Nusantara4D Privacy Policy – Personal Data Protection for Malaysian Members

1 Introduction and Scope of This Privacy Policy

This Privacy Policy ("Policy") describes how Nusantara4D ("we", "the platform") handles personal data collected from members and visitors to nusantara4d.biz and all related applications and services. This document is written in accordance with the provisions of Malaysia's Personal Data Protection Act 2010 (PDPA) and forms part of the overall agreement between you and Nusantara4D.

We understand that entrusting a platform with your personal data is not a decision taken lightly. This is especially true when financial information is involved — such as bank account numbers, and transaction data from deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX. This data is sensitive, and we handle it to the highest protection standards we can provide.

This policy applies to all users of the Nusantara4D platform, including registered members, website visitors who have not yet registered, and anyone who interacts with our platform through any channel — including the website, mobile app, live chat, email, and WhatsApp. If you have any questions about how we handle your data, our team is ready to assist via the channels listed in section 10 of this document.

2 Personal Data We Collect

2.1 Data You Provide Directly

When you register an account with Nusantara4D or use our services, you directly provide us with several categories of personal data. This includes information you enter yourself in the registration form, KYC verification form, and communications with our customer support team:

• Identity information: Full name, date of birth, MyKad or passport number, gender
• Contact information: Email address, Malaysian mobile number, residential address
• Login details: Username and password (passwords are stored in a hashed format that cannot be read)
• Financial information: Bank account number, bank name, and payment method details used for deposits and withdrawals
• Verification documents: Copy of MyKad or passport, utility bill or bank statement as proof of address during the KYC process

2.2 Automatically Collected Data

When you use the Nusantara4D platform, our systems automatically collect certain types of technical data required for security and platform operations:

• Device and technical data: IP address, web browser type, operating system, device model, screen resolution
• Platform activity data: Pages visited, session duration, login frequency, games played
• Transaction data: Deposit records, withdrawals, betting activity, and account balance — all in MYR (RM)
• Location data: Approximate location based on IP address for regional verification and account security
• Cookie and tracking technology data: Please refer to the Cookie Policy section of this document for a full explanation

2.3 Data from Third-Party Sources

In certain circumstances, Nusantara4D may receive data about you from trusted third-party sources. This includes identity verification information from the KYC service providers we use, payment verification data from e-wallet providers such as Touch 'n Go and GrabPay when you make a deposit, and security information from fraud detection systems that help protect your account. Data received from these third-party sources is used solely for the same purposes as data you provide directly.

3 How We Use Your Personal Data

3.1 Primary Purposes of Data Use

Nusantara4D uses collected personal data solely for legitimate purposes necessary to operate the platform and provide services to you. The following are the primary purposes for which your data is used:

• Account management: Registering new accounts, verifying identities, processing KYC applications, and maintaining accurate account records
• Payment processing: Processing deposits via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX, and processing withdrawals to your Malaysian bank account in MYR
• Gaming service delivery: Grants access to the Nusantara4D game catalogue, including slots, live casino, 4D, football, and e-sports
• Security and fraud prevention: Detecting and preventing unauthorised access, identity fraud, money laundering, and platform abuse
• Customer support: Responding to enquiries, resolving complaints, and providing technical support via live chat and email
• Legal compliance: Meet reporting obligations to the relevant authorities when required under Malaysian law
• Platform improvements: Analysing usage patterns to improve the functionality, performance, and overall user experience of Nusantara4D

3.2 Marketing Communications

Nusantara4D may send you information about promotions, new bonuses, and platform updates via email or in-app notifications. These marketing communications are only sent to members who have agreed to receive them during registration or through their account settings. You can opt out of marketing communications at any time via the "unsubscribe" link in any email, or by updating your notification preferences in your Nusantara4D account settings.

Please note that opting out of marketing communications will not stop essential service-related communications, such as transaction confirmations, account security notifications, and necessary information regarding changes to Nusantara4D's services.

4 Data Sharing with Third Parties

4.1 General Data Sharing Principles

Nusantara4D does not sell, rent, or trade members' personal data to third parties for marketing purposes under any circumstances. Data sharing with third parties only occurs in limited, contractually bound situations that are necessary for the proper operation of the platform.

4.2 Third Parties That May Receive Your Data

In the course of normal Nusantara4D operations, your personal data may be shared with the following categories of third parties, strictly to the extent necessary:

• Payment service providers: Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX banking processors receive only the data necessary to process your financial transactions. This data is governed by the respective providers' own privacy policies and is not used by them for any other purpose.
• Game software providers: Pragmatic Play, Evolution Gaming, PG Soft, NetEnt, Microgaming, Playtech, SA Gaming, and Dream Gaming receive only the minimum session data required to deliver their games. These providers are bound by strict data confidentiality agreements with Nusantara4D.
• KYC service providers: During the identity verification process, the data you submit for KYC is shared with accredited third-party identity verification service providers. This is standard industry practice for financial platforms.
• Security and fraud detection systems: Technical data such as IP addresses and login patterns may be processed by third-party security systems to detect and prevent fraudulent activity that could compromise your account.

4.3 Disclosures Required by Law

Nusantara4D fully complies with Malaysian law and is entitled — and in some situations obligated — to disclose members' personal data to the relevant authorities when required by court order, valid legal process, anti-money laundering investigations, or instructions from a competent law enforcement agency. In such cases, Nusantara4D will disclose only the minimum data necessary and, where permitted by law, will notify the affected member.

