1.Introduction
atm4d2 operates an online gaming platform serving players across Malaysia, including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and beyond. In the course of providing casino games, live dealer tables, sports betting, Sic Bo, and related services, we collect and process certain personal data. This Privacy Policy explains our practices in full.
By creating an atm4d2 account, depositing funds, placing a wager, contacting support, or otherwise using the platform, you acknowledge that you have read and understood this policy. If you do not agree with any part of it, you should not use atm4d2. This policy applies together with the Terms & Conditions, which govern the broader player agreement.
2.Definitions
- Personal Data means any information that identifies or could reasonably identify you as an individual, whether directly (e.g., your name, MyKad number) or indirectly (e.g., your device IP address combined with account activity).
- Processing means any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, restriction, deletion, or destruction.
- Controller means the entity that determines the purposes and means of processing — in this case, atm4d2.
- Processor means a third party that processes data on atm4d2's behalf, such as payment service providers or identity verification suppliers.
- KYC means the identity, age, address, and source-of-funds verification process required before certain account activities are permitted.
3.Data We Collect
The categories of personal data atm4d2 may collect include:
3.1 Identity and Contact Data
Legal full name, date of birth, nationality, residential address (including city and postcode in Malaysia), email address, and mobile phone number. For KYC purposes we may collect a copy of a government-issued document such as a MyKad or passport.
3.2 Financial and Payment Data
Bank account details, e-wallet identifiers (for Touch 'n Go eWallet, Boost, GrabPay), DuitNow proxy or account number, FPX transaction identifiers, and records of deposits, withdrawals, and bonuses in MYR. We do not store full card numbers or payment credentials that belong to third-party processors.
3.3 Gaming and Transaction Records
Wager history, game sessions (including Sic Bo rounds, live dealer hands, sports bets on Liga Super Malaysia, EPL, UFC, and other events), bonus claims, outcomes, and account balance movements.
3.4 Technical and Device Data
IP address, browser type and version, operating system, device identifiers, session timestamps, page navigation paths, clickstream data, and error logs captured during your use of atm4d2.
3.5 Communications Data
Messages sent via live chat, email to support, or any in-platform feedback tool. This includes the content of complaints, enquiries, and dispute correspondence.
| Category | Examples | Source |
|---|---|---|
| Identity | Name, DOB, MyKad / Passport | You (at registration or KYC) |
| Contact | Email, mobile, city | You (at registration) |
| Financial | Bank / e-wallet details, MYR transaction history | You and payment processors |
| Gaming | Bets, outcomes, session times | Platform systems |
| Technical | IP address, device ID, browser | Automatically from your device |
| Communications | Support chat, emails, feedback | You (via support channels) |
4.Legal Basis for Processing
atm4d2 processes personal data under one or more of the following recognised bases:
- Contractual necessity — processing required to operate your account, process deposits, settle wagers, and fulfil withdrawal requests.
- Legal obligation — processing necessary to comply with anti-money laundering obligations, fraud-prevention requirements, licensing conditions, or lawful regulatory requests.
- Legitimate interests — processing to prevent fraud, maintain platform security, improve products, and operate responsible gambling tools, provided those interests are not overridden by your rights.
- Consent — where you have specifically agreed, such as opting in to promotional communications. You may withdraw consent at any time.
5.How We Use Your Data
atm4d2 uses the personal data we collect for the following purposes:
- Creating and managing your player account, including security, password recovery, and multi-factor authentication.
- Processing deposits through Malaysian payment channels such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong, and processing withdrawals to verified accounts.
- Verifying your identity and age to comply with KYC requirements and ensure compliance with the 21+ age restriction.
- Detecting and preventing fraud, collusion, money laundering, match manipulation, duplicate accounts, and other prohibited conduct.
- Settling game outcomes, handling bonus claims, and resolving disputes related to Sic Bo, live casino, sports betting, poker, and other product lines.
- Monitoring responsible gambling indicators and applying tools such as deposit limits, cooling-off periods, and self-exclusion where required or requested.
- Sending essential service communications including security alerts, account notifications, policy updates, and payment confirmations.
- Sending promotional communications and personalised offers, where you have opted in and subject to your marketing preferences.
- Improving platform performance, game offerings, user experience, and customer support based on aggregated and anonymised analytics.
6.Cookies and Tracking Technologies
atm4d2 uses cookies and similar technologies on the platform. These may include session cookies required for login and gameplay, preference cookies that remember your language or display settings, and analytics technologies that help us understand how players navigate the site.
Essential cookies are necessary for the platform to function and cannot be disabled while you use the service. Non-essential cookies — such as analytics and marketing pixels — may be declined without affecting core functionality. You can manage cookie preferences through your browser settings. Blocking certain cookies may affect features such as session persistence or personalised game recommendations.
