Tahun4D Privacy Policy – Personal Data Protection for Malaysia Members

Tahun4D ("we", "platform", or "tahun4d") is the data controller for all personal information collected through our online casino and Sports Betting platform at tahun4d.site. This Privacy Policy applies to all registered members, website visitors, and any individual who interacts with our services.

We understand that trust is the foundation of our relationship with our members. When you register an account at tahun4d, make a deposit via Touch 'n Go eWallet, GrabPay, DuitNow, or other Malaysian payment methods, place a bet on a Malaysia Super League match or national badminton, or play slots and Live Casino — you are entrusting us with your personal information. We do not take that trust lightly.

This policy is drafted in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in personal data management. Any term not defined in this document carries the same meaning as in tahun4d's Terms & Conditions.

Tahun4D collects personal data from various sources and in various ways while you use our platform. Below is a breakdown of the data we collect.

• Registration information: Full name, Malaysian phone number, email address, password (stored in hashed form — unreadable by anyone, including the tahun4d team), date of birth, and state of residence.
• KYC documents: MyKad copy (Malaysian national identity card), proof of address such as a bank statement or utility bill, and any supporting documents requested during the identity verification process.
• Financial information: Bank account number, e-wallet details (Touch 'n Go, GrabPay, Boost, ShopeePay), and information related to the payment methods you use for deposits and withdrawals.
• Communications: The contents of live chat sessions with our customer support team, emails you send to us, and any feedback you provide.

• Usage data: Games played, total wagers, wins, losses, session duration, activity timestamps, and full transaction history.
• Technical data: IP address, device type, operating system, web browser version, screen resolution, and unique device identifier.
• Location data: General geolocation information derived from your IP address for eligibility verification and security purposes.
• Cookie data: Session cookies, preference cookies, and analytics cookies that track how you interact with our platform.

Tahun4D uses the personal data we collect for legitimate and specific purposes only. We will not use your data for any purpose not stated here without first obtaining your additional consent.

For marketing communications such as promotional emails about welcome bonuses, VIP programmes, or the latest Sports Betting promotions, you can opt out at any time via the unsubscribe link in any email or through the notification settings in your account.

Under Malaysia's PDPA, tahun4d must have a valid legal basis for processing your personal data. Below are the bases we rely on for each processing category.

• Contract performance: Most data processing — including account management, payment processing, and the provision of gaming services — is necessary to fulfil the service agreement between you and tahun4d. Without this processing, we are unable to provide the services you signed up for.
• Legitimate interests: tahun4d has a legitimate interest in processing data for platform security, fraud prevention, and analytics to improve our services. This interest is always balanced against your rights and freedoms as an individual.
• Legal obligation: Data processing for KYC, anti-money laundering (AML), and regulatory compliance purposes is a legal requirement that we must adhere to.
• Consent: For optional marketing communications and more detailed analytics, we require your explicit consent. You are free to withdraw this consent at any time without affecting the core services you use.

Tahun4D does not sell members' personal data to any party. However, in the course of operating the platform, we need to share certain data with the following categories of third parties, subject to strict data protection agreements.

• Payment providers: Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, FPX, and Malaysian banks need to receive the minimum transaction information required to process your deposits and withdrawals. These providers have their own privacy policies and are bound by applicable data protection laws.
• Game software providers: Companies that provide slots, Live Casino, and Sports Betting software to tahun4d may process certain game session data to ensure games function correctly. This data is typically anonymised or pseudonymised.
• Identity verification services: For KYC purposes, tahun4d uses qualified third-party services to verify identity documents. These providers act as data processors on our behalf and are bound by strict confidentiality terms.
• Legal authorities: tahun4d will disclose personal data to Malaysian authorities (including the police, courts, or regulatory bodies) when required by law or a valid court order. We will endeavour to notify you of any such request unless prohibited from doing so by law.
• Business partners: In certain cases involving promotions or special offers run in partnership with third parties, the minimum necessary data may be shared with your prior consent.

Tahun4d invests seriously in security infrastructure and procedures to protect members' personal data from unauthorised access, disclosure, alteration, or loss.

• Encryption in transit: All communications between your browser or app and tahun4d's servers are encrypted using TLS 1.3 with a 256-bit SSL certificate. This ensures data cannot be intercepted or read by third parties during transmission.
• Encryption at rest: Sensitive data such as financial information, KYC documents, and passwords are stored in encrypted or hashed form in our database. Passwords are never stored in plain text.
• Internal access controls: Access to member personal data within tahun4d's internal systems is restricted on a need-to-know basis. All access is automatically logged and periodically audited by our security team.
• Two-factor authentication (2FA): All tahun4d staff with access to personal data systems are required to use 2FA. We also encourage and provide 2FA as an option for all members.
• Regular penetration testing: tahun4d's security systems are regularly tested by independent cybersecurity experts to identify and address any vulnerabilities before they can be exploited.
• Real-time monitoring: Our Security Information and Event Management (SIEM) system monitors platform activity in real time to rapidly detect and respond to any security threats.

