Loyal4D Privacy Policy – Data Protection for Malaysian Players

1 Introduction

Loyal4d ("we", "us", "the Platform") is the data controller responsible for the personal data you provide when registering and using our services at loyal4d.best. This Privacy Policy takes effect on 1 January 2026 and applies to all loyal4d platform users regardless of their location within Malaysia — whether in Peninsular Malaysia, Sabah or Sarawak.

We take your privacy seriously. Whether you are making your first RM 50 deposit via DuitNow or Touch 'n Go eWallet, spinning your favourite Pragmatic Play slots, or placing a bet on a Malaysia Super League match — your data receives the same level of protection in every situation. No exceptions.

2 Personal Data We Collect

Loyal4d collects various types of personal data as you interact with our platform. The table below summarises the data types, how they are collected and their primary purpose:

Data We Do Not Collect

Loyal4d does not collect or store passwords in readable form — all passwords are stored as irreversible hashes. We also do not store full credit card numbers or sensitive payment details — these are handled directly by third-party payment providers who maintain their own security certifications.

3 Purpose of Data Collection and Processing

Loyal4d uses your personal data for the following purposes:

• Account Management: Creating and maintaining your account, verifying your identity, and processing deposit and withdrawal transactions via DuitNow, GrabPay, Touch 'n Go eWallet, Boost, ShopeePay and FPX.
• Service Delivery: Gives you full access to all games including slots, Live Casino, football betting, 4D lottery and virtual sports.
• Security & Verification: Detecting and preventing fraud, money laundering and platform abuse.
• Customer Support: Processing enquiries, complaints and support requests that you submit to our support team.
• VIP Rewards Programme: Calculating VIP eligibility, crediting cashback, and managing your VIP tier benefits.
• Marketing Communications: Sending information about promotions, bonuses, and new offers — only if you have consented to receive such communications.
• Legal Obligation: Compliant with the Personal Data Protection Act 2010 (PDPA) and applicable anti-money laundering (AML) regulations.
• Platform Improvement: Analysing usage patterns to improve your gaming experience and the platform's technical performance.

Loyal4d will not use your data for any purpose beyond those stated above without obtaining your consent first.

4 Legal Basis for Data Processing

Under Malaysia's PDPA 2010, loyal4d processes your personal data on the following legal bases, depending on the type of processing activity:

• Consent: For marketing communications and non-essential cookies — you provide explicit consent during registration or through your account settings.
• Contract Performance: To process deposits, withdrawals, and manage your account — this processing is necessary to fulfil the service contract between you and loyal4d.
• Legal Obligation: For KYC verification and AML compliance — loyal4d is legally required to retain and process certain data.
• Legitimate Interest: To detect fraud, ensure platform security and analyse usage for improvement purposes — these are legitimate business interests that do not override your privacy rights.

5 Data Sharing with Third Parties

Loyal4d does not sell your personal data to anyone. We only share data in the following limited circumstances:

Trusted Service Providers

We share necessary data with service providers that help us operate the platform, including:

• Game Providers: Evolution Gaming, Pragmatic Play, PG Soft, SA Gaming — to deliver the games you play. Only the session data necessary to run the game is shared.
• Payment Providers: DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay and FPX-member banks — to securely process your financial transactions.
• Cloud Infrastructure Provider: Server and data storage providers that host the loyal4d platform — all bound by strict data protection agreements.
• Analytics Tools: To understand platform usage patterns on an aggregated, anonymised basis — no identifiable data is shared.

All third-party service providers working with loyal4d are required to meet data protection standards equal to or higher than those we uphold ourselves.

Disclosure to Authorities

Loyal4d may be required to disclose your data to government authorities or law enforcement bodies where mandated by applicable Malaysian law — including in investigations related to money laundering or fraud. In such cases, we will notify you if permitted to do so by law.

6 Cookies & Tracking Technologies

Loyal4d uses cookies and similar technologies to enhance your experience on the platform. The types of cookies we use are as follows:

• Essential Cookies: Required for core platform functions such as login, game sessions and security. These cookies cannot be disabled as the platform will not function without them.
• User Preference Cookies: Saves your preferences such as language, display settings and theme — so you don't have to reconfigure them every time.
• Analytics Cookies: Helps us understand how users interact with the platform in aggregate — for UX improvements and performance optimisation. This data cannot be used to identify any individual.
• Security Cookies: Used to detect fraudulent activity and ensure account security — including identifying suspicious login attempts.

