Ambil4D Privacy Policy

This Privacy Policy ("Policy") describes how Ambil4D ("Ambil4D", "we", "us", "our") collects, uses, stores, discloses, and otherwise processes personal data obtained from individuals ("you", "User", "Member") who access or use the Ambil4D website at https://ambil4d.cam and all associated services, features, and applications (collectively, the "Platform").

Ambil4D is committed to protecting the privacy and personal data of all our users, including players from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and across Malaysia. We apply internationally recognised data protection principles, including data minimisation, purpose limitation, storage limitation, and security by design, to all personal data processing activities conducted in connection with the Platform.

This Policy is to be read in conjunction with our Terms & Conditions and Responsible Gambling Policy, both of which are incorporated herein by reference.

For the purposes of this Privacy Policy, the following terms shall carry the meanings set out below:

• "Personal Data" — any information that identifies, or could reasonably be used to identify, a natural person, either directly or indirectly.
• "Processing" — any operation performed on personal data, including collection, recording, organisation, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" — Ambil4D, the entity that determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" — a third party that processes personal data on behalf of Ambil4D under a data processing agreement.
• "Consent" — a freely given, specific, informed, and unambiguous indication of agreement by the User to the processing of their personal data for a stated purpose.
• "Cookies" — small text files placed on your device by a web server to identify your browser during subsequent interactions with the Platform.
• "KYC" — Know Your Customer, the identity and age verification process applied to all Members prior to enabling full account functionality.

Ambil4D collects the following categories of personal data in connection with the operation of the Platform:

Ambil4D collects personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing KYC, making deposits or withdrawals, contacting customer support, or updating account preferences.
• Automated technologies: Technical and usage data collected automatically when you access the Platform, including IP addresses, device fingerprints, browser cookies, and session logs.
• Third-party providers: Identity verification data may be supplemented by information from KYC verification service providers and fraud prevention agencies acting as our data processors.
• Payment processing: Transaction data shared with us by your bank, FPX network, or e-wallet provider (Touch 'n Go, Boost, GrabPay, DuitNow) when you initiate a deposit or withdrawal.

Ambil4D processes personal data for the following clearly defined purposes. We do not use your data for any purpose not described in this Policy without first obtaining your explicit consent or being required to do so by law.

To create, maintain, and administer your Ambil4D account, authenticate your identity on login, and enable full platform functionality including game access, deposits, withdrawals, and bonus participation.

To verify your identity, age (21+ minimum), and compliance with our account eligibility requirements as mandated by our international licensing obligations. KYC processing is a legal requirement and cannot be waived.

To process MYR deposits and withdrawals via DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Visa, Mastercard, and cryptocurrency networks. Financial data is handled with the highest level of security.

To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions. This includes automated risk-scoring of transactions and gaming activity patterns.

To monitor gambling behaviour for indicators of problem gambling, enforce self-exclusion and deposit limit settings applied by Members, and fulfil our responsible gambling obligations under our operating licence. Visit our Responsible Gambling page for full details.

To respond to your support enquiries, resolve account disputes, and maintain records of correspondence for quality assurance and legal compliance purposes.

To analyse aggregated usage patterns, game performance data, and technical metrics to improve the Platform's functionality, stability, and user experience. Analytics processing uses pseudonymised or aggregated data wherever possible.

To send you promotional offers, bonus notifications, and platform news — only where you have provided explicit consent to receive such communications. You may withdraw your marketing consent at any time via your account notification settings.

Ambil4D relies on the following legal bases to process your personal data, in accordance with applicable data protection principles:

• Contractual necessity: Processing required to fulfil our obligations to you under the Terms & Conditions — including account management, payment processing, and KYC verification.
• Legal obligation: Processing required to comply with our international licensing conditions, anti-money laundering (AML) regulations, and responsible gambling mandates.
• Legitimate interests: Processing for fraud prevention, platform security, and analytics, where those interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have explicitly opted in and retain the right to withdraw consent at any time.

Ambil4D does not sell, rent, or trade your personal data to any third party for their own marketing purposes. We may share your data with the following categories of recipients under strictly controlled conditions:

• KYC and identity verification providers: Third-party services engaged to verify identity documents and screen against sanctions lists, acting as data processors under binding data processing agreements.
• Payment processors and financial institutions: Banks, FPX network operators, e-wallet providers (Touch 'n Go, Boost, GrabPay), and card processors involved in executing your deposits and withdrawals.
• Fraud prevention and AML screening services: Specialist providers used to detect suspicious transaction patterns and ensure compliance with anti-money laundering obligations.
• Platform technology providers: Cloud hosting, software infrastructure, and cybersecurity service providers that process data on our behalf under confidentiality obligations.
• Regulatory and licensing authorities: Disclosures required by our licensing body or by law enforcement agencies pursuant to valid legal requests.

Cookies are small text files stored on your device by a web server when you visit a website. They enable the website to recognise your device on subsequent visits and can store preferences or session information to improve your experience.

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings and game lobby layout. These improve your experience but are not essential to Platform operation.
• Analytics Cookies: Used to collect anonymised data on how users navigate the Platform — page views, session durations, error frequencies — so that we can improve performance and usability.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the Platform. Ambil4D does not place advertising cookies or track your browsing activity on third-party websites.

Ambil4D retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by our licensing obligations and applicable law. Our general retention periods are as follows:

• Active account data: Retained for the duration of your account's existence on the Platform.
• Transaction and financial records: Retained for a minimum of five (5) years following the transaction date, in compliance with AML record-keeping obligations.
• KYC documentation: Retained for a minimum of five (5) years following account closure.
• Customer support communications: Retained for three (3) years from the date of the last interaction in a given support thread.
• Analytics data: Aggregated and anonymised analytics data may be retained indefinitely as it cannot be linked back to any individual user.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised, whichever is technically more appropriate given the data format and storage environment.

Ambil4D implements technical and organisational security measures proportionate to the sensitivity and volume of personal data processed through the Platform. These measures include, but are not limited to:

• TLS 1.3 / SSL encryption of all data transmitted between your device and our servers.
• AES-256 encryption for personal data stored in our databases at rest.
• Multi-factor authentication (MFA) available for all Member accounts and mandatory for administrative system access.
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis.
• Regular penetration testing and security audits conducted by qualified independent cybersecurity professionals.
• Intrusion detection systems and real-time security monitoring on all production infrastructure.

While Ambil4D takes all reasonable steps to protect your personal data, no internet-based system can guarantee absolute security. You are responsible for maintaining the confidentiality of your login credentials. If you suspect unauthorised access to your account, contact our support team immediately via live chat.

Subject to applicable law and the limitations set out herein, you have the following rights with respect to your personal data held by Ambil4D:

To exercise any of the above rights, please contact our Data Protection team via the live chat facility on the Platform or by emailing [email protected] (plain text — not a clickable link). We will acknowledge your request within 72 hours and aim to provide a substantive response within 30 days.

The Ambil4D Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or store personal data from any individual under the age of 21. Age verification (KYC) is a mandatory prerequisite for full account access and withdrawal processing.

If Ambil4D becomes aware that personal data has been collected from a person under the age of 21 without appropriate parental or guardian consent, we will immediately suspend the relevant account, void all associated balances, and delete the personal data in question from our systems to the extent permitted by law. Any deposits from such accounts will be returned to the deposit source.

As an internationally licensed online gaming platform, Ambil4D operates infrastructure and engages service providers across multiple jurisdictions. Your personal data may be transferred to and processed in countries outside of Malaysia where our servers, data processors, or licensing body are located.

Where personal data is transferred internationally, Ambil4D ensures that appropriate safeguards are in place to protect your data, including contractual obligations requiring recipient parties to apply data protection standards equivalent to those applied within the licensing jurisdiction. All third-party data processors operating outside Malaysia are bound by data processing agreements that mandate appropriate technical and organisational protections.

Ambil4D reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, our processing activities, or our operational practices. The revised Policy will be published on this page with an updated "Last updated" date.

Where a material change is made that significantly affects how we process your personal data, we will make reasonable efforts to notify active Members via registered email or an in-platform notification prior to the change taking effect. Your continued use of the Platform after such notification constitutes acceptance of the updated Policy.

We encourage you to review this page periodically to stay informed about how Ambil4D protects your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by Ambil4D, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the support widget on the Ambil4D Platform. Average response time: under 5 minutes.
• Email: [email protected] — please include "Privacy Request" in your subject line so your message reaches the correct team promptly.

We are committed to handling all data privacy requests and complaints promptly, fairly, and transparently. If you are not satisfied with our response, you retain the right to escalate the matter to the relevant supervisory authority under the laws applicable in your jurisdiction.