Privacy Policy — Maya4D

This Privacy Policy ("Policy") is issued by Maya4D ("Company", "we", "us", "our") and governs the collection, storage, processing, use, and disclosure of personal data relating to all registered players and visitors ("you", "your", "Data Subject") of the Maya4D online casino and sports betting platform accessible at https://maya4d.lat (the "Platform").

Maya4D is an internationally licensed online gaming operator serving players across Malaysia, including users in Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Shah Alam, Kota Kinabalu, and all other permitted locations. We understand that Malaysian players place significant trust in us when they share their personal and financial information, and we take that responsibility seriously.

This Policy is designed to give you a clear, honest, and complete picture of our data practices. We have written it in plain language wherever possible, while maintaining the legal precision required by international data protection standards. We encourage you to read this Policy in full before using the Platform.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including names, identification numbers, location data, online identifiers, or factors specific to that person's identity.
• "Data Controller" means Maya4D, the entity that determines the purposes and means of processing personal data collected via the Platform.
• "Data Processor" means any third party engaged by Maya4D to process personal data on its behalf, such as payment service providers or fraud detection vendors.
• "Processing" means any operation or set of operations performed on personal data, including collection, storage, retrieval, use, disclosure, alteration, or deletion.
• "Consent" means a freely given, specific, informed, and unambiguous indication of a Data Subject's agreement to the processing of their personal data.
• "KYC" means Know Your Customer — the identity and address verification process required by international licensing obligations and anti-money laundering (AML) regulations.
• "Sensitive Data" means special categories of personal data including, where applicable, financial account details and government-issued identification documents provided for KYC purposes.

Maya4D collects personal data through several channels — directly from you during registration and account use, automatically through your interaction with the Platform, and from third-party sources where permitted. The categories of data we collect are as follows:

3.1 Registration & Account Data

• Full legal name as it appears on your government-issued identification;
• Date of birth (for age verification — players must be aged 21 or above);
• Residential address, including postcode and state (e.g., Selangor, Kuala Lumpur, Penang, Johor);
• Email address and mobile phone number;
• Username and encrypted password;
• Security questions and answers (where applicable).

3.2 Identity Verification (KYC) Data

• Copy of Malaysian MyKad (NRIC), passport, or other government-issued photo ID;
• Proof of address documents: utility bills, bank statements, or official correspondence;
• Payment method verification: screenshots or statements confirming ownership of the payment account used for deposits or withdrawals.

3.3 Financial & Transaction Data

• Deposit and withdrawal records including amounts (MYR), dates, and payment method used (e.g., Touch 'n Go eWallet, Maybank2u, DuitNow, FPX, CIMB Clicks, Boost, GrabPay, Public Bank);
• Betting history including stakes, markets, outcomes, and winnings;
• Bonus claims and promotion participation records;
• Account balance history.

3.4 Technical & Usage Data

• IP address, device type, browser type and version, operating system;
• Session logs including login times, pages visited, games played, and session duration;
• Geolocation data (country-level, derived from IP address);
• Cookies and similar tracking technologies (see Section 7).

3.5 Communications Data

• Customer support conversations via live chat, email, or other channels;
• Feedback, complaints, and dispute records;
• Marketing communication preferences (opt-in/opt-out records).

Maya4D uses the personal data we collect for the following specified, explicit, and legitimate purposes:

Maya4D processes personal data on the following legal bases, consistent with internationally recognised data protection principles:

• Contractual Necessity: Processing required to fulfil the contract formed when you register an Account, including account management, payment processing, and service delivery.
• Legal Obligation: Processing necessary to comply with our international licensing conditions, AML obligations, and other applicable legal requirements, including KYC identity verification.
• Legitimate Interests: Processing for fraud prevention, security monitoring, Platform improvement, and responsible gambling oversight — where these interests are balanced against your rights and do not override them.
• Consent: Processing for marketing communications and optional personalisation features, where you have given explicit, freely given, and revocable consent. You may withdraw consent at any time by adjusting your account communication preferences or contacting support.

Maya4D does not sell, rent, or trade your personal data to any third party. We may share your data with carefully selected third parties only in the following circumstances:

• Payment Service Providers: Malaysian payment processors and financial institutions facilitating your deposits and withdrawals (e.g., operators of DuitNow, FPX, Touch 'n Go eWallet, and major banks including Maybank, CIMB, Public Bank, Hong Leong) — shared only to the extent necessary to process your specific transactions.
• Identity Verification Services: Third-party KYC and AML screening providers engaged to verify your identity documents and screen against sanctions lists, operating under strict data processing agreements.
• Gaming Platform Providers: Game technology providers and live casino studios whose products are hosted on the Platform — receive anonymised or pseudonymised gameplay data only, not your personally identifiable information.
• Fraud Detection Vendors: Specialist cybersecurity and fraud analytics partners engaged to protect the Platform and its players from fraudulent activity.
• Legal & Regulatory Authorities: Where required by law, court order, or our international gaming licence obligations, we may be required to disclose your personal data to regulators, law enforcement, or judicial bodies. We will only do so to the minimum extent required by the applicable legal obligation.
• Business Successors: In the event of a merger, acquisition, or restructuring of the Company, personal data may be transferred to a successor entity, subject to the same privacy protections as set out in this Policy.

