Privacy Policy — pin4d
This Privacy Policy explains how pin4d collects, processes, stores, and protects your personal data. We are committed to handling your information with transparency and in accordance with applicable data protection principles.
Table of Contents
- 1. Introduction
- 2. Definitions
- 3. Data We Collect
- 4. How We Use Your Data
- 5. Legal Basis for Processing
- 6. Data Sharing & Disclosure
- 7. Data Retention
- 8. Data Security
- 9. Cookies & Tracking
- 10. Your Data Rights
- 11. Minors & Age Verification
- 12. International Transfers
- 13. Policy Amendments
- 14. Contact & Complaints
Your continued use of pin4d constitutes acknowledgement of this Privacy Policy. For questions, contact [email protected].
Introduction
This Privacy Policy (hereinafter "Policy") is issued by pin4d (hereinafter "pin4d", "we", "us", "our"), the operator of the online gambling and sports betting platform accessible at https://pin4d.click. This Policy governs the collection, use, storage, disclosure, and protection of personal data submitted to or collected by pin4d in connection with your use of the platform.
pin4d is committed to protecting the privacy of our members and visitors. We recognise that Malaysian users place a high degree of trust in the platforms they use for financial transactions, and we take that responsibility seriously. This Policy is designed to be read and understood — written in plain English, not legal obfuscation.
This Policy applies to all personal data collected through the pin4d website, account registration, payment processing, customer support interactions, and any other touchpoints through which you share information with us. It applies to all Members across Malaysia, including players based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, Ipoh, and Kota Kinabalu.
By registering for an account, making a deposit, or accessing any part of the pin4d platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. If you do not consent to these practices, you should not use the platform and may request account closure in accordance with our Terms & Conditions.
Note on Malaysian PDPA: pin4d's data handling practices are aligned with the principles of Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection standards, in so far as they apply to our operations and user base.
Definitions
For the purposes of this Privacy Policy, the following terms carry the meanings set out below:
- Personal Data: Any information that identifies or could reasonably be used to identify a living individual, including name, identification number, contact details, financial data, and device identifiers.
- Processing: Any operation performed on personal data, including collection, recording, organisation, storage, use, disclosure, or deletion.
- Data Controller: pin4d, as the entity that determines the purposes and means of processing your personal data.
- Data Processor: A third party that processes personal data on behalf of pin4d, such as payment service providers, KYC verification vendors, and cloud infrastructure providers.
- Member / User: Any individual who has registered an account on the pin4d platform or who visits and interacts with the platform without registration.
- Consent: A freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data for a defined purpose.
- KYC: Know Your Customer — the identity and age verification procedure required for regulatory compliance prior to withdrawal processing.
- Sensitive Data: A subset of personal data that warrants heightened protection, including identification document data, financial account details, and data relating to health or vulnerability (e.g., responsible gambling self-exclusion status).
Data We Collect
pin4d collects personal data through multiple channels in the course of providing its services. The categories of data we collect include:
| Category | Examples | Collection Method |
|---|---|---|
| Identity Data | Full name, date of birth, MyKad / passport number, nationality | Registration form, KYC submission |
| Contact Data | Mobile number, email address | Registration form, account settings |
| Financial Data | Payment method details (e-wallet ID, bank account last 4 digits), transaction history, deposit and withdrawal amounts in MYR | Payment processing via Touch 'n Go, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, USDT TRC20 |
| Account Data | Username, account balance, betting history, bonus activity, VIP tier status | Platform activity |
| Technical Data | IP address, device type, browser type and version, operating system, session duration, pages visited | Automatic collection via cookies and server logs |
| Communication Data | Live chat transcripts, email correspondence, support ticket content | Customer support interactions |
| Verification Data | Identity document images (MyKad front/back, passport photo page), selfie photographs for liveness checks where required | KYC process |
| Responsible Gambling Data | Self-exclusion status, deposit limit settings, session time alerts, any disclosures made to support regarding problem gambling | Account settings, support interactions |
Data You Choose to Provide vs. Data Collected Automatically
Some data — such as identity, contact, and payment data — is provided directly by you. Other data, including technical and behavioural data, is collected automatically as part of normal platform operation. You may opt out of certain non-essential tracking via cookie settings; however, disabling essential cookies may affect platform functionality.
