L4d2 Privacy Policy – Personal Data Protection for Malaysian Members

This Privacy Policy applies to all personal information you provide to l4d2, or that l4d2 collects automatically when you use our platform — whether through our website, mobile app, customer support services, or any other communication channel we make available.

L4d2 is the data controller responsible for all personal information we process. This means we determine the purpose and manner in which your data is processed, and we are fully accountable for ensuring that processing is carried out in a lawful, fair, and transparent manner in accordance with applicable Malaysian law.

This Privacy Policy covers all aspects of your use of the l4d2 platform, including:

• Registration and management of your l4d2 member account;
• Financial transactions including deposits and withdrawals in MYR;
• Access to all games available on l4d2, including slots, live casino, and table games;
• Communications between you and the l4d2 customer support team;
• Participation in l4d2 promotions, bonuses, and VIP programmes;
• Visits and navigation across the l4d2 platform.

L4d2 collects various types of personal information for different purposes in the operation of our platform. We only collect data that is genuinely necessary for the stated purpose — we do not collect information excessively or without clear justification.

For the purposes of Anti-Money Laundering (AML) and Know Your Customer (KYC) compliance, l4d2 may require copies of identity documents such as a Malaysian MyKad and proof of current address. These documents are stored in a secure, encrypted format and may only be accessed by authorised l4d2 staff for verification purposes.

L4d2 uses your personal information for purposes that are limited, lawful, and transparent. We do not process your data for any purpose unrelated to the operation of the l4d2 platform and the delivery of services to you as a member. The following are the primary purposes for which data is used at l4d2:

• Account Management: To create, verify, and maintain your l4d2 account, including a secure login process and account recovery where necessary;
• Financial Transaction Processing: To process deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as to process withdrawals to your Malaysian bank account or e-wallet in MYR;
• AML/KYC Legal Compliance: To fulfil l4d2's obligations under Malaysian Anti-Money Laundering laws, including verifying member identities and monitoring suspicious transactions;
• Service Improvement: To analyse aggregated platform usage patterns for the purposes of improving the user experience, technical performance, and l4d2's game library;
• Service Communications: To send important notifications relating to your account, terms updates, security alerts, and transaction information;
• Promotions & Bonuses: To administer l4d2's bonus, cashback, free spin, and tournament programmes, including verifying eligibility and calculating reward payouts;
• Responsible Gaming: To monitor gameplay patterns and identify signs of problem gambling, as well as to enforce limits you have set yourself through the l4d2 Responsible Gaming programme;
• Platform Security: To detect and prevent fraud, account misuse, multiple account registrations, and any activity that violates l4d2's Terms & Conditions.

L4d2 only sends you marketing communications if you have given explicit consent at the point of registration or subsequently through the communication preferences settings in your account. You may withdraw that consent at any time without affecting your eligibility to continue using the l4d2 platform.

L4d2 does not sell, rent, or trade your personal information to any third party for their own purposes. However, in the course of operating our platform, there are limited situations where we need to share your data with certain trusted parties:

• Payment Service Providers: Payment processors used by l4d2 — such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX — receive the transaction information necessary to process your deposits and withdrawals. This data is used solely for payment processing purposes;
• Game Technology Providers: Game providers supplying slots and live casino content to l4d2 may receive the game data required to operate their games on a technical level. All such providers are bound by strict data confidentiality agreements;
• Malaysian Authorities: l4d2 will disclose the required information to the relevant authorised Malaysian government agencies — including the police, courts, or regulatory bodies — when mandated by applicable Malaysian law or a valid court order;
• Audit & Compliance Company: Independent auditors who verify the fairness of l4d2's game RNG and AML/KYC procedure compliance may access limited anonymised datasets for technical audit purposes;
• Business Transfer: In the event that l4d2 is involved in a merger, acquisition, or sale of company assets, member data may be transferred as part of those business assets. You will be notified in advance should this situation arise.

L4d2 invests heavily in security infrastructure to safeguard the personal data of all our members. We employ multiple layers of technical and organisational protection to keep your data secure against unauthorised access, loss, destruction, or inadvertent disclosure.

The key security measures implemented by l4d2 include:

• 256-bit SSL/TLS Encryption: All communications between your device and l4d2's servers are encrypted using 256-bit SSL/TLS protocols. This ensures that transmitted data — including passwords, account information, and transaction details — cannot be read by any party that intercepts the communication;
• Data at Rest Encryption: All sensitive data stored in l4d2's databases — including passwords (stored in hashed form), financial information, and KYC documents — is encrypted using strong encryption algorithms while at rest in our systems;
• Strict Internal Access Controls: Only l4d2 staff who require access to specific data in order to perform their assigned duties are granted such access. All access is logged and continuously monitored. Access to sensitive data requires two-factor authentication;
• 24/7 Security Monitoring: l4d2's security systems are continuously monitored by our cybersecurity team to detect any suspicious activity or intrusion attempts in real time;
• Regular Security Testing: l4d2 conducts regular penetration testing and security audits by certified independent security experts to identify and address any technical vulnerabilities before they can be exploited;
• Structured Incident Management: l4d2 has a comprehensive incident response procedure in place. In the event of a data breach, we will act swiftly, notify affected members, and report to the relevant Malaysian authorities in accordance with PDPA legal requirements.

