Privacy Policy — Tata4D

Tata4D ("we", "us", "our", or "the Platform") respects the privacy of every individual who accesses or uses our online betting and casino services at tata4d.click. This Privacy Policy ("Policy") sets out in clear and transparent terms what personal data we collect from you, the purposes for which that data is processed, the parties with whom it may be shared, and the rights you hold in relation to your personal information.

This Policy applies to all Members, visitors, and users of the Tata4D Platform, including individuals accessing the Platform from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and any other location across Malaysia or internationally.

By registering an account on Tata4D, depositing funds, placing a wager, or otherwise using the Platform in any capacity, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

The following definitions apply throughout this Privacy Policy:

• "Personal Data" — Any information that directly or indirectly identifies a living individual, including but not limited to name, date of birth, email address, phone number, device identifiers, and financial information.
• "Processing" — Any operation performed on Personal Data, including collection, storage, use, disclosure, transmission, deletion, or any combination thereof.
• "Controller" — Tata4D, as the entity that determines the purposes and means of Processing your Personal Data.
• "Processor" — A third party engaged by Tata4D to process Personal Data on our behalf, subject to binding data processing agreements.
• "Member" — Any individual who has created a verified account on the Tata4D Platform.
• "KYC" — Know Your Customer verification process requiring submission of government-issued identity documents and proof of address.
• "Cookie" — A small data file stored on a user's device by a web browser at the instruction of the Platform's server.
• "MYR" — Malaysian Ringgit, the primary account currency for Malaysian Members of the Platform.

Tata4D collects Personal Data through several channels, including account registration forms, KYC document submissions, payment transactions, platform usage, and communications with our support team. The categories of data we collect are as follows:

3.1 Identity & Registration Data

• Full legal name as it appears on your government-issued identification document
• Date of birth (for age verification — all Members must be 21 or above)
• Gender (optional, for personalisation purposes)
• Username and encrypted password hash
• Preferred account currency (MYR by default for Malaysian Members)

3.2 Contact & Address Data

• Registered email address
• Mobile phone number
• Residential or billing address, including postcode, city, and country

3.3 Identity Verification (KYC) Data

• Copies of government-issued photo identification (MyKad, passport, or other accepted documents)
• Proof of residential address (utility bill, bank statement, or equivalent)
• Selfie or live facial verification image (where applicable for enhanced KYC)
• Source of funds declarations where required by anti-money laundering compliance obligations

3.4 Financial & Transaction Data

• Deposit and withdrawal history, amounts, and timestamps
• Payment method identifiers (e.g., masked Touch 'n Go eWallet account reference, Boost account reference, FPX bank name, cryptocurrency wallet address)
• Wagering history, game activity, and betting records
• Bonus and promotion redemption records

3.5 Technical & Usage Data

• IP address and geolocation data at the time of login and transaction
• Device type, operating system, browser type, and version
• Session timestamps, pages visited, and features used within the Platform
• Cookies and similar tracking identifiers (see Clause 7)

3.6 Communications Data

• Records of communications between you and Tata4D customer support, including email correspondence and live chat transcripts
• Feedback and survey responses submitted voluntarily

Tata4D processes your Personal Data only for specific, legitimate purposes. The table below summarises the primary purposes for which we use the data we collect:

Tata4D does not use your Personal Data for automated decision-making processes that produce legal or similarly significant effects on you without human review, except where required by applicable law.

Tata4D processes your Personal Data on one or more of the following legal bases:

• Contractual Necessity: Processing is necessary to perform our obligations under the Member Agreement — including account management, payment processing, and delivery of betting and casino services — or to take steps at your request prior to entering into that contract.
• Legal Obligation: Processing is necessary for compliance with applicable legal obligations, including anti-money laundering regulations, KYC mandates, and regulatory reporting requirements imposed by our licensing framework.
• Legitimate Interests: Processing is necessary for our legitimate business interests — including fraud prevention, platform security, responsible gambling monitoring, and service improvement — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: For specific processing activities — such as sending optional marketing communications or applying non-essential cookies — we will obtain your explicit consent prior to processing. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Tata4D does not sell your Personal Data. We may share your data with third parties only in the following circumstances and only to the minimum extent necessary:

6.1 Payment Service Providers. To process deposits and withdrawals, we share transaction data with our payment processing partners, including operators of Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, and cryptocurrency processing services. Each payment provider operates under its own privacy policy and is independently regulated.

6.2 Identity Verification Services. For KYC compliance, we engage third-party identity verification service providers. These processors may access document images and facial verification data solely for the purpose of confirming your identity and are bound by contractual obligations not to use that data for any other purpose.

6.3 Regulatory and Law Enforcement Authorities. We will disclose Personal Data to competent regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, court order, or in connection with the investigation or prevention of fraud, money laundering, or other criminal activity.

6.4 Professional Advisers. We may share limited Personal Data with our legal counsel, auditors, and compliance advisers operating under professional confidentiality obligations where necessary for the conduct of our business.

6.5 Corporate Transactions. In the event of a merger, acquisition, restructuring, or sale of all or part of Tata4D's business assets, Member data may be transferred to the acquiring entity, subject to equivalent privacy protections. Members will be notified of any such transfer in advance where practicable.

Tata4D uses cookies and similar tracking technologies to operate the Platform effectively, maintain your session state, prevent fraud, and improve your overall experience. The categories of cookies we deploy are as follows:

• Strictly Necessary Cookies: Essential to the functioning of the Platform — these enable authentication, session management, and security controls. They cannot be disabled without materially impairing Platform functionality.
• Performance & Analytics Cookies: Used to collect aggregated, anonymised data on how Members use the Platform — including pages visited, time spent, and navigation paths — to help us identify areas for improvement.
• Functional Cookies: Enable the Platform to remember your preferences — such as language settings, preferred deposit method, and responsible gambling limit configurations — to provide a more personalised experience.
• Fraud Prevention Cookies: Help us identify suspicious access patterns, detect account sharing, and protect Members against unauthorised account activity.