How We Use Your Data
pin4d uses personal data for the following defined purposes. We do not process personal data for purposes incompatible with those listed below without obtaining fresh consent or establishing a separate legal basis:
4.1 — Account Management & Service Delivery
To create and maintain your account; to process deposits and withdrawals; to administer betting markets, game results, and bonus claims; and to deliver the core betting and gaming services you have contracted for.
4.2 — Identity Verification & KYC Compliance
To verify your identity, confirm your age as 21 or above, and comply with our KYC obligations. Identity document data is processed using secure systems and is retained only for as long as required by applicable regulatory obligations.
4.3 — Fraud Prevention & Security
To detect and prevent fraudulent activity, money laundering, account takeover attempts, bonus abuse, multi-accounting, and other prohibited conduct. This includes automated risk scoring of transactions and manual review of flagged activity.
4.4 — Regulatory Compliance & Anti-Money Laundering
To fulfil our obligations under applicable gaming licence conditions, anti-money laundering (AML) regulations, and any lawful requests from regulatory or law enforcement authorities. We are legally required to retain certain transaction records for specified minimum periods.
4.5 — Customer Support
To respond to your queries, complaints, and support requests via live chat and email. Support communications are retained for quality assurance, dispute resolution, and training purposes.
4.6 — Responsible Gambling Monitoring
To monitor for indicators of problem gambling behaviour and, where appropriate, proactively offer responsible gambling tools or information. Self-exclusion and deposit limit data is processed to enforce restrictions and prevent marketing to self-excluded members.
4.7 — Platform Improvement
To analyse usage patterns and platform performance in order to improve the user experience, optimise load times, and develop new features. This processing uses aggregated and anonymised data wherever possible.
4.8 — Direct Marketing
To send you promotional offers, bonus announcements, and platform updates by email or in-platform notification, where you have opted in to receive such communications. You may withdraw consent for marketing at any time by updating your communication preferences in account settings.
Legal Basis for Processing
pin4d processes personal data only where a lawful basis exists for doing so. The primary legal bases applicable to our processing activities are:
- Contractual Necessity: Processing required to perform the contract between pin4d and the Member — account creation, transaction processing, game operation, and withdrawal fulfilment.
- Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC obligations, AML requirements, gaming licence conditions, and responses to lawful regulatory requests.
- Legitimate Interests: Processing for fraud prevention, platform security, and responsible gambling monitoring, where those interests are not overridden by the Member's fundamental rights and freedoms.
- Consent: Processing for direct marketing and non-essential analytics, where you have provided specific, informed consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.
Data Sharing & Disclosure
pin4d does not sell, rent, or trade your personal data to third parties for their own commercial marketing purposes. We share personal data only in the following limited circumstances:
- Payment Service Providers: We share necessary financial and identity data with our payment processing partners — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, and USDT TRC20 network processors — to facilitate deposits and withdrawals.
- KYC & Identity Verification Vendors: Identity document data is processed by specialist KYC verification providers operating under contractual data processing agreements that bind them to equivalent data protection standards.
- Cloud Infrastructure & Hosting Providers: Platform data is stored on secure cloud infrastructure. Our hosting providers process data as data processors under our instruction and are bound by appropriate data protection agreements.
- Regulatory & Law Enforcement Authorities: We will disclose personal data to competent regulatory bodies, law enforcement agencies, or courts where we are legally required to do so, or where disclosure is necessary to prevent, detect, or investigate crime, including money laundering and fraud.
- Professional Advisers: We may share data with legal, accounting, or auditing advisers under obligations of professional confidentiality, where necessary for the conduct of our business.
- Business Transfers: In the event of a merger, acquisition, or sale of substantially all of our assets, personal data may be transferred to the acquiring entity, subject to equivalent privacy protections. Members will be notified of any such transfer.
No Sale of Data: pin4d does not and will not sell your personal data to any third party for commercial purposes. This is a firm commitment, not subject to exceptions.