Managing Cookies

You can manage your cookie preferences through your browser settings. However, disabling essential cookies may affect your ability to log in or play on the platform. For analytics cookies, you can opt out via your account settings under the "Privacy & Cookies" section.

7 Data Retention Period

Loyal4d retains your personal data only for as long as necessary for the stated purposes, or as required by applicable law. General retention periods are as follows:

• Active Account Data: Retained for as long as your account remains active on the loyal4d platform.
• Post-Account Closure Data: Financial transaction records and account activity are retained for a minimum of 7 years after account closure, in accordance with Malaysia's AML legal requirements.
• Technical Log Data: Access logs and session data are retained for 90 days for security and fraud detection purposes.
• Customer Support Data: Support conversation records are retained for 2 years to ensure service consistency.
• Marketing Data: Retained until you withdraw consent or request deletion.

Once the retention period expires, your data will be securely deleted or anonymised in a manner that prevents re-identification.

8 Data Security Measures

Loyal4d implements a range of technical and organisational measures to protect your personal data against unauthorised access, disclosure, unintended alteration, or deletion:

• Data-in-Transit Encryption: All communications are protected with TLS 1.3 and 256-bit SSL — no data travelling between your device and our servers is transmitted in unencrypted form.
• Data-at-Rest Encryption: Sensitive data stored on our servers — including financial details and verification documents — is encrypted at rest.
• Strict Access Controls: Only specifically authorised loyal4d staff may access user data, and only within the scope of their legitimate duties. All access is logged and monitored.
• Continuous Security Monitoring: Our systems are monitored around the clock to detect anomalies, intrusion attempts, and suspicious activity.
• Regular Penetration Testing: loyal4d conducts regular security testing to identify and patch vulnerabilities before they can be exploited.
• Hashed Passwords: Account passwords are stored using a strong one-way hashing algorithm — meaning even we cannot see your password.

Security Incident Response

In the event of a data security breach that may affect your rights, loyal4d will notify you and the relevant authorities within the timeframe stipulated by PDPA 2010. The notice will include details on the nature of the breach, the data potentially affected, and the steps being taken.

9 Your Rights Under PDPA 2010

As a loyal4d player who is a Malaysian citizen or resident, you have the following rights over your personal data:

• Right to Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: If any data we hold about you is inaccurate or out of date, you have the right to request that it be corrected.
• Right to Erasure: In certain circumstances, you have the right to request the deletion of your personal data — subject to any applicable legal retention obligations.
• Right to Object: You may object to the processing of your data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time.
• Right to Data Portability: You may request your data in a machine-readable format for the purpose of transferring it to another service provider.

To submit any request relating to the rights above, please contact the loyal4d support team via live chat or email at support@loyal4d.best. We will process your request within 30 days of receipt and may require identity verification before doing so.

10 Protection of Children's Data

Loyal4d services are strictly for individuals aged 18 and above. We do not knowingly collect personal data from anyone under 18. If we discover that a minor's personal data has been collected without proper age verification, we will take immediate steps to delete that data and close the account in question.

Parents and guardians who suspect their child may have registered on the loyal4d platform without their knowledge are encouraged to contact us immediately via support@loyal4d.best so that appropriate action can be taken.

11 Privacy Policy Amendments

Loyal4d reserves the right to update this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or technological developments. When material changes are made, we will:

• Updating the "Last Updated" date at the top of this page.
• Displaying a notice on the platform when you next log in.
• Sending a notification email to the address registered with your account.

We recommend reviewing this Privacy Policy periodically to stay informed about how we handle your personal data. Continued use of the platform after any amendments have been communicated will be considered acceptance of the updated terms.

12 Contact Us About Privacy

If you have any questions, concerns or requests regarding this Privacy Policy or the handling of your personal data by loyal4d, please contact us through the following channels:

• Live Chat: Available 24/7 within the platform — click the support icon after logging in. Target response time: under 3 minutes.
• Privacy Email: support@loyal4d.best — please include "Privacy Enquiry" in the email subject line. Response time is typically within 3 business hours.

Loyal4d's Malay-speaking support team is ready to help you understand your privacy rights and handle any requests related to your personal data. All privacy enquiries are treated with the highest priority and strict confidentiality.