Privacy Policy

1Introduction

This Privacy Policy ("Policy") describes how alay4d ("the Platform", "we", "us", "our"), operator of the online gaming platform at https://alay4d.click, collects, uses, stores, discloses, and otherwise processes the personal data of individuals ("Members", "Users", "you") who access or use the Platform.

alay4d is committed to handling your personal data responsibly and in accordance with applicable data protection legislation, including the principles established under internationally recognised frameworks such as the General Data Protection Regulation (GDPR) and comparable standards applicable in the jurisdictions in which we operate.

By registering an account, accessing the Platform, or using any of our services — including slots, live casino, sports betting, lottery, promotional offers, or customer support — you acknowledge that you have read, understood, and agree to the data practices described in this Policy.

This Policy should be read in conjunction with our Terms & Conditions and Responsible Gambling Policy, both of which are incorporated by reference and form part of our overall member agreement.

2Definitions

In this Policy, the following terms carry the meanings set out below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, identification number, location data, online identifiers, or factors specific to the physical, economic, or social identity of that person.
• "Processing" — any operation performed on personal data, including collection, storage, use, disclosure, erasure, or destruction, whether by automated or manual means.
• "Data Controller" — alay4d, as the entity that determines the purposes and means of processing your personal data.
• "Data Processor" — a third party that processes personal data on behalf of alay4d, strictly in accordance with our instructions and this Policy.
• "Member" / "User" — any individual who has registered an account on the alay4d Platform.
• "KYC" — Know Your Customer; the identity and address verification process required before processing withdrawal requests or in response to regulatory or anti-fraud obligations.
• "Cookies" — small data files placed on your device by the Platform to maintain session state, remember preferences, and collect anonymised usage analytics.
• "Sensitive Personal Data" — a special category of personal data including racial or ethnic origin, health data, financial data beyond transaction records, and biometric data, which is subject to stricter processing controls.

3Data We Collect

alay4d collects the following categories of personal data, depending on your interaction with the Platform:

3.1 Registration Data

• Full legal name
• Date of birth (to verify the 21+ age requirement)
• Email address
• Mobile phone number
• Residential address, including postcode and state within Malaysia (e.g., Kuala Lumpur, Selangor, Penang, Johor, Sabah, Sarawak)
• Username and encrypted password

3.2 Identity Verification (KYC) Data

• Malaysian MyKad, Passport, or Driver's Licence (front and back images)
• Proof of address document (utility bill, bank statement — dated within 3 months)
• Selfie photograph for facial verification
• Payment method confirmation screenshots (e.g., FPX or DuitNow transaction records)

3.3 Financial & Transaction Data

• Deposit amounts, dates, and payment method references (FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank)
• Withdrawal requests and processed amounts in MYR
• Bonus credits, wagering history, and promotional participation records
• Account balance history

3.4 Gaming & Behavioural Data

• Game session logs (titles played, bet amounts, win/loss records, session duration)
• Sports betting selections, odds accepted, and settlement outcomes
• Platform navigation paths and feature usage patterns
• Responsible gambling tool usage (deposit limits set, self-exclusion requests)

3.5 Technical & Device Data

• IP address and approximate geolocation
• Browser type, version, and operating system
• Device type (mobile, tablet, desktop) and screen resolution
• Session timestamps and duration
• Referring URL and exit page

3.6 Communications Data

• Live chat transcripts and support ticket content
• Email correspondence with our support team
• Survey responses and feedback submissions (where voluntarily provided)

4Data Processing

We process the personal data described in Section 3 for the following specific purposes:

5Legal Basis for Processing

alay4d processes your personal data on the following legal bases, each of which is identified per processing activity where applicable:

• Contractual Necessity: Processing required to fulfil our obligations under the Member Agreement — including account creation, payment processing, game provision, and customer support.
• Legal Obligation: Processing required to comply with applicable laws, including anti-money-laundering (AML) regulations, identity verification requirements, and data retention obligations under financial services legislation.
• Legitimate Interests: Processing necessary for our legitimate business interests — including fraud prevention, platform security, responsible gambling monitoring, and service improvement — where such interests are not overridden by your rights and freedoms.
• Consent: Processing of your data for optional purposes such as direct marketing communications (email promotions, bonus notifications), where you have provided explicit opt-in consent. You may withdraw this consent at any time by contacting [email protected].

6Data Sharing

alay4d does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data only in the limited circumstances described below, and only to the extent strictly necessary:

• Payment Service Providers: We share transaction data with payment processors enabling FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, and bank transfer services, solely to facilitate deposit and withdrawal transactions. These providers are contracted as Data Processors and are bound by strict data protection obligations.
• Identity Verification Services: KYC documents and biometric data may be shared with contracted identity verification specialists to complete the required verification process. All such providers comply with applicable data protection standards.
• Game Studio Partners: Anonymised session identifiers and game outcome data are shared with game providers to enable game functionality. No directly identifiable personal data (name, address, contact details) is transmitted to game studios.
• Regulatory Authorities: We are obligated to disclose personal data to competent regulatory, law enforcement, or government authorities where required by applicable law, court order, or as necessary to protect the rights of alay4d or third parties.
• Professional Advisors: Legal counsel, auditors, and financial advisors may access personal data on a strictly confidential basis where required for the performance of their professional services.
• Corporate Transactions: In the event of a merger, acquisition, or sale of assets, personal data held by alay4d may be transferred to the successor entity, subject to equivalent data protection obligations.

7Payment Data & Financial Privacy

All financial transactions on alay4d are conducted in Malaysian Ringgit (MYR) through regulated payment networks. When you make a deposit or withdrawal using FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, or direct bank transfer via Maybank, CIMB, Public Bank, or other participating banks, your payment data is processed through the relevant payment network's secure infrastructure.

alay4d does not store full bank account numbers, card numbers, or e-wallet PIN codes on its own systems. Payment method references retained for record-keeping purposes are limited to partial masked identifiers (e.g., last four digits of an account number, bank name, and transaction reference ID) as required for reconciliation and dispute resolution.

Financial transaction records are retained for a minimum of five (5) years in compliance with applicable anti-money-laundering and financial reporting obligations, and may be retained for longer where an investigation or legal proceeding requires it.

8Cookies & Tracking Technologies

alay4d uses cookies and similar technologies (including local storage and session tokens) to operate and improve the Platform. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Required for core Platform functionality, including session authentication, security tokens, and load balancing. These cannot be disabled without impairing your ability to use the Platform.
• Functional Cookies: Used to remember your preferences, such as language settings and previously visited game categories, to enhance your experience.
• Analytics Cookies: Used to collect anonymised, aggregated data on how Members interact with the Platform — including page views, session durations, and feature usage — to help us identify areas for improvement. No personally identifiable information is included in analytics reports.
• Security Cookies: Used to detect fraudulent activity, enforce session expiry, and protect accounts from unauthorised access.

alay4d does not use third-party advertising or retargeting cookies. You may manage cookie preferences through your browser's settings. Please note that disabling strictly necessary cookies will affect Platform functionality, including your ability to remain logged in.

9Data Retention

alay4d retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, or as required by applicable law. The general retention schedules are set out in Section 4 above.

Upon voluntary account closure, your account will be deactivated and your personal data moved to a restricted-access archive. Registration and gaming data will be retained for a minimum of two (2) years post-closure for legitimate interest purposes including dispute resolution and anti-fraud monitoring. KYC and financial records will be retained for a minimum of five (5) years from the date of the last transaction to comply with anti-money-laundering regulations.

Following the expiry of applicable retention periods, personal data will be securely deleted or anonymised in accordance with our data destruction procedures. Anonymised, aggregated data that can no longer identify you may be retained indefinitely for statistical and platform development purposes.

10Data Security

alay4d implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include, but are not limited to:

• 256-bit Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and our servers;
• AES-256 encryption for personal data stored at rest in our databases;
• Role-based access controls ensuring that only authorised personnel with a demonstrated operational need can access member data;
• Comprehensive audit logging of all administrative access to personal data systems;
• Regular third-party penetration testing and vulnerability assessments;
• Two-factor authentication (2FA) available for all member accounts and mandatory for internal administrative access;
• Formal data breach response procedures, including notification obligations where required by applicable law.

While we take all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying us promptly at [email protected] if you suspect any unauthorised use of your account.

11User Rights

Subject to applicable law and certain conditions, you have the following rights in respect of your personal data held by alay4d. To exercise any of these rights, please submit a written request to [email protected]. We will respond within 30 calendar days.

12Minors & Age Policy

alay4d services are strictly intended for individuals aged 21 years and above. We do not knowingly collect, store, or process personal data from any individual under the age of 21. Age verification is a mandatory component of our KYC process and is enforced prior to the processing of any withdrawal request.

If we become aware that we have inadvertently collected personal data from an individual under the age of 21, we will immediately suspend the relevant account, cease all processing of that data, and arrange for its secure deletion. If you believe that a minor has registered an account on our Platform, please notify us immediately at [email protected].

13International Data Transfers

alay4d may process or store personal data on servers located outside of Malaysia, including in jurisdictions within the European Economic Area (EEA) and in countries that maintain data protection frameworks recognised as providing adequate protection.

Where personal data is transferred to countries not recognised as providing an adequate level of protection, alay4d ensures that appropriate safeguards are in place — including standard contractual clauses approved by relevant data protection authorities or equivalent contractual protections — to ensure that your personal data remains protected to a standard consistent with applicable law.

Our payment processing partners operating FPX and DuitNow transfers process transaction data within Malaysia's domestic payment network infrastructure, under the oversight of Payments Network Malaysia Sdn Bhd (PayNet) and Bank Negara Malaysia guidelines, where applicable to the payment infrastructure itself.

14Amendments to This Policy

alay4d reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our data processing practices, or the services we provide. Where amendments materially alter your rights or how we handle your personal data, we will provide advance notice via a prominent notice on the Platform and/or by email to your registered address, at least seven (7) days before the amendments take effect.

The date at the top of this Policy reflects the most recent update. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not agree with the amended Policy, you should cease using the Platform and may request account closure in accordance with our Terms & Conditions.

15Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way alay4d processes your personal data, please contact our Data Protection team using the details below. We aim to respond to all written privacy-related enquiries within 30 calendar days.