7.Third-Party Disclosure and Data Sharing
atm4d2 does not sell personal data. We may share data with the following categories of third parties only to the extent described:
7.1 Payment Service Providers
Authorised Malaysian payment processors and networks — including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, and others active in the Malaysian market — receive the minimum data necessary to execute deposit and withdrawal instructions.
7.2 Identity Verification Partners
Third-party KYC and anti-fraud service providers may receive documents and identity data for the sole purpose of completing the required verification checks under our licensing obligations.
7.3 Game and Technology Providers
Licensed game suppliers that power Sic Bo, live dealer tables, slots, sports betting markets, and other products may receive pseudonymised session identifiers necessary to deliver and audit game outcomes.
7.4 Legal and Regulatory Authorities
We may disclose data where required by a lawful order, court direction, or regulatory investigation. We will not share data beyond what is strictly required by the relevant legal demand.
8.International Data Transfers
atm4d2 operates under international online gaming licensing. Some personal data may be processed by systems or service providers located outside Malaysia. Where data is transferred internationally, we apply contractual safeguards and ensure that receiving parties maintain standards of data protection consistent with the principles of this policy.
Players located in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and elsewhere in Malaysia should be aware that Malaysian law may not apply in full to data held on international infrastructure. By using atm4d2 you acknowledge this operational context.
9.Data Retention
atm4d2 retains personal data for as long as required to fulfil the purposes described in this policy, to comply with applicable legal and licensing obligations, and to resolve any open disputes or complaints.
Account and transaction records are typically retained for a minimum of five years from the last account activity to satisfy anti-money-laundering and gaming compliance requirements. Communications data is retained for three years unless a longer period is required by a legal process. Technical logs are retained for a shorter rolling period unless they are associated with a specific investigation. Following the applicable retention period, data is securely deleted or irreversibly anonymised.
10.Security Measures
atm4d2 implements technical and organisational security measures appropriate to the risk profile of the data we hold. These include 256-bit SSL/TLS encryption for all data in transit, access controls limiting staff access to personal data on a need-to-know basis, regular security reviews and vulnerability assessments, and encrypted storage for sensitive identity documents submitted during KYC.
No internet-based system can guarantee absolute security. You play an important role in protecting your own data by keeping your password confidential, logging out of the platform on shared devices, and notifying atm4d2 support immediately if you suspect unauthorised access to your account.
11.Your Rights Over Your Personal Data
Subject to applicable law and certain limitations related to legal obligations and fraud prevention, you may exercise the following rights:
- Right of access — request a copy of the personal data atm4d2 holds about you.
- Right to rectification — ask us to correct inaccurate or incomplete personal data without undue delay.
- Right to erasure — request deletion of your personal data where it is no longer needed for its original purpose, where consent has been withdrawn, or where processing was unlawful — subject to legal retention requirements.
- Right to restrict processing — request that we limit how we use your data while a correction request or objection is assessed.
- Right to data portability — receive a copy of data you provided in a commonly used electronic format, where processing is based on your consent or a contract.
- Right to object — object to processing based on legitimate interests or used for direct marketing purposes.
- Right to withdraw consent — withdraw any previously given consent for optional processing (such as marketing emails) at any time without affecting lawfulness of prior processing.
To exercise any of these rights, contact atm4d2 support and provide your account username and a clear description of your request. We will acknowledge receipt within five business days and respond fully within thirty calendar days. Identity verification may be required before we action a sensitive request.
12.Children and Minors
If atm4d2 discovers that personal data has been collected from a person under 21, the account will be suspended, relevant wagers voided, and collected data deleted (subject to any legal hold obligations). If you believe a minor has registered with atm4d2, please contact support immediately with relevant details.
13.Changes to This Privacy Policy
atm4d2 may update this Privacy Policy to reflect changes in the platform, applicable laws, licensing requirements, or operational practices. Material changes will be communicated through a notice on the platform or via the registered account email address, and the effective date at the top of this document will be updated accordingly.
Continued use of atm4d2 following the effective date of a revised policy constitutes acceptance of the updated terms. If you do not accept the changes, you should stop using the platform and request account closure through support.
14.Contact and Complaints
For any questions about this Privacy Policy, requests to exercise your data rights, or concerns about how your data is handled, contact atm4d2 support via the 24/7 live chat function on the platform or by writing to:
Email (plain text — not a clickable link):
[email protected]
Please include your registered username, the nature of your request, and any relevant reference numbers. We will verify your identity before processing requests involving sensitive personal data. Our target response time is five business days for acknowledgement and thirty calendar days for full resolution.