Privacy Policy

halo4d ("we", "us", "our", "the Company", "the Platform") operates the online gaming and sports betting platform accessible at https://halo4d.asia. We recognise that the privacy of our players is of paramount importance, and we are committed to handling your personal data with transparency, care, and integrity.

This Privacy Policy ("Policy") describes in detail how halo4d collects, processes, stores, discloses, and protects personal data submitted to or collected through the Platform. It applies to all registered Users, visitors to our website, and individuals who interact with our customer support channels.

halo4d is operated as an English-language platform serving players in Malaysia. Where reference is made to Malaysian regulatory frameworks, the Company endeavours to align its data handling practices with the principles of the Personal Data Protection Act 2010 (PDPA Malaysia) and applicable data protection standards.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

halo4d collects personal data through several channels, including account registration, account usage, payment processing, KYC verification, customer support interactions, and automatic technical collection methods. The categories of data we collect are set out below.

3.1 Registration & Account Data

• Identity data: Full legal name, date of birth, nationality, and gender.
• Contact data: Email address, mobile phone number, and residential address (including city — e.g., Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, or Shah Alam).
• Account credentials: Username and encrypted password (passwords are stored using one-way cryptographic hashing and are never stored or accessible in plain text).
• Account preferences: Communication preferences, responsible gambling settings, and language selection.

3.2 Identity Verification (KYC) Data

• Copies of government-issued identification documents, such as Malaysian MyKad, passport, or equivalent.
• Proof of address documentation (e.g., utility bills, bank statements addressed to the User's registered address).
• Proof of payment method ownership (e.g., screenshots or statements confirming ownership of linked bank accounts, Touch 'n Go eWallet, Boost, GrabPay, or other registered payment methods).

3.3 Financial & Transaction Data

• Deposit and withdrawal records, including transaction amounts, timestamps, payment method type, and processing status.
• Account balance history and gaming activity records.
• Payment method identifiers (e.g., masked bank account numbers, e-wallet IDs) — full financial credentials such as complete card numbers or bank PINs are never stored by halo4d.

3.4 Gaming Activity Data

• Game session logs, including games played, wager amounts, outcomes, and session duration.
• Sports betting activity, including markets selected, odds accepted, stakes placed, and settlement records.
• Bonus and promotional participation records.

3.5 Technical & Device Data

• IP address, browser type and version, operating system, and device identifiers.
• Geolocation data (at country or city level) derived from IP address for fraud prevention and compliance purposes.
• Session activity logs, including login timestamps, page views, and navigation patterns.
• Cookie and tracking technology data as described in Section 7.

3.6 Support & Communications Data

• Records of all communications between you and our support team, including live chat transcripts, email correspondence, and complaint records.
• Feedback, survey responses, and any voluntary information you provide to us through support or feedback channels.

halo4d processes personal data solely for clearly defined, legitimate purposes. The table below summarises the primary purposes for which we use your data and the corresponding category of data involved.

halo4d processes personal data on the basis of one or more of the following lawful grounds, consistent with applicable data protection legislation including the Personal Data Protection Act 2010 (PDPA Malaysia):

• Contractual necessity: Processing that is necessary to fulfil the agreement between halo4d and the User, including account management, payment processing, and service delivery.
• Legal obligation: Processing that is required to comply with applicable laws, including anti-money laundering regulations, age verification obligations, and tax reporting requirements.
• Legitimate interests: Processing carried out for the legitimate business interests of halo4d, including fraud prevention, platform security, responsible gambling monitoring, and service improvement — where such interests are not overridden by the rights and interests of the Data Subject.
• Consent: Processing based on the Data Subject's freely given, specific, and informed consent — primarily applicable to marketing communications and certain non-essential cookies. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

halo4d does not sell, rent, trade, or otherwise transfer your personal data to third parties for their own independent marketing or commercial purposes. Your data may, however, be shared with carefully selected third parties in the following circumstances:

6.1 Payment Service Providers

To facilitate deposits and withdrawals, we share relevant financial and identity data with authorised payment processors. These include Malaysian payment infrastructure providers such as those operating Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX (Financial Process Exchange), as well as the processing networks supporting Maybank2u, CIMB Clicks, Public Bank Online, and Hong Leong Connect. All such providers are contractually bound to process your data solely for the purpose of executing your payment instruction.

6.2 Game Technology Providers

Game studios and live dealer providers whose content is integrated into halo4d may receive limited session and wagering data necessary to operate their games within our platform. Such providers are subject to data processing agreements and are prohibited from using your data for any purpose other than game operation.

6.3 Identity Verification Services

We may use third-party KYC and identity verification services to authenticate documents submitted during account verification. These services process identity data on our behalf and under our instructions, with no independent right to retain or use your data.

6.4 Regulatory and Legal Disclosure

halo4d may be required to disclose personal data to regulatory authorities, law enforcement agencies, courts, or other public bodies where required by applicable law or valid legal process — including, without limitation, in connection with anti-money laundering investigations, fraud inquiries, or judicial proceedings. We will notify affected Users of such disclosures where legally permissible to do so.

6.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of the Company's assets, personal data held by halo4d may be transferred to the acquiring entity as part of that transaction. Affected Users will be notified of any material change in data controller status prior to their data being transferred under new terms.

halo4d uses cookies and similar tracking technologies to enable core Platform functionality, improve user experience, and gather aggregate analytics data. The categories of cookies we deploy are described below.

