Privacy Policy — Permata4D

1. Introduction

This Privacy Policy (the "Policy") describes how Permata4D ("we", "us", "our", or "Permata4D"), the operator of the online gaming and sports betting platform accessible at https://permata4d.cam (the "Platform"), collects, uses, stores, discloses, and otherwise processes personal data relating to individuals who visit or register on the Platform ("you", "your", "User", "Member", or "Player").

Permata4D takes the privacy of its Members seriously. We are committed to handling personal data responsibly, with transparency, and in accordance with applicable data protection principles. This Policy applies to all personal data collected through the Platform, our customer support channels, and any other interactions between you and Permata4D.

By creating an account on the Permata4D Platform, or by continuing to access the Platform after this Policy has been updated, you acknowledge that you have read and understood the contents of this Policy and that you consent to the processing of your personal data as described herein. If you do not agree to any part of this Policy, you should discontinue use of the Platform and may request account closure by contacting our support team.

This Policy should be read in conjunction with our Terms & Conditions, which govern your overall use of the Platform and are incorporated herein by reference.

2. Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial information, location data, and online identifiers.
• "Processing" means any operation or set of operations performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, and deletion.
• "Controller" means Permata4D, the entity that determines the purposes and means of processing personal data collected through the Platform.
• "Data Subject" means the individual to whom personal data relates — in this context, you, the Platform user or registered Member.
• "KYC Data" means identity and age verification documentation submitted by Members as part of the Know Your Customer process, including government-issued identification, proof of address, and payment method verification documents.
• "Technical Data" means automatically collected information about your device, browser, IP address, session duration, and interaction with the Platform.
• "Third-Party Service Providers" means entities engaged by Permata4D to provide specific operational services, including payment processors, fraud prevention partners, and IT infrastructure providers.

3. Data We Collect

Permata4D collects personal data through several channels. The categories of personal data we collect and the circumstances in which they are collected are set out below.

3.1 Registration Data

When you register an account on the Platform, we collect:

3.2 KYC & Verification Data

To comply with our age verification requirements and anti-money laundering obligations, we may collect:

3.3 Financial & Transaction Data

When you make deposits or request withdrawals using Malaysian payment methods (Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, or USDT TRC20), we record transaction details including amounts, timestamps, payment method references, and transaction status. We do not store full banking credentials or card numbers on our systems.

3.4 Gaming & Betting Activity Data

We record information about your gaming and betting activity on the Platform, including games played, wagers placed, outcomes, bonus usage, and session duration. This data is used for account management, responsible gambling monitoring, and platform improvement.

3.5 Technical & Device Data

We automatically collect certain technical information when you access the Platform:

3.6 Communications Data

When you contact our support team via live chat or email, we retain records of those communications for quality assurance and dispute resolution purposes. This includes the content of messages and associated timestamps.

4. How We Use Your Data

Permata4D processes personal data for the following specific purposes:

5. Legal Basis for Processing

Permata4D processes your personal data on the following legal grounds, depending on the purpose of processing:

• Contractual necessity: Processing required to provide the services described in our Terms & Conditions, including account management, payment processing, and gaming services.
• Legal obligation: Processing required to comply with applicable laws and regulations, including age verification, anti-money laundering (AML) screening, and fraud prevention obligations.
• Legitimate interests: Processing carried out for our legitimate business interests, including fraud detection, platform security, and service improvement, where such interests are not overridden by your rights and interests.
• Consent: Processing carried out with your express consent, such as sending promotional communications. Where consent is the legal basis, you have the right to withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

6. Data Sharing & Disclosure

Permata4D does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We share personal data with third parties only in the following circumstances and only to the extent necessary:

• Payment processing partners: When you make a deposit or request a withdrawal, your transaction data is shared with the relevant payment service provider (e.g., Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX-participating banks including Maybank, CIMB, Public Bank, and Hong Leong) solely to process the transaction. These partners are bound by their own privacy and security obligations.
• Identity verification and KYC providers: We may use third-party identity verification services to assist in processing KYC documentation. Such providers process your KYC data solely for the purpose of verification and are contractually prohibited from using it for other purposes.
• Fraud prevention and security services: We share technical and account data with fraud detection providers to identify and prevent fraudulent activity on the Platform.
• IT infrastructure and hosting providers: Our Platform and data are hosted on secure servers managed by trusted infrastructure providers. Data processing agreements are in place with all such providers.
• Legal and regulatory authorities: Where required by applicable law, court order, regulatory instruction, or valid law enforcement request, Permata4D will disclose personal data as required. We will notify you where legally permissible to do so before making any such disclosure.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of our business assets, personal data held by Permata4D may be transferred to the successor entity, subject to equivalent privacy protections.

7. Data Retention

Permata4D retains personal data for as long as is necessary to fulfil the purposes for which it was collected and to comply with applicable legal and regulatory obligations. The following general retention periods apply:

• Account and registration data: Retained for the duration of the active account relationship and for a minimum period thereafter as required by our legal and audit obligations.
• KYC documentation: Retained for a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements.
• Transaction and financial records: Retained for a minimum of five (5) years to satisfy financial record-keeping and AML compliance obligations.
• Gaming and betting activity logs: Retained for the duration of the account and for a defined period post-closure for dispute resolution and responsible gambling purposes.
• Customer support communications: Retained for up to two (2) years following resolution, for quality assurance and dispute reference purposes.
• Technical and session data: Retained in aggregated or anonymised form for analytical purposes; identifiable technical logs retained for up to twelve (12) months.

When personal data is no longer required for any of the above purposes, it will be securely deleted or anonymised in accordance with our internal data disposal procedures.

8. Data Security

Permata4D implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption on all data transmissions between your browser/device and the Platform;
• Encrypted storage of sensitive data including passwords (stored as salted cryptographic hashes — we never store your plain-text password) and KYC documents;
• Access controls limiting internal access to personal data on a strict need-to-know basis, with role-based permissions and multi-factor authentication for system administrators;
• Regular security audits and penetration testing to identify and remediate potential vulnerabilities;
• Intrusion detection systems monitoring for unusual access patterns or suspicious activity;
• Two-factor authentication (2FA) available to all Members for account login protection.

Despite our best efforts, no data transmission over the internet can be guaranteed to be entirely secure. Permata4D cannot warrant absolute security but will take all commercially reasonable steps to protect your personal data and will notify you without undue delay in the event of a data breach that materially affects your rights.

9. Cookies & Tracking Technologies

Permata4D uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file stored on your device by browser when you visit the Platform.

We use the following categories of cookies:

• Strictly necessary cookies: Essential for Platform functionality, including maintaining your logged-in session, remembering your language and display preferences, and ensuring security measures function correctly. These cookies cannot be disabled without preventing core Platform features from working.
• Performance and analytics cookies: Help us understand how Members interact with the Platform — which pages are visited most, how long sessions last, and where technical errors occur. Data collected is aggregated and anonymised where possible.
• Functional cookies: Remember your preferences and settings to provide a more personalised experience on return visits, including your preferred deposit method and game display settings.

You may control cookie settings through your browser's settings panel. Please note that disabling certain cookies may impair the functionality of the Platform. Permata4D does not use third-party advertising or tracking cookies to build user profiles for external marketing purposes.

10. Your Rights

Permata4D respects your rights in relation to your personal data. Subject to applicable law and certain exemptions (including legal retention obligations), you have the following rights:

To exercise any of these rights, please contact our Data Support team at [email protected] with your request. We will acknowledge receipt within 5 business days and aim to fulfil all valid requests within 30 calendar days. In complex cases, this period may be extended by up to a further 60 days, with notification provided.

11. Minors & Age Restriction

The Permata4D Platform is strictly intended for individuals who are 21 years of age or older. We do not knowingly collect personal data from individuals under the age of 21. Registration is subject to age verification, and any account found to belong to a person below the minimum age will be immediately closed.

Any personal data collected from an account subsequently identified as belonging to a minor will be deleted as soon as practicable following identification, subject to any legal retention obligations that may apply.

If you are a parent or guardian and believe that a minor has created an account on the Platform using your or their details, please contact us immediately at [email protected] so that we can take appropriate action without delay.

12. Third-Party Services

The Permata4D Platform may integrate with or reference services operated by third parties, including payment processors and identity verification providers. This Privacy Policy applies only to data processed by Permata4D directly. Third-party services are governed by their own privacy policies, and Permata4D does not assume responsibility for their data handling practices.

Permata4D selects third-party service providers carefully and requires all data processors engaged by us to implement appropriate technical and organisational security measures and to process personal data only in accordance with our written instructions.

All payment service providers used by Permata4D — including those processing Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and bank transfer transactions — are engaged under data processing agreements and are prohibited from using transaction data for purposes other than facilitating the relevant payment.

13. Changes to This Privacy Policy

Permata4D reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will update the "Last Updated" date at the top of this page. For significant changes that materially affect how we use your personal data, we will provide additional notice via email to your registered address or via an in-platform notification, where practicable.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of the Platform after changes have been published constitutes your acknowledgement of and agreement to the updated Policy.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by Permata4D, please contact us through the following channels:

For general enquiries about your account, please also refer to our FAQ page.

For information about our responsible gambling tools and self-exclusion options, please visit our Responsible Gambling page.