Privacy Policy

Pahlawan4D ("we", "us", "our", "the Platform") operates the online betting and casino platform accessible at pahlawan4d.cam. We respect your privacy and are firmly committed to protecting the personal data you entrust to us when registering and using our services.

This Privacy Policy ("Policy") explains in clear, structured terms: what categories of personal data we collect from players; the purposes for which that data is processed; the legal bases on which we rely to process it; with whom we share it; how long we retain it; and what rights you hold as a data subject.

This Policy applies to all individuals who visit, register on, or otherwise interact with the Pahlawan4D Platform, including players located in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and across all states in Malaysia, as well as players from other jurisdictions.

This Policy should be read together with our Terms & Conditions, which govern the overall use of the Platform. By registering an account or continuing to use the Platform, you acknowledge that you have read and understood this Policy.

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

• "Personal Data" means any information that relates to an identified or identifiable natural person, including but not limited to name, email address, date of birth, residential address, payment details, IP address, and device identifiers.
• "Processing" means any operation or set of operations performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, transmission, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this case, Pahlawan4D.
• "Data Processor" means a third party that processes Personal Data on behalf of Pahlawan4D under contractual obligations and instructions.
• "Data Subject" refers to the individual whose Personal Data is being processed — that is, you, the player or user.
• "Consent" means a freely given, specific, informed, and unambiguous indication of agreement to the processing of Personal Data.
• "KYC" means Know Your Customer — the identity and age verification process required under our international licensing obligations.

Pahlawan4D collects personal data across several categories depending on how you interact with the Platform. The following table summarises the primary categories of data collected:

We do not collect or process special categories of sensitive personal data (such as racial or ethnic origin, health data, or biometric data) except where specifically required for identity verification purposes and only to the minimum extent necessary.

Pahlawan4D collects personal data through the following methods:

• Direct collection: Data you provide when completing the registration form, submitting KYC documents, making a deposit, requesting a withdrawal, or contacting our support team.
• Automated technical collection: Data collected automatically via cookies, web beacons, server logs, and similar tracking technologies when you access or browse the Platform. See Section 8 (Cookies & Tracking) for full details.
• Payment processors: Transaction confirmation and fraud-flag data received from payment service providers, including FPX, DuitNow, and cryptocurrency network confirmations.
• Identity verification providers: Verification outcome data from third-party KYC service providers engaged to assist with age and identity checks.
• Anti-fraud and security partners: Device fingerprinting and risk-scoring data from fraud prevention technology partners, used solely for account protection and AML compliance purposes.

Pahlawan4D processes personal data for the following defined purposes:

• Account creation and management: To register, authenticate, and maintain your player account on the Platform.
• Identity and age verification (KYC): To confirm that you are who you say you are, that you are at least 21 years of age, and that your account complies with our licensing obligations.
• Payment processing: To process deposits and withdrawals using your chosen payment method — whether that is Touch 'n Go eWallet, DuitNow, Maybank transfer, USDT TRC20, or another supported method.
• Regulatory and AML compliance: To detect and prevent money laundering, fraud, underage gambling, and other prohibited activities in accordance with our international gaming licence requirements.
• Platform operation and improvement: To ensure the Platform functions correctly, to diagnose technical issues, and to improve user experience based on aggregated behavioural data.
• Responsible gaming monitoring: To identify patterns indicative of problem gambling and to apply responsible gaming tools (deposit limits, self-exclusion) in accordance with our Responsible Gambling policy.
• Customer support: To respond to your queries, complaints, and support requests via live chat, email, or WhatsApp.
• Marketing communications: To send promotional offers, bonuses, and platform updates, but only where you have provided explicit consent to receive such communications.
• Legal and dispute resolution: To establish, exercise, or defend legal claims arising from the use of the Platform.

Each processing activity carried out by Pahlawan4D is conducted on one or more of the following legal bases:

• Contractual necessity: Processing required to perform the contract between Pahlawan4D and you (i.e., the Terms & Conditions governing your account). This covers account creation, payment processing, and game delivery.
• Legal obligation: Processing required to comply with our obligations under applicable international gaming and AML regulations, including KYC and identity verification.
• Legitimate interests: Processing necessary for our legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and improving our services — where such interests are not overridden by your own rights and interests.
• Consent: Processing based on your explicit, freely given consent, which applies primarily to marketing communications. You may withdraw your consent at any time by contacting us or updating your account preferences.

