Privacy Policy

Introduction

This Privacy Policy ("Policy") is issued by diana4d ("diana4d", "we", "us", "our") and applies to all personal data processed in connection with your use of the website located at https://diana4d.cam and all associated services, including account registration, sports betting, 4D lottery, live casino, esports wagering, customer support, and promotional communications.

Diana4D takes data privacy seriously. We process personal data only for lawful purposes, only to the extent necessary for those purposes, and in accordance with internationally recognised data protection principles. This Policy is intended to give you clear, transparent information about how your data is handled — not to bury that information in inaccessible legal language.

By registering an Account or using the diana4d platform, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read alongside our Terms & Conditions, which govern the broader relationship between you and diana4d.

Definitions

The following definitions apply throughout this Privacy Policy:

• "Personal Data" — Any information relating to an identified or identifiable natural person. This includes name, identification number, email address, phone number, financial details, IP address, and device identifiers.
• "Processing" — Any operation performed on personal data, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" — The entity that determines the purposes and means of processing personal data. For data processed in connection with the diana4d platform, diana4d is the Data Controller.
• "Data Processor" — A third party that processes personal data on behalf of the Data Controller, under contractual instruction.
• "Player" / "User" / "You" — Any individual who has registered an Account with, or otherwise interacts with, the diana4d platform.
• "KYC" — Know Your Customer — the identity verification process required under anti-money laundering obligations before certain platform features are accessible.
• "Cookies" — Small data files placed on your device by the Platform for session management, analytics, and personalisation purposes.

Data We Collect

Diana4D collects the following categories of personal data from Players and platform visitors:

3.1 Account & Identity Data

• Full legal name (as it appears on your government-issued identity document)
• Date of birth (for age verification — 21+ requirement)
• Email address
• Mobile phone number
• Residential address (city, state, postcode — including Malaysian cities such as Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, or Shah Alam)
• Username and encrypted password

3.2 KYC & Verification Data

• Copy of government-issued photo identity document (e.g., Malaysian MyKad or passport)
• Proof of address document (utility bill or bank statement)
• Proof of payment method ownership (e.g., screenshot of e-wallet account)
• Selfie photograph for liveness verification (where required)

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records including amounts (in MYR / RM), timestamps, and payment method references
• Payment method identifiers (e.g., partial Touch 'n Go wallet ID, Boost account reference, bank account name — never full card or bank account numbers)
• Cryptocurrency wallet addresses used for USDT TRC20 or Bitcoin transactions
• Account balance history and wagering activity records

3.4 Technical & Usage Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser type
• Session logs, login timestamps, and page navigation data
• Bet placement records, game play sessions, and sports market selections

3.5 Communications Data

• Customer support interactions (live chat transcripts, email correspondence)
• Feedback, complaints, and dispute records
• Marketing preferences and communication opt-in/opt-out records

How Data Is Collected

Diana4D collects personal data through the following means:

• Direct submission: Information you provide when registering an Account, completing KYC, depositing or withdrawing funds, contacting support, or participating in promotions.
• Automated collection: Technical data collected automatically when you visit the Platform, including cookies, server logs, and analytics tools that capture usage behaviour and device information.
• Third-party sources: Where permitted and necessary, data from identity verification service providers, fraud detection agencies, and payment processors to validate KYC documents and prevent financial crime.
• Public sources: In the context of AML compliance, we may cross-reference publicly available sanctions lists and politically exposed persons (PEP) databases.

Data Processing & Use

Diana4D processes your personal data for the following specific purposes:

Diana4D will not use your personal data for any purpose other than those listed above, or for purposes that are incompatible with those listed above, without giving you prior notice and, where required, obtaining your consent.

Legal Basis for Processing

Diana4D processes personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil your Account agreement with diana4d — including account management, payment processing, and bet settlement.
• Legal obligation: Processing required to comply with applicable legal requirements, including anti-money laundering (AML) regulations, KYC obligations, and record-keeping requirements under our international gaming licence.
• Legitimate interests: Processing for fraud prevention, platform security, analytics, and product improvement — where these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for marketing communications and certain optional cookies — where you have given explicit, freely-given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

Data Sharing & Disclosure

Diana4D does not sell, rent, or trade your personal data to third parties for commercial purposes. We share personal data only in the following limited circumstances:

7.1 Service Providers (Data Processors)

We share data with carefully selected third-party service providers who process data on our behalf under strict contractual data processing agreements. These include:

• Identity verification and KYC platform providers
• Payment processing infrastructure providers (e.g., FPX gateway operators, e-wallet aggregators)
• Fraud detection and anti-money laundering screening services
• Cloud hosting and data storage providers
• Customer support platform providers
• Email and communications service providers

7.2 Regulatory & Legal Disclosures

We may disclose personal data to regulatory authorities, law enforcement agencies, or courts where we are legally required or compelled to do so. This includes responses to lawful subpoenas, court orders, or regulatory investigations.

7.3 Business Transfers

In the event of a merger, acquisition, sale of assets, or restructuring of diana4d's business, personal data may be transferred to the successor entity. You will be notified of any such transfer prior to its completion, and your data will remain subject to the privacy protections in place at the time of transfer.

