Bandit4D Privacy Policy – Personal Data Protection for Malaysian Members

Bandit4D collects various types of information from members to enable the platform to operate safely and effectively. We organise the data collected into several main categories:

1.1 Registration Information

When you register a Bandit4D account, we collect the basic information needed to create your account. This includes your chosen username, a valid Malaysian mobile phone number, an encrypted password, and your email address if provided. Your phone number is verified via an OTP code during registration and serves as your primary account identifier within the Bandit4D system.

1.2 Identity Verification Information

To comply with anti-money laundering (AML) and fraud prevention requirements, Bandit4D may request identity verification documents in certain situations, such as large withdrawals or unusual account activity. This may include a copy of your Malaysian MyKad or other appropriate identification document. These documents are stored securely and in encrypted form.

1.3 Financial Information

Bandit4D collects information related to your financial transactions, including payment method details (Touch 'n Go eWallet account number, GrabPay, Boost, ShopeePay, DuitNow account number, or bank account number for FPX), deposit and withdrawal records, and your complete transaction history on the platform. Full financial account numbers are not stored in Bandit4D's systems — only the verification tokens required for recurring transactions.

1.4 Platform Activity Information

We record your activity on the Bandit4D platform for security purposes, game result verification, and service analytics. This includes your game history (slots, Live Casino, Sports Betting, lottery), betting history and outcomes, bonus and promotion transaction records, and login session logs including time, date, and IP address.

1.5 Technical & Device Information

Like most digital platforms, Bandit4D automatically collects certain technical information when you access the platform. This includes your device type and operating system, web browser used, IP address, website usage data (pages visited, time spent), and cookie information as described further in Section 5.

Bandit4D uses collected data for clearly defined and legitimate purposes. We do not use your data for any purpose not stated here without first obtaining your consent.

2.1 Service Provision

Your data is primarily used to provide Bandit4D platform services — creating and managing your account, processing deposits and withdrawals, enabling you to play games and place bets, displaying your transaction history and activity, and delivering effective customer support whenever you need assistance.

2.2 Security & Fraud Prevention

Your data is used to monitor and detect suspicious activity, prevent fraud and money laundering, verify your identity during important transactions, protect your account from unauthorised access, and comply with legal requirements including the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLA).

2.3 Platform Improvements

Bandit4D analyses usage data in aggregate and anonymised form to understand how members use the platform, which games are most popular, where users encounter difficulties, and how we can improve the overall experience. This analysis helps us make better decisions about the improvements that need to be made.

2.4 Communications

Your phone number is used to send verification OTPs, important account or transaction notifications, information about Bandit4D promotions and bonuses (unless you opt out), and updates on significant changes to the platform or our policies. You can manage your communication preferences through your account settings.

2.5 Responsible Gaming

Your gameplay activity data is used by Bandit4D's responsible gambling team to identify patterns that may indicate a gambling problem, and to reach out to members who may need support. This is the data use we consider most important from an ethical and social responsibility standpoint.

Bandit4D understands that your trust depends on how we handle data sharing. Our position is straightforward: we do not share your personal data except in the specific situations outlined below.

3.1 Payment Service Providers

To process your deposits and withdrawals, Bandit4D is required to share the necessary transaction details with the payment provider you use – Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or banks via FPX (Maybank2u, CIMB Clicks, and others). Only the minimum data required to process each transaction is shared. All these providers are governed by their own privacy policies and are regulated by Bank Negara Malaysia.

3.2 Game Providers

To provide slots, live casino, and table games, Bandit4D works with licensed third-party game providers. The minimum information required for technical operations may be shared with these providers, but this excludes financial details or personal identity information beyond what is necessary for game functionality.

3.3 Legal Requirements

Bandit4D may be required to disclose members' personal data to the relevant authorities when:

• Ordered by a court of competent jurisdiction
• Requested by Malaysian law enforcement agencies
• Required to fulfil obligations under AMLA or other applicable legislation
• Required to protect pressing public safety interests

In such circumstances, Bandit4D will disclose only the data requested and required by law, and will endeavour to notify the member concerned where permitted to do so.

3.4 What We Do NOT Do

• Does not sell personal data to advertisers or data brokers
• Does not share your account information with third-party marketing companies
• No transfer of data to entities outside Malaysia without equivalent protection in place
• We do not use your data for purposes unrelated to Bandit4D's services.

Bandit4D invests significantly in technical and organisational security measures to protect members' personal data against unauthorised access, loss, destruction, or improper disclosure.

4.1 Technical Security

• 256-bit SSL Encryption: All communications between your device and Bandit4D servers are encrypted using the latest 256-bit TLS/SSL protocol
• Data Encryption at Rest: Sensitive data stored in the Bandit4D database is encrypted at rest using industry-standard encryption algorithms
• Two-Factor Authentication (2FA): Logins and important transactions are protected by an additional authentication layer via SMS OTP
• Firewall & Intrusion Detection System: Server infrastructure is protected by multi-layered firewalls and a real-time threat detection system
• Regular Security Audits: The Bandit4D system undergoes regular penetration testing and security audits conducted by independent third parties.

