Privacy Policy

This Privacy Policy ("Policy") is issued by Kamboja4d ("Company", "we", "us", "our"), the operator of the online gaming platform accessible at kamboja4d.cam ("Platform"). This Policy describes how Kamboja4d collects, receives, uses, stores, discloses, transfers, and otherwise processes personal data relating to users of the Platform ("User", "Player", "you", "your").

Kamboja4d is committed to protecting the privacy and personal data of all users, with particular regard to Malaysian players whose information is processed in connection with their use of the Platform. We recognise that trust is foundational to our relationship with players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and throughout Malaysia.

By accessing, registering on, or using the Platform in any capacity, you acknowledge that you have read and understood this Policy, and you consent to the collection and processing of your personal data as described herein. If you do not agree to the terms of this Policy, you must discontinue use of the Platform immediately.

The following definitions apply throughout this Policy:

Kamboja4d collects the following categories of personal data from Players. We apply the principle of data minimisation — we collect only what is necessary for the stated purpose.

Kamboja4d collects personal data through the following channels:

• Direct Submission: Data you actively provide when registering an account, completing KYC verification, making deposits or withdrawal requests, contacting customer support, or participating in promotions.
• Automated Technical Collection: Data collected automatically during your use of the Platform, including IP addresses, device identifiers, session logs, and browser information via server logs and cookies (see Section 8).
• Third-Party Payment Processors: Transaction confirmation and status data received from Malaysian payment partners including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, and Public Bank, strictly limited to what is necessary to confirm and reconcile your transactions.
• Identity Verification Services: Where applicable, data received from third-party KYC verification providers used to authenticate the identity documents you submit.
• Game Providers: Session and wagering data transmitted from third-party game providers integrated into the Platform, used to maintain accurate game history and account balances.

Kamboja4d processes your personal data solely for the following documented purposes. We do not use your data for any purpose not listed below without first obtaining your explicit consent or as required by law.

• Account Administration: Creating and maintaining your Kamboja4d account, processing deposits and withdrawals in MYR and cryptocurrency, managing account settings and security.
• KYC and Age Verification: Confirming that you are at least 21 years of age and that your identity is genuine, as required for regulatory compliance and responsible gambling purposes.
• Payment Processing: Facilitating deposits via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, and Public Bank, as well as cryptocurrency deposits and withdrawals in USDT TRC20, BTC, and ETH.
• Fraud Prevention and Anti-Money Laundering: Monitoring transactions and account behaviour to detect and prevent fraudulent activity, money laundering, and other financial crimes, as mandated by applicable regulations.
• Customer Support: Responding to queries, resolving disputes, and providing technical assistance through live chat and email communications.
• Platform Improvement: Analysing aggregated and anonymised usage data to improve the performance, features, and user experience of the Platform.
• Responsible Gambling: Monitoring wagering patterns to identify potential problem gambling behaviour and to enforce deposit limits, self-exclusion requests, and other responsible gambling controls that Players have requested.
• Legal and Regulatory Compliance: Retaining records, responding to regulatory enquiries, and cooperating with law enforcement or government authorities where required by applicable law.
• Marketing Communications (with consent): Where you have opted in to receive promotional communications, sending you information about bonuses, new games, and special offers. You may withdraw consent at any time.

Kamboja4d processes personal data on the following legal bases, in accordance with applicable data protection principles:

• Contractual Necessity: Processing of identity, financial, and account data that is necessary to perform the contract between Kamboja4d and the Player — including account management, payment processing, and game service delivery.
• Legal Obligation: Processing required to comply with applicable laws, including KYC and anti-money laundering obligations, age verification requirements (21+), and responses to lawful regulatory or law enforcement requests.
• Legitimate Interests: Processing carried out for fraud prevention, platform security, customer support quality assurance, and the responsible gambling monitoring programme, where such interests are balanced against and do not override the rights and interests of the data subject.
• Consent: Processing of data for optional marketing communications, where the Player has affirmatively opted in. Consent may be withdrawn at any time without affecting the lawfulness of processing prior to withdrawal.

Kamboja4d does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. We may share your personal data in the following limited circumstances:

• Payment Processors: We share the minimum necessary transaction and identity data with Malaysian payment partners — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, and Public Bank — to facilitate deposits and withdrawals. These entities process data under their own privacy policies and are bound by financial services data protection obligations.
• Game Technology Providers: Game session data is shared with third-party game engine providers integrated into the Platform to maintain accurate game state and wagering history. These providers operate as data processors under contractual data processing agreements.
• KYC Verification Partners: Where third-party identity verification services are used to authenticate KYC documents, the relevant identity data is shared for the sole purpose of verification and is not retained by the provider beyond the verification process.
• Regulatory and Law Enforcement Authorities: Kamboja4d may disclose personal data to government bodies, regulators, or law enforcement agencies where required to do so by law, court order, or binding regulatory directive.
• Corporate Transactions: In the event of a merger, acquisition, or sale of substantially all of the Company's assets, personal data held by Kamboja4d may be transferred to the successor entity, subject to equivalent privacy protections.

Kamboja4d uses cookies and similar tracking technologies to deliver and improve the Platform. Cookies are small data files stored on your device that help us maintain session continuity, remember your preferences, and gather analytical information about how the Platform is used.

You may manage cookie preferences through your browser settings. Disabling essential cookies will impair the core functionality of the Platform, including the ability to remain logged in during a gaming session. Disabling analytics cookies will not affect your ability to use the Platform but will reduce our ability to identify and resolve usability issues.

Kamboja4d retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of the active account relationship and for a period of not less than five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of seven (7) years following each transaction, as required by applicable financial regulations.
• KYC Verification Documents: Retained for the duration of the account relationship and for a minimum of five (5) years following account closure or the date of the last transaction, whichever is later.
• Customer Support Communications: Retained for up to three (3) years from the date of the interaction, for quality assurance and dispute resolution purposes.
• Technical and Usage Logs: Retained for up to twelve (12) months for security and performance monitoring purposes, after which they are anonymised or deleted.
• Marketing Consent Records: Retained for the duration of the consent relationship and for up to three (3) years following withdrawal of consent, to demonstrate compliance.

Upon the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised, such that it can no longer be used to identify any individual.

Kamboja4d implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, and unlawful disclosure. These measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and our servers is protected by industry-standard encryption, ensuring that payment and account data cannot be intercepted in transit.
• Data Encryption at Rest: Sensitive personal data stored in our databases, including KYC documents and financial records, is encrypted at rest using strong symmetric encryption.
• Access Controls: Access to personal data within our organisation is restricted on a strict need-to-know basis. Only authorised staff with a documented operational necessity may access identifiable personal data, and all such access is logged and audited.
• Two-Factor Authentication: Player account access supports two-factor authentication as an additional layer of protection against unauthorised account access.
• Intrusion Detection and Monitoring: Our systems are continuously monitored for anomalous activity, security threats, and potential data breaches, with automated alerting to our security team.
• Penetration Testing: The Platform undergoes periodic third-party security assessments to identify and remediate vulnerabilities before they can be exploited.

As a data subject, you hold the following rights in respect of your personal data held by Kamboja4d. To exercise any of these rights, please contact us using the details provided in Section 15.

We will respond to all verifiable data subject requests within 30 days of receipt. Where a request is complex or where a large number of requests are received simultaneously, this period may be extended by a further 30 days, and we will notify you accordingly.

The Kamboja4d Platform is strictly intended for individuals who are 21 years of age or older. We do not knowingly collect, process, or retain personal data from any person under the age of 21.

Age verification is a mandatory component of the account registration and KYC process. Any account found to have been registered by a person under the age of 21 will be immediately suspended and all personal data associated with that account will be deleted in accordance with our data retention obligations, subject to any information required to be retained for regulatory compliance purposes.

If you are a parent or guardian and you believe that a minor has created an account on the Platform using your personal details or their own, please contact us immediately at the details in Section 15 so that we can take prompt remedial action.

The Kamboja4d Platform integrates third-party services necessary to deliver game content, payment processing, and security functionality. While we apply contractual due diligence to all third-party data processors, each third party operates under its own privacy policy and data protection practices. Kamboja4d is not responsible for the privacy practices of third-party services.

Malaysian payment partners — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, and Public Bank — are independent entities whose data handling in connection with your payment transactions is governed by their respective privacy policies and terms of service.

All third-party data processors engaged by Kamboja4d are required to enter into data processing agreements that impose obligations consistent with applicable data protection standards, including restrictions on sub-processing, obligations to implement appropriate security measures, and requirements to assist Kamboja4d in responding to data subject rights requests.

Kamboja4d reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or the features and services offered through the Platform. Material changes to this Policy will be communicated to registered Players via email or through a prominent notice on the Platform.

The effective date of any revision will be reflected in the "Last Updated" notice at the top of this document. We encourage you to review this Policy periodically. Your continued use of the Platform following notification of a material change constitutes your acceptance of the revised Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by Kamboja4d, please contact our support team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly on the Platform. This is the fastest channel for privacy-related queries. Average response time is under 2 minutes.
• Email: [email protected] — please include "Privacy Request" in the subject line along with your registered account email address so we can identify your record promptly. Average response time is under 2 hours.

When submitting a data subject rights request, please include sufficient information to allow us to verify your identity and locate your account records. We may request additional verification before processing a request for access, erasure, or portability to prevent fraudulent requests from third parties.

Our support team serves all Malaysian players — from Kuala Lumpur and Bangsar to Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all regions nationwide. All privacy communications are handled in English.

For matters related to responsible gambling data or self-exclusion requests, please refer to our Responsible Gambling page for dedicated guidance and contact procedures.