Privacy Policy

This Privacy Policy ("Policy") sets out the manner in which tepat4d ("the Platform", "we", "us", "our") collects, holds, processes, and discloses personal data relating to individuals ("you", "your", "User", "Player") who access or use the tepat4d website and associated services available at tepat4d.cam.

tepat4d is an online gambling and sports betting platform operated under an international gaming licence. We serve players across Malaysia — including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam — and we recognise that the privacy and security of your personal data is of paramount importance.

We are committed to processing your personal data in a lawful, fair, and transparent manner. This Policy is designed to give you a clear and complete understanding of:

• What personal data we collect from you and how we collect it;
• The purposes for which your personal data is used;
• The legal bases upon which we rely to process your data;
• With whom your data may be shared;
• How long we retain your data;
• The rights you hold in relation to your personal data; and
• How to contact us in relation to data protection matters.

By creating an account or otherwise accessing the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must discontinue use of the Platform immediately.

For the purposes of this Policy, the following definitions shall apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, location data, and online identifiers.
• "Processing" means any operation or set of operations performed on Personal Data, including collection, recording, storage, use, disclosure, or deletion.
• "Data Controller" means tepat4d, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third-party entity that processes Personal Data on behalf of tepat4d in accordance with documented instructions.
• "KYC Data" means identity and age verification documentation collected as part of the Know Your Customer process, including government-issued identification and proof of address.
• "Sensitive Personal Data" means a subset of Personal Data including identification document numbers and financial account information, which is subject to heightened protection obligations.
• "Cookies" means small text files placed on your device by the Platform for purposes including session management, analytics, and personalisation.
• "Third Party" means any person or entity other than you, tepat4d, or a person acting under tepat4d's direct authority in relation to the processing of Personal Data.

tepat4d collects Personal Data across several categories depending on how you interact with the Platform:

4.1 Directly from You. The majority of Personal Data we hold is provided directly by you during account registration, the KYC verification process, payment transactions, customer support communications, and your use of responsible gambling tools.

4.2 Automatically via Technology. When you access the Platform, certain technical data is collected automatically through the use of cookies, web beacons, server logs, and similar tracking technologies. This includes your IP address, device identifiers, browser characteristics, and session activity data.

4.3 From Payment Processors. When you conduct financial transactions on the Platform — including deposits via DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, or GrabPay — transaction confirmation data is received from the relevant payment processor to reconcile and verify your account balance.

4.4 From Identity Verification Services. Where the Platform uses third-party identity verification services to assist with KYC processing, data may be cross-referenced with external databases for the purpose of confirming the authenticity of documents you submit.

4.5 From Fraud Prevention Partners. In the course of detecting and preventing fraudulent activity, the Platform may receive or share limited data with specialist fraud detection service providers operating as Data Processors under contractual data processing agreements.

tepat4d processes your Personal Data for the following purposes:

• Account Management: Creating, maintaining, and administering your player account, including login authentication, account security, and correspondence regarding your account status.
• Service Delivery: Enabling you to access and use all Platform features including sports betting, live casino, slot games, and associated products.
• Transaction Processing: Processing deposits and withdrawals in MYR via your chosen payment method, reconciling account balances, and maintaining accurate financial records.
• KYC & Regulatory Compliance: Verifying your identity and age as required under our international gaming licence obligations and applicable anti-money laundering (AML) and counter-terrorist financing (CTF) requirements.
• Responsible Gambling: Operating self-exclusion requests, deposit limits, session time controls, and other responsible gambling tools; monitoring account activity for indicators of problem gambling; maintaining records of self-exclusion periods.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent account activity, money laundering, multi-accounting, bonus abuse, and other prohibited activities as defined in our Terms and Conditions.
• Customer Support: Responding to your queries, complaints, and requests submitted via live chat or email.
• Platform Improvement: Analysing aggregated and anonymised usage data to improve Platform functionality, game selection, user experience, and technical performance.
• Legal Obligations: Complying with applicable laws, regulatory requirements, court orders, and lawful requests from competent authorities.
• Marketing Communications: Sending promotional offers, bonus notifications, and Platform updates — where you have provided your consent to receive such communications. You may withdraw consent at any time.

