Privacy Policy

This Privacy Policy ("Policy") describes how ambon4d ("Platform", "we", "us", "our"), the operator of the online gaming platform accessible at https://ambon4d.cam, collects, processes, stores, and discloses personal data in connection with the provision of its online casino and sports betting services to players in Malaysia and internationally.

ambon4d is committed to handling personal data responsibly, transparently, and in accordance with applicable data protection legislation. We collect only the information that is reasonably necessary to deliver a secure, compliant, and high-quality gaming experience to our players.

This Policy applies to all personal data collected through the ambon4d website, mobile-responsive interface, live chat support system, account registration process, payment transactions, and any other digital touchpoints operated by ambon4d.

This Policy should be read alongside ambon4d's Terms & Conditions and Responsible Gambling Policy, both of which form part of your agreement with us.

The following definitions apply throughout this Privacy Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person — the "data subject" — including name, contact details, date of birth, financial information, device identifiers, and behavioural data.
• "Processing" means any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, erasure, or destruction.
• "Data Controller" means ambon4d, the entity that determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" means any third party that processes personal data on behalf of ambon4d under a data processing agreement — for example, payment processors and cloud hosting providers.
• "KYC Data" means identity and verification documents submitted by a player in fulfilment of Know Your Customer obligations, including government-issued identification and proof of address.
• "Cookies" means small text files placed on a user's device by the ambon4d platform for session management, security, and analytics purposes.
• "Player" / "User" means any natural person who has registered, or attempted to register, an account on the ambon4d platform.
• "Sensitive Data" means a subset of personal data that warrants heightened protection, including financial account details, identity document numbers, and any health-related disclosures made in connection with responsible gambling tools.

ambon4d collects personal data in the following categories. We collect only what is necessary for the stated purpose and endeavour to minimise data collection to the greatest extent possible.

ambon4d collects personal data through the following channels:

• Direct Provision: Data you voluntarily provide when registering an account, completing KYC, submitting a support request, or updating your profile.
• Automated Technical Collection: Data collected automatically during your use of the Platform, including IP address, device identifiers, session data, and clickstream information gathered through server logs and cookies.
• Payment Processing: Transaction data received from Malaysian payment processors (including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency network providers) when you make deposits or withdrawals.
• Third-Party Verification Services: Where we use third-party identity verification providers to conduct KYC checks, those providers may return verification results and risk scores that form part of your account record.
• Responsible Gambling Tools: Data related to self-exclusion requests, deposit limit settings, cooling-off period activations, and session limit configurations, collected when you interact with our responsible gambling tools.

ambon4d processes personal data only where we have a valid lawful basis to do so. The applicable bases are as follows:

1. Contractual Necessity: Processing that is necessary for the performance of our contract with you — including account creation, processing deposits and withdrawals, operating games, and delivering customer support.
2. Legal Obligation: Processing required by applicable law, including KYC and AML obligations, financial record-keeping requirements, and compliance with lawful requests from regulatory or law enforcement authorities.
3. Legitimate Interests: Processing for purposes of fraud prevention, platform security, system integrity monitoring, and improving the overall quality of the ambon4d service — where such processing does not override the fundamental rights and interests of data subjects.
4. Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit, informed, and freely given consent. You may withdraw consent at any time by contacting support or adjusting your account preferences.

ambon4d uses the personal data it collects for the following purposes:

• To create, manage, and maintain your player Account
• To verify your identity and age (minimum 21 years) as required by our KYC programme
• To process financial transactions, including deposits and withdrawals via all supported Malaysian payment methods
• To operate, personalise, and improve the Platform — including game recommendations, interface localisation, and performance optimisation
• To detect, investigate, and prevent fraud, money laundering, collusion, and other prohibited activities
• To communicate with you regarding your Account, including transaction confirmations, security alerts, and support responses
• To administer our responsible gambling tools, including processing self-exclusion requests, deposit limits, and cooling-off periods
• To comply with applicable legal obligations, including AML reporting, record-keeping, and responding to lawful authority requests
• To send promotional communications (where you have opted in), including information about bonuses, VIP tier updates, and new product features
• To conduct internal analytics, aggregate reporting, and platform performance analysis using anonymised or pseudonymised data

We do not use your personal data for automated decision-making that produces legal or similarly significant effects without human review, except where such processing is required for fraud detection or regulatory compliance purposes.

ambon4d does not sell your personal data to third parties under any circumstances. We may, however, share your data with the following categories of recipients in the limited circumstances described:

• Payment Service Providers: We share transaction data with Malaysian payment processors — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX operators, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency network providers — solely for the purpose of processing your financial transactions.
• Identity Verification Providers: Where we engage third-party KYC verification services, we share the minimum personal data necessary to conduct the requested verification check.
• Technology & Cloud Infrastructure Providers: Our platform infrastructure is hosted on third-party cloud services. These providers process data on our behalf under strict data processing agreements and are not permitted to use your data for their own purposes.
• Regulatory & Law Enforcement Authorities: We may disclose personal data to competent authorities — including financial intelligence units, gaming regulators, or law enforcement agencies — where required to do so by law, court order, or regulatory directive.
• AML / Fraud Prevention Services: We may share limited data with industry-standard fraud prevention and AML screening databases for the purpose of protecting the platform and its players from financial crime.
• Professional Advisers: Legal counsel, auditors, and insurers may access personal data on a confidential, need-to-know basis in connection with the provision of professional services to ambon4d.

