Privacy Policy

01 Introduction

This Privacy Policy ("Policy") is published by Plaza4D ("Plaza4D", "we", "us", or "our"), the operator of the online gaming and entertainment platform accessible at https://plaza4d.cam. Plaza4D operates an integrated platform offering4D lottery, live casino, sports betting, and slot games, serving registered players primarily across Malaysia.

This Policy describes how Plaza4D collects, processes, stores, shares, and protects personal data relating to users of the platform ("you", "the Player", or "the User"). It also explains the rights you hold in relation to your personal data and how you may exercise those rights.

By registering an account on the Plaza4D platform, making a deposit, or accessing any service offered by Plaza4D, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not consent to this Policy, you must not use the Plaza4D platform.

02 Definitions

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or could reasonably be used to identify a natural person, directly or indirectly, including name, identification number, contact details, financial information, or online identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means Plaza4D in its capacity as the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means a third party that processes Personal Data on behalf of Plaza4D pursuant to a written data processing agreement.
• "KYC Data" means identity and age verification documentation submitted by account holders, including government-issued identification and proof of address.
• "Cookies" means small text files placed on your device by the Plaza4D platform for session management, analytics, and functionality purposes.
• "MYR" means Malaysian Ringgit, the operating currency of the Plaza4D platform.

03 Data We Collect

Plaza4D collects Personal Data from you in the following categories, depending on your level of interaction with the platform:

When you create a Plaza4D account, we collect: full legal name, date of birth, email address, Malaysian mobile phone number, residential address, and a chosen username and password (stored in hashed form — we never store passwords in plaintext).

As part of our mandatory Know Your Customer process, we collect copies of government-issued identification documents (MyKad, passport, or driver's licence), proof of residential address (utility bills, bank statements, or official correspondence), selfie photographs, and in some cases, proof of payment method ownership.

We collect records of all deposits and withdrawals, including payment method type (e.g., Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, USDT TRC20, Bitcoin), transaction amounts in MYR, transaction timestamps, and payment reference numbers. We do not store full card numbers or e-wallet PINs.

We maintain records of your betting and gaming history — including games played, amounts wagered, wins, losses, 4D number selections, and bonus usage — for account management, regulatory compliance, responsible gambling monitoring, and dispute resolution purposes.

We automatically collect certain technical information when you access the platform, including IP address, device type and operating system, browser type and version, session duration, pages visited, referring URLs, and geolocation data (country or city level, derived from IP address).

We retain records of all communications between you and Plaza4D, including live chat transcripts, email correspondence, and support ticket history, for quality assurance, dispute resolution, and compliance purposes.

04 How We Use Your Data

Plaza4D processes your Personal Data for the following specific purposes:

• Account Management: To create, maintain, verify, and administer your Plaza4D account, including authentication, password resets, and account security notifications.
• Identity & Age Verification: To confirm that you meet the minimum age requirement of 21 years and to verify your identity in accordance with KYC obligations.
• Payment Processing: To process deposits and withdrawals in MYR via your chosen payment method, including Touch 'n Go eWallet, DuitNow, FPX, and direct bank transfers through Maybank, CIMB, and Public Bank.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, account takeovers, money laundering, and other prohibited conduct.
• Regulatory Compliance: To fulfil our legal obligations under applicable anti-money laundering (AML), counter-terrorism financing (CTF), and data protection legislation.
• Responsible Gambling: To monitor gameplay patterns for signs of problem gambling behaviour, apply responsible gambling tools at your request, and fulfil age-related protection obligations.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance via live chat, email, and our support ticketing system.
• Platform Improvement: To analyse anonymised, aggregated usage data for the purpose of improving platform features, user experience, and service reliability.
• Marketing Communications: To send you promotional communications regarding Plaza4D bonuses, new games, and platform features, where you have provided consent or where we have a legitimate interest in doing so. You may opt out at any time.