You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the Platform. For detailed guidance on managing cookies in your specific browser or device, refer to your browser's help documentation.

halo4d retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, and contractual obligations. The following general retention periods apply:

• Active account data: Retained for the lifetime of your account and a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements.
• KYC documentation: Retained for a minimum of five (5) years from the date of collection or the date of your last transaction on the Platform, whichever is later.
• Financial transaction records: Retained for a minimum of seven (7) years to satisfy tax, audit, and financial regulatory requirements.
• Customer support records: Retained for three (3) years from the date of the relevant communication, or longer where the subject matter involves an unresolved dispute or complaint.
• Marketing preferences and consent records: Retained for the duration of your active account, plus a reasonable period thereafter to demonstrate compliance with consent obligations.
• Technical and session logs: Typically retained for 12–24 months for security monitoring and fraud investigation purposes.

Upon expiry of applicable retention periods, personal data will be securely erased or anonymised. Where anonymisation is used, the resulting anonymised data may be retained indefinitely for statistical and analytical purposes, as it no longer constitutes personal data.

halo4d implements a comprehensive suite of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Key security controls in place include:

• 256-bit SSL/TLS encryption applied to all data transmitted between your device and the halo4d Platform.
• Encrypted storage of sensitive data including passwords (hashed using cryptographic algorithms), KYC documents, and payment credentials.
• Role-based access controls ensuring that only authorised personnel with a legitimate business need can access specific categories of personal data.
• Two-factor authentication (2FA) available for all User accounts to reduce the risk of unauthorised account access.
• Regular security assessments and penetration testing of the Platform's infrastructure and applications.
• Firewalls, intrusion detection systems, and real-time monitoring for anomalous activity.

In the event of a personal data breach that poses a risk to the rights and freedoms of affected individuals, halo4d will take prompt remedial action and notify affected Users and relevant authorities as required by applicable law.

As a Data Subject, you hold a number of rights with respect to your personal data processed by halo4d. These rights are described below. To exercise any of these rights, please contact us at [email protected] with sufficient information to identify your account.

• Right of Access: You have the right to request a copy of the personal data halo4d holds about you, along with information about how it is processed. We will respond to verified access requests within a reasonable timeframe.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. You may update certain account details directly through your account settings.
• Right to Erasure: In certain circumstances, you may request the deletion of your personal data. Note that this right may be limited where we are required to retain data for legal, regulatory, or contractual purposes — including AML record-keeping obligations.
• Right to Restrict Processing: You may request that we limit the processing of your personal data in certain circumstances, such as where you contest its accuracy or object to its use.
• Right to Data Portability: Where processing is based on consent or contractual necessity, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling for direct marketing purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

We will acknowledge your request promptly and endeavour to respond substantively within 30 days. Where a request is complex or voluminous, we may extend this period by a further 30 days with notice to you.

halo4d is strictly an adult entertainment platform. Access to and use of the Platform is limited exclusively to individuals who are 21 years of age or older. We do not knowingly collect personal data from persons under the age of 21.

All Users are required to confirm their age at registration, and halo4d reserves the right to require KYC identity verification at any time to confirm age eligibility. Any account found to belong to an individual under the age of 21 will be immediately suspended, all funds will be returned to the originating payment method (subject to applicable legal holds), and the relevant data will be securely deleted in accordance with our retention policy.

If you believe that a minor has accessed the halo4d Platform or that we have inadvertently collected data relating to a person under 21, please notify us immediately at [email protected] so that we may take prompt action.

The halo4d Platform integrates services from carefully selected third-party providers. These include game software providers, live dealer studio operators, payment infrastructure providers, identity verification services, and analytics platforms. Each third-party integration is governed by a data processing agreement that obliges the provider to process your data only on halo4d's instructions, in accordance with applicable data protection standards, and with appropriate security controls in place.

halo4d does not control the privacy practices of independent third-party websites that may be referenced within our Platform. Users who navigate to external websites do so entirely at their own risk, and those external sites are governed by their own privacy policies, which we encourage you to review independently.

In the course of delivering the halo4d Platform to Malaysian players, personal data may be transferred to and processed in jurisdictions other than Malaysia — for example, where our technology infrastructure, game providers, or support operations are hosted. When such transfers occur, halo4d ensures that adequate safeguards are in place to protect your personal data, consistent with the requirements of the Personal Data Protection Act 2010 (PDPA Malaysia).

Safeguards may include contractual clauses requiring recipient parties to maintain equivalent data protection standards, or transfer to jurisdictions that have been assessed as providing an adequate level of data protection. If you require further information regarding the specific safeguards applicable to any international data transfer affecting your personal data, please contact us at [email protected].

halo4d reserves the right to amend, update, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or platform services. Where changes are material, we will endeavour to notify registered Users via email or through a prominent notice on the Platform prior to the amendments taking effect.

The date of the most recent update to this Policy is displayed at the top of this page. Your continued use of the halo4d Platform following any amendments constitutes your acceptance of the revised Privacy Policy. If you do not agree with the revised Policy, you should cease using the Platform and close your account.

The current version of this Privacy Policy is always accessible at https://halo4d.asia/privacy-policy. We encourage you to review this page periodically to remain informed of how we protect your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by halo4d, please contact our Data Protection team through the following channels:

For questions about our responsible gambling practices or to request self-exclusion, please visit our Responsible Gambling page.