5 Data Security & Technical Protection

5.1 Technical Security Measures

Nusantara4D implements multiple layers of technical protection to keep your personal data secure at all times. This goes beyond mere compliance with minimum standards — it is a genuine operational commitment embedded in every infrastructure decision we make:

• 256-bit SSL encryption: All communications between your browser or app and Nusantara4D's servers are encrypted using 256-bit SSL/TLS — the same standard used by Malaysia's major banking institutions such as Maybank and CIMB
• Data encryption at rest: Sensitive data, including financial information and KYC documents, is stored in encrypted form within secure databases protected by strict access controls
• Two-factor authentication (2FA): Nusantara4D offers two-factor authentication via SMS or an authenticator app as an additional security layer for account logins
• Continuous security monitoring: Our systems monitor account activity around the clock to detect suspicious patterns and alert members when a login is detected from an unrecognised device or location
• Regular security audits: Nusantara4D's security infrastructure undergoes regular security reviews and testing by independent cybersecurity experts

5.2 Your Responsibilities in Data Security

While Nusantara4D implements comprehensive security measures, your account security also depends on your own actions. You are responsible for choosing a strong and unique password for your Nusantara4D account, not sharing your login credentials with anyone, ensuring that devices you use to access Nusantara4D are secure and up to date, and contacting our support team immediately if you suspect your account has been compromised.

Please note that Nusantara4D will never ask for your password via email, live chat, WhatsApp, or any other communication channel. Any such request is a phishing attempt and should be reported to us immediately.

6 Data Retention Period

Nusantara4D retains your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or for the period required by Malaysian law, whichever is longer. The following are general retention guidelines for key data categories:

• Active account data: Retained for as long as your account remains active on Nusantara4D. This data allows you to access your services and account history at any time.
• Financial transaction records: Retained for a minimum of 7 years following each transaction to comply with Malaysia's legal obligations regarding financial records and anti-money laundering (AML) requirements.
• KYC Documents: Retained for the duration of the active account plus 5 years after account closure, as required by applicable KYC/AML regulations.
• Communication and customer support logs: Retained for 3 years from the date of last interaction for reference and dispute resolution purposes.
• Technical data and security logs: Retained for 12 months for security monitoring and fraud detection purposes.

Once the applicable retention period expires, your data will be securely deleted or anonymised so that it can no longer be linked to you personally. Anonymised data may be used for statistical and analytical purposes without identifying any individual.

7 Your Rights Regarding Personal Data

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have several important rights regarding the personal data held by Nusantara4D. We respect and facilitate the exercise of these rights:

• Right to access data: You may request a copy of the personal data we hold about you at any time. Requests will be processed within 14 business days.
• Right to rectify data: If the personal data we hold about you is inaccurate or incomplete, you may request a correction. Basic information can be updated directly through your account settings.
• Right to withdraw consent: You may withdraw consent previously given for specific data processing activities — particularly for marketing communications — at any time, without affecting the validity of any processing that took place prior to your withdrawal.
• Right to request erasure: You may request the deletion of your personal data following account closure, subject to applicable legal retention obligations such as KYC records and financial transaction history.
• Right to object to processing: In certain circumstances, you may object to the processing of your data for specific purposes, including direct marketing.
• Right to data portability: You may request a copy of the data you have provided to us in a machine-readable format for transfer to another platform.

To exercise any of the above rights, please contact the Nusantara4D customer support team via live chat or email at support@nusantara4d.biz. We will process your request within a reasonable timeframe and keep you informed of your application's progress.

8 Cookie & Tracking Technology Policy

8.1 What Are Cookies?

Cookies are small text files stored in your web browser or device when you visit the Nusantara4D website. They allow our platform to recognise your device, maintain your login session, and remember your preferences between visits. In addition to cookies, Nusantara4D also uses other tracking technologies such as local storage and session pixels for similar purposes.

8.2 Types of Cookies Used by Nusantara4D

Cookies marked "Required" are essential for the security and core functionality of the Nusantara4D platform and cannot be disabled. Cookies marked "Optional" can be managed through your browser settings. Please note that disabling certain cookies may affect your experience on our platform.

9 Children's Privacy & Age Restrictions

The Nusantara4D platform is strictly restricted to individuals aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. Should we discover that personal data belonging to a minor has been collected without our knowledge, that data will be deleted immediately and the associated account will be closed.

If you are a parent or guardian and believe that your minor child has registered an account on Nusantara4D, please contact us immediately at support@nusantara4d.biz so we can take the appropriate action without delay.

10 Changes to This Privacy Policy

Nusantara4D reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable legislation, or improvements to how we protect your data. Members will be notified of any material changes via their registered email or an in-platform notification at least 14 days before the changes take effect.

The latest version of this Privacy Policy will always be available on this page, with the most recent revision date clearly indicated. We encourage you to check this page periodically. Continued use of the Nusantara4D platform after any changes are published will be considered acceptance of the updated policy.

11 Contact Us About Privacy

If you have any questions or concerns, or wish to exercise any of your rights regarding personal data held by Nusantara4D, our team is ready to assist through the following channels:

• Privacy email: support@nusantara4d.biz — please include "Privacy Enquiry" in the email subject line for faster processing
• Live Chat: Available 24 hours a day, 7 days a week in Bahasa Melayu via the chat icon within the Nusantara4D platform
• WhatsApp: Exclusively available to Platinum and Diamond VIP members via the number shared upon VIP tier upgrade

Privacy enquiries that require account review or access to data records will be processed within 14 business days. For more straightforward enquiries, our live chat team can typically assist within 3 minutes.

This Privacy Policy is effective from January 2026 and supersedes all previous versions. This version constitutes a binding agreement between you and Nusantara4D regarding the processing of your personal data on our platform.