4pcs Privacy Policy – Personal Data Protection for Malaysian Players

Welcome to the 4pcs Privacy Policy. This document explains in detail how the 4pcs Malaysia platform collects, uses, discloses, stores and protects your personal information when you use our website, mobile app or any other services provided by 4pcs.

At 4pcs, we understand that trust begins with transparency. Malaysian players who choose 4pcs as their online entertainment platform deserve to know exactly what we do with their data. That is why we have written this Privacy Policy in plain, easy-to-understand language — not confusing legal jargon.

This Privacy Policy applies to all users of the 4pcs platform, including registered players, website visitors and any party that interacts with our services. By using the 4pcs platform, you consent to the collection and use of your personal data as described in this document.

4pcs collects your personal data through several means — whether information you provide directly to us, data collected automatically during your use of the platform, or information received from legitimate third parties. The following are the main categories of data that 4pcs collects:

Data you provide directly to 4pcs:

• Registration Information – Your full name, Malaysian phone number, email address and password chosen when registering your 4pcs account.
• Identity Verification (KYC) Information – A copy of your MyKad or Malaysian passport, identification number and related information required to process withdrawals that exceed certain limits.
• Financial Information – Payment method details used for deposits and withdrawals, including Touch 'n Go wallet numbers, GrabPay accounts, DuitNow phone numbers, FPX accounts (Maybank2u or CIMB Clicks), Boost or ShopeePay accounts. All transactions are recorded in MYR (RM).
• Feedback & Communications – Any enquiries, complaints or feedback you submit to the 4pcs support team via live chat, email or WhatsApp.

Automatically collected data:

• Technical Data – Your IP address, web browser type and version, device type (smartphone or computer), operating system, screen resolution and access time logs.
• Usage Data – Pages you visit within the 4pcs platform, games you play (including slots such as Golden Dragon, Prosperity Lion, Crazy Coin Flip, Dawn of Egypt and others), session duration, account setting preferences and interaction patterns.
• Location Data – Approximate location data based on your IP address for regulatory compliance and fraud prevention purposes. 4pcs does not collect precise GPS data from your device.

4pcs uses the personal data it collects solely for legitimate and transparent purposes. Below is a full explanation of how and why we process your data:

• Account & Platform Operations – To create and manage your 4pcs account, process deposits and withdrawals in RM, provide access to the slots, live casino and sports games you enjoy, and maintain your transaction records.
• Identity Verification & KYC – To verify your identity during the registration process and to process withdrawals requiring additional verification, in compliance with Anti-Money Laundering (AML) legal requirements.
• Security & Fraud Prevention – To detect, investigate and prevent any fraudulent activity, multi-account usage, bonus abuse or any behaviour that violates 4pcs's Terms & Conditions.
• Customer Support – To assist you when you contact the 4pcs support team, resolve enquiries or complaints, and maintain a communication history for reference.
• Marketing & Promotions – To send you information about 4pcs bonuses, promotions, new games and exclusive offers that may interest you, subject to your consent. You may withdraw your marketing consent at any time.
• Platform Improvements – To analyse usage patterns and understand Malaysian players' preferences in order to improve the user experience, introduce new features and resolve technical issues on the 4pcs platform.
• Legal Compliance – To comply with the requirements of Malaysia's Personal Data Protection Act (PDPA) 2010, AML/CFT regulations, regulatory body directives and valid court orders.

4pcs will not use your personal data for any purpose other than those stated above without first obtaining your consent.

4pcs takes a highly cautious approach to sharing members' personal data. We do not sell, rent or trade your personal information to any party for their own commercial purposes. However, in the following limited circumstances, 4pcs may need to share your data:

• Trusted Service Providers – Third-party companies that assist 4pcs in platform operations, such as payment service providers (including Touch 'n Go, GrabPay, DuitNow and FPX operators), cloud infrastructure providers, identity verification services and data analytics firms. All third parties are bound by strict confidentiality agreements and may only use your data for purposes specified by 4pcs.
• Game Providers – Third-party game developers providing slots and live casino games on the 4pcs platform may receive the minimum data required for game operation, such as anonymised player IDs and betting information. They do not receive your personally identifiable information.
• Regulatory Bodies & Law Enforcement – Where 4pcs is required by Malaysian law or court order to disclose certain information to lawful authorities, we will fulfil that obligation.
• Business Transfer – Should 4pcs be involved in any merger, acquisition or asset sale, user data may be transferred as part of that transaction, subject to equivalent privacy protections.

The security of your personal data is a responsibility that 4pcs takes extremely seriously. We continuously invest in best-in-class security infrastructure and practices to protect your information from unauthorised access, use, or disclosure. Key security measures we have implemented include:

• Data Encryption in Transit – HTTPS protocol with 256-bit SSL/TLS certificate encryption for all communications between your device and 4pcs servers. This means no third party between you and us can read the data transmitted.
• Data Encryption at Rest – Sensitive information such as passwords is stored in an irreversible hashed format. Sensitive financial information is encrypted using robust encryption algorithms.
• Strict Access Controls – Only 4pcs staff with a legitimate business need are permitted to access players' personal data. All access is logged and regularly monitored.
• Two-Factor Authentication (2FA) – Available on all 4pcs accounts to add an extra layer of security. We strongly encourage all members to enable 2FA.
• Real-Time Threat Monitoring – An automated monitoring system that detects and raises alerts for any suspicious activity or unauthorised access attempts to 4pcs systems.
• Regular Security Testing – 4pcs conducts regular penetration testing and security audits carried out by independent cybersecurity experts to identify and address any vulnerabilities before they can be exploited.

While 4pcs takes all of these reasonable precautions, no security system can guarantee 100% protection against every threat. You also play an important role in keeping your data secure — safeguard your password, do not share your login credentials, and contact 4pcs immediately if you suspect any suspicious activity on your account.

The 4pcs platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions properly. The following are the types of cookies used by 4pcs:

• Essential Cookies – Cookies required for the core operation of the 4pcs platform, such as login authentication, session management and security. These cookies cannot be disabled as they are essential for the platform to function.
• Functional Cookies – Cookies that remember your preferences such as interface language, game settings and display options so you don't have to reset them each time you log in to 4pcs.
• Performance & Analytics Cookies – Cookies that collect information about how you use the 4pcs platform, such as the most frequently visited pages and most popular games. This data is used in aggregate and anonymised form to improve platform performance.
• Marketing Cookies – Cookies that help 4pcs display promotional content more relevant to your interests based on your in-platform activity. You may opt out of this type of cookie at any time.

You can manage your cookie settings through your web browser settings. However, disabling certain cookies may affect the functionality of the 4pcs platform. For the best experience on 4pcs, we recommend allowing at least essential and functional cookies.

As an online platform, 4pcs's technical infrastructure may involve the processing or storage of data on servers located outside Malaysia. Where such cross-border data transfers occur, 4pcs ensures that:

• Transfers are carried out only to countries or parties that provide a level of data protection adequate to, or equivalent with, that required under Malaysian law.
• Appropriate protection mechanisms such as Standard Contractual Clauses or comprehensive data processing agreements are used to safeguard your data.
• No sensitive financial data linked to Malaysian payment methods such as Touch 'n Go, GrabPay, DuitNow or FPX is permanently stored on servers outside Malaysia.

By using the 4pcs platform, you acknowledge and agree that your personal data may be transferred, stored and processed outside Malaysia in accordance with the terms set out in this Privacy Policy.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a 4pcs member have the following rights regarding the personal data we hold about you:

• Right of Access – You may request a copy of all personal data that 4pcs holds about you. We will provide this information within 21 days of receiving a valid request.
• Right to Rectification – If personal data held by 4pcs about you is inaccurate, incomplete or outdated, you have the right to request a correction. For basic details such as your phone number or email address, you may also update these directly in your account settings.
• Right to Withdraw Marketing Consent – You may withdraw your consent to receive marketing communications from 4pcs at any time by contacting our support team or adjusting the notification settings in your account. Such withdrawal does not affect the validity of any processing that took place prior to it.
• Right to Erasure (under certain conditions) – You may request the deletion of your personal data when it is no longer required for its original purpose, provided that 4pcs has no overriding legal basis to continue retaining it.
• Right to Lodge a Complaint – If you believe that 4pcs has violated your privacy rights, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.

To exercise any of the rights above, please contact the 4pcs Privacy Officer by email at [email protected] with the subject line "PDPA Privacy Rights Request". Please include your full name, 4pcs account number and specific details of your request. We will process your request within the timeframe prescribed by law.

The 4pcs platform is intended exclusively for adults aged 18 and above. 4pcs does not knowingly collect or process personal data from individuals under the age of 18. This is an absolute requirement that reflects our commitment to social responsibility and the protection of minors.

All new applicants are required to verify their age upon registration. 4pcs reserves the right to request additional age verification via official documents such as a MyKad or Malaysian passport at any time. Accounts found to have been registered by underage individuals will be terminated immediately and all associated funds will be handled in accordance with established procedures.

If a parent or guardian knows or suspects that their child has registered an account on 4pcs, please contact us immediately at [email protected] so that we may take the appropriate action.

The 4pcs platform may contain links or integrations to third-party websites, applications or services — including game providers, Malaysian payment providers such as Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay and FPX, or social media platforms. It is important for you to understand that:

• This 4pcs Privacy Policy applies only to platforms and services operated directly by 4pcs.
• When you leave the 4pcs platform and access third-party websites or services, 4pcs has no control over the privacy practices of those third parties.
• We encourage you to read the Privacy Policy of any third-party website before providing them with your personal information.

4pcs is not responsible for the privacy practices or content of third-party websites linked from our platform.

4pcs reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, Malaysian legal requirements, or service improvements. When we make material changes, we will:

• Updating the "Last Updated" date shown at the top of this page.
• Notifying members of material changes via their registered email address or through in-platform notifications on 4pcs.
• Displaying a prominent notice of changes on the 4pcs homepage for a reasonable period.

It is your responsibility to review this Privacy Policy periodically. Your continued use of the 4pcs platform after any amendments take effect will be considered your acceptance of the revised Privacy Policy.

If you have any questions, concerns or requests regarding this 4pcs Privacy Policy or how we handle your personal data, please do not hesitate to reach out to us. The 4pcs Privacy Officer team is ready to assist you.

• Privacy Officer Email: [email protected] (subject: "Privacy Enquiry / PDPA")
• Live Chat: Available 24 hours a day, 7 days a week via the 4pcs platform
• WhatsApp: Via the official 4pcs support number listed in the support section of the platform

We are committed to responding to all privacy-related enquiries within 5 business days and to fulfil personal data rights requests within the timeframe prescribed by Malaysia's PDPA.

Thank you for trusting 4pcs as your preferred online entertainment platform. Your trust is something we never take for granted, and we are committed to continuously safeguarding the privacy and security of your personal data every day.