Cata4d Privacy Policy – Malaysia Member Personal Data Protection

Introduction and Scope of This Policy

Cata4d ("we", "our platform") takes seriously our responsibility to protect the privacy of every individual who interacts with our platform. This Privacy Policy describes our practices regarding the collection, use, disclosure, and protection of your personal information when you use the cata4d website and all related services.

This policy applies to all users of the cata4d platform, including visitors, registered members, and former members. It also applies to all your interactions with our platform via web browser, mobile app, and other communication channels such as live chat and support email.

By registering a cata4d account or using any part of this platform, you confirm that you have read and understood this Privacy Policy, and agree to the data collection and usage practices described herein. This Privacy Policy should be read together with Terms and Conditions cata4d, which forms the entire agreement between you and us.

Types of Personal Data We Collect

Cata4d collects personal data from you in various ways as you use our platform. Below is a detailed description of each category of data we collect:

Some data is collected automatically when you use our platform, while other data is only collected when you provide it voluntarily. We do not collect data that is unnecessary for platform operations and legal compliance.

How We Use Your Data

The personal data we collect from you is used for the following purposes, based on valid legal grounds:

• Account Management: Creating and managing your account, verifying your identity at login and processing all your financial transactions including deposits and withdrawals.
• Service Delivery: Enabling you to access all games, sports betting, promotions and other cata4d platform features you are eligible to use.
• Legal Compliance: Fulfilling our obligations under Malaysia's PDPA, anti-money laundering (AML) requirements, Know Your Customer (KYC) regulations and other applicable rules.
• Platform Security: Detecting and preventing fraud, unauthorised access, account misuse and other suspicious activities that could harm the platform or its members.
• Service Communications: Sending important notifications regarding your account, transaction confirmations, security updates and changes to our terms or policies.
• Customer Support: Processing your enquiries, complaints and support requests more efficiently and effectively.
• Platform Improvements: Analysing usage patterns in aggregated, anonymous form to improve the overall design, performance and user experience of the cata4d platform.
• Marketing Communications: Sending you information about relevant promotions, bonuses and special offers — only if you have given consent to receive such communications.

Cata4d will not use your data for any other purpose not stated here without obtaining your consent first.

Data Sharing and Disclosure

Cata4d does not sell your personal data to anyone. However, in the normal course of platform operations, your data may be shared with the following categories of third parties for legitimate reasons:

• Payment Service Providers: Payment processors, banks and eWallet operators responsible for handling your deposits and withdrawals. They are bound by strict confidentiality agreements and may only use your data to process the relevant transactions.
• Game Software Providers: Third-party game software providers that supply casino games, slots, and sports betting on our platform. Data sharing is limited to information required to operate the games only.
• KYC Service Providers: Identity verification companies that assist us in conducting KYC and AML checks as required by law.
• Relevant Authorities: Law enforcement agencies, courts, or regulatory bodies where we are legally required to disclose your information, or to protect our legitimate legal rights.
• Technical Service Providers: Cloud computing, analytics and technical infrastructure service providers that help us operate the platform. All such providers are bound by data processing agreements that comply with PDPA.

Data Security and Protection Measures

Cata4d continuously invests in the latest security infrastructure to ensure your personal data remains protected at all times. Key security measures we have implemented include:

• 256-bit SSL Encryption: All data transmitted between your device and our servers is encrypted using the latest TLS protocols, making it virtually impossible for unauthorized parties to intercept.
• Two-Factor Authentication (2FA): You can enable two-factor authentication for an extra layer of protection on your cata4d account, ensuring only you can access it even if your password is compromised.
• Data Encryption at Rest: Sensitive data stored in our databases, including financial information and identity documents, is encrypted using AES-256 encryption.
• Tiered Access Control: Access to user data among our staff is governed by the principle of least privilege — each staff member may only access the data necessary to perform their specific duties.
• Regular Security Audits: The cata4d platform undergoes independent security audits on a regular basis to identify and address any potential vulnerabilities before they can be exploited.
• Real-Time Threat Monitoring: Our automated monitoring system operates 24 hours a day, 7 days a week to detect and respond to any suspicious activity promptly.

While we take all reasonable precautions, no system can be guaranteed 100% secure against every cyber threat. We therefore encourage you to also take personal security measures, such as using a strong, unique password and never sharing your login credentials.

Cookies, Tracking Technologies & Analytics

Cata4d uses cookies and similar tracking technologies to enhance your experience on our platform. Below is an explanation of the types of cookies we use:

• Essential Cookies: These cookies are required for core platform functions such as login sessions, language settings and game preferences. Without them, the platform cannot operate properly. These cookies cannot be disabled.
• Performance Cookies: These cookies help us understand how you interact with our platform by collecting information on the most visited pages, time spent and any errors encountered. All data is collected anonymously.
• Functional Cookies: These cookies remember your preferences such as interface language, preferred currency and display settings to provide you with a more personalised experience.
• Analytics Cookies: We use analytics tools to understand platform usage patterns on an aggregate basis, helping us make better decisions about new features and platform improvements.

You can manage your cookie settings through your web browser settings. However, disabling certain cookies may affect the functionality and your experience on the cata4d platform.

Your Rights Under the PDPA

As a cata4d member, you have the following rights regarding your personal data, as guaranteed under Malaysia's Personal Data Protection Act 2010 (PDPA):

Data Retention Period

Cata4d retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by applicable law. Below are our data retention guidelines:

• Active Account Data: Retained for the duration your account remains active and for a prescribed period after account closure for legal compliance purposes.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's anti-money laundering and tax legislation.
• KYC Documents: Retained for a minimum of 5 years after the business relationship ends, as required by the Anti-Money Laundering Act 2001.
• Support Communication Logs: Retained for 2 years for service quality and dispute resolution purposes.
• Cookie & Analytics Data: Aggregated anonymous analytics data is retained indefinitely; session cookies expire automatically when you close your browser.

When the retention period expires or upon a valid deletion request, your data will be securely deleted or anonymised using methods that ensure it cannot be recovered or re-identified.

Children's Privacy

The cata4d platform is exclusively for adults aged 18 years and above. We do not intentionally collect or process personal data from minors.

If we discover that we have inadvertently collected personal data from anyone under the age of 18, we will take immediate steps to delete that data and close the account in question. Parents or guardians who become aware that their child has registered on our platform without permission are encouraged to contact our support team immediately.

Changes to This Privacy Policy

Cata4d reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the technology we use.

When we make material changes to this Privacy Policy, we will:

• Updating the "Last Updated" date at the top of this document.
• Sending a notification to your registered email address if the changes materially affect how we use your data.
• Displaying a clear notice on the platform's home page for a reasonable period after the changes take effect.

Your continued use of the cata4d platform after any changes to this Privacy Policy take effect constitutes your acceptance of the updated policy. We encourage you to review this page periodically.

This Privacy Policy was last updated on January 2026.

Contact Our Data Protection Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact cata4d's Data Protection Officer (DPO) through the following channels:

We are committed to handling every enquiry and complaint thoroughly, fairly, and in a timely manner. If you are dissatisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant authority.