Pahlawan4D does not sell, rent, or trade your personal data. We share personal data only with the following categories of third parties, strictly on a need-to-know basis and subject to contractual data processing agreements:

• Payment service providers: Including FPX operators, DuitNow infrastructure providers, e-wallet processors (Touch 'n Go, Boost, GrabPay), and cryptocurrency network processors — for the sole purpose of executing your deposit and withdrawal transactions.
• Identity verification (KYC) providers: Licensed third-party providers that assist us in verifying your identity and age in accordance with our international licensing obligations.
• Anti-fraud and security technology providers: Providers of fraud detection, device fingerprinting, and risk-scoring technology engaged to protect your account and prevent AML violations.
• Game content providers: Licensed international game studios that supply the slot, live dealer, sports, and other game content accessible on the Platform. These providers may receive limited technical data to facilitate game delivery and audit RTP compliance.
• IT and cloud infrastructure providers: Hosting, database, and content delivery network providers that support the operation of the Platform under strict data processing agreements.
• Legal and regulatory authorities: Where required by applicable law, court order, or regulatory mandate, Pahlawan4D may be obliged to disclose personal data to competent authorities.
• Professional advisers: Legal, accounting, and compliance advisers engaged in connection with the operation of the Platform, where bound by confidentiality obligations.

All third-party data processors engaged by Pahlawan4D are vetted for data security standards and are contractually bound to process personal data only in accordance with our instructions and this Policy.

The Pahlawan4D Platform uses cookies and similar tracking technologies to ensure the Platform operates correctly, to provide a personalised experience, and to help us understand how the Platform is used. The following categories of cookies are used:

You may manage your cookie preferences at any time through your browser settings. Please note that disabling strictly necessary cookies may affect the functionality of the Platform. For more detailed cookie management guidance, refer to the help documentation of your browser (e.g., Chrome, Firefox, Safari, Edge).

Pahlawan4D retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required to comply with legal, regulatory, or contractual obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account relationship with Pahlawan4D, plus a minimum of five (5) years after account closure, in accordance with our AML and gaming licence compliance obligations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, for audit, AML, and dispute resolution purposes.
• KYC documents: Retained for five (5) years post-account closure unless a longer retention period is required by applicable regulatory authority.
• Support communications: Retained for three (3) years from the date of the last interaction, for quality assurance, dispute resolution, and training purposes.
• Marketing preference data: Retained until you withdraw your consent or request erasure, subject to minimum retention periods required by law.
• Technical and session logs: Retained for twelve (12) months for security monitoring and fraud investigation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents any possibility of re-identification.

As an internationally licensed online gaming platform, Pahlawan4D operates with technology infrastructure and third-party service providers located in various jurisdictions. As a result, your personal data may be transferred to and processed in countries outside of Malaysia.

When personal data is transferred internationally, Pahlawan4D ensures that adequate safeguards are in place to protect your data to a standard equivalent to this Policy. Safeguards may include:

• Standard contractual clauses approved by relevant data protection authorities.
• Engagement of processors that maintain internationally recognised data security certifications (e.g., ISO 27001).
• Binding corporate rules where applicable within group entities.

By using the Platform and providing your personal data, you acknowledge that your data may be transferred and processed outside Malaysia. We take all reasonable steps to ensure that such transfers are conducted securely and with appropriate protections in place.

You have a number of rights in relation to the personal data that Pahlawan4D holds about you. These rights are exercisable by contacting us at the details provided in Section 15. We will respond to all verifiable requests within thirty (30) calendar days.

The Pahlawan4D Platform is strictly intended for individuals who are 21 years of age or older. We do not knowingly collect, process, or store personal data from any person under the age of 21.

All registrations are subject to age verification as part of our KYC process. Where we discover or have reasonable grounds to believe that a person under 21 has provided us with personal data, we will take immediate steps to suspend the account and securely delete the data in question.

Pahlawan4D implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• Encryption in transit: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS protocols.
• Encryption at rest: Sensitive data fields stored in our databases are encrypted using industry-standard algorithms. Data is never stored in plain text.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. All internal access is authenticated, logged, and regularly audited.
• Two-factor authentication: Sensitive internal systems are protected by multi-factor authentication requirements for all personnel.
• Regular security testing: We conduct periodic penetration testing and vulnerability assessments of the Platform and supporting infrastructure.
• Incident response procedures: We maintain documented data breach response procedures. In the event of a breach affecting your personal data, we will notify affected individuals and, where required, relevant regulatory authorities promptly.

While we take every reasonable precaution, no system is entirely immune to risk. We strongly recommend that you also take steps to protect your own account security — including using a strong, unique password and enabling any available account security features.

Pahlawan4D reserves the right to update or modify this Privacy Policy at any time. Changes may be made in response to evolving legal requirements, changes in our business practices, or improvements to our data management processes.

When material changes are made to this Policy, we will notify registered players via their account email address and/or display a prominent notice on the Platform for a reasonable period before the changes take effect. The "Last Updated" date at the top of this page will reflect the date of the most recent revision.

Your continued use of the Platform following the posting of a revised Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the revised Policy, you should contact us to close your account and request deletion of your personal data in accordance with Section 11.

If you wish to exercise any of your data subject rights, have a question or concern about this Privacy Policy, or wish to report a suspected data privacy incident, please contact our team using the details below. All email addresses are listed in plain text and are not clickable links.

When contacting us regarding a data subject rights request, please include your registered email address and a description of your request. We may need to verify your identity before processing the request to prevent unauthorised disclosure of personal data.