Data Retention

Diana4D retains personal data for as long as is necessary to fulfil the purposes for which it was collected, and to comply with our legal and regulatory obligations. The following retention principles apply:

• Active Account data: Retained for the full duration of the Account's active status plus a minimum of five (5) years after Account closure, in accordance with anti-money laundering record-keeping requirements.
• KYC documents: Retained for a minimum of five (5) years from the date of verification or Account closure, whichever is later.
• Transaction records: Retained for a minimum of five (5) years for AML compliance purposes.
• Customer support records: Retained for three (3) years from the date of the interaction, or longer if relevant to an outstanding dispute.
• Marketing preferences: Retained until you withdraw consent or close your Account, whichever is earlier.
• Technical / log data: Typically retained for twelve (12) months from collection, unless flagged for security investigation.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised such that it can no longer be associated with an identifiable individual.

Data Security

Diana4D implements industry-standard technical and organisational security measures to protect personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• TLS 1.3 encryption for all data in transit between your device and our servers
• AES-256 encryption for personal data at rest in our databases
• Hashed and salted password storage — we never store plaintext passwords
• Two-factor authentication (2FA) available for all Player Accounts and mandatory for staff access to data systems
• Role-based access controls ensuring staff access only the minimum data necessary for their role
• Regular security audits and penetration testing by qualified independent security professionals
• Real-time anomaly detection to identify and respond to suspicious access patterns

While we maintain robust security practices, no online transmission or storage system is completely impenetrable. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the applicable regulatory authority within the timeframes required by applicable law.

Cookies & Tracking Technologies

Diana4D uses cookies and similar tracking technologies to improve your experience on the Platform, maintain session security, and analyse usage patterns. The cookies we use fall into the following categories:

10.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function. They maintain your login session, remember your language preference, and protect against cross-site request forgery (CSRF). These cookies cannot be disabled without impairing Platform functionality.

10.2 Performance and Analytics Cookies

These cookies help us understand how Players use the Platform — which features are most used, where users encounter friction, and how page load performance can be improved. Data collected through analytics cookies is aggregated and anonymous where possible.

10.3 Functional Cookies

These cookies remember your preferences — such as display settings, notification preferences, and recently viewed markets — to personalise your experience. You may disable functional cookies through your browser settings, though this may reduce personalisation.

10.4 Managing Cookies

You can control and delete cookies through your browser settings at any time. Most modern browsers (including those used on Malaysian Android and iOS devices) allow you to block third-party cookies or clear all stored cookies. Note that disabling certain cookies may affect your ability to use some features of the Platform, including maintaining a logged-in session.

User Rights

As a Player whose personal data is processed by diana4d, you hold the following rights. We will respond to valid rights requests within thirty (30) calendar days of receipt:

To exercise any of these rights, please contact us at [email protected]. We may need to verify your identity before processing a rights request to prevent unauthorised access to your data.

Minors & Age Verification

Diana4D does not knowingly collect personal data from individuals under the age of 21. The Platform is strictly restricted to players who are 21 years of age or older. Mandatory KYC identity verification is required before deposits, withdrawals, or full Account activation — this verification process confirms that every active Account holder meets the minimum age requirement.

If diana4d becomes aware that personal data has been collected from a person under 21 years of age, all data associated with that Account will be immediately deleted, the Account will be closed, and any funds will be handled in accordance with applicable law. If you are a parent or guardian and believe your child has registered an Account, please contact us immediately at [email protected].

International Data Transfers

As an internationally licensed platform, diana4d may transfer personal data to countries or territories outside of Malaysia for processing — for example, to cloud hosting providers or identity verification services based in the European Economic Area, Singapore, or other jurisdictions with recognised data protection frameworks.

Where such transfers occur, diana4d takes appropriate safeguards to ensure your data receives a level of protection equivalent to that which would apply in the originating jurisdiction. These safeguards may include contractual clauses, data processing agreements, or transfers to jurisdictions recognised as providing adequate data protection.

Third-Party Services

The diana4d platform may interface with third-party services as part of its operation — including payment gateways for Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX bank transfers (Maybank, CIMB, Public Bank, Hong Leong Bank), and cryptocurrency networks (USDT TRC20, Bitcoin). These third-party services have their own privacy policies and terms of service, which govern how they handle data.

Diana4D is not responsible for the privacy practices of third-party payment providers. When you initiate a deposit or withdrawal using a third-party payment method, your use of that service is subject to that provider's terms. We recommend reviewing the privacy policy of any third-party payment provider you use in conjunction with diana4d.

Diana4D does not embed third-party advertising networks, social media trackers, or advertising pixels on the Platform that would share your browsing behaviour with external advertisers.

Policy Amendments

Diana4D reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. When material changes are made, we will notify registered Players by email and/or via a prominent notice on the Platform prior to the changes taking effect.

The "Last Updated" date at the top of this document indicates when this Policy was most recently revised. We encourage you to review this Policy periodically to stay informed of how we protect your data. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the updated Policy.

Contact Us

If you have questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how diana4d handles your personal data, please contact our Data Privacy team:

When submitting a data rights request by email, please include your full registered name, Account username, and a clear description of your request. We may need to verify your identity before processing the request. Rights requests are handled within thirty (30) calendar days of receipt of all required information.