The Maya4D Platform uses cookies and similar tracking technologies to deliver a functional, secure, and personalised experience. The types of cookies we use are as follows:

You may control cookie preferences through your browser settings. Note that disabling strictly necessary cookies may impair core Platform functionality including login, session security, and payment processing. Optional cookies may be declined without affecting your ability to use Maya4D.

As an internationally licensed online gaming operator, Maya4D may process and store personal data on servers located outside of Malaysia. Where personal data is transferred to jurisdictions that may not have equivalent data protection laws to those that apply in your home country, Maya4D implements appropriate safeguards to ensure your data remains protected, including:

• Contractual data protection clauses in agreements with all Data Processors and sub-processors;
• Security and confidentiality obligations imposed on all parties with access to personal data;
• Technical security measures including encryption in transit and at rest.

By using the Maya4D Platform, you acknowledge and consent to the transfer of your personal data to our servers and third-party processors in accordance with the safeguards described above.

Maya4D retains personal data for the minimum period necessary to fulfil the purposes for which it was collected. Our standard retention periods are as follows:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where deletion is not immediately possible due to technical constraints, data is isolated from active processing until deletion is completed.

Maya4D implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• Encryption: All data transmitted between your device and our Platform is protected by 256-bit SSL/TLS encryption. Sensitive data stored on our servers is encrypted at rest.
• Access Controls: Access to personal data is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged and monitored.
• Two-Factor Authentication: Available to all players to provide an additional layer of account security beyond username and password.
• Intrusion Detection: Continuous monitoring for suspicious access patterns, unusual login activity, and potential security breaches.
• Regular Security Audits: Periodic third-party security assessments and penetration testing to identify and remediate vulnerabilities.
• Staff Training: All Maya4D personnel with access to personal data receive regular training on data protection obligations and security practices.

As a Data Subject whose personal data is processed by Maya4D, you hold the following rights with respect to your personal information. To exercise any of these rights, please contact our Data Protection team at the details set out in Section 15.

• Right of Access: You have the right to request a copy of the personal data we hold about you and information about how it is processed.
• Right to Rectification: You may request the correction of any inaccurate or incomplete personal data held on your Account.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Restriction of Processing: You may request that we restrict the processing of your personal data in certain circumstances, for example while a correction request is under review.
• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format for transfer to another data controller.
• Right to Object: You have the right to object to processing of your personal data on the basis of legitimate interests, including direct marketing communications. Objection to marketing will result in immediate cessation of promotional communications.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing carried out prior to withdrawal.

We will respond to all valid data rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reasons for it.

Maya4D strictly prohibits the use of the Platform by any person under the age of 21 years. The Platform is not directed at, and does not knowingly collect personal data from, persons under 21 years of age.

Age verification is mandatory before any withdrawal is processed and may be requested at any point during account use. If Maya4D becomes aware that personal data has been collected from a person under the age of 21, that account will be immediately closed, all associated data will be deleted, and any real-money balance will be returned to the original deposit source.

If you are a parent or guardian and believe your child has registered on Maya4D, please contact our support team immediately at [email protected] so that we may take prompt corrective action.

The Maya4D Platform may contain references to or integrations with third-party services, including game providers, payment processors, and customer communications tools. Maya4D is not responsible for the privacy practices of third-party websites or services. This Privacy Policy applies exclusively to personal data processed by Maya4D in its capacity as Data Controller.

Where third-party services are integrated into the Platform (such as payment gateways for Touch 'n Go eWallet, DuitNow, or Maybank2u), those services operate under their own privacy policies. We encourage you to review the privacy policies of any third-party service you interact with, particularly when providing financial information.

All third-party Data Processors with whom Maya4D shares personal data are contractually required to implement appropriate security measures and to process data solely on Maya4D's documented instructions.

Maya4D reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data practices, applicable law, or our business operations. Material changes to this Policy — particularly those affecting the scope of data collection, the purposes of processing, or your rights — will be communicated to registered players via email at the address on file at least fourteen (14) calendar days prior to the changes taking effect.

The effective date at the top of this Policy reflects the date of the most recent revision. We recommend that you review this Policy periodically. Continued use of the Platform following any update constitutes your acceptance of the revised Policy. If you do not agree with any amended terms, you must discontinue use of the Platform and may request account closure.

A history of material changes to this Policy is maintained internally and available on request from our Data Protection team.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact our Data Protection team through the following channels. We are committed to addressing all privacy-related enquiries promptly and transparently.

When submitting a data rights request, please provide your registered email address and Account username so that we may verify your identity before processing the request. We may request additional verification documentation where necessary to prevent fraudulent data access requests.