05 Legal Basis for Processing

Plaza4D processes your Personal Data one or more of the following legal bases:

• Contractual Necessity: Processing required to perform our obligations under the agreement you entered into when creating a Plaza4D account (account management, payments, KYC verification).
• Legal Obligation: Processing required to comply with applicable laws, including AML/CTF regulations and data protection legislation (regulatory reporting, identity verification, record retention).
• Legitimate Interests: Processing necessary for Plaza4D's legitimate operational interests, where those interests are not overridden by your fundamental rights (fraud prevention, platform security, service improvement, responsible gambling monitoring).
• Consent: Processing based on your explicit consent, specifically in relation to non-essential cookies and direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

06 Data Sharing & Disclosure

Plaza4D does not sell your Personal Data. We may share your data with third parties only in the following limited circumstances, and only to the extent necessary for the specified purpose:

We share transaction data with payment processors and financial institutions that facilitate your deposits and withdrawals, including e-wallet operators (Touch 'n Go eWallet, Boost, GrabPay), DuitNow/FPX intermediaries, and licensed Malaysian banks (Maybank, CIMB, Public Bank, Hong Leong). These parties are bound by their own regulatory obligations and data security requirements.

We may use third-party KYC and identity verification service providers to assist in verifying the identity and age of account holders. These providers process identity documents and biometric data solely for verification purposes under contractual data processing agreements.

To operate live casino, slots, and certain 4D lottery services, Plaza4D works with licensed game software providers. These providers may receive limited session data (player ID, session token, bet history) necessary to operate the game interface. They do not receive your full personal profile.

Plaza4D may disclose Personal Data to competent regulatory bodies, law enforcement agencies, or courts where required by law, court order, or valid legal process. We will notify you of such disclosures where legally permitted to do so.

We may share technical identifiers (IP addresses, device fingerprints, transaction patterns) with fraud prevention networks and security service providers to protect the platform and its users from fraudulent activity.

07 Cookies & Tracking Technologies

Plaza4D uses cookies and similar tracking technologies (including local storage and session tokens) on its platform. Cookies are small data files placed on your device that allow the platform to remember your session state, preferences, and usage patterns.

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. These cannot be disabled without significantly impairing your ability to use the platform.
• Functional Cookies: Remember your preferences such as language settings, last login, and platform layout choices. These improve your experience but are not strictly required.
• Analytics Cookies: Collect anonymised data about how users interact with the platform — pages visited, features used, session duration — to help Plaza4D improve performance and usability.
• Security Cookies: Help detect and prevent fraudulent access attempts, bot activity, and account takeover attempts by analysing behavioural patterns on the platform.

You may manage, restrict, or delete cookies through your browser settings. Most browsers allow you to refuse all cookies or to accept only certain types. Please note that disabling strictly necessary cookies will prevent you from logging into your Plaza4D account or completing transactions. For detailed guidance on managing cookies in your specific browser, consult your browser's help documentation.

08 Data Retention

Plaza4D retains your Personal Data for as long as is necessary to fulfil the purposes set out in this Policy, unless a longer retention period is required by applicable law. The following general retention guidelines apply:

• Account Data: Retained for the duration of your account relationship with Plaza4D, plus a minimum of five (5) years following account closure, in accordance with AML record-keeping obligations.
• KYC Documentation: Retained for a minimum of five (5) years from the date of the most recent transaction or account activity, as required by applicable financial crime regulations.
• Transaction Records: Retained for a minimum of five (5) years following the transaction date for audit and compliance purposes.
• Support Communications: Retained for three (3) years from the date of the last interaction for dispute resolution and quality assurance purposes.
• Technical / Log Data: Retained for a maximum of twelve (12) months from collection, after which it is anonymised or deleted.
• Marketing Preferences: Retained until you withdraw consent or opt out of marketing communications, at which point your contact details are removed from active marketing lists.

