Privacy Policy

1. Introduction

This Privacy Policy ("Policy") is published by aceh4d ("aceh4d", "we", "us", "our") and applies to all personal data collected through the aceh4d website at https://aceh4d.cam and any associated mobile applications, services, or communications (collectively, the "Platform").

We are committed to protecting the privacy and security of your personal information. This Policy explains in clear terms what data we collect about you, the purposes for which we process it, the legal basis for that processing, and the rights you hold as a data subject.

By registering an account, making a deposit, or otherwise using the Platform, you acknowledge that you have read this Policy and consent to the data practices described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform and contact our support team to close your account.

This Policy should be read alongside our Terms & Conditions, which together form the complete agreement governing your relationship with aceh4d.

2. Definitions

The following terms are used throughout this Policy:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, email address, date of birth, financial details, and device identifiers.
• "Processing" — any operation performed on personal data, including collection, storage, use, disclosure, and deletion.
• "Data Subject" — the individual to whom personal data relates; this context, you the User.
• "Data Controller" — the entity that determines the purposes and means of processing personal data; aceh4d in this context.
• "Data Processor" — a third party that processes personal data on behalf of the Data Controller under a contractual obligation.
• "KYC" — Know Your Customer; the identity verification process applied to all users before withdrawals are processed.
• "Cookies" — small text files stored on your device by the Platform to enable functionality, session management, and analytics.
• "Consent" — a freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data for a stated purpose.

3. Data Controller

aceh4d acts as the Data Controller for all personal data collected through the Platform. As Data Controller, we are responsible for determining the purposes and means by which your personal data is processed and for ensuring that such processing is conducted lawfully and securely.

Our designated Data Protection contact can be reached via email at [email protected] (plain text — not a clickable link). Please mark any data protection enquiries clearly in your message subject line.

4. Data We Collect

We collect personal data across several categories depending on how you interact with the Platform:

4.1 Registration & Account Data

• Full legal name
• Date of birth (for age verification —21+ requirement)
• Email address
• Mobile phone number
• Residential address (including city — e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam)
• Username and encrypted password
• Preferred language and communication preferences

4.2 Identity Verification (KYC) Data

• Government-issued photo identification (e.g., Malaysian MyKad, passport)
• Proof of residential address (utility bill or bank statement)
• Payment method ownership documentation
• Facial biometric data where required by our third-party KYC provider for liveness checks

4.3 Financial & Transaction Data

• Deposit and withdrawal amounts, dates, and methods
• Bank account details and e-wallet identifiers (Touch 'n Go, Boost, GrabPay, DuitNow, FPX)
• Transaction reference numbers
• Cryptocurrency wallet addresses where applicable

4.4 Betting & Gaming Activity Data

• Betting history, game session logs, wager amounts, and outcomes
• Sports markets accessed (e.g., Liga Super Malaysia, EPL, UFC, AFF Cup)
• Casino game types played and session durations
• Responsible gambling tool usage (deposit limits, session timers, self-exclusion requests)

4.5 Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser version
• Cookie identifiers and session tokens
• Platform access timestamps and page interaction logs

4.6 Communications Data

• Live chat transcripts and support ticket content
• Email correspondence with our support team
• Survey responses and feedback submissions
• Marketing communication opt-in and opt-out records

5. Purpose & Legal Basis for Processing

We process your personal data only where a lawful basis exists. The table below maps our primary processing activities to their corresponding legal basis:

6. Data Processing

• 6.1 All personal data is processed by authorised aceh4d personnel on a strictly need-to-know basis. Access to sensitive data categories — including KYC documents and financial records — is restricted to personnel with a direct operational requirement.
• 6.2 Automated decision-making is employed in limited circumstances, including fraud screening, age verification, and responsible gambling risk flaging. Where an automated decision significantly affects your Account (such as temporary suspension), you have the right to request human review of that decision.
• 6.3 We do not use your personal data to build profiles for sale to advertisers or for behavioural targeting by third-party ad networks.
• 6.4 Marketing communications are only sent where you have explicitly opted in during registration or via your Account preferences. You may opt out of marketing communications at any time by updating your notification preferences in your Account settings or by contacting support.

7. Sharing Your Data

aceh4d does not sell personal data. We may share your data with the following categories of third parties, under strict contractual data protection obligations:

• Payment Processors: Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX operator networks, Maybank, CIMB, Public Bank, Hong Leong Bank, and cryptocurrency processing partners — to facilitate deposits and withdrawals.
• Identity Verification Providers: Third-party KYC platforms that process government ID documents and perform liveness verification on our behalf.
• Fraud Prevention Services: Platforms that analyse device fingerprints, IP patterns, and transaction behaviours to detect and prevent fraudulent account activity.
• Customer Support Platforms: Live chat and ticketing software providers that store support interaction records on our behalf.
• Regulatory Authorities: Where required by law, including anti-money laundering authorities, licensing regulators, and law enforcement agencies presenting lawful requests.
• Analytics Providers: Platform performance and session analytics tools that operate under data processing agreements and process only anonymised or pseudonymised data.

8. Cookies & Tracking Technologies

The aceh4d Platform uses cookies and similar tracking technologies to provide core functionality, maintain your session, and improve Platform performance. The following cookie categories are used:

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will affect core Platform functionality including login and session management. We do not use third-party advertising or social media cookies.

9. Data Retention

• 9.1 Account data is retained for the duration of your Account and for a minimum period of 5 years following Account closure, in order to satisfy anti-money laundering record-keeping obligations and potential regulatory enquiries.
• 9.2 KYC documentation is retained for the legally mandated minimum period applicable under our licensing jurisdiction's AML regulations, typically 5 years from the date of the last transaction.
• 9.3 Customer support communications are retained for up to 3 years from the date of the interaction, for dispute resolution and quality assurance purposes.
• 9.4 Marketing preference records — including opt-in and opt-out timestamps — are retained for the lifetime of your Account and for 3 years following Account closure as evidence of consent management.
• 9.5 Analytics and performance data, where anonymised, may be retained indefinitely for platform improvement purposes. Non-anonymised analytics data is deleted after 24 months.
• 9.6 Upon expiry of the applicable retention period, personal data is securely deleted from all aceh4d systems or, where deletion is technically impractical, rendered permanently inaccessible and anonymised.

10. Security Measures

aceh4d implements a layered information security programme proportionate to the sensitivity of the data we hold. Key measures include:

• Encryption in Transit: All Platform communications are protected by TLS 1.2 or higher with256-bit encryption.
• Encryption at Rest: Sensitive personal data fields including payment details and KYC documents are encrypted at the database layer using AES-256.
• Access Controls: Role-based access controls limit staff access to personal data on a strict need-to-know basis. Administrative access requires multi-factor authentication.
• Penetration Testing: The Platform undergoes regular third-party penetration testing. Critical vulnerabilities are remediated within defined SLA timeframes.
• Intrusion Detection: Real-time monitoring systems alert our security team to anomalous access patterns, credential stuffing attempts, and suspicious transaction behaviours.
• Incident Response: In the event of a confirmed personal data breach affecting your rights and freedoms, we will notify affected users and relevant regulatory authorities within applicable mandatory notification timeframes.

11. International Data Transfers

• 11.1 As an internationally licensed platform, some of aceh4d's service providers and data processors are located outside Malaysia. Where personal data is transferred to processors in jurisdictions that may not offer the same level of data protection as Malaysia's PDPA, we implement appropriate contractual safeguards including standard contractual clauses and data processing agreements.
• 11.2 KYC verification data may be processed by our third-party identity verification provider in a jurisdiction outside Malaysia. All such providers are bound by contractual obligations requiring data security standards equivalent to those described in this Policy.
• 11.3 Cryptocurrency transaction data associated with your Account may be processed by blockchain networks that are inherently international in nature. We take appropriate measures to minimise the personal data included in on-chain transaction data.

12. Your Rights

As a data subject, you hold the following rights in relation to your personal data held by aceh4d. To exercise any of these rights, contact our support team via live chat or email with clear identification of the right you are exercising and the specific data concerned.

13. Minors

The aceh4d Platform is strictly for adults aged21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the account registration process.

If we become aware that personal data has been collected from a person under 21 years of age, we will immediately suspend the relevant Account, delete the associated personal data, and retain only the minimal information required to prevent re-registration by that individual.

Parents or guardians who believe a minor may have registered on the Platform are encouraged to contact our support team immediately via live chat or at [email protected].

14. Third-Party Services & Links

• 14.1 The Platform does not contain links to external third-party websites. All links on the aceh4d Platform direct to internal pages within the aceh4d domain.
• 14.2 Third-party services integrated into the Platform — including payment gateways, identity verification tools, and live chat systems — operate under their own privacy policies. By using these integrated services, you may be subject to data processing by those providers. We recommend reviewing the privacy documentation of any third-party service you use in connection with your aceh4d Account.
• 14.3 All third-party processors engaged by aceh4d are contractually required to maintain data security standards consistent with this Policy and applicable data protection law.

15. Policy Amendments

• 15.1 aceh4d reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or business operations. Material changes will be communicated via a prominent Platform notice and email to your registered address at least14 days before taking effect.
• 15.2 Continued use of the Platform following the effective date of any revised Policy constitutes acceptance of the updated terms. If you do not accept the revised Policy, you should cease using the Platform and close your Account.
• 15.3 The version number and effective date at the top of this page always reflect the current version. Previous versions of this Policy may be requested from our support team.

16. Contact Us

If you have any questions regarding this Privacy Policy, wish to exercise a data subject right, or need to raise a data protection concern, please contact us through the following channels:

• Live Chat: Available24/7 directly on the Platform — the fastest channel for urgent data requests.
• Email: [email protected] — please include "Privacy Request" in your subject line along with your registered username.

For formal data protection complaints that have not been resolved to your satisfaction through our internal process, you may also contact the relevant data protection authority in your jurisdiction. For Malaysian users, the relevant authority is the Department of Personal Data Protection (JPD), operating under the Ministry of Communications and Digital.