Privacy Policy

This Privacy Policy ("Policy") issued by Bumi4D ("the Company", "we", "us", "our") and applies to all personal data collected from users ("User", "Player", "you") who access, register, or otherwise interact with the Bumi4D online gaming platform located at https://bumi4d.lat ("the Platform"), including any associated mobile interfaces, customer support channels, and promotional communications.

Bumi4D is committed to protecting the privacy of all its users, including Malaysian players accessing the Platform from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and elsewhere across Malaysia. This Policy describes in full how we handle your personal information in a manner consistent with internationally recognized privacy principles, including the General Data Protection Regulation (GDPR) framework and principles aligned with Malaysia's Personal Data Protection Act 2010 (PDPA) where applicable.

By accessing the Platform or submitting any personal information to Bumi4D, you acknowledge that you have read, understood, and consent to the practices described in this Policy. If you do not agree with any part of this Policy, you should discontinue use of the Platform and may request account deletion as described in Section 11.

For the purposes of this Privacy Policy, the following definitions apply:

Bumi4D collects the following categories of Personal Data in the course of operating the Platform and providing gaming services to Malaysian players and other permitted users:

3.1 Identity & Contact Data

• Full legal name as it appears on your government-issued identification document (Malaysian IC / MyKad or passport);
• Date of birth (for age verification — minimum age 21 years);
• Residential address, including city and postcode;
• Email address (active and accessible);
• Malaysian mobile phone number;
• Username selected at registration.

3.2 Identity Verification (KYC) Data

• Copies or photographs of government-issued identification (MyKad, passport);
• Selfie photographs for liveness verification;
• Proof of residential address documents (utility bills, bank statements);
• Source of funds documentation where requested.

3.3 Financial & Transaction Data

• Payment method details (e-wallet identifiers for Touch'n Go eWallet, Boost, GrabPay; bank account numbers for Maybank, CIMB, Public Bank; cryptocurrency wallet addresses for USDT TRC20);
• Deposit and withdrawal transaction history including amounts in MYR, timestamps, and method used;
• Account balance history and bonus credit records.

3.4 Technical & Usage Data

• IP address and approximate geolocation;
• Device type, operating system, and browser;
• Session duration, pages visited, and features used within the Platform;
• Betting and gaming history including game titles, stakes, and outcomes;
• Login timestamps and frequency of access.

3.5 Communications Data

• Content of messages submitted to customer support via live chat, WhatsApp, or email;
• Responses to surveys, feedback forms, or promotional communications;
• Records of complaints and their resolutions.

3.6 Responsible Gambling Data

• Self-exclusion requests and their terms;
• Deposit and loss limits set by the User;
• Problem gambling assessment responses where voluntarily provided.

Bumi4D collects Personal Data through the following methods:

• Direct Submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in a promotion;
• Automated Technical Collection: Data collected automatically when you access the Platform, including via cookies, web beacons, server logs, and similar tracking technologies (see Section 10);
• Third-Party Verification Services: Identity verification results from KYC processing partners engaged by Bumi4D to confirm your identity and age in compliance with our responsible gaming obligations;
• Payment Processors: Transaction confirmation data received from payment service providers including e-wallet operators and banking partners used by Malaysian players;
• Fraud and AML Screening: Data received from commercially operated fraud detection, sanctions screening, and anti-money laundering databases as required by our licensing obligations.

Bumi4D processes your Personal Data for the following specific purposes:

Bumi4D processes your Personal Data one or more of the following legal bases:

• Contract Performance: Processing necessary to fulfil the agreement between you and Bumi4D as set out in our Terms and Conditions — including account management, payments, and game provision;
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering obligations and licensing conditions under our international gaming license;
• Legitimate Interests: Processing carried out for the legitimate interests of Bumi4D or a third party, where those interests are not overridden by your fundamental rights and freedoms — including fraud prevention, platform security, and service improvement;
• Consent: Processing for purposes such as direct marketing communications, where we have obtained your explicit prior consent. You may withdraw consent at any time without affecting prior processing.

Bumi4D does not sell, rent, or trade your Personal Data to third parties for marketing or commercial purposes. We may share your data only in the following circumstances:

• Service Providers and Data Processors: We engage carefully selected third-party service providers to assist in operating the Platform, including KYC verification providers, payment processors, cloud hosting providers, fraud detection services, and customer support platforms. These parties are bound by contractual data processing agreements that prohibit them from using your data for any purpose beyond the specific service they provide;
• Payment Partners: Transaction data is shared with payment service providers as necessary to process your deposits and withdrawals — including operators of Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX banking partners (Maybank, CIMB, Public Bank), and cryptocurrency processors;
• Gaming Providers: Where you play games supplied by third-party game studios or live casino providers, your player ID and relevant game session data may be shared with those providers solely for the purpose of delivering the game service;
• Regulatory and Law Enforcement Authorities: We may disclose your data to regulators, law enforcement, or government authorities where we are legally required or compelled to do so by applicable law, court order, or our licensing authority;
• Professional Advisors: Legal counsel, auditors, and compliance advisors engaged by Bumi4D may have access to your data under strict professional confidentiality obligations;
• Business Transfers: In the event of a merger, acquisition, or asset sale affecting Bumi4D, your Personal Data may be transferred to the acquiring entity, subject to equivalent privacy protections.

Bumi4D retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our licensing obligations. The following indicative retention periods apply:

Upon expiry of the applicable retention period, your Personal Data will be securely deleted or anonymized in accordance with our data disposal procedures. Anonymized or aggregated data that cannot be used to identify you may be retained indefinitely for statistical and platform improvement purposes.

Bumi4D implements a comprehensive set of technical and organizational security measures designed to protect your Personal Data against unauthorized access, loss, alteration, or disclosure. Our security infrastructure includes:

• Transport Encryption: All data transmitted between your device and the Bumi4D Platform is encrypted using 256-bit SSL/TLS encryption;
• Data at Rest Encryption: Sensitive data stored on our servers, including KYC documents and payment details, is encrypted at rest using industry-standard cryptographic standards;
• Access Controls: Access to Personal Data within Bumi4D's internal systems is restricted on a strict need-to-know basis, with role-based access controls and multi-factor authentication enforced for all staff;
• Regular Security Audits: Our platform and infrastructure undergo periodic independent security assessments and penetration testing;
• Incident Response: Bumi4D maintains a documented data breach response procedure. In the event of a data breach that is likely to result in high risk to your rights and freedoms, you will be notified without undue delay;
• Staff Training: All staff members with access to Personal Data receive regular data protection and security awareness training.

While Bumi4D takes all reasonable precautions to safeguard your data, no system is completely immune to attack. You are responsible for maintaining the security of your own account credentials. If you suspect your account has been compromised, please contact our 24/7 support team immediately.

Bumi4D uses cookies and similar tracking technologies on the Platform to provide core functionality, improve user experience, and analyze usage patterns. The following categories of cookies are in use:

• Strictly Necessary Cookies: Essential for the operation of the Platform, including session management, login authentication, and security token storage. These cannot be disabled without affecting Platform functionality;
• Functional Cookies: Remember your preferences such as language selection (English, Bahasa Melayu, or Mandarin), display settings, and last-used payment method to provide a more personalized experience;
• Analytics Cookies: Collect anonymized or pseudonymized data about how users interact with the Platform — including pages visited, session duration, and feature usage — to help us improve our services;
• Security Cookies: Used for fraud detection, bot mitigation, and identification of unusual access patterns that may indicate account compromise.

You may manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. Bumi4D does not use third-party advertising cookies or share cookie data with external marketing networks.

Subject to applicable law and certain exceptions related to legal obligations and legitimate interests, you hold the following rights in respect of your Personal Data held by Bumi4D. To exercise any of these rights, please contact our Data Protection team at [email protected] with the subject line "Data Rights Request". We aim to respond to all verified requests within 30 calendar days.

The Bumi4D Platform is strictly intended for adults aged21 years and above. We do not knowingly collect Personal Data from persons under the age of 21. All new registrations are subject to mandatory age and identity verification through our KYC process.

If Bumi4D becomes aware that Personal Data has been collected from a person under the age of 21, all data associated with that account will be immediately and permanently deleted, the account will be suspended, and any deposited funds will be returned to the source payment method after verification of ownership.

Parents and guardians who believe that a minor under their care may have registered on the Bumi4D Platform should contact our support team immediately via live chat or at [email protected]. Such cases will be handled with absolute priority and confidentiality.

As an internationally licensed online gaming platform, Bumi4D may transfer your Personal Data to servers, data processors, or service providers located outside of Malaysia. Such transfers are carried out only where appropriate safeguards are in place, including contractual data processing agreements that meet internationally recognized data protection standards.

Where your data is transferred outside Malaysia, we take all reasonable steps to ensure it receives equivalent protection to that provided under Malaysian data protection standards and the frameworks applicable under our international licensing obligations. Bumi4D does not transfer your data to jurisdictions without adequate data protection frameworks without implementing appropriate contractual safeguards.

Bumi4D reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will update the effective date shown at the top of this Policy and make reasonable efforts to notify registered users via the email address on file or through an in-platform notification.

Your continued use of the Platform following the publication of an updated Policy constitutes acceptance of the revised terms. We encourage you to review this Policy periodically. The most current version will always be accessible at https://bumi4d.lat/privacy-policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way Bumi4D handles your Personal Data, please contact our Data Protection team through any of the following channels:

• Email (plain text — not a link): [email protected] — please use the subject line "Privacy Enquiry" or "Data Rights Request";
• Live Chat: Available 24/7 on the Bumi4D Platform — average response time 3–5 minutes;
• WhatsApp: Available 24/7 for registered users — contact details available in your account portal;
• Support Languages: English, Bahasa Melayu, and Mandarin Chinese.

We are committed to handling all privacy-related inquiries with care and professionalism. Data rights requests will be acknowledged within 5 business days and resolved within 30 calendar days of receipt. Where additional time is required, you will be notified in advance with an explanation.