Papa4D Privacy Policy

Papa4D ("we", "us", "our", "the Platform") operates the online entertainment website accessible at papa4d.cam. This Privacy Policy ("Policy") explains how papa4d collects, processes, stores, discloses and safeguards the personal information of individuals ("Users", "you", "your") who visit, register with or otherwise interact with our platform.

This Policy should be read in conjunction with the Papa4D Terms & Conditions and Responsible Gambling Policy, both of which are accessible via the navigation menu on this website. By accessing papa4d.cam, creating an account or submitting personal information to us in any form, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.

Papa4D is committed to compliance with applicable data protection principles, including those outlined under Malaysia's Personal Data Protection Act 2010 (PDPA). We process personal data only to the extent necessary to provide our services securely and in accordance with our legal obligations.

Throughout this Policy, the following terms carry the specific meanings given below:

Papa4D collects personal data through several channels: directly from you when you register or interact with the platform, automatically as you use the website, and from third-party partners involved in payment processing and identity verification.

3.1 Data You Provide Directly

• Registration Data: Full legal name, date of birth, email address, username and password selected during account creation.
• Identity Verification (KYC) Data: Government-issued identification documents such as MyKad or passport, proof of address (e.g., utility bills issued in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam or elsewhere in Malaysia), and selfie images where required to confirm identity.
• Payment Information: Records of payment methods used — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB Bank, Public Bank, Hong Leong Bank or cryptocurrency wallet addresses for USDT TRC20 transfers. Papa4D does not store full card or banking credential details; these are processed by our accredited payment partners.
• Support Correspondence: Content of Live Chat conversations, email communications sent to [email protected], and any documentation submitted to resolve disputes or complaints.

3.2 Data Collected Automatically

• IP address and approximate geographical location derived from network data.
• Browser type, operating system and device identifiers.
• Pages visited, session duration, click paths and feature interactions on papa4d.cam.
• Game activity logs, wagering history and account transaction records.
• Cookie and tracking pixel data as described in Section 9 of this Policy.

3.3 Data from Third Parties

• Identity and age confirmation results returned by our KYC verification service partners.
• Transaction status, reference numbers and fraud-screening flags returned by payment processors.
• Device risk scores or VPN/proxy detection signals from fraud prevention tools.

Papa4D uses the personal data described in Section 3 for the following purposes:

• Account Management: To create, verify and maintain your player account, enforce the single-account policy and authenticate your login sessions.
• Payment Processing: To facilitate deposits in MYR through local payment methods, process withdrawal requests and maintain accurate transaction records.
• Identity & Age Verification: To confirm that all account holders are at least 21 years of age and to satisfy KYC obligations in accordance with responsible gambling commitments.
• Service Delivery: To provide access to games, live casino tables, sports betting markets and other platform features.
• Customer Support: To respond to enquiries, resolve disputes, process complaints and administer self-exclusion requests submitted via Live Chat or email.
• Security & Fraud Prevention: To monitor account activity for suspicious behaviour, detect multi-accounting, prevent money laundering and protect the integrity of the platform.
• Legal Compliance: To meet obligations arising from applicable laws, including responding to lawful requests from regulatory authorities.
• Platform Improvement: To analyse aggregated, anonymised usage patterns and improve the user experience on papa4d.cam.
• Responsible Gambling: To enforce deposit limits, session reminders, self-exclusion periods and age restrictions that protect player welfare.

Papa4D processes personal data under one or more of the following lawful bases, consistent with Malaysia's PDPA and applicable data protection standards:

• Contractual Necessity: Processing required to perform the contract between papa4d and you — including account creation, deposits, withdrawals and service access.
• Consent: Processing undertaken on the basis of your informed consent, such as the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Legitimate Interests: Processing that papa4d has a genuine operational interest in conducting — including fraud prevention, security monitoring and platform analytics — where those interests are not overridden by your privacy rights.
• Legal Obligation: Processing required to comply with applicable law, including identity verification obligations and responses to lawful regulatory or law enforcement requests.

Papa4D does not sell, rent or trade your personal data. We disclose personal data only in the circumstances described below, and only to the extent strictly necessary for each purpose.

• Payment Processors: Transaction data is shared with payment gateway and banking partners — including FPX-connected Malaysian banks, e-wallet operators and cryptocurrency processing services — solely to execute deposits and withdrawals.
• KYC Verification Partners: Identity documents and verification results are shared with accredited identity verification service providers engaged to fulfil age and identity confirmation obligations.
• Fraud Prevention Services: Device identifiers, IP addresses and behavioural signals may be shared with fraud detection platforms to protect the platform and its users from account takeovers and financial crime.
• Legal and Regulatory Authorities: Personal data may be disclosed to government agencies, courts or law enforcement in Malaysia or other applicable jurisdictions where legally required or permitted.
• Group Entities: Data may be shared within the papa4d corporate group where necessary to operate the platform, subject to equivalent data protection standards.
• Business Succession: In the event of a merger, acquisition or transfer of all or part of papa4d's operations, personal data may be transferred to a successor entity, subject to notification to affected users.

