Privacy Policy

01 Introduction

atta4d ("we", "us", "our", "the Platform") operates the online casino and sports betting website accessible at https://atta4d.asia ("the Website"). As the data controller for information collected through our platform, we are committed to protecting the privacy and personal data of every individual who interacts with atta4d — whether as a registered Player, a prospective registrant, or a visitor to our Website.

This Privacy Policy ("Policy") sets out in clear terms what personal data we collect from you, why we collect it, how it is processed and stored, how long we retain it, who we may share it with, and what rights you have in relation to your data. This Policy applies to all users of the atta4d platform, including players based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and throughout Malaysia.

This Policy should be read in conjunction with our Terms & Conditions and our Responsible Gambling policy, both of which form part of the overall agreement between you and atta4d.

02 Definitions

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial information, and online identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data. For the purposes of this Policy, atta4d is the Data Controller.
• "Data Processor" means a third party that processes Personal Data on behalf of the Data Controller under contract and in accordance with this Policy.
• "Data Subject" means the individual to whom the Personal Data relates — in this context, a registered Player or Website visitor.
• "Cookies" means small text files stored on your device by a website for the purpose of recording preferences, session information, and usage analytics.
• "KYC" means Know Your Customer — the identity and age verification procedures required by atta4d prior to activating full account functionality.
• "Third Party" means any person or entity other than the Data Subject and atta4d.

03 Data We Collect

atta4d collects only the personal data that is necessary for the legitimate operation of our platform, the provision of our Services, compliance with legal obligations, and the improvement of user experience. The categories of personal data we collect are described below.

3.1 Account Registration Data

• Full legal name
• Date of birth (for 21+ age verification purposes)
• Residential address (including city, state, postcode, and country)
• Email address
• Mobile telephone number
• Username and encrypted account password
• Preferred currency (MYR by default for Malaysian players)

3.2 Identity Verification (KYC) Data

• Copy of government-issued photo identification (e.g., Malaysian MyKad, passport)
• Proof of residential address (utility bill, bank statement, or official correspondence)
• Proof of payment method ownership (e.g., screenshot of e-wallet registration or bank account showing your name)
• Selfie photograph for identity matching purposes, where required

3.3 Financial Transaction Data

• Deposit and withdrawal amounts, dates, and methods
• Payment provider identifiers (e.g., masked bank account numbers, e-wallet account IDs for Touch 'n Go eWallet, Boost, GrabPay, DuitNow, Maybank2u, CIMB Clicks, Public Bank, FPX)
• Cryptocurrency wallet addresses used for transactions (where applicable)
• Transaction reference numbers and processing records

3.4 Gaming Activity Data

• Bet history, game logs, wagering amounts, and outcomes
• Sports betting selections, odds accepted, and market preferences
• Bonus usage records, wagering progress, and promotion participation history
• Session duration, login timestamps, and platform usage patterns

3.5 Technical & Device Data

• IP address and approximate geographic location derived from IP
• Device type, operating system, and browser version
• Referring URL and pages visited on the atta4d platform
• Cookie identifiers and session tokens

3.6 Communication Data

• Content of support tickets, live chat transcripts, and email correspondence with our support team
• Feedback and survey responses submitted voluntarily
• Records of promotional communications sent and your opt-in or opt-out preferences

04 How We Collect Data

atta4d collects personal data through the following means:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, place a bet, contact our support team, or participate in promotions.
• Automatically via technology: Through cookies, web beacons, session tracking scripts, and server logs as you navigate the atta4d platform. See Section 10 for full details on our use of cookies.
• From payment providers: Transaction data and payment confirmation records are received from our integrated payment processors, including local Malaysian providers such as DuitNow, FPX, and e-wallet operators.
• From identity verification partners: Where we engage third-party KYC or AML (Anti-Money Laundering) services to assist in verifying your identity and screening your information against relevant databases.
• From fraud prevention services: Data may be received from third-party fraud detection tools used to protect the integrity of our platform and our players.

05 Data Processing & Purpose

We process your personal data only for defined and legitimate purposes. The table below sets out the primary purposes for which atta4d processes personal data, together with the corresponding data categories used.

06 Legal Basis for Processing

atta4d processes your personal data under one or more of the following legal bases:

• Contractual Necessity: Processing is required to fulfil our contractual obligations to you under the Terms & Conditions — for example, to process your deposits, execute bets, and pay out winnings.
• Legal Obligation: Certain processing activities are required by applicable law, including KYC verification, AML screening, and responsible gambling monitoring.
• Legitimate Interests: We process some data based on our legitimate business interests, such as fraud prevention, platform security, and analytical improvements, where such interests are not overridden by your rights.
• Consent: Where required, we will seek your explicit consent before processing your data for specific purposes such as marketing communications. You may withdraw such consent at any time by contacting [email protected].

