Privacy Policy form4 – Your Personal Data Protection

1Introduction

Form4 takes its responsibility to protect members' privacy extremely seriously. As an online gaming platform operating in Malaysia, we are subject to the Personal Data Protection Act 2010 (PDPA) and comply with all legal requirements relating to personal data management.

This Privacy Policy is intended to give you complete clarity on the data management practices adopted by form4. We believe transparency is not merely a legal obligation — it is the foundation of the trust we build with every member on our platform.

When you register as a form4 member, make a deposit via Touch 'n Go eWallet or GrabPay, play slots or live casino, or simply browse our website, certain data is collected to keep the platform running smoothly and to deliver the best experience to you.

We do not sell, rent, or exploit your personal data for any third-party commercial gain. All data you share with form4 is used solely for the purposes stated in this Privacy Policy.

2Personal Data We Collect

Form4 collects two main categories of data: information you provide directly, and data collected automatically while you use our platform.

Data you provide directly:

• Full name as stated on your MyKad or valid identification document
• National identification number (MyKad) or passport number for identity verification (KYC) purposes
• Date of birth for age verification – you must be at least 18 years old
• An active Malaysian mobile phone number
• A valid and active email address
• Current residential address in Malaysia
• Malaysian bank account or eWallet details (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, CIMB Clicks) for deposit and withdrawal processing
• Supporting documents uploaded for KYC verification purposes, such as MyKad photos and bank statements

Data collected automatically:

• IP address and network information
• Device type, operating system, and web browser version in use
• Pages visited within the form4 platform and time spent on each visit
• Gaming activity history, including games played, bet amounts, and outcomes
• Financial transaction history within the platform
• Cookie and similar tracking technology data
• Communication logs with the form4 support team

3How Your Personal Data Is Used

Form4 uses the data collected for a range of legitimate and necessary purposes in operating the platform. Below is a detailed breakdown of how each category of data is used:

• Account Management: Your identity and contact information is used to create and manage your form4 account, including the login process, password recovery, and transaction verification.
• Financial Transaction Processing: Your bank account and eWallet information is used to process deposits and withdrawals securely. We do not store your full credit or debit card details.
• Identity Verification (KYC): Identity data is used to verify member eligibility, confirm that you are at least 18 years of age, and comply with anti-money laundering legal requirements.
• Platform Security: Technical data such as IP addresses and device information is used to detect and prevent unauthorised access, fraud, and suspicious activity on your account.
• Service Improvement: Platform usage data is analysed in aggregate to help us understand how users interact with form4 and to continuously improve the overall playing experience.
• Service Communications: Your email address and phone number are used to send important account notifications, transaction confirmations, and security updates. This is separate from marketing communications.
• Responsible Gaming: Your gaming activity history is monitored to detect signs of potential gambling problems and to provide appropriate assistance where needed.
• Legal Compliance: Certain data is retained to fulfil legal obligations under Malaysian law, including financial record-keeping requirements.

4Sharing Data with Third Parties

Form4 does not sell or transfer your personal data to third parties for independent marketing purposes. However, there are specific situations where your data may need to be shared with selected parties to ensure the platform functions properly:

• Payment Providers: Transaction information that must be shared with payment processors such as the FPX gateway, eWallet providers, and Malaysian banking institutions (Maybank, CIMB) in order to process your deposits and withdrawals.
• Technology Service Providers: Companies that provide form4 with technical infrastructure, including server hosting, cybersecurity, and platform analytics services. All such parties are bound by strict confidentiality agreements.
• Identity Verification Providers: Third-party KYC services that assist in verifying member identities in accordance with Malaysian legal requirements.
• Regulatory Authorities: form4 may be legally required to disclose certain data to Malaysian authorities such as Bank Negara Malaysia, the Financial Intelligence Unit (FIU), or law enforcement agencies upon lawful request.
• Business Transfers: In the event of a merger, acquisition, or business asset transfer, member data may be transferred as part of that process. Members will be notified in advance in such circumstances.

5Data Security

Protecting members' personal data is among form4's highest priorities. We continually invest in the latest security technologies and procedures to keep your data safe at all times.

Key security measures employed by form4 include:

• 256-bit SSL Encryption: All communications between your browser and form4's servers are encrypted using the latest SSL/TLS protocols, ensuring no third party can intercept your data in transit.
• Secure Password Storage: Member passwords are never stored in plain text. We use robust cryptographic hashing algorithms to protect your login credentials.
• Two-Factor Authentication (2FA): form4 supports two-factor authentication to add an extra layer of protection to your account.
• 24/7 Security Monitoring: An automated monitoring system operates around the clock to detect and respond to any suspicious activity or intrusion attempts.
• Data Segregation: Sensitive data such as financial information is stored in an isolated environment with strict access controls.
• Regular Audits: form4's security systems undergo independent audits on a regular basis to ensure compliance with international security standards.

While we take all reasonable precautions, no online system can guarantee absolute security. You also have a responsibility to protect your account by using a strong password and never sharing your form4 login credentials with anyone.

6Cookies and Tracking Technologies

Form4 uses cookies and similar tracking technologies to enhance the user experience and ensure certain platform features function correctly.

Types of cookies used by form4:

• Essential Cookies: Required for core platform functions such as login session management and language preferences. These cookies cannot be disabled as they are essential to the platform's basic functionality.
• Performance Cookies: Collects information on how visitors use the form4 platform, such as the most frequently visited pages. This data is used to improve platform performance and design.
• Functional Cookies: Allows the form4 platform to remember your preferences, such as your username and language settings, to deliver a more personalised experience.
• Analytics Cookies: Used to understand platform usage behaviour in aggregate, anonymised form for form4's internal analytics purposes.

You can manage cookie settings through your web browser preferences. However, disabling certain cookies may affect the functionality of the form4 platform and your gaming experience. For more information on managing cookies, refer to your web browser's help documentation.

7Data Storage & Deletion

Form4 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required by Malaysian law.

The data retention periods applied by form4 are as follows:

• Active Account Data: Retained for as long as your account remains active and you continue to use the form4 platform.
• Data After Account Closure: Following account closure, core data is retained for 7 years in compliance with Malaysia's financial and tax legislation.
• Financial Transaction Data: Complete records of all transactions are retained for a minimum of 7 years in accordance with anti-money laundering legal requirements.
• Support Communication Data: Chat logs with the form4 support team are retained for 3 years for service quality and dispute resolution purposes.
• Technical Log Data: Server logs and technical data are retained for a maximum of 12 months for security purposes and technical troubleshooting.

Once the retention period expires, your data will be securely deleted or anonymised so that it can no longer be linked to your identity.

8Your Rights Regarding Personal Data

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have several important rights regarding your personal data held by form4. We fully respect these rights and will handle all requests carefully and within a reasonable timeframe.

• Right of Access
  You have the right to request a copy of the personal data form4 holds about you. We will provide this information in a clear, readable format within 21 business days of receiving your request.
• Right to Rectification
  If you find that any personal data held by form4 is inaccurate, incomplete, or out of date, you have the right to request a correction. You can update much of your information directly through your form4 account settings.
• Right to Erasure
  In certain circumstances, you may request that form4 delete your personal data. This right is subject to our legal obligations and any active contractual requirements. form4 will assess each request on a case-by-case basis.
• Right to Object to Processing
  You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing for other purposes in certain circumstances provided for under the law.
• Data Portability Rights
  You have the right to receive your personal data in a structured, machine-readable format and to transfer it to another service provider where applicable.
• Right to Lodge a Complaint
  If you believe that form4 has violated your privacy rights, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia or directly with the form4 privacy team.

To exercise any of the rights above, please contact us at [email protected] with the subject line "Privacy Rights Request". Please include your full name and form4 account number to help us process your request promptly.

9Child Protection

The form4 platform is strictly for individuals aged 18 and above. We do not knowingly collect, process, or store personal data from individuals under the age of 18.

If we discover that personal data belonging to someone under the age of 18 has been collected inadvertently, we will take immediate steps to delete that data and close the relevant account. Any winnings obtained through that account will be forfeited.

10Privacy Policy Amendments

Form4 reserves the right to amend this Privacy Policy from time to time to reflect changes in our business practices, updated legal requirements, or technological developments. We are committed to keeping members informed of any material changes.

Should there be any significant changes to this Privacy Policy, form4 will:

• Updating the "Last Updated" date at the top of this page
• Sending email notifications to all registered members regarding material changes
• Displaying a clear notice within the form4 platform for a minimum of 14 days before the changes take effect

Your continued use of the form4 platform following any changes to the Privacy Policy will be considered acceptance of the updated policy. We encourage you to review this page periodically.

Any enquiries regarding this Privacy Policy may be directed to: [email protected]. The form4 privacy team will endeavour to respond to all enquiries within 3 business days.