tepat4d processes your Personal Data on the following legal bases:

• Contract Performance: Processing necessary to fulfil our contractual obligations to you under the Terms and Conditions — including account management, transaction processing, and service delivery.
• Legal Obligation: Processing required to comply with our obligations under applicable laws and regulations, including AML and KYC requirements arising under our international gaming licence.
• Legitimate Interests: Processing necessary for the legitimate business interests of tepat4d — including fraud prevention, platform security, responsible gambling monitoring, and service improvement — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for which you have provided your explicit, informed, and freely given consent — primarily marketing communications. You retain the right to withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

7.1 tepat4d does not sell, rent, or trade your Personal Data to any third party for their independent marketing or commercial purposes. This is an unconditional commitment.

7.2 Service Providers (Data Processors). We engage carefully selected third-party service providers who process data on our behalf under contractual data processing agreements. These processors include:

• Payment processing partners — for deposit and withdrawal facilitation via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and banking partners;
• Identity verification services — for KYC document review and validation;
• Fraud detection and security providers — for account protection and abuse prevention;
• Cloud hosting and infrastructure providers — for secure data storage and Platform operation;
• Customer support platform providers — for live chat and ticketing system operation.

All processors are contractually bound to use your data solely as instructed and to maintain appropriate security measures.

7.3 Regulatory & Legal Disclosure. tepat4d may disclose your Personal Data to regulators, law enforcement agencies, courts of competent jurisdiction, or other governmental authorities where required to do so by law, by court order, or by a valid regulatory request. We will, to the extent permitted by law, notify you of such disclosure.

7.4 Business Transfers. In the event of a merger, acquisition, restructuring, or sale of assets involving tepat4d, your Personal Data may be transferred to the relevant successor entity as part of that transaction. Any such transfer will be subject to the same privacy protections described in this Policy.

8.1 tepat4d retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law.

8.2 The following general retention periods apply:

• Account and Registration Data: Retained for the duration of the account relationship and for a period of 5 years following account closure, to satisfy regulatory and AML compliance obligations.
• KYC Documentation: Retained for a minimum of 5 years from the date of submission, or longer if required by applicable regulatory frameworks.
• Transaction and Financial Records: Retained for a minimum of 5 years from the date of each transaction, in accordance with international AML record-keeping standards.
• Gaming Activity Data: Retained for the duration of the account relationship and for a period of at least 3 years post-closure.
• Technical and Device Data: Retained for a maximum of 12 months from collection, unless required to be retained longer for fraud investigation purposes.
• Responsible Gambling Records: Self-exclusion records are retained indefinitely to prevent reinstatement of excluded accounts and to fulfil regulatory reporting obligations.

8.3 Upon expiry of the applicable retention period, Personal Data is securely deleted or permanently anonymised such that it can no longer be associated with any identifiable individual.

9.1 tepat4d implements a comprehensive set of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Transport Encryption: All data transmitted between your device and the Platform is encrypted using 256-bit TLS/SSL technology. This applies to all pages, including login, registration, deposit, withdrawal, and account management pages.
• Password Security: Passwords are stored in a cryptographically hashed format using industry-standard algorithms. Plain-text passwords are never stored or transmitted.
• Two-Factor Authentication (2FA): Players are strongly encouraged to enable 2FA, which provides an additional layer of protection against unauthorised account access.
• Access Controls: Access to Personal Data within tepat4d's systems is restricted on a strict need-to-know basis. All internal access is logged and subject to regular audit.
• Segregated Player Funds: Your financial balance is held in accounts structurally separate from tepat4d's operational funds, protecting your MYR balance from business-side events.
• Regular Security Audits: The Platform undergoes periodic security audits and penetration testing by qualified third-party security professionals.