07 Data Sharing & Disclosure

atta4d does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your data only in the following limited circumstances:

• Payment Processors: Your financial data is shared with payment service providers (including local Malaysian e-wallet operators, FPX facilitators, and cryptocurrency payment gateways) solely for the purpose of processing your deposits and withdrawals.
• KYC and AML Partners: Your identity documents and verification data may be shared with contracted third-party identity verification and AML compliance service providers.
• Fraud Detection Services: Technical and transactional data may be shared with fraud prevention platforms to identify and mitigate suspicious activity on the atta4d platform.
• IT and Infrastructure Providers: Our hosting and cloud infrastructure partners may have incidental access to personal data stored on servers they operate on our behalf, under strict data processing agreements.
• Regulatory and Legal Authorities: We may disclose personal data to competent regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law, a valid court order, or regulatory direction.
• Responsible Gambling Organisations: In cases where a player has requested self-exclusion or where we are required to report by applicable responsible gambling regulations, limited data may be shared with recognised problem gambling authorities.

All third parties with whom we share personal data are required to process that data in accordance with applicable data protection laws and atta4d's contractual requirements. We do not permit third-party Data Processors to use your personal data for their own purposes beyond the scope of the services they provide to atta4d.

08 Data Retention

atta4d retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal and regulatory obligations, or to resolve disputes and enforce our agreements.

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymised so that it can no longer be attributed to you as an identified individual. Anonymised aggregate data may be retained indefinitely for statistical and analytical purposes.

09 Data Security

atta4d implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security framework includes:

• SSL/TLS Encryption: All data transmitted between your device and the atta4d platform is encrypted using 256-bit SSL/TLS technology, ensuring that your personal and financial information cannot be intercepted in transit.
• Password Security: Account passwords are stored using industry-standard one-way hashing algorithms. atta4d staff cannot view your plaintext password under any circumstances.
• Access Controls: Access to personal data within our organisation is restricted on a strict need-to-know basis. Staff members are granted only the minimum data access required to perform their designated roles.
• Infrastructure Security: Our platform is hosted on secured, regularly audited server infrastructure with firewall protection, intrusion detection systems, and routine vulnerability assessments.
• Incident Response: atta4d maintains a formal data breach response plan. In the event of a security incident that poses a risk to your rights or freedoms, we will notify affected individuals and relevant authorities in accordance with applicable legal requirements.

10 Cookies & Tracking

atta4d uses cookies and similar tracking technologies to enhance the functionality and performance of our platform, to remember your preferences, and to analyse how our Website is used. The types of cookies we use are described below.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may impair certain core functions of the atta4d platform, including account login and session management. For more information on managing cookies, refer to your browser's help documentation.

11 Your Rights

Subject to applicable data protection laws, you have the following rights in relation to the personal data that atta4d holds about you:

• Right of Access: You have the right to request a copy of the personal data we hold about you, along with information about how it is being used and to whom it has been disclosed.
• Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal data held about you. You may update certain account information directly through your account settings.
• Right to Erasure: In certain circumstances, you have the right to request that we delete your personal data. Please note that this right may be limited where we are required by law to retain your data (e.g., AML and financial record obligations).
• Right to Restrict Processing: You may request that we limit the processing of your personal data in specific circumstances, for example while a dispute about its accuracy is being resolved.
• Right to Data Portability: Where processing is based on your consent or on a contractual basis and carried out by automated means, you may request a copy of your data in a structured, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where we rely on legitimate interests as the legal basis. You also have the right to opt out of marketing communications at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please submit a written request to [email protected]. We will respond to all verifiable requests within a reasonable period, typically within 30 days. We may require you to verify your identity before processing certain requests to protect against unauthorised access.

12 Children's Privacy

The atta4d platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect, solicit, or process personal data from individuals under the age of 21. Access to gambling and betting services by minors is strictly prohibited.

If you are a parent or guardian and believe that a minor has registered an account or provided personal information to atta4d without your consent, please contact us immediately at [email protected]. Upon verification, we will take prompt action to close the account and delete all associated personal data.

13 Cross-Border Data Transfers

In the course of operating the atta4d platform and providing our Services, your personal data may be transferred to, stored on, or processed by systems located outside of Malaysia. This may occur in the context of our use of cloud hosting infrastructure, third-party payment processors, identity verification partners, or fraud prevention services that operate internationally.

Where personal data is transferred outside Malaysia, atta4d takes appropriate steps to ensure that such transfers are carried out in compliance with applicable data protection requirements and that your data remains subject to an adequate level of protection. Safeguards we employ for international data transfers include:

• Entering into data transfer agreements with the receiving party that incorporate appropriate contractual protections;
• Ensuring that any third-party data processors with whom we share data outside Malaysia are subject to binding data protection obligations equivalent to those applied within Malaysia;
• Conducting due diligence on the data protection standards of countries to which transfers are made.

14 Policy Amendments

atta4d reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. When material changes are made, we will notify registered Players by email and/or by displaying a prominent notice on the Website prior to the changes taking effect.

The date of the most recent revision is shown at the top of this page. We encourage you to review this Policy periodically to remain informed about how your personal data is handled. Your continued use of the atta4d platform following the publication of an updated Policy constitutes your acceptance of the changes.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by atta4d, please contact our Data Protection team using the details below. We are committed to responding promptly and resolving privacy enquiries in a transparent manner.

• Data Protection Enquiries: [email protected]
• Subject Line: Privacy Policy Enquiry or Data Subject Request
• Live Chat: Available 24/7 directly through the atta4d platform
• Response Time: We aim to respond to all privacy-related requests within 30 calendar days

If you are not satisfied with our response to a privacy enquiry, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.