Where non-essential cookies are used, we will request your consent via a clearly visible cookie consent mechanism on your first visit to the Platform. You may update your cookie preferences at any time through your account settings. Please note that disabling certain cookies may limit the availability of some Platform features.

Tata4D retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your active account and for a period of not less than five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements.
• Transaction and Financial Records: Retained for a minimum of five (5) years from the date of each transaction, as required by applicable financial crime prevention regulations.
• KYC Documentation: Retained for a minimum of five (5) years following the end of the business relationship, as mandated by regulatory compliance frameworks.
• Customer Support Communications: Retained for two (2) years following the closure of each support interaction, or longer where the communication relates to an open dispute or regulatory inquiry.
• Technical and Usage Logs: Retained for up to twelve (12) months for security monitoring and platform performance purposes, after which they are aggregated or deleted.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with our internal data disposal procedures.

Tata4D implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Transport Layer Security (TLS): All data transmitted between your device and our servers is encrypted using industry-standard TLS protocols to prevent interception.
• Database Encryption: Sensitive Personal Data — including KYC documents, financial records, and identity information — is stored in encrypted form at rest using AES-256 or equivalent encryption standards.
• Access Controls: Access to Member data within Tata4D's systems is restricted on a strict need-to-know basis. All staff with access to Personal Data are required to complete data protection training and are bound by confidentiality obligations.
• Two-Factor Authentication (2FA): Members are encouraged to enable 2FA on their accounts as an additional layer of security against unauthorised login attempts.
• Regular Security Audits: Tata4D conducts periodic security assessments, including vulnerability scans and penetration testing, to identify and remediate potential weaknesses in our infrastructure.
• Incident Response Procedures: In the event of a data security incident that materially affects your Personal Data, Tata4D will notify affected Members and relevant authorities in accordance with applicable notification obligations.

Subject to applicable law and our regulatory obligations, you have the following rights in relation to your Personal Data held by Tata4D:

To exercise any of the above rights, please contact our data protection team in writing at [email protected] (plain text only — not a clickable link). We will respond to all verified data subject requests within 30 days of receipt. In complex cases, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reason for the delay.

Please note that certain rights — particularly the right to erasure — may be limited where retention of your data is required to comply with applicable legal obligations, including our AML and KYC record-keeping requirements.

The Tata4D Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect, process, or retain Personal Data from individuals below the age of 21.

Where Tata4D becomes aware that Personal Data has been collected from a person below the minimum age threshold — whether through account registration, KYC discovery, or any other means — the relevant account will be immediately suspended, all funds will be held pending investigation, and the data will be deleted or anonymised following the conclusion of any legally required reporting obligations.

If you are a parent or guardian and believe that a minor under your care has registered an account on Tata4D, please contact our support team immediately at [email protected] so that we may take prompt action.

The Tata4D Platform integrates with a number of third-party services necessary to deliver a complete, functional experience. These include but are not limited to payment gateways (Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and banking partners including Maybank, CIMB, Public Bank, and Hong Leong Bank), identity verification providers, and game content suppliers.

When you use a third-party payment service — for example, when depositing via Touch 'n Go eWallet or initiating a DuitNow bank transfer — your interaction with that payment interface is governed by the privacy policy of the respective payment service provider. Tata4D is not responsible for the privacy practices of third-party services, and we encourage you to review their respective policies independently.

Tata4D does not share more Personal Data with third-party service providers than is strictly necessary for the provision of the specific service in question. All Processors engaged by Tata4D are bound by contractual data processing agreements requiring compliance with applicable data protection standards.

Tata4D operates servers and engages service providers across multiple jurisdictions. As a result, your Personal Data may be transferred to, stored in, or processed in countries outside of Malaysia. Such transfers are carried out only where adequate safeguards are in place to protect your data, including:

• Transfers to jurisdictions that provide a level of data protection recognised as adequate under applicable regulatory standards;
• Implementation of standard contractual clauses or equivalent legally recognised transfer mechanisms with recipient entities;
• Binding corporate rules where data is transferred within a group of companies subject to common governance standards.

By using the Tata4D Platform and consenting to this Privacy Policy, you acknowledge and consent to the transfer of your Personal Data to the destinations and under the safeguards described above.

Tata4D reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing activities, applicable law, or regulatory requirements. Where amendments are material — meaning they significantly affect the way in which we collect, use, or share your Personal Data — we will provide advance notice to all registered Members by publishing the updated Policy on the Platform and, where practicable, by sending a notification to your registered email address.

The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. We encourage Members to review this Policy periodically to remain informed of how we protect and process their Personal Data. Your continued use of the Platform following the publication of a revised Policy constitutes your acceptance of the updated terms.

If you have any questions, requests, or concerns regarding this Privacy Policy or the way in which Tata4D processes your Personal Data, please contact us through the following channel:

• Data Protection Enquiries: [email protected] (plain text — not a clickable link)
• Subject Line: Please use "Privacy Policy Enquiry" or "Data Subject Request" as your email subject for prompt routing
• Support Hours: Monday – Sunday, 9:00 AM – 11:00 PM (MYT)
• Average Response Time: Under 2 hours for general enquiries; up to 30 days for formal data subject requests

Our team handles all privacy-related correspondence with care and confidentiality. We serve Members across Malaysia — from Kuala Lumpur and Petaling Jaya to Penang, Johor Bahru, Shah Alam, and beyond — and are committed to addressing every enquiry thoroughly and promptly.