Kumbang4D Privacy Policy

This Privacy Policy ("Policy") is issued by Kumbang4D ("we", "us", "our", "the Platform"), the operator of the online casino and sports betting platform accessible at https://kumbang4d.cam. This Policy describes how we collect, use, store, share, and protect the personal data of individuals ("you", "the User", "the Player") who access or use our Platform.

This Policy applies to all personal data we process in connection with your registration, account operation, deposits and withdrawals, game play, customer support interactions, and any other activity undertaken through our Platform. It should be read alongside our Terms & Conditions and Responsible Gambling Policy, both of which form part of the agreement between you and Kumbang4D.

By registering an account or using the Platform in any capacity, you acknowledge that you have read and understood this Policy and that you consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue use of the Platform and contact us to close your account.

The following definitions apply throughout this Policy:

Kumbang4D collects the following categories of personal data in connection with your use of the Platform:

3.1 Registration & Identity Data

• Full legal name as it appears on your government-issued identification;
• Date of birth (to verify that you meet the 21+ age requirement);
• Email address and mobile phone number;
• Username and hashed password (passwords are never stored in plain text);
• Residential address, including city (e.g., Kuala Lumpur, Penang, Johor Bahru, Shah Alam, or Petaling Jaya) and postcode.

3.2 KYC & Verification Data

• Copy of government-issued photo identification (MyKad, passport, or equivalent);
• Proof of address documentation where required;
• Selfie or liveness-check image where requested for enhanced verification.

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records, amounts, timestamps, and method used (e.g., Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, Boost, GrabPay, BTC, USDT);
• Payment method identifiers (e.g., masked bank account number, e-wallet reference ID) — full payment credentials are processed by PCI-compliant third-party gateways and are not stored on Kumbang4D servers.

3.4 Gaming & Betting Activity Data

• Game sessions, bet amounts, outcomes, and account balance history;
• Sports betting selections, stakes, and settlement records;
• Bonus activations, wagering progress, and promotion participation history.

3.5 Technical & Usage Data

• IP address and approximate geolocation derived from IP;
• Device type, operating system, browser type and version;
• Session timestamps, pages visited, and in-platform navigation patterns;
• Cookie identifiers as described in Section 10.

3.6 Communications Data

• Content of live chat conversations and email correspondence with our support team;
• Records of any dispute, complaint, or escalation submitted to Kumbang4D.

Personal data is collected through the following channels:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or respond to a survey or promotion;
• Automatically through your use of the Platform — via server logs, session cookies, and analytics tools that record your interactions with the Platform's pages and features;
• From third-party payment providers — transaction confirmation data returned by payment gateways including DuitNow, FPX, and e-wallet operators, necessary to confirm successful deposits and process withdrawals;
• From identity verification services — third-party KYC providers may return verification status information to us, without transmitting full document images to Kumbang4D's core systems;
• From fraud detection and security services — device fingerprinting and risk-scoring data to detect account takeover attempts and fraudulent activity.

Kumbang4D processes your personal data for the following clearly defined purposes:

We do not use your personal data for automated decision-making that produces legal or similarly significant effects without human oversight, except where strictly required for fraud prevention or AML screening.

Each instance of personal data processing is grounded in one or more of the following legal bases:

• Contractual necessity: Processing required to fulfil the contract between you and Kumbang4D — including account creation, payment processing, and service delivery.
• Legal obligation: Processing required to comply with obligations under our international gaming licence, AML regulations, and KYC requirements.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gambling monitoring, and anonymised analytics, where these interests are not overridden by your data protection rights.
• Consent: Processing for optional purposes — such as direct marketing communications — where we have obtained your explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Kumbang4D does not sell, rent, or trade your personal data. We share personal data only in the following limited circumstances:

• Payment service providers: Transaction data shared with processors including Touch 'n Go, Boost, GrabPay, DuitNow/FPX operators, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency network infrastructure, solely to process your deposits and withdrawals.
• KYC and identity verification providers: Document images and identity data shared with accredited third-party verification services to complete the KYC process required by our licence.
• Fraud prevention and security services: Device and behavioural data shared with third-party fraud detection providers to protect against account compromise and financial crime.
• Game software providers: Minimum necessary data (e.g., Player ID, session token) shared with licensed game studios whose content is delivered through the Platform, strictly for game session management.
• Regulatory and law enforcement bodies: Personal data disclosed in response to a valid court order, regulatory request, or law enforcement demand, where we are legally required to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of our business, personal data may be transferred to the acquiring entity subject to equivalent data protection obligations.