9.2 Notwithstanding the above, no data transmission over the internet or method of electronic storage is completely secure. While we take reasonable and industry-standard precautions, we cannot guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify you as required by applicable law.

9.3 You are responsible for maintaining the security of your own account credentials. tepat4d will never request your password via email, live chat, or any other unsolicited communication.

10.1 tepat4d uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small data files stored on your device that allow the Platform to recognise you and maintain session continuity across pages.

10.2 Types of cookies used:

• Essential Cookies: Strictly necessary for Platform operation. These cookies enable login sessions, maintain your preferences, and prevent cross-site request forgery attacks. They cannot be disabled without disrupting your use of the Platform.
• Analytical / Performance Cookies: Used to collect anonymised data about how visitors interact with the Platform — page views, session duration, error rates, and navigation paths — to improve Platform performance and user experience.
• Functional Cookies: Used to remember your preferences — including language, display settings, and responsible gambling tool configurations — to provide a more personalised experience.
• Security Cookies: Used to detect and prevent fraudulent activity, multi-accounting, and other security threats by associating session data with device fingerprint information.

10.3 You may configure your browser to refuse or delete cookies. However, disabling essential cookies will impair your ability to use the Platform and may prevent login or transaction functionality from operating correctly.

Subject to applicable law, you hold the following rights in respect of your Personal Data held by tepat4d. To exercise any of these rights, contact us at [email protected] with your account details and a clear description of your request.

We will respond to all valid data rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by up to a further 60 days, in which case we will notify you of the extension and the reason for it.

12.1 tepat4d strictly prohibits the registration or participation of persons under the age of 21. The Platform does not knowingly collect Personal Data from minors.

12.2 Age verification is a mandatory component of the KYC process. Any account found to be registered by or used by a person under the age of 21 will be immediately suspended, all relevant Personal Data will be securely deleted to the extent not required for regulatory reporting purposes, and any funds held in the account will be returned or dealt with in accordance with applicable regulatory requirements.

12.3 If you become aware that a minor has accessed the Platform using false age information, please notify us immediately at [email protected].

13.1 As an internationally licensed online gambling platform, tepat4d may transfer your Personal Data to countries outside of Malaysia for the purposes of storage, processing, or service delivery. This may include transfers to the jurisdiction in which our gaming licence is held and to the jurisdictions where our service providers operate.

13.2 Where Personal Data is transferred to jurisdictions that may not provide the same level of data protection as Malaysia's Personal Data Protection Act 2010 (PDPA) or equivalent frameworks, we implement appropriate safeguards — including contractual standard clauses and data processing agreements — to ensure that your data remains protected to a standard equivalent to that described in this Policy.

13.3 By using the Platform, you acknowledge and consent to the transfer of your Personal Data outside of Malaysia as described in this clause.

14.1 tepat4d reserves the right to update, modify, or replace this Privacy Policy at any time. Material changes will be communicated to registered players via email notification or a prominent notice displayed on the Platform prior to the changes taking effect.

14.2 The "Last Updated" date at the top of this page reflects the effective date of the most recent revision. We encourage you to review this Policy periodically to stay informed of any changes.

14.3 Your continued use of the Platform following the publication of any revised Policy constitutes your acceptance of the revised terms. If you do not agree with any amendment, you must discontinue use of the Platform and may request account closure in accordance with the Terms and Conditions.

If you have any questions, concerns, or requests in relation to this Privacy Policy or the processing of your Personal Data, please contact tepat4d using the following channels:

• Email: [email protected] — Please include "Privacy Request" in the subject line, along with your registered account username, to ensure your request is routed correctly and processed within the applicable timeframe.
• Live Chat: Available 24 hours a day, 7 days a week via the Platform interface. For time-sensitive data security concerns, live chat provides the fastest response channel.

We take all privacy-related enquiries seriously and are committed to responding in a timely, professional, and transparent manner. All data rights requests will be acknowledged within 5 business days and resolved within 30 calendar days unless complexity requires an extension as described in Section 11.