09 Data Security

Plaza4D implements a multi-layered data security framework to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. Security measures include:

• 256-bit Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and the Plaza4D platform.
• Encryption at rest for all stored Personal Data, including KYC documents and financial records.
• Role-based access controls limiting employee access to Personal Data to those with a documented operational need.
• Multi-factor authentication (MFA) for all Plaza4D staff accessing systems that contain Personal Data.
• Regular third-party penetration testing and vulnerability assessments of platform infrastructure.
• Automated anomaly detection systems monitoring for unusual account access patterns indicative of account takeover attempts.
• Incident response procedures governing how Plaza4D detects, contains, and notifies affected users of personal data breaches.

10 International Data Transfers

Plaza4D primarily stores and processes Personal Data within secure infrastructure serving its operational regions. In certain circumstances — for example, where Plaza4D uses cloud infrastructure or third-party game providers whose servers are located in other jurisdictions — your Personal Data may be transferred to, stored in, or processed in countries outside Malaysia.

Where Personal Data is transferred internationally, Plaza4D ensures that appropriate safeguards are in place to maintain an equivalent level of protection, including: contractual data processing agreements incorporating standard data protection clauses, verification that the receiving jurisdiction has adequate data protection standards, and technical security controls applied consistently regardless of where data is processed.

11 Your Rights

Subject to applicable law and verification of your identity, you hold the following rights in respect of your Personal Data held by Plaza4D:

• Right of Access: You may request a copy of the Personal Data Plaza4D holds about you, including information on how it is being processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete Personal Data held about you.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to Plaza4D's legal retention obligations (e.g., AML record-keeping).
• Right to Restriction: You may request that Plaza4D restrict the processing of your Personal Data in certain circumstances, such as where you contest the accuracy of the data or object to its processing.
• Right to Data Portability: You may request that Plaza4D provide your Personal Data in a structured, commonly used, machine-readable format for transfer to another service provider, where technically feasible.
• Right to Object: You may object to Plaza4D processing your Personal Data on the basis of legitimate interests, including for direct marketing purposes. Objections to direct marketing will be honoured immediately and unconditionally.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact Plaza4D's data privacy team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within five (5) business days and respond substantively within thirty (30) calendar days.

12 Children & Minors

Plaza4D's platform and services are strictly intended for individuals aged 21 years and above. Plaza4D does not knowingly collect, process, or retain Personal Data from persons under the age of 21. All account registrations are subject to mandatory KYC age verification to enforce this restriction.

If Plaza4D becomes aware that Personal Data has been collected from a person under 21years of age, the relevant account will be immediately suspended, all Personal Data associated with that account will be deleted or anonymised, and appropriate regulatory notifications will be made where required. If you have reason to believe that a minor has registered a Plaza4D account, please contact us immediately at [email protected].

13 Third-Party Links

The Plaza4D platform may contain references to or integrations with third-party services, including payment providers such as Touch 'n Go eWallet, Boost, GrabPay, and banking interfaces for Maybank2u, CIMB Clicks, and Public Bank. When you interact with these third-party services — including during payment flows — you are subject to their respective privacy policies, not this Policy.

Plaza4D is not responsible for the privacy practices of third-party services and recommends that you review the privacy policies of any third-party platforms you interact with during your use of Plaza4D services. Plaza4D selects payment and service partners that meet recognised security and data protection standards, but cannot guarantee or control their independent data practices.

14 Policy Updates

Plaza4D reserves the right to update or amend this Privacy Policy at any time. Where amendments are material — meaning they substantively affect how your Personal Data is collected, used, or shared — Plaza4D will provide at least seven (7) calendar days' advance notice to registered account holders via email and/or a prominent on-platform notification prior to the changes taking effect.

The "Last Updated" date at the top of this Policy indicates when it was most recently revised. We encourage you to review this Policy periodically. Continued use of the Plaza4D platform following the effective date of any amendment constitutes your acknowledgement of the revised Policy.

15 Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or Plaza4D's data practices, please contact our data privacy team through the following channel:

For information on the rules governing your use of the Plaza4D platform, please review our Terms & Conditions. For information on our responsible gambling tools, visit our Responsible Gambling page.