Papa4D's primary operations serve the Malaysian market, and we endeavour to keep data processing within the region where practical. Certain third-party service providers — including game content studios and technical infrastructure partners — may operate servers located outside Malaysia.

Where personal data is transferred to jurisdictions that do not provide a level of data protection comparable to Malaysia's PDPA, papa4d implements appropriate safeguards such as contractual data protection clauses, binding commitments from the receiving party, or other mechanisms recognised as adequate under applicable privacy law.

Papa4D retains personal data only for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable law. The following general retention periods apply:

• Active Account Data: Retained for the duration of your Account registration and continued use of papa4d services.
• Closed Account Data: Following account closure, personal data — including KYC documentation, transaction records and account activity logs — is retained for a period of up to seven (7) years to satisfy anti-money laundering recordkeeping obligations and to support the resolution of any outstanding disputes.
• Support Correspondence: Chat logs and email exchanges are retained for up to three (3) years from the date of the relevant interaction.
• Cookie Data: Session cookies are deleted when you close your browser. Persistent cookies expire within the period stated in our Cookie settings, typically no longer than twelve (12) months.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

Papa4D uses cookies and similar tracking technologies on papa4d.cam. Cookies help us provide a functional, secure and personalised experience. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Required for core platform functionality, including user authentication, session management and security enforcement. These cookies cannot be disabled without impairing platform access.
• Analytics Cookies: Collect aggregated, anonymised data about how visitors navigate papa4d.cam — including pages visited, session duration and click patterns — to inform platform improvements. No personally identifiable information is shared with analytics providers.
• Preference Cookies: Remember your language preference, display settings and other customisations to improve your experience on return visits.
• Security Cookies: Assist in fraud detection by logging device fingerprint and session integrity signals, contributing to our commitment to protect your account.

You may manage cookie preferences through your browser settings. Disabling certain cookies may affect the availability or performance of specific papa4d features. Papa4D does not respond to "Do Not Track" browser signals at this time; however, you retain full control over cookie acceptance via your browser.

Papa4D implements a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration or destruction. Our security framework includes, but is not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and papa4d.cam.
• Encrypted storage of passwords using industry-standard one-way hashing algorithms; plaintext passwords are never stored.
• Two-factor authentication (2FA) options available to users for enhanced account security.
• Role-based access controls limiting internal staff access to personal data on a strict need-to-know basis.
• Regular security assessments and vulnerability scanning of platform infrastructure.
• Incident response procedures to contain, investigate and notify users of material data breaches within a reasonable timeframe.

Notwithstanding these measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account password and for reporting suspected unauthorised access to our support team promptly.

Subject to applicable law and certain exceptions, Malaysian users and other individuals whose personal data is processed by papa4d have the following rights in respect of that data:

To exercise any of the above rights, please contact papa4d at [email protected] with the subject line "Privacy Rights Request — [Your Account Username]". We will acknowledge your request within 10 business days and aim to resolve it within 30 calendar days. We may require identity verification before acting on a rights request.

Papa4D's services are strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Our registration process includes age verification checks designed to prevent underage access to the platform.

If papa4d becomes aware that personal data has been collected from a person under 21 without appropriate verification, the relevant account will be immediately suspended, all data associated with that account will be deleted, and any funds held will be returned via the original payment method following verification procedures.

If you believe a minor has registered on papa4d or that personal data belonging to a minor has been collected, please notify our support team immediately at [email protected] or via Live Chat. We treat such reports with the highest priority.

Papa4D reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, our data processing practices or the features of the platform. The effective date displayed at the top of this Policy will be updated to reflect the date of the most recent revision.

Material changes — including changes to the categories of personal data collected, new third-party sharing arrangements or significant modifications to user rights — will be communicated to registered users by email or by a prominent notice on papa4d.cam at least seven (7) calendar days before the amended Policy takes effect.

Your continued use of papa4d following the effective date of any amended Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the amended Policy, you must cease using the platform and submit a request for account closure.

If you have any questions, concerns or requests relating to this Privacy Policy or papa4d's data processing practices, please contact our Data Protection team through the following channels. All communications are treated confidentially.

• Email: [email protected] — please use the subject line "Privacy Enquiry" or "Privacy Rights Request — [Username]" as appropriate. We aim to respond within 10 business days.
• Live Chat: Available 24 hours a day, 7 days a week via papa4d.cam. Support is provided in English, Bahasa Melayu and Mandarin for the convenience of our Malaysian user base.
• Headquarters: Kuala Lumpur, Malaysia.