While l4d2 takes all reasonable measures to protect your data, no system can guarantee absolute 100% security. You also play an important role in keeping your l4d2 account safe — by using a strong password, not sharing your login credentials, and alerting us immediately if you suspect any suspicious activity.

L4d2 uses cookies and similar tracking technologies to enhance your experience on our platform, ensure technical functions operate correctly, and analyse platform usage patterns in aggregate. The following are the types of cookies we use:

• Essential Cookies: These cookies are required for the l4d2 platform to function properly. They include login session cookies, security tokens, and language preferences. Without them, certain core platform features will not work. This type of cookie cannot be disabled;
• Performance Cookies: Used to gather information on how members use the l4d2 platform — including the most frequently visited pages, time spent, and any technical errors encountered. All data is collected in aggregate and anonymised form. This helps l4d2 improve platform performance and usability;
• Functional Cookies: These cookies save your preferences on the l4d2 platform — such as your last betting selection, interface theme, and in-game audio settings — so you don't have to reconfigure them every time you log in;
• Analytics Cookies: l4d2 uses analytics tools to understand overall platform usage patterns for the purpose of continuous improvement. Analytics data is collected in a form that cannot be individually identified.

You can manage your cookie settings through your web browser settings at any time. However, disabling essential cookies may affect your ability to use certain features of the l4d2 platform. l4d2 does not use cookies for third-party advertising purposes or to track your activity outside our platform.

As an l4d2 member and as an individual protected under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights with respect to the personal data we hold about you:

To exercise any of the above rights, please contact the l4d2 privacy team by email at [email protected] or through l4d2's customer support team, available 24/7. We will acknowledge receipt of your request within 3 business days and resolve it within 30 business days, in accordance with Malaysia's PDPA requirements.

L4d2 retains your personal data only for as long as it is needed for the purpose for which it was collected, or as required by applicable Malaysian law. The following is a general guide to data retention periods at l4d2:

• Active Account Data: For as long as your l4d2 account remains active and in use. This data is necessary to operate your account and provide services to you;
• Financial Transaction Data: Minimum 7 years from the transaction date, in accordance with Malaysia's financial reporting and AML legal requirements. Transaction records in MYR must be retained for this period for legal compliance purposes;
• KYC Documents: A minimum of 5 years from the date of submission or the date of account closure, whichever is later. This is in accordance with Malaysia's Anti-Money Laundering legislation;
• Support Communication Logs: 2 years from the date of interaction, unless a longer period is required for the purposes of an ongoing investigation or dispute;
• Technical Data & Access Logs: 12 months from the date the log was recorded, unless a security requirement necessitates longer retention;
• Closed Account Data: Following account closure, l4d2 will delete or anonymise data that is no longer required for legal compliance purposes within 90 days, except for data that must be retained under Malaysian law.

The l4d2 platform is strictly for individuals aged 21 and above. l4d2 does not permit minors to register or use our platform under any circumstances, and we do not knowingly collect any personal data from individuals under the age of 21.

During the registration process, l4d2 requires age verification and requests date of birth information, which may be verified via MyKad documentation. Should l4d2 become aware of or suspect that any data has been collected from an individual who does not meet the minimum age requirement, we will:

• Suspending the account in question immediately pending investigation;
• Permanently delete all personal data of that individual from our systems;
• Returning any relevant outstanding balance in accordance with the appropriate procedures;
• Reporting the case to the relevant Malaysian authorities where required.

If you become aware or suspect that a minor has accessed or used the l4d2 platform, please contact us immediately at [email protected] so that immediate action can be taken. l4d2 takes the protection of minors extremely seriously as part of our commitment to responsible gambling.

L4d2 has appointed a Data Protection Officer responsible for overseeing compliance with this Privacy Policy and Malaysia's PDPA. If you have any questions, concerns, or requests regarding your personal data at l4d2, you may reach us through the following channels:

• Privacy Email: [email protected] (for enquiries relating to personal data and PDPA rights)
• General Support Email: [email protected] (for general enquiries about your l4d2 account and services)
• Live Chat: Available 24/7 directly within the l4d2 platform for the fastest response

L4d2 is committed to responding to all privacy-related enquiries within 3 business days and resolving more complex requests within 30 business days as required by Malaysia's PDPA. All privacy-related communications will be conducted in either Malay or English, according to your preference.

This l4d2 Privacy Policy is governed by and interpreted in accordance with the laws of Malaysia, in particular the Personal Data Protection Act 2010 (PDPA). In the event of any conflict or inconsistency between any other language version (if any) and this Malay version, the Malay version shall prevail and take effect.