4.2 Internal Access Controls

Access to members' personal data within Bandit4D's internal systems is restricted to staff who genuinely require it to perform their duties. All access is logged and monitored. Staff handling sensitive data undergo background checks and regular data security training.

4.3 Incident Response

Bandit4D has an established security incident response procedure to handle any data breach that may occur. In the event of an incident affecting your personal data, Bandit4D is committed to notifying affected members within a reasonable timeframe and taking immediate steps to contain and remediate the situation.

4.4 Your Responsibilities

While Bandit4D takes all reasonable steps to protect your data, data security also depends on your own actions. We recommend using a strong, unique password for your Bandit4D account, never sharing your login credentials with anyone, logging out after using a shared or public device, and keeping your device up to date with the latest security patches.

Bandit4D uses cookies and similar technologies to enhance the user experience and ensure the platform functions properly. This section explains the types of cookies we use and how you can manage them.

5.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They allow the site to remember information about your visit — such as your language preference, login status, and session details. Cookies cannot be used to access other files on your device and, in most cases, do not contain information that directly identifies you.

5.2 Types of Cookies Used by Bandit4D

• Essential Cookies (Session): Required for core platform operations – login, session security, and navigation. These cookies cannot be disabled without affecting the platform's basic functionality.
• Preference Cookies: Stores your preferences such as language and display settings, enabling Bandit4D to deliver a more personalised experience.
• Analytics Cookies: Helps us understand how members use the platform through aggregated, anonymised usage data. We use this data to improve our services.
• Security Cookies: Used to detect suspicious activity, prevent fraud, and protect your account from unauthorised access.

5.3 Managing Cookies

You can manage or delete cookies through your web browser settings. Please note that disabling essential cookies will affect your ability to log in and use key features on the Bandit4D platform. For guidance on managing cookies in popular browsers, refer to your respective browser's help documentation.

Under Malaysia's Personal Data Protection Act (PDPA) and internationally recognised data protection principles, you have the following rights regarding your personal data held by Bandit4D.

6.1 How to Exercise Your Rights

To exercise any of the above rights, you may contact the Bandit4D support team via live chat on the platform or by emailing support@bandit4d.best, clearly stating the type of request you wish to make along with your account details for identity verification. Bandit4D will respond to your request within a reasonable timeframe and within the limits set by applicable law.

6.2 Identity Verification for Data Requests

To protect your privacy, Bandit4D may need to verify your identity before processing any request relating to your personal data. This is an important security measure to ensure your data is not disclosed to unauthorised parties. The verification process typically involves confirming your registered phone number.

7.1 Retention Period

Bandit4D retains members' personal data for as long as necessary to fulfil the purposes stated in this policy and to meet our legal obligations. As a general rule, account and transaction records are kept for a minimum of seven years after account closure to comply with AMLA requirements and applicable financial audit obligations. Technical and security log records are retained for shorter periods in line with operational needs.

7.2 Deletion of Personal Data

When personal data is no longer needed for its stated purpose and there is no legal obligation to retain it, Bandit4D will delete or anonymise that data using secure, non-recoverable methods. This includes secure deletion of digital files and, where applicable, physical destruction of storage media.

7.3 Inactive Accounts

Bandit4D accounts that show no activity for 24 consecutive months will be classified as inactive. Bandit4D will send a notification to the registered phone number before any action is taken on an inactive account. Data associated with inactive accounts remains subject to the minimum retention periods stated above with respect to financial and legal records.

7.4 Data After Account Closure

When you voluntarily close your Bandit4D account, personal data that is no longer required for legal or audit purposes will be deleted or anonymised within 90 days of the account closure date. Financial transaction records and audit logs will be retained for the period required by law, even after account closure.

8.1 Right to Amend

Bandit4D reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, applicable legislation, or new technological developments. When changes are made, we will update the "Last updated" date at the top of this document.

8.2 Material Change Notifications

For material and significant changes to how we handle your personal data, Bandit4D will endeavour to notify you via in-platform notifications or SMS to your registered phone number at least 7 days before the changes take effect. We encourage you to review this Privacy Policy periodically to stay informed of our latest practices.

8.3 Ongoing Consent

Continued use of the Bandit4D platform after any changes to the Privacy Policy take effect will be considered your acceptance of the updated terms. If you do not agree with any changes, you have the right to stop using the platform and request account closure in accordance with the established procedure.

If you have any questions, concerns, or requests regarding this Privacy Policy or how Bandit4D handles your personal data, we encourage you to reach out to us directly.

Bandit4D's support team is available 24 hours a day, 7 days a week in Bahasa Melayu. For privacy-specific enquiries, you can reach us through:

• Live Chat: Through the Bandit4D platform – the fastest option, with responses in under 3 minutes
• Email: support@bandit4d.best – for formal data rights requests or privacy complaints

When contacting us regarding a privacy matter, please clearly state that your enquiry relates to privacy or data protection, and include your account number or registered phone number to help us verify your identity and process your request more efficiently.

Bandit4D is committed to treating every privacy enquiry and complaint seriously and within a reasonable timeframe. We will provide a formal response to official data rights requests within 14 business days from the date a complete request is received.