Kumbang4D operates under international gaming licensing and its infrastructure includes servers and service providers located outside Malaysia. Your personal data may be transferred to, stored in, and processed in jurisdictions outside of Malaysia, including the European Economic Area, Singapore, and the jurisdiction of our gaming licence authority.

Where personal data is transferred internationally, we ensure appropriate safeguards are in place, which may include:

• Standard contractual clauses approved by relevant data protection authorities;
• Processing agreements with service providers that contractually mandate equivalent data protection standards;
• Transfers to jurisdictions with recognised adequacy determinations where applicable.

If you have questions about the specific safeguards applied to international transfers of your data, please contact our support team via live chat.

Kumbang4D retains personal data only for as long as is necessary for the purposes described in this Policy, or as required by applicable law and our licensing obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Data subject to an ongoing legal hold — such as a regulatory investigation — will be retained until that hold is lifted.

Kumbang4D uses cookies and similar technologies to ensure the platform functions correctly, maintain your session security, and collect basic anonymised usage analytics. The following types of cookies are deployed:

• Strictly necessary cookies: Required for session authentication and secure login. These cannot be disabled without breaking core platform functionality.
• Security cookies: Used for CSRF protection, bot detection, and fraud prevention. These are essential to the integrity of your account.
• Analytics cookies: Used to collect anonymised data on page performance and navigation patterns to help us improve the Platform. No personally identifiable information is transmitted through these cookies.
• Preference cookies: Store your in-platform preferences such as language, odds format, and display settings.

We do not use third-party advertising cookies, retargeting cookies, or cross-site tracking technologies. You may manage cookie preferences through your browser settings; however, disabling strictly necessary or security cookies may impair your ability to use the Platform.

Kumbang4D implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include:

• Encryption in transit: All data transmitted between your device and our servers is encrypted using TLS 1.2 or higher (256-bit SSL);
• Encryption at rest: Personal data and financial records stored in our databases are encrypted using AES-256 or equivalent;
• Password hashing: Account passwords are stored using a one-way cryptographic hash function with a unique salt. We never store passwords in plain text and our support agents cannot retrieve your password;
• Access controls: Access to personal data is restricted to Kumbang4D personnel on a strict need-to-know basis. All access is logged and audited;
• Two-factor authentication: 2FA is available on all accounts and is required for certain high-privilege administrative functions;
• Penetration testing: Our platform undergoes regular security assessments conducted by independent third parties;
• Incident response: Kumbang4D maintains a documented data breach response procedure. In the event of a breach affecting your personal data, we will notify you in a timely manner consistent with our obligations under applicable law.

Subject to applicable law and the conditions of our licensing obligations, you hold the following rights with respect to your personal data held by Kumbang4D:

• Right of Access: You may request a copy of the personal data we hold about you, together with information about how it is being processed.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data. For minor corrections (e.g., contact details), this can be done directly within your account settings. For identity data, a formal request and supporting documentation may be required.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes it was collected, or where you withdraw consent and no other legal basis applies. Note that data subject to regulatory retention obligations cannot be erased until the relevant retention period has expired.
• Right to Restriction of Processing: You may request that we temporarily restrict processing of your data — for example, while a rectification request is pending verification.
• Right to Data Portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format, where the processing is based on your consent or contractual necessity.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including direct marketing. Where you object to direct marketing, we will cease that processing immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing prior to the withdrawal.

To exercise any of these rights, contact our support team via 24/7 live chat or by email at [email protected]. We will respond to valid requests within a reasonable timeframe, typically within 30 days. We may need to verify your identity before processing certain requests.

The Kumbang4D platform is strictly prohibited to individuals under the age of 21 years. We do not knowingly collect personal data from any person below this age threshold. If we become aware that an Account has been registered by, or on behalf of, an individual under 21, we will immediately close that Account and delete all associated personal data, except where retention is required for regulatory or legal compliance purposes.

If you are a parent or guardian and you believe your child has registered an Account or provided personal data to Kumbang4D, please contact us immediately via live chat so that we can take prompt action.

Kumbang4D reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform functionality. The effective date at the top of this page reflects the date of the most recent revision.

Where a material change is made to this Policy, we will notify active Players via on-site notification or email to the address registered on your Account. Your continued use of the Platform following the effective date of any updated Policy constitutes your acceptance of the revised terms.

We encourage you to review this Policy periodically. If you disagree with any update, you may close your Account by contacting our support team and any outstanding real money balance will be processed for withdrawal subject to KYC requirements.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact Kumbang4D through the following channels:

We take all privacy concerns seriously. If you are not satisfied with our response to a privacy complaint, you may escalate the matter to the relevant data protection supervisory authority in the jurisdiction applicable to you.