ambon4d uses cookies and similar tracking technologies to operate the Platform effectively and improve the player experience. The following types of cookies are used:

ambon4d retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active Account Data: Retained for the duration of the account's active status plus a post-closure period as required by applicable AML and financial record-keeping legislation (typically five to seven years).
• KYC Documents: Retained for a minimum of five (5) years from the date of submission, or longer where required by applicable regulation, regardless of account status.
• Financial Transaction Records: Retained for a minimum of five (5) years in accordance with financial services and anti-money laundering requirements.
• Support Communications: Retained for a minimum of two (2) years from the date of the last interaction, for dispute resolution and quality assurance purposes.
• Technical / Log Data: Typically retained for up to twelve (12) months unless a longer period is required for ongoing fraud or security investigations.
• Marketing Preferences: Retained until you withdraw consent or close your account, whichever is earlier.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data subject's identity.

ambon4d implements a comprehensive suite of technical and organisational security measures designed to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Transport Layer Security (TLS): All data transmitted between your device and the ambon4d platform is encrypted using industry-standard TLS 1.2 or higher (256-bit SSL).
• At-Rest Encryption: Sensitive personal data stored in our databases — including KYC documents and financial records — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within ambon4d's systems is restricted to authorised personnel on a strict need-to-know basis, governed by role-based access control policies.
• Password Security: Player account passwords are stored using a one-way cryptographic hashing algorithm. ambon4d staff cannot view your password in plain text.
• Penetration Testing: ambon4d conducts regular security assessments and penetration testing of its platform infrastructure.
• Fraud Monitoring: Automated and manual monitoring systems are in place to detect suspicious account activity, unusual transaction patterns, and potential security incidents in real time.

Despite these measures, no digital system can guarantee absolute security. In the event of a data breach affecting your personal data, ambon4d will notify affected players and relevant authorities within the timeframes required by applicable law.

Subject to applicable law and certain conditions, you have the following rights in respect of the personal data ambon4d holds about you. To exercise any of these rights, please contact our support team via live chat or email.

Please note that certain rights may be subject to limitations where the data in question is required for compliance with a legal obligation, the defence of legal claims, or the prevention of fraud. We will always inform you if such a limitation applies to your specific request.

ambon4d's platform infrastructure may involve the transfer of personal data to countries outside Malaysia. When such transfers occur, ambon4d ensures that appropriate safeguards are in place to protect personal data to a standard at least equivalent to that required under Malaysian data protection law, including:

• Data processing agreements incorporating appropriate contractual clauses with all third-party processors located outside Malaysia
• Transfers to jurisdictions that offer adequate data protection standards as recognised by applicable law
• Technical and organisational security measures that apply uniformly regardless of where data is processed

If you would like further information about the specific safeguards applied to your personal data when it is transferred internationally, please contact our support team.

ambon4d implements age verification as a mandatory step in the KYC process specifically to prevent access by underage individuals. If you are a parent or guardian and believe that a minor has created an account on the ambon4d platform, please contact our support team immediately so that appropriate action can be taken without delay.

The ambon4d platform may contain references to third-party services — such as Malaysian payment providers (Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX) — in the context of explaining available deposit and withdrawal methods. When you use these payment services, you do so under the respective provider's own privacy policy and terms of use.

ambon4d is not responsible for the privacy practices of third-party service providers and does not control how those providers collect, process, or store your data. We encourage you to read the privacy notices of any third-party service before using them.

ambon4d reserves the right to update or amend this Privacy Policy at any time. Any material changes — meaning changes that significantly affect how we collect, use, or share personal data — will be communicated to active players via email notification or a prominent notice on the Platform prior to taking effect.

Minor or non-material updates (such as formatting corrections or clarifications) may be made without prior notice. The "Last Updated" date at the top of this page will be revised to reflect the date of the most recent change.

Continued use of the ambon4d platform following any amendment constitutes acceptance of the revised Privacy Policy. If you do not agree with the changes, you should discontinue use of the Platform and contact support to close your account.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by ambon4d, please contact us through the following channels:

• Live Chat: Available 24/7 directly on the ambon4d platform — the recommended channel for urgent privacy matters
• Email: [email protected] — for formal Data Subject Access Requests and written privacy complaints
• Response Time: Live chat — immediate; email privacy requests — acknowledged within 5 business days, substantive response within 30 calendar days

When submitting a Data Subject Access Request or exercising any other data right, please provide sufficient information to allow us to verify your identity before we release or modify any personal data. This verification step is a security requirement, not an obstacle — it protects your data from unauthorised third-party requests.

If you are dissatisfied with our response to a privacy complaint, you have the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction.