Privacy Policy
key4d is committed to protecting your personal data. This Privacy Policy explains what information we collect, why we collect it, how we use it, and what rights you have as a player. We believe transparency about data is a core part of being a trustworthy platform.
We never sell your personal data to third parties for marketing.
All data is encrypted in transit and at rest using 256-bit SSL.
You can request access, correction, or deletion of your data at any time.
KYC data is collected for compliance only — not for profiling or ads.
- 01 Introduction
- 02 Definitions
- 03 Data Controller
- 04 Data We Collect
- 05 How We Use Your Data
- 06 Legal Basis for Processing
- 07 Data Sharing & Disclosure
- 08 Data Retention
- 09 Data Security
- 10 Cookies & Tracking
- 11 International Transfers
- 12 Your Data Rights
- 13 Minors & Age Restriction
- 14 Policy Amendments
- 15 Contact Us
01 Introduction
This Privacy Policy ("Policy") is issued by key4d ("key4d", "we", "us", "our"), the operator of the online betting and gaming platform accessible at https://key4d.click (the "Platform"). This Policy applies to all individuals who register an account, access the Platform, or use any Services provided by key4d, including sports betting, live casino, 4D lottery, slot games, and customer support.
key4d is committed to protecting the privacy and personal data of every player on the Platform. We handle personal information only for legitimate, defined purposes — primarily to operate the Platform, verify player identities, process payments in Malaysian Ringgit (MYR), comply with anti-money laundering (AML) obligations, and provide customer support to Malaysian players and beyond.
This Policy should be read in conjunction with our Terms & Conditions, which are available at key4d Terms & Conditions. By creating an account or using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.
02 Definitions
For the purposes of this Privacy Policy, the following terms carry the meanings set out below:
- "Personal Data" means any information that identifies or can reasonably be used to identify a natural person, whether directly or indirectly — including name, identification number, contact details, financial information, and online identifiers.
- "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, transfer, deletion, or destruction.
- "Data Subject" means the individual to whom Personal Data relates — in this context, the registered Player or visitor to the Platform.
- "Data Controller" means the entity that determines the purposes and means of processing Personal Data. In this context, key4d is the Data Controller.
- "KYC" (Know Your Customer) means the identity and age-verification process that key4d is required to conduct before activating withdrawal privileges on a Player's account.
- "Cookies" means small text files stored on your device by the Platform to record session data, preferences, and usage behaviour.
- "Third-Party Processor" means an external service provider engaged by key4d to perform specific data-processing functions, such as payment processing or fraud detection, subject to data-sharing restrictions.
03 Data Controller
key4d acts as the Data Controller for all Personal Data collected through the Platform. As Data Controller, key4d determines the purposes for which your Personal Data is processed and the means by which it is processed.
key4d operates under an international online gaming licence and is subject to the data protection and AML compliance obligations imposed by that licence. Data protection queries and subject access requests may be directed to our support team using the contact details set out in Section 15 of this Policy.
Where key4d engages Third-Party Processors — such as payment gateway providers handling Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and cryptocurrency transactions — those processors are bound by data processing agreements that restrict their use of your Personal Data to the specific function for which they were engaged.
04 Personal Data We Collect
key4d collects Personal Data from you through several channels and at various stages of your engagement with the Platform. The categories of data we collect are as follows:
4.1 Registration Data
When you create an account, we collect:
- Full legal name as it appears on your government-issued identification;
- Date of birth (for age-verification purposes — you must be 21 or older);
- Email address and/or mobile phone number;
- Residential address (Malaysian address for MYR account holders);
- Username and encrypted password credentials.
4.2 KYC Verification Data
To comply with our licensing obligations and to protect against fraud and money laundering, we collect:
- Copy of government-issued photo identification (Malaysian IC / MyKad, passport, or equivalent);
- Proof of residential address (utility bill, bank statement, or official correspondence dated within 3 months);
- Payment method ownership evidence (e.g., screenshot of Touch 'n Go eWallet account or bank statement confirming account name);
- Source-of-funds documentation where required for high-value accounts.
4.3 Financial Transaction Data
When you make deposits or request withdrawals, we collect transaction records including:
- Transaction amounts, dates, and reference numbers;
- Payment method identifiers (e.g., partial account numbers, e-wallet IDs);
- Currency (MYR or USDT TRC20) and conversion records where applicable.
4.4 Platform Usage Data
As you use the Platform, we automatically collect:
- IP address, device type, browser type, and operating system;
- Session duration, pages visited, and features accessed;
- Betting and gaming history, including wagers placed, outcomes, and bonus redemptions;
- Click and navigation data via cookies and similar technologies.
4.5 Customer Support Data
When you contact our support team via live chat, we retain records of your queries, our responses, and any attachments or screenshots shared during the interaction. This data is used to resolve issues and improve service quality.
05 How We Use Your Personal Data
key4d uses the Personal Data we collect exclusively for the following defined purposes:
| Purpose | Data Used | Basis |
|---|---|---|
| Account creation and management | Registration data, credentials | Contract performance |
| Age and identity verification (KYC) | KYC documents, date of birth | Legal obligation |
| Payment processing and withdrawal verification | Financial transaction data, payment method data | Contract performance |
| AML monitoring and fraud prevention | Transaction data, usage data, KYC records | Legal obligation, legitimate interest |
| Customer support and dispute resolution | Support interaction records, account data | Contract performance, legitimate interest |
| Responsible gambling monitoring and intervention | Betting history, usage patterns, self-declared limits | Legal obligation, legitimate interest |
| Platform analytics and performance improvement | Aggregated, anonymised usage data | Legitimate interest |
| Service communications (security alerts, account notices) | Email address, mobile number | Contract performance |
| Regulatory reporting and audit compliance | KYC records, financial transaction data | Legal obligation |
key4d does not use your Personal Data to build advertising profiles, sell data to third-party marketers, or make automated decisions that produce legal or similarly significant effects on your account without human oversight.
06 Legal Basis for Processing
key4d processes your Personal Data on the following legal bases:
- Contract Performance: Processing necessary to provide the Services you have requested — including account management, payment processing, and customer support.
- Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC identity verification, AML reporting obligations, and responsible gambling record-keeping.
- Legitimate Interest: Processing that serves key4d's legitimate business interests, provided those interests are not overridden by your privacy rights — including fraud detection, platform security, and service quality analytics.
- Consent: Where we rely on your consent (for example, for optional promotional communications), you may withdraw that consent at any time by contacting our support team.
07 Data Sharing & Disclosure
7.1 Third-Party Processors
key4d shares Personal Data with the following categories of Third-Party Processors, strictly on a need-to-know basis and subject to written data processing agreements:
- Payment gateway providers — including processors for Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and USDT TRC20 transactions, who receive transaction data and account identifiers necessary to process your payment;
- Identity verification providers — KYC technology partners who process your identification documents to confirm age and identity;
- Fraud detection services — systems that analyse transaction and usage patterns for indicators of fraud or AML risk;
- Customer support infrastructure — live chat and ticketing platforms used to deliver and record support interactions;
- Cloud hosting and security providers — infrastructure providers responsible for secure storage and delivery of the Platform.
7.2 Regulatory and Legal Disclosure
key4d may disclose Personal Data to regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, court order, or our licensing conditions. In such cases, key4d will disclose only the minimum information required.
7.3 No Sale of Personal Data
key4d does not sell, rent, or trade your Personal Data to any third party for their own marketing, advertising, or commercial purposes. This is an absolute policy.
08 Data Retention
key4d retains your Personal Data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our licensing conditions. The following retention guidelines apply:
- Account and KYC records: Retained for a minimum of five (5) years from the date of account closure, in accordance with AML record-keeping requirements;
- Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction;
- Betting and gaming history: Retained for a minimum of three (3) years from the date of the relevant session or wager;
- Customer support records: Retained for two (2) years from the date of the support interaction;
- Cookies and session data: Session cookies are deleted when you close your browser; persistent cookies expire after a maximum of twelve (12) months unless cleared earlier.
Where you request deletion of your Personal Data prior to the expiry of the applicable retention period, key4d will retain only the minimum data required to comply with its legal obligations and will restrict all other processing.
09 Data Security
key4d employs a range of technical and organisational security measures to protect your Personal Data against unauthorised access, loss, alteration, or disclosure. These measures include:
- 256-bit SSL/TLS encryption for all data transmitted between your device and our servers;
- Encryption at rest for sensitive data fields including KYC documents and financial records;
- Access controls and role-based permissions restricting staff access to Personal Data on a strict need-to-know basis;
- Two-factor authentication (2FA) available for all player accounts and required for staff with access to player data;
- Regular security audits and penetration testing conducted by independent third parties;
- Incident response procedures to detect, contain, and notify affected parties in the event of a data breach within applicable regulatory timeframes.
10 Cookies & Tracking Technologies
10.1 What Are Cookies?
Cookies are small text files that the Platform stores on your device when you visit. They allow the Platform to remember your preferences, maintain your login session, and analyse how different parts of the site are used.
10.2 Types of Cookies We Use
- Strictly Necessary Cookies: Required for the Platform to function — including session management, security tokens, and login state. These cannot be disabled without impairing core functionality.
- Functional Cookies: Remember your preferences (e.g., language, display settings) to improve your experience across sessions.
- Analytics Cookies: Collect aggregated, anonymised data about how players interact with the Platform, helping us improve navigation, performance, and content.
- Security Cookies: Used by our fraud detection systems to identify unusual session patterns or suspicious activity on your account.
10.3 Cookie Management
You may manage or disable non-essential cookies through your browser settings. Note that disabling cookies may affect the functionality of certain features of the Platform. Strictly necessary cookies cannot be disabled without breaking core Platform operations.
11 International Data Transfers
key4d's primary operational infrastructure is hosted in secure data centres. Some of our Third-Party Processors may process or store data in jurisdictions outside Malaysia. Where Personal Data is transferred internationally, key4d ensures that:
- The receiving jurisdiction provides an adequate level of data protection, or
- Appropriate contractual safeguards (such as standard contractual clauses) are in place between key4d and the Third-Party Processor to govern the transfer, or
- The transfer is necessary for the performance of a contract with you (e.g., processing a payment via an international e-wallet gateway).
key4d does not transfer KYC documentation or sensitive financial data to jurisdictions that lack adequate legal frameworks for data protection without the safeguards described above.
12 Your Data Rights
As a Data Subject, you have the following rights in relation to your Personal Data held by key4d. To exercise any of these rights, please contact our support team using the details in Section 15.
- Right of Access: You may request a copy of the Personal Data key4d holds about you. We will respond within 30 days of receiving a valid request.
- Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you may request that we correct it.
- Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
- Right to Restriction of Processing: You may request that we restrict processing of your Personal Data in certain circumstances — for example, while a correction request is being reviewed.
- Right to Data Portability: Where processing is based on your consent or a contract, you may request that we provide your Personal Data in a structured, machine-readable format.
- Right to Object: You may object to processing based on legitimate interest. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your rights.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
13 Minors & Age Restriction
key4d's Services are strictly intended for individuals aged 21 years and above. We do not knowingly collect, store, or process Personal Data belonging to individuals under the age of 21. All account registrations include a mandatory age declaration, and KYC verification confirms date of birth before withdrawal privileges are activated.
If key4d becomes aware that Personal Data has been collected from a person under the age of 21, we will immediately suspend the associated account, erase the relevant Personal Data (subject to any overriding legal obligations), and — where applicable — report the matter to the relevant regulatory authority.
If you believe that key4d has inadvertently collected data from a minor, please contact us immediately using the details in Section 15 so that we can take prompt remedial action.
14 Amendments to This Policy
key4d reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or the Services we offer. The most current version of this Policy will always be accessible at https://key4d.click/privacy-policy, with the revision date updated accordingly.
Where amendments are material — meaning they significantly change how we process your Personal Data or affect your rights as a Data Subject — key4d will notify registered Players via email or on-platform notification prior to the changes taking effect, providing a reasonable period to review the revised Policy.
Your continued use of the Platform following the effective date of any amendment constitutes your acknowledgement and acceptance of the revised Privacy Policy. If you do not agree to an amendment, you should cease using the Platform and may request account closure in accordance with the Terms & Conditions.
15 Contact Us
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact key4d using the following channels:
- Live Chat: Available daily from 9:00 AM to 3:00 AM MYT via the on-platform support widget. Our Malaysia-based team typically responds within 5 minutes during operating hours.
- Email (non-clickable): [email protected]
Subject Access Requests and formal data rights exercises should be submitted in writing (via email) with the subject line "Data Rights Request — [Your Registered Account Email]". Please include sufficient information for us to verify your identity. We will acknowledge your request within 3 business days and respond substantively within 30 days.
key4d's Data Protection Commitments
These are the practical standards key4d upholds every day to ensure your personal data is handled responsibly and securely.
End-to-End Encryption
All data transmitted between your device and key4d's servers is protected by 256-bit SSL/TLS encryption. Sensitive records are also encrypted at rest in our secure data infrastructure.
Zero Data Selling Policy
key4d has never sold and will never sell your personal data to third-party advertisers, data brokers, or marketing platforms. Your information exists on our platform to serve you — no one else.
KYC for Your Protection
Identity verification is not just a regulatory formality. KYC ensures that no one else can access your funds or withdraw to a different payment method — protecting you as much as us.
AML & Fraud Monitoring
Automated and manual monitoring systems run continuously to detect unusual activity. This protects the integrity of the platform and the safety of every player's account and funds.
Minimal Data Collection
We collect only the data genuinely required to operate the Platform, comply with regulations, and serve you as a player. No unnecessary data fields, no speculative collection for future use.
Responsive to Your Rights
Submit a data access, correction, or deletion request and our team will acknowledge within 3 business days and respond substantively within 30 days — no unnecessary delays.
Your Data Rights at a Glance
Right of Access
Request a copy of all Personal Data key4d holds about you. We'll send a full data summary within 30 days of a verified request.
Right to Rectification
Found an error in your account data? Request a correction at any time. Accurate data benefits both of us.
Right to Erasure
Request deletion of your data where it is no longer required. Some data may be retained to meet our legal obligations — we'll explain what and why.
Right to Restrict Processing
Ask us to limit how we use your data in certain circumstances — for instance, while a correction request is being reviewed.
Right to Data Portability
Request your data in a structured, machine-readable format where processing is based on contract or consent.
Right to Withdraw Consent
Where we rely on your consent to process data, you can withdraw it at any time. This won't affect past processing that was lawfully carried out.
To exercise any of your data rights: Contact our support team via live chat (9:00 AM – 3:00 AM MYT daily) or email us at [email protected] with the subject line "Data Rights Request". We will verify your identity and respond within 30 days.
Questions About Your Privacy?
Our Malaysia-based support team can help with data requests, account queries, and anything else on your mind. We're available daily from 9:00 AM to 3:00 AM MYT via live chat.
For players aged 21 and above only. Gambling involves financial risk — please play responsibly.