ATM4D Privacy Policy

1. Introduction

ATM4D operates the website atm4d.casa and related online gaming and sports betting services (collectively, the "Platform"). This Privacy Policy describes how ATM4D collects, uses, stores, protects and, where applicable, shares the personal information of individuals who register for and use the Platform.

This policy applies to all registered ATM4D account holders and visitors, including players from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam and all other locations where the Platform is accessible. By using ATM4D, you confirm that you have read and understood this policy and the practices described in it.

This policy should be read alongside the ATM4D Terms & Conditions, which govern your use of the Platform as a whole. Where specific products or promotions involve additional data-handling practices, those will be communicated at the relevant point of interaction.

2. Definitions

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• Personal Data means any information relating to an identified or identifiable individual, including name, identification number, contact details, payment information and device identifiers.
• Processing means any operation performed on Personal Data, including collection, recording, storage, use, transmission, restriction or deletion.
• Data Controller refers to ATM4D as the entity that determines the purposes and means of Processing your Personal Data.
• Data Processor refers to a third party that Processes Personal Data on behalf of ATM4D, subject to ATM4D's instructions and applicable agreements.
• Player or User means a registered ATM4D account holder or a visitor to the Platform.
• Platform means the ATM4D website, games, sportsbook, mobile-compatible interface and associated services.

3. Personal Data We Collect

ATM4D collects the following categories of Personal Data, depending on how you interact with the Platform:

ATM4D does not routinely collect special category data such as health information, political opinions or biometric data beyond a photographic likeness required for identity verification. Where any special category data is submitted voluntarily by a player in support interaction, it will be handled with heightened care and deleted once the relevant matter is resolved.

4. How We Collect Personal Data

ATM4D collects Personal Data through the following means:

• Directly from you — when you register an account, submit identity documents, make deposits or withdrawals, claim a promotion, contact support, or update your profile settings.
• Automatically through Platform use — when you access the website, our systems record technical data including IP address, device identifiers, browser type and session activity. This occurs through standard server logging and, where applicable, cookies.
• From payment providers — when you use DuitNow, FPX, Touch'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank or other accepted channels, we receive transaction confirmation references and account identifiers necessary for payment reconciliation.
• From fraud and identity verification services — where ATM4D engages third-party services to verify identity documents or flag anomalous transactions, those services may return a verification outcome to ATM4D in connection with your account.

5. Purposes of Processing and Legal Basis

ATM4D processes your Personal Data for the following purposes:

• Account creation and management — to register your account, verify your identity and maintain your profile throughout the account relationship.
• Payment processing — to receive deposits, settle withdrawals and reconcile payment transactions across accepted Malaysian payment channels.
• Fraud prevention and security — to detect, investigate and prevent fraudulent activity, money laundering, account takeover and other security threats.
• Legal and regulatory compliance — to meet any legal obligation applicable to ATM4D's operations, including record-keeping and identity verification requirements.
• Service delivery and improvement — to provide the casino, sportsbook, 4D lottery and slot products, resolve technical issues and develop platform improvements.
• Customer support — to handle queries, complaints and responsible gambling requests in English, Bahasa Melayu and Chinese across live chat, WhatsApp, WeChat and email.
• Responsible gambling — to record and apply the limits, time-outs and exclusions that players request, and to identify patterns that may indicate problem gambling behaviour.
• Communications about account activity — to notify you of significant account events, security alerts, changes to these policies or responses to your support requests. ATM4D does not send unsolicited third-party marketing.

6. Data Retention

ATM4D retains Personal Data for the period reasonably necessary to fulfil the purposes described in this policy, to manage the account relationship and to comply with legal obligations. As a general guide:

• Account and identity records are retained for the duration of the account relationship and for a period thereafter where required by applicable compliance or legal requirements.
• Transaction and wagering records are retained to support accurate account statements, dispute resolution and any applicable audit obligation.
• Support communications are retained for a period sufficient to allow follow-up on unresolved matters and to defend or establish claims if necessary.
• Technical and log data are retained for security, fraud-investigation and service-improvement purposes for a proportionate period.

When data is no longer required for any of the purposes described above and there is no legal basis for further retention, ATM4D will delete or anonymise it in a secure manner. Anonymised aggregate data may be retained beyond individual retention periods for statistical and analytical purposes.

7. Third-Party Disclosure and Data Sharing

ATM4D does not sell, rent or exchange Personal Data with third-party marketers. Data is shared with external parties only in the following circumstances:

• Payment processors — including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank and Hong Leong Bank — receive the transaction and account identifiers required to process deposits and withdrawals.
• Identity and fraud-verification services — receive the identity data necessary to verify account registration documents and monitor for suspicious transaction patterns.
• Game and platform providers — may receive a pseudonymous player identifier and wager data to operate games, calculate results and return settlement information to ATM4D.
• Customer support platforms — used to manage live chat, email and messaging-app interactions may process conversation content under data-handling agreements.
• Legal and regulatory authorities — where ATM4D is required by law, court order or other lawful direction to disclose information, it will do so to the extent required and not beyond.

8. Cookies and Tracking Technologies

ATM4D uses cookies and similar local storage technologies to maintain session continuity, remember account preferences, protect against cross-site request forgery, and gather aggregate analytics about Platform usage. Cookies used by ATM4D fall broadly into the following categories:

• Strictly necessary cookies — essential for the Platform to function, including session authentication and security tokens. These cannot be disabled without breaking core functionality.
• Functional cookies — remember your preferences, such as language selection, display settings and recently viewed game categories, to provide a smother experience on return visits.
• Analytics cookies — collect aggregated, anonymised data about how pages are accessed and how platform features are used, to inform ATM4D's ongoing development decisions.

Most web browsers allow you to view, manage and delete cookies through browser settings. Disabling strictly necessary cookies will impair your ability to log in and use the Platform. ATM4D does not deploy third-party advertising cookies or allow external advertising networks to track players across external websites.

9. Security Measures

ATM4D implements a combination of technical and organisational measures designed to protect your Personal Data against unauthorised access, loss, disclosure or destruction. These include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and ATM4D servers.
• Access controls restricting staff access to personal data on a need-to-know basis, with activity logging and periodic review.
• Secure, access-controlled storage systems for identity documents and payment records, separate from publicly accessible Platform data.
• Monitoring systems to detect and alert on anomalous login patterns, unusual transaction volumes and other indicators of unauthorised access.
• Regular internal reviews of data handling practices and security configurations.

Despite these measures, no internet-based system can guarantee complete security against every possible threat. Players should also protect their own account by using a strong, unique password and not sharing login credentials with any other person. If you suspect your ATM4D account has been compromised, contact support immediately.

10. User Rights

As a player on the ATM4D Platform, you have the following rights regarding your Personal Data:

• Right of Access — You may request a summary of the Personal Data that ATM4D holds about you, including the categories of data, the purposes for which it is processed, and how long it is retained.
• Right to Rectification — You may request correction of inaccurate or incomplete Personal Data associated with your account. Certain corrections may require identity verification before they can be applied.
• Right to Erasure — You may request deletion of Personal Data that ATM4D is no longer required to hold. ATM4D may retain data where there is a legal obligation or legitimate interest that overides the deletion request, such as fraud-prevention records or outstanding transaction queries.
• Right to Restrict Processing — In certain circumstances, you may request that ATM4D limits how your data is used while a query or dispute is resolved.
• Right to Data Portability — Where technically practicable and legally applicable, you may request a machine-readable copy of Personal Data that you provided to ATM4D directly.
• Right to Object — You may object to certain types of processing, including processing based solely on ATM4D's legitimate interests, where you have grounds relating to your particular situation.

To exercise any of these rights, contact ATM4D support through the channels listed in Section 13 below. ATM4D will request reasonable identity verification before actioning a rights request and will respond within a reasonable period. Where a request is refused or only partially actioned, ATM4D will provide an explanation.

11. Children and Underage Persons

ATM4D is intended exclusively for individuals who are at least 21 years of age. ATM4D does not knowingly collect Personal Data from anyone below this age. Where ATM4D becomes aware that a person below the minimum age has registered or submitted personal information, the account will be closed, all associated data reviewed, and the matter handled in accordance with ATM4D's underage access procedures.

If you have reason to believe that an underage person has accessed or registered with ATM4D, please contact support immediately so that the matter can be investigated promptly.

12. Amendments to This Privacy Policy

ATM4D may update this Privacy Policy from time to time to reflect changes to Platform services, payment practices, data-handling arrangements, applicable legal requirements or technology. The effective date displayed at the top of this page will be updated whenever a new version is published.

Where changes are material — for example, a significant new category of data being collected or a new category of third-party sharing — ATM4D will communicate the change to active account holders through the account interface before the revised policy takes effect where reasonably practicable.

Continued use of ATM4D after a revised Privacy Policy takes effect constitutes acceptance of the updated terms. If you do not accept a material change, you should stop using the Platform and request account closure after resolving any outstanding transactions.

13. Contact Us

If you have questions about this Privacy Policy, wish to exercise a data right, or need to raise a data-related concern, please contact ATM4D through the support channels listed below. All contact details are provided as plain text only.

ATM4D aims to resolve privacy queries and rights requests promptly. For concerns that relate to responsible gambling, including self-exclusion or deposit limit requests, please also refer to our Responsible Gambling page.