essential cookies may affect the functionality of certain areas of the bata4d platform.

Bata4d continuously invests in security infrastructure to ensure your personal data is always protected at the highest level of protection available in the industry.

Security measures we practise include:

• 256-bit SSL encryption for all data transmitted between your device and bata4d's servers.
• Passwords are stored using a one-way hashing algorithm that cannot be reversed.
• Continuous server monitoring and security log analysis 24 hours a day, 7 days a week.
• Strict role-based access controls — bata4d staff can only access data required for their specific responsibilities.
• Regular independent security audits to identify and address vulnerabilities.
• Established incident response procedures to efficiently manage any data breaches.

Bata4d retains your personal data for as long as your account is active or as long as necessary to provide services to you. When you close your account, we will delete or anonymise your personal data within a reasonable period, subject to the following obligations:

• Financial and transaction data — retained for a minimum of 7 years in accordance with Malaysian legal requirements relating to accounting and taxation.
• KYC records and identity verification — retained for the period stipulated by the relevant regulatory body — typically 5 years after account closure.
• Communication and customer support logs — retained for 3 years for reference and dispute resolution.
• Gaming activity data — retained for 2 years for audit purposes and resolution of technical disputes.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by bata4d:

• Right to access — you may request a copy of the personal data we hold about you.
• Right to rectification — you may request correction of inaccurate or incomplete data.
• Right to erasure — in certain situations, you may request that we delete your personal data.
• Right to restrict processing — you may request that we restrict the processing of your data under certain circumstances.
• Right to object — you may object to the processing of your data for direct marketing purposes.

To submit any request relating to your privacy rights, please contact the bata4d customer support team via live chat. We will process your request within 14 business days. Some requests may be subject to additional identity verification requirements to ensure the security of your account.

Bata4d is a platform dedicated to individuals aged 18 and above. We do not knowingly collect or process personal data of children under the age of 18.

If we discover that a minor's personal data has been collected without our knowledge — for example, through registration using false information — we will take immediate action to delete that information and close the account in question. Parents or guardians who become aware that their underage child has registered a bata4d account are advised to contact our support team immediately.

Bata4d reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. All material amendments will be communicated to members via in-platform notifications or email with at least 7 days' notice before taking effect.

The "Updated" date at the top of this document indicates the date of the last revision. We encourage you to review this page periodically. Continued use of the bata4d platform after any amendments take effect will be considered acceptance of the updated privacy terms.