While we take all reasonable steps to protect your data, no security system is 100% impenetrable. In the event of a data breach involving your personal data, tahun4d is committed to notifying you within 72 hours of becoming aware of the incident, in line with international best practices.

Tahun4d uses cookies and similar tracking technologies to keep the platform running properly, enhance the user experience, and understand how members use our services.

• Essential cookies: Required for core platform functions such as login authentication, game session management, and security. These cookies cannot be disabled without affecting the platform's basic functionality.
• Preference cookies: Saving your preferences such as interface language, display settings, and favourite sports to ensure a consistent experience every time you log in.
• Analytics cookies: Helps us understand how members use the platform — which pages are visited most, which features are most popular, and where members encounter difficulties. This data is used to improve the platform and is handled in aggregate form, not to identify individuals.
• Marketing cookies: Used to display relevant promotions and offers based on your activity on the platform. You can disable this category of cookies in our cookie settings.

You can manage cookies through your web browser settings. Disabling certain cookies may affect the functionality or your experience on the platform. Note: disabling essential cookies will prevent you from logging in to your tahun4d account.

Tahun4D retains your personal data only for as long as necessary for the purposes stated in this policy, or as required under applicable Malaysian law.

• Active account data: For as long as your account is active and you are using tahun4d services, your basic account data is retained to ensure continuity and transparency of service.
• Financial transaction records: In line with anti-money laundering (AML) and tax regulatory requirements, financial transaction records are retained for a minimum of 7 years even after the account is closed.
• KYC documents: Retained for a minimum of 5 years after the business relationship ends, in accordance with Malaysian legal requirements.
• Support communication logs: Live chat session records and emails are retained for 2 years for reference and dispute resolution purposes.
• Technical & analytics data: System logs and usage analytics are typically deleted or anonymised after 12 months.
• Marketing data: If you withdraw consent for marketing communications, your contact information held for that purpose will be deleted within 30 days of your request.

When data is no longer needed and there is no legal obligation to retain it, tahun4d will securely delete or anonymise it using methods that ensure it cannot be recovered.

Under Malaysia's PDPA and international best practices, you have the following rights regarding your personal data held by tahun4d. We are committed to processing all requests relating to these rights within 30 days of receipt.

As a platform operating in a global industry, tahun4d may need to transfer your personal data to servers or service providers located outside Malaysia in certain circumstances — for example, when using cloud computing services or international game software providers.

In all cases of cross-border data transfers, tahun4d ensures that:

• The receiving country or entity maintains a level of data protection equal to or higher than Malaysia's standards.
• Appropriate data transfer agreements are in place to protect your rights.
• Transfers are carried out only to the extent necessary for the stated purpose and with appropriate technical safeguards in place, including encryption during transmission.

Sensitive personal data such as your KYC documents and financial information is prioritised for storage on servers located in Malaysia or within the Southeast Asian region under equivalent data protection legislation.

Tahun4d services are restricted to individuals aged 18 and above. We do not knowingly collect personal data from anyone under 18. Our platform applies age verification during registration and KYC to ensure compliance with this policy.

If we discover that we have collected personal data from someone under the age of 18, we will immediately take the following steps:

• Suspending the account in question immediately.
• Deleting all personal data associated with that individual.
• Returning any remaining balance in the account to the original payment source.

If you believe that someone under the age of 18 has registered an account on tahun4d, please contact us immediately at support@tahun4d.site with the relevant details so we can take appropriate action.

Tahun4D reserves the right to amend or update this Privacy Policy from time to time to reflect changes in our practices, technological developments, legal requirements, or member feedback. The "Updated" date at the top of this page reflects the date of the most recent revision.

For material changes — that is, changes that significantly alter how we collect, use, or share your personal data — we will:

• Sending a notification to your registered email address at least 14 days before the changes take effect.
• Displaying a clear notice on the tahun4d platform's main page.
• In cases where changes require fresh consent, we will explicitly request your consent before proceeding with data processing under the new terms.

Continued use of the tahun4d platform after the effective date of any Privacy Policy update constitutes your acceptance of the revised policy. If you do not agree with the changes made, you have the right to close your account and request deletion of your data in accordance with the procedure set out in Section 9.

If you have any questions, concerns, or requests regarding this Privacy Policy or how tahun4d handles your personal data, please reach out to our data protection team through the following channels:

• Email: support@tahun4d.site – Please include "Privacy Inquiry" in the subject line to ensure your message is directed to the right team.
• Live Chat: Available 24 hours a day, 7 days a week via the tahun4d platform. Our support agents are proficient in Bahasa Malaysia and can assist you with any privacy-related enquiries.

Tahun4D is committed to responding to all privacy-related enquiries within 5 business days. For formal requests relating to data subject rights (such as access, correction, or deletion requests), please allow up to 30 days for full processing, particularly for requests that require an extensive review of records.

We value your feedback on our privacy practices. If you feel our response to your privacy request is unsatisfactory, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia.