Privacy Policy Prada4D – Malaysia Player Data Protection

Prada4D ("we", "our platform") takes the privacy of all players and users of our platform seriously. This Privacy Policy explains our practices regarding the collection, use, disclosure, and protection of your personal information when you use our website, mobile app, or any services provided by Prada4D.

Prada4D complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and all applicable data protection regulations. By using the Prada4D platform, you acknowledge that you have read and understood this Privacy Policy.

This document was last updated on 1 July 2026 and supersedes all previous versions of the Prada4D Privacy Policy. If you have any questions about this Privacy Policy, please contact our privacy officer through the channels listed at the end of this document.

Prada4D collects various categories of information in order to provide a safe, fair, and high-quality service to our players. Below are the details of the information we collect:

We may also collect information you voluntarily provide through customer satisfaction surveys, friend referral programmes, or through interactions with Prada4D's customer support team.

Prada4D uses the personal information collected solely for legitimate and reasonable purposes. The following are the primary purposes for which your data is used:

• Account Management: Creating and managing your Prada4D account, processing your registration, and verifying your identity in accordance with legal requirements.
• Service Delivery: Enabling you to play Live Casino games, baccarat, slots, Malaysia Super League and EPL Sports Betting, 4D lottery, and all other games available on the Prada4D platform.
• Transaction Processing: Processing deposits via Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, FPX, and withdrawals to your account.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, bonus abuse, and any activity that violates our terms of service.
• Service Communications: Sending account-related notifications, lottery results, promotions you have opted into, and important service updates.
• Platform Improvement: Analysing aggregated usage patterns to improve the user experience, identify technical issues, and plan new features.
• Legal Compliance: To fulfil applicable legal and regulatory compliance obligations, including Anti-Money Laundering (AML) requirements.

Prada4D processes your personal data on one or more of the following valid legal bases, in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA):

• Consent: You have given consent for the processing of your data for specific purposes, such as receiving marketing communications or participating in special promotional programmes.
• Contract Performance: Processing is necessary to fulfil the service contract between you and Prada4D, including the processing of financial transactions and account management.
• Legal Obligation: Processing is necessary to comply with applicable Malaysian law, including financial reporting requirements and anti-money laundering obligations.
• Legitimate Interests: Processing is necessary for the purposes of Prada4D's legitimate interests, such as fraud prevention and platform security, provided those interests do not override your fundamental rights.

Prada4D does not sell or trade our players' personal data to third parties for their own commercial purposes. However, we may share your data with the following parties in limited circumstances:

• Payment Providers: Payment processors, including DuitNow, FPX, and e-wallet gateway providers supporting Touch 'n Go, GrabPay, Boost, and ShopeePay, solely for the purpose of processing your transactions.
• Game Service Providers: Certified third-party gaming platform providers that supply live casino, baccarat, slots, and other games on the Prada4D platform.
• Technical Service Providers: Companies providing IT infrastructure, cloud services, analytics, and technical support, bound by strict data protection agreements.
• Legal Authority: Law enforcement agencies, courts, or Malaysian government authorities when required by law or court order.

Prada4D implements a comprehensive range of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction:

• Encryption: All data in transit is protected by 256-bit TLS/SSL protocols. Sensitive data at rest is also encrypted using the latest industry standards.
• Access Controls: Access to data systems is strictly controlled on a least-privilege basis. Two-factor authentication (2FA) is mandatory for all staff accessing player data.
• Continuous Monitoring: A 24/7 security monitoring system detects anomalies and suspicious access attempts in real time.
• Regular Security Audits: Regular internal and external security assessments are conducted to identify and address potential vulnerabilities.
• Staff Training: All Prada4D staff who handle player data undergo comprehensive and regular data protection training.

While we take these reasonable and comprehensive measures, no security system can be guaranteed to be 100% foolproof. You also play an important role in keeping your account secure by not sharing your password and ensuring your device is up to date with the latest security updates.

Prada4D retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required by applicable Malaysian law:

• Active Account Data: Retained for the duration of your active account plus any additional period required for legal compliance purposes following account closure.
• Financial Transaction Records: Retained for a minimum of seven (7) years from the transaction date, in accordance with Malaysian financial regulatory requirements.
• Security Logs: Retained for twelve (12) months for fraud detection and platform security purposes.
• Communication Data: Emails and customer support records are retained for three (3) years after the last interaction.
• Marketing Data: Retained until you withdraw your consent to receive marketing communications.

As a Prada4D player whose personal data we process, you hold the following rights under Malaysia's Personal Data Protection Act 2010 (PDPA):

To exercise any of the rights above, please contact our privacy officer by email at privacy@prada4d.im or via Live Chat within the platform. We will respond within 21 business days.

Prada4D uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device by your web browser.

We use three main categories of cookies:

• Mandatory Essential Cookies: Required for core platform functions such as login authentication, session security, and language preferences. These cookies cannot be disabled.
• Performance Analytics Cookies: Collect anonymised information about how you use the platform to help us understand usage patterns and improve our services.
• Function Functional Cookies: Remembering your preferences and settings, such as your favourite games, your usual bet limits, and display preferences.

In the course of its operations, Prada4D may need to transfer your personal data to servers or third parties located outside Malaysia, particularly in relation to cloud infrastructure providers and international gaming software vendors.

For every cross-border data transfer, Prada4D ensures that:

• The recipient country maintains a level of data protection equivalent to or higher than that of Malaysia.
• Contractually binding data protection agreements have been put in place between Prada4D and data recipients.
• All transfers comply with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA).

Prada4D does not permit individuals under the age of 18 to register or use our platform. We do not knowingly collect personal data from anyone under the age of 18.

If we find or have reason to believe that personal data has been collected from a minor without proper verification, we will take immediate steps to:

• Suspending the account in question immediately.
• Deleting all personal data associated with that individual.
• Freezing any funds in the account until the verification and recovery process is complete.

Parents and guardians who suspect their child may have registered on the Prada4D platform are encouraged to contact us immediately at support@prada4d.im.

Prada4D reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or the technologies we use. When we make material changes, we will:

• Updating the "Updated" date at the top of this Privacy Policy.
• Sending notifications to all registered players via email or in-platform notification.
• Providing a minimum 14-day period for players to review amendments before they take effect.

Continued use of the Prada4D platform after any amendments take effect will be considered your acceptance of the revised Privacy Policy. If you do not agree with the changes, you have the right to close your account and request deletion of your data.

If you have any questions, concerns, or complaints about how Prada4D handles your personal data, or if you wish to exercise any of your privacy rights, please contact us through the following channels: