Privacy Policy — Gebyar4d

Introduction

This Privacy Policy ("Policy") is issued by Gebyar4d ("gebyar4d", "we", "us", "our"), the operator of the online gaming platform accessible at gebyar4d.cam. This Policy governs how we collect, use, disclose, and protect the personal data of individuals who visit, register on, or otherwise interact with our Platform.

We are committed to protecting the privacy of all our users, including registered players from across Malaysia — including those in Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Shah Alam, and other regions. We treat privacy as a core operational obligation, not merely a legal formality.

By accessing the gebyar4d Platform, creating an Account, or using any of our Services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, please discontinue your use of the Platform and contact our support team to request Account closure.

Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person — including but not limited to name, identification number, contact details, financial data, and behavioural information.
• "Processing" means any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, transmission, alteration, and deletion.
• "Data Controller" means gebyar4d, which determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" means a third party that processes personal data on behalf of gebyar4d, subject to a data processing agreement.
• "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data.
• "User" / "Player" means any individual who accesses, browses, or holds a registered Account on the gebyar4d Platform.
• "Sensitive Data" means categories of personal data that require heightened protection — such as identity document numbers, financial account details, and health-related information provided in a responsible gambling context.

Data We Collect

Gebyar4d collects personal data in several categories depending on how you interact with our Platform. The table below summarises the main categories of data we collect and the context in which they are gathered.

3.1 Data You Provide Directly

The majority of personal data we hold is provided by you directly when you register an Account, complete KYC verification, make a deposit or withdrawal, interact with our customer support team, or participate in promotions.

3.2 Data Collected Automatically

When you access the gebyar4d Platform, certain technical and behavioural data is collected automatically through server logs, session tracking, and cookies. This data is used primarily for security, fraud detection, platform performance monitoring, and responsible gambling oversight.

3.3 Data from Third Parties

We may receive personal data about you from third parties in limited circumstances — for example, from payment processors (Maybank, CIMB, Public Bank, Hong Leong Bank, FPX network operators) to confirm transaction status, or from identity verification service providers during the KYC process.

How We Process Your Data

Gebyar4d processes your personal data for the following purposes:

4.1 Account Management

We use your identity and contact data to create and manage your Account, authenticate your login sessions, communicate important account notices, and maintain accurate records of your account status and history.

4.2 Transaction Processing

Financial data is processed to facilitate deposits via Malaysian payment methods (including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX through Maybank, CIMB, Public Bank, and Hong Leong Bank) and to process withdrawal requests to your nominated payment method. All financial transactions are conducted in Malaysian Ringgit (MYR) unless cryptocurrency is used.

4.3 Identity Verification (KYC)

KYC documentation is processed to verify your identity, confirm your age (21+ requirement), prevent fraud, and comply with our anti-money laundering (AML) obligations. KYC data is handled with heightened security controls and is accessed only by authorised compliance personnel.

4.4 Security & Fraud Prevention

Technical and behavioural data is processed continuously to detect and prevent unauthorised account access, fraudulent transactions, multi-account abuse, and other security threats. This processing is carried out both by automated systems and by our security operations team.

4.5 Responsible Gambling Monitoring

Gebyar4d uses behavioural and transaction data to identify patterns that may indicate problem gambling. Where such patterns are detected, our responsible gambling team may make proactive contact with the relevant player to offer support tools such as deposit limits, cooling-off periods, or self-exclusion options.

4.6 Legal & Regulatory Compliance

Certain processing activities are carried out to fulfil gebyar4d's legal and regulatory obligations — including record-keeping for AML purposes, responding to lawful requests from regulatory authorities, and maintaining documentation required for licensing compliance.

4.7 Service Improvement & Analytics

Aggregated and anonymised data is used to analyse platform performance, understand how players interact with our games and features, and guide future product development. Where individual-level data is used for analytics, it is handled under appropriate safeguards.

Legal Basis for Processing

Gebyar4d processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfil our obligations to you under the Terms and Conditions — including Account management, transaction processing, and KYC verification.
• Legal Obligation: Processing required to comply with applicable laws and regulations — including AML record-keeping, regulatory reporting, and responding to lawful authority requests.
• Legitimate Interests: Processing carried out for purposes where gebyar4d has a legitimate business interest that is not overridden by your rights — including fraud prevention, platform security, and service improvement analytics.
• Consent: Processing for purposes that are not covered by the above bases — such as certain marketing communications or optional personalisation features. Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

Data Sharing & Disclosure

Gebyar4d does not sell, rent, or trade your personal data to third parties. We share personal data only in the following limited circumstances:

6.1 Service Providers & Data Processors

We share data with vetted third-party service providers who assist us in operating the Platform — including payment processing partners (FPX network operators, e-wallet providers such as Touch 'n Go and Boost), identity verification services, cloud infrastructure providers, fraud detection systems, and customer support tooling. All such providers are bound by data processing agreements that restrict their use of your data to the purposes for which it was shared.

6.2 Regulatory & Legal Authorities

We may disclose personal data to regulatory bodies, law enforcement agencies, or courts where we are legally required to do so — for example, in connection with AML investigations, court orders, or regulatory audits. We will notify you of such disclosures where we are legally permitted to do so.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of gebyar4d's business or assets, personal data may be transferred to the acquiring entity as part of that transaction, subject to equivalent privacy protections being maintained.

International Data Transfers

As an online platform, gebyar4d may process or store personal data on servers or through service providers located outside Malaysia. Where such international transfers occur, we take steps to ensure that your data receives a level of protection consistent with this Policy and applicable data protection standards.

Transfers to third-country processors are governed by contractual arrangements that impose equivalent data protection obligations. Where required, we implement appropriate transfer mechanisms such as standard contractual clauses or equivalent safeguards recognised by applicable law.

If you have questions about the specific countries to which your data may be transferred, please contact our Data Protection team using the details in Section 15.

Data Retention

Gebyar4d retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention principles apply:

• Active Account Data: Retained for the duration of your Account relationship with gebyar4d and for a period following Account closure as required by AML and regulatory record-keeping obligations (typically five to seven years).
• KYC Documentation: Retained for a minimum of five years from the date of verification or Account closure, in accordance with AML regulations.
• Transaction Records: Retained for a minimum of five years from the date of each transaction for regulatory compliance purposes.
• Support Communications: Retained for three years from the date of resolution, unless the subject matter requires longer retention for legal purposes.
• Technical & Log Data: Typically retained for 12 months and then deleted or anonymised, except where specific security or legal investigations require longer retention.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in a manner that renders it irrecoverable.

Security Measures

Gebyar4d employs a layered approach to data security, combining technical, organisational, and procedural controls to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include:

• Encryption in Transit: All data transmitted between your device and our servers is protected by TLS 1.2 or higher (HTTPS).
• Encryption at Rest: Personal data stored in our databases is encrypted using AES-256.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. Staff with access to sensitive data undergo background screening and receive regular privacy and security training.
• Two-Factor Authentication: Available for player Account logins and enforced for administrative access to systems holding personal data.
• Intrusion Detection & Monitoring: Our security infrastructure includes real-time intrusion detection systems, anomaly detection, and 24/7 security operations monitoring.
• Penetration Testing: Our Platform undergoes regular third-party penetration testing and security audits to identify and remediate vulnerabilities.

Cookies & Tracking Technologies

Gebyar4d uses cookies and similar tracking technologies to operate the Platform, enhance your experience, and support security and analytical functions. A cookie is a small text file placed on your device by a website you visit.

10.1 Types of Cookies We Use

• Essential Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in and security tokens that protect against cross-site request forgery. These cannot be disabled without affecting Platform functionality.
• Functional Cookies: Remember your preferences — such as your preferred language setting or game lobby view — to provide a more personalised experience on return visits.
• Analytics Cookies: Used to understand how players navigate and use the Platform. Data collected through analytics cookies is aggregated and does not identify individual users.
• Security Cookies: Used by our fraud detection systems to identify unusual patterns of behaviour that may indicate account takeover or other security threats.

10.2 Managing Cookies

You may configure your browser to refuse or delete cookies. Please note that disabling essential cookies will impair your ability to log in and use core Platform features. Analytics and functional cookies can generally be disabled without affecting basic Platform access. Consult your browser's help documentation for guidance on cookie management.

Your Rights as a Data Subject

Subject to applicable law and certain conditions, you have the following rights in relation to your personal data held by gebyar4d:

11.1 Right of Access

You may request a copy of the personal data we hold about you, together with information about the purposes for which it is processed and the categories of data involved. We will respond to access requests within 30 days.

11.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For Account details, many corrections can be made directly by contacting our support team.

11.3 Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where processing is otherwise unlawful. Note that erasure requests may be subject to overriding legal retention obligations — for example, AML record-keeping requirements that mandate retention for five years.

11.4 Right to Restrict Processing

In certain circumstances, you may request that we restrict the processing of your personal data — for example, while a complaint or accuracy dispute is being resolved.

11.5 Right to Data Portability

Where processing is based on your consent or a contract, and is carried out by automated means, you may request a copy of your personal data in a structured, commonly used, machine-readable format.

11.6 Right to Object

You have the right to object to processing of your personal data where that processing is based on legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your rights.

11.7 How to Exercise Your Rights

To exercise any of the rights listed above, please contact our Data Protection team using the contact details in Section 15. We will verify your identity before processing any rights request to prevent unauthorised access. There is no fee for exercising your rights, though we reserve the right to charge a reasonable fee or decline requests that are manifestly unfounded or excessive.

Children's Privacy

The gebyar4d Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect, process, or retain personal data from individuals under the age of 21.

If we become aware that personal data has been submitted by or on behalf of a person under 21, we will take immediate steps to close the associated Account, delete the data, and — where applicable — return any funds deposited, minus amounts already wagered, in accordance with our Terms and Conditions.

Third-Party Links & Services

The gebyar4d Platform may contain references to or integrations with third-party services — such as payment gateways operated by Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and Malaysian bank FPX portals (Maybank, CIMB, Public Bank, Hong Leong Bank). When you interact with these third-party services, you will be subject to their own privacy policies and terms of service.

Gebyar4d is not responsible for the privacy practices or data handling of third-party services. We encourage you to review the privacy policies of any third-party service you interact with in connection with your use of the Platform.

Policy Updates & Changes

Gebyar4d reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will provide reasonable notice — typically by posting a prominent notice on the Platform and, where practicable, notifying registered players by email.

The date of the most recent update to this Policy is displayed at the top of this page. We recommend reviewing this Policy periodically. Your continued use of the Platform after the effective date of an updated Policy constitutes your acceptance of the revised terms. If you do not agree to the updated Policy, you must cease using the Platform and contact our team to close your Account.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact our Data Protection team using the following details:

For formal data subject rights requests (access, erasure, portability, etc.), please include your full name, registered email address, and Account username in your correspondence so that we can verify your identity and process your request efficiently.

If you are dissatisfied with our response to a privacy complaint, you may have the right to escalate the matter to a relevant data protection supervisory authority under applicable law in your jurisdiction.