Data Retention
pin4d retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention principles apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & identity data | Duration of account plus 5 years post-closure | Regulatory / AML obligation |
| Transaction records (deposits, withdrawals, bets) | 7 years minimum from transaction date | Regulatory / AML obligation |
| KYC documents (MyKad / passport copies) | 5 years post account closure | Gaming licence requirement |
| Support communications | 3 years from last interaction | Dispute resolution, quality assurance |
| Responsible gambling records | Duration of exclusion plus 5 years | Member protection obligation |
| Technical / log data | 12 months rolling | Security and fraud prevention |
| Marketing preference data | Until consent is withdrawn plus 1 year | Consent |
Upon expiry of the applicable retention period, data is securely deleted or anonymised. Where anonymisation is applied, the resulting data may be retained indefinitely for statistical and analytical purposes as it no longer constitutes personal data.
Data Security
pin4d implements technical and organisational security measures appropriate to the nature and sensitivity of the personal data we process. These measures are designed to protect your data against unauthorised access, accidental loss, alteration, disclosure, or destruction.
8.1 — Encryption in Transit
All data transmitted between your device and pin4d's servers is encrypted using Transport Layer Security (TLS) protocol with 256-bit encryption — the same standard employed by major Malaysian banks and financial institutions.
8.2 — Encryption at Rest
Sensitive personal data, including payment information, identity document data, and KYC records, is encrypted at rest using AES-256 or equivalent encryption standards.
8.3 — Access Controls
Access to personal data is restricted to pin4d personnel and authorised third-party processors who require such access in order to perform their defined functions. Role-based access controls and audit logging are applied to all systems containing personal data.
8.4 — Incident Response
In the event of a data breach that poses a risk to Member rights and freedoms, pin4d will take immediate containment action, conduct a root cause assessment, and notify affected Members within a reasonable timeframe, along with guidance on protective steps they may take.
While pin4d employs rigorous security practices, no internet-based transmission is entirely immune to risk. You are responsible for maintaining the security of your own login credentials and for reporting any suspected unauthorised account access to our support team immediately.
Cookies & Tracking Technologies
pin4d uses cookies and similar tracking technologies (including local storage and session identifiers) to operate the platform, maintain session state, prevent fraud, and analyse usage patterns. The following categories of cookies are used:
- Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies, security tokens, and load-balancing identifiers. These cannot be disabled without preventing platform access.
- Functional Cookies: Remember your preferences, such as language settings, display options, and last-used payment method, to improve your experience on return visits.
- Analytical Cookies: Collect anonymised data about how pages are used — which features are accessed, session durations, and navigation paths. This data is used to improve the platform. No personally identifiable data is included in analytical cookie payloads.
- Security & Fraud Prevention Cookies: Support our fraud detection systems by recording device fingerprint characteristics used to identify anomalous login or transaction behaviour.
Non-essential cookies (analytical and functional) can be disabled via your browser settings or our cookie preference panel. Disabling strictly necessary cookies will prevent platform access. pin4d does not use third-party advertising tracking cookies or sell cookie-derived data to advertisers.
Your Data Rights
As a Member of pin4d, you hold the following rights in respect of your personal data. These rights are subject to applicable legal obligations that may limit their exercise in specific circumstances — for example, data required to be retained for regulatory compliance cannot be deleted on request alone.
Right of Access
Request a copy of the personal data pin4d holds about you, along with information about how it is processed.
Right to Rectification
Request correction of inaccurate or incomplete personal data. Some corrections may require re-submission of KYC documents.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to overriding retention obligations.
Right to Restrict Processing
Request that processing of your data be restricted while the accuracy of the data or the legitimacy of processing is under review.
Right to Data Portability
Receive a copy of certain personal data you have provided to pin4d in a structured, commonly used, machine-readable format.
Right to Object
Object to the processing of your data based on legitimate interests, including direct marketing. Marketing objections are honoured immediately upon request.
Right to Withdraw Consent
Where processing is based on consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
Rights re: Automated Decisions
Request human review of any significant decision made solely by automated processing, including automated risk-based account restrictions.
To exercise any of the above rights, submit a written request to [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receiving a valid request. Identity verification may be required before processing certain requests.
Minors & Age Verification
pin4d's services are strictly for individuals aged 21 years and above. We do not knowingly collect, process, or retain personal data from any person under the age of 21. Age verification is enforced as a mandatory step in the KYC process prior to the release of any withdrawal.
Where pin4d becomes aware or reasonably suspects that personal data has been collected from a person under the age of 21, we will:
- Immediately suspend the account pending investigation.
- Retain the minimum data required to investigate the breach and comply with any applicable reporting obligations.
- Delete all other personal data associated with the underage registration as promptly as legally permissible.
- Return any deposited funds to the verified payment source, less any applicable regulatory holds.
If you are a parent or guardian and believe your child has accessed pin4d, please contact us immediately at [email protected]. We take all such reports seriously and will act promptly.
International Data Transfers
In the course of providing its services, pin4d may transfer personal data to third-party processors located outside Malaysia. Such transfers may occur in connection with cloud hosting, KYC verification processing, or payment network operations.
Where personal data is transferred internationally, pin4d ensures that appropriate safeguards are in place, including contractual data processing agreements that require the recipient to apply data protection standards comparable to those mandated under applicable Malaysian law and this Policy.
By using pin4d's services, you acknowledge and consent to the transfer of your personal data to the extent necessary for the provision of the services described in this Policy, subject to the safeguards described above.
Policy Amendments
pin4d reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or operational developments. The current version of this Policy is always the version published on this page, identified by the "Last Updated" date at the top of the document.
Where amendments are material — meaning they substantially affect how we use your data or the rights available to you — pin4d will notify Members by email to their registered address and/or by a prominent in-platform notification, with a minimum of 14 days' notice before the amended Policy takes effect.
Your continued use of the pin4d platform after the effective date of any amendment constitutes acceptance of the revised Policy. If you do not accept the revised Policy, you should cease using the platform and may request account closure in accordance with the Terms & Conditions.
Contact & Complaints
For any privacy-related queries, data rights requests, or complaints regarding pin4d's data handling practices, please contact us through the following channels:
Data Rights & Privacy Enquiries
Submit your request in writing with the subject line "Privacy / Data Rights Request" to: [email protected]. We will acknowledge receipt within 5 business days and provide a substantive response within 30 calendar days.
General Support (24/7)
For non-formal privacy enquiries or quick clarifications, our 24/7 live chat support team can assist via the platform interface. Average first response is under 3 minutes at all hours, including Malaysian public holidays.
Formal Complaints
If you are dissatisfied with pin4d's response to a data rights request, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction. For Malaysian residents, this may include the Department of Personal Data Protection (JPDP) Malaysia under the Ministry of Digital.
Response Commitment: pin4d is committed to responding to all privacy-related enquiries substantively within 30 days. Complex requests may require additional time; if so, we will inform you within the initial 30-day window and provide an expected resolution date.
How pin4d Protects Your Data in Practice
Six concrete measures — not policy platitudes — that define how we handle your personal information every day.
256-Bit Encryption
All data in motion is encrypted with TLS 1.3 and 256-bit keys. Sensitive data at rest uses AES-256 encryption. The same security grade applied by Maybank and CIMB to their online banking platforms.
Zero Data Sales
pin4d does not sell, rent, or trade your personal data to third-party advertisers or data brokers under any circumstances. Your data is used solely to operate and improve the services you signed up for.
Purpose-Limited Processing
We collect only the minimum data necessary for each defined purpose. We do not collect data speculatively or for undefined future uses. Every data category has a clearly documented retention period and deletion schedule.
Member-Controlled Preferences
Marketing consent, cookie preferences, and communication settings are all adjustable from within your account dashboard at any time. Withdrawing consent is a one-step process — no support ticket required.
Documented Data Rights Process
Data rights requests — access, rectification, deletion, portability — are handled within 30 days with written acknowledgement within 5 business days. No bureaucratic run-around; each request is assigned to a named handler.
Third-Party Processor Accountability
Every third party that processes data on pin4d's behalf — payment processors, KYC vendors, cloud providers — is bound by contractual data processing agreements requiring equivalent data protection standards to those in this Policy.
Privacy Questions? Our Team Is Available 24/7
Contact our support team for any privacy-related queries, or explore our other policy pages for a complete picture of how pin4d operates.
For players aged 21 and above only. Gambling carries financial risk — only wager what you can afford to lose.