Privacy Policy

1 Introduction

This Privacy Policy ("Policy") is issued by metro4d ("we", "us", "our", or "the Platform"), the operator of the online casino and sports betting platform accessible at https://metro4d.cam. This Policy describes how metro4d collects, processes, stores, shares, and protects the personal data of individuals ("you", "your", "the Data Subject") who access or use the Platform, including registered players and visitors.

metro4d is committed to processing personal data responsibly, lawfully, and transparently in accordance with applicable international data protection standards. We collect only the data necessary for the legitimate operation of the Platform and the fulfilment of our legal obligations, and we do not sell personal data to third parties under any circumstances.

This Policy should be read alongside our Terms & Conditions and our Responsible Gambling policy, which together govern your use of the metro4d Platform.

2 Definitions

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person — directly or indirectly — including name, identification number, email address, device identifiers, or location data.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, deletion, or any combination thereof.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this case, metro4d.
• "Data Processor" means any third party that processes Personal Data on behalf of metro4d pursuant to a data processing agreement.
• "Data Subject" means the natural person to whom Personal Data relates — i.e., you as a Platform user or visitor.
• "Consent" means a freely given, specific, informed, and unambiguous indication of a Data Subject's wishes by which they signify agreement to processing of their Personal Data for a specified purpose.
• "KYC" (Know Your Customer) means the identity verification process used to confirm a Player's identity and age prior to withdrawals or as otherwise required.
• "Cookies" means small text files placed on your device by a website during a browsing session, used to store session information and user preferences.

3 Data Controller

For the purposes of applicable data protection law, metro4d acts as the Data Controller in relation to the Personal Data of its players and website visitors. metro4d determines the purposes and means by which Personal Data is processed in connection with the operation of the Platform.

metro4d operates the website https://metro4d.cam and delivers online casino and sports betting services primarily to players across Malaysia, including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam. All data processing activities described in this Policy are carried out by metro4d or by Data Processors engaged by metro4d under appropriate contractual safeguards.

For any queries relating to data processing, the exercise of your rights, or this Policy generally, please contact us using the details provided in Section 15 of this document.

4 Personal Data We Collect

When you create an account on metro4d, we collect the following information:

• Full legal name;
• Date of birth (to verify the 21+ age requirement);
• Residential address, including city (e.g., Kuala Lumpur, Petaling Jaya, Penang);
• Email address and phone number;
• Username and encrypted password;
• Preferred currency (MYR as default for Malaysian players).

To satisfy identity verification obligations, we may collect:

• Government-issued photo identification (e.g., MyKad, passport);
• Proof of residential address (e.g., utility bill, bank statement — dated within 3 months);
• Payment method ownership documentation (e.g., bank account statement header, e-wallet screenshot);
• Source-of-funds documentation for large transaction volumes where required.

In connection with deposits and withdrawals, we collect:

• Transaction amounts, dates, and reference numbers;
• Payment method identifiers (e.g., masked bank account numbers, e-wallet IDs for DuitNow, Touch 'n Go eWallet, Boost, GrabPay, FPX, Maybank, CIMB, Public Bank, Hong Leong);
• Cryptocurrency wallet addresses for BTC and USDT transactions (where applicable);
• Wagering history, win/loss records, and bonus transaction logs.

When you access the Platform, we automatically collect certain technical data:

• IP address and approximate geographic location;
• Browser type, version, and operating system;
• Device identifiers and screen resolution;
• Pages visited, session duration, and clickstream data;
• Referral source and login/logout timestamps.

When you contact our customer support team — via Live Chat, WhatsApp, email, or WeChat — we retain records of those communications, including the content of messages and the date and time of contact. This information is used to resolve your query and to improve service quality.

5 How We Collect Your Data

metro4d collects Personal Data through the following means:

6 Lawful Basis for Processing

metro4d processes Personal Data only where a valid lawful basis exists. The primary bases we rely upon are as follows:

• Contract Performance: Processing is necessary to perform the Account Agreement and provide the Platform services you have requested — including account management, payment processing, and game delivery;
• Legal Obligation: Processing is required to comply with applicable law, including KYC, anti-money laundering (AML), and responsible gambling regulatory requirements;
• Legitimate Interests: Processing is necessary for our legitimate interests in operating a secure, fraud-free, and well-functioning Platform — including fraud prevention, security monitoring, and platform analytics — provided such interests are not overridden by your rights;
• Consent: Where processing is not covered by the above bases — such as optional marketing communications — we rely on your freely given and withdrawable consent.

7 How We Use Your Personal Data

metro4d uses collected Personal Data for the following specific purposes:

• To create and manage your player account on the Platform;
• To verify your identity and age (21+) in accordance with our KYC and responsible gambling obligations;
• To process MYR deposits and withdrawals via your chosen payment method (Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, Boost, GrabPay, BTC, USDT);
• To calculate, credit, and administer bonus balances and Wagering Requirements;
• To provide responsive customer support in English, Bahasa Melayu, and Chinese;
• To detect, prevent, and investigate fraud, money laundering, and prohibited conduct;
• To enforce our Terms and Conditions and other platform policies;
• To comply with applicable regulatory, legal, and reporting obligations;
• To monitor Platform usage, identify technical issues, and improve product functionality;
• To send transactional communications (account alerts, withdrawal confirmations, bonus expiry notices);
• To send marketing communications where you have given explicit consent to receive them;
• To operate our responsible gambling self-exclusion and limit-setting systems.

8 Data Sharing & Third Parties

metro4d does not sell, rent, or trade your Personal Data to third parties for their own commercial or marketing purposes. Data is shared with third parties only in the following limited circumstances:

To facilitate MYR transactions, we share the minimum necessary payment information with payment processors operating Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and Malaysian banking partners (Maybank, CIMB, Public Bank, Hong Leong) and cryptocurrency settlement providers. These processors are contractually required to process data only for the specific payment purpose and to maintain appropriate security standards.

Identity and age verification is conducted with the assistance of licensed KYC service providers. These partners receive only the documents and data necessary to complete verification and are bound by strict confidentiality and data protection obligations.

metro4d is required by applicable law and its licensing conditions to disclose certain player data to regulatory bodies, financial intelligence units, and law enforcement agencies upon lawful request. Such disclosures are made only to the extent required by law and without prior notification to the Player where legally restricted.

We engage certain third-party service providers to support Platform operations — including cloud hosting infrastructure, analytics, customer support software, and fraud detection systems. Each provider is engaged under a Data Processing Agreement that restricts use of Personal Data to the specific service purpose and requires implementation of appropriate security measures.

In the event of a merger, acquisition, asset sale, or restructuring involving metro4d, Player data may be transferred to the relevant successor entity. Where such a transfer occurs, the acquiring entity will be required to honour the protections described in this Policy or provide Players with advance notice of any material changes.

9 Data Retention

metro4d retains Personal Data for the period necessary to fulfil the purposes for which it was collected, or for the minimum period required under applicable law — whichever is longer.

• Active Account Data: Retained for the duration of the Account and for a minimum of five (5) years following Account closure, in accordance with anti-money laundering record-keeping requirements;
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction;
• KYC Documents: Retained for a minimum of five (5) years from the date of submission or Account closure, whichever is later;
• Customer Support Logs: Retained for a period of three (3) years from the date of the interaction;
• Technical & Usage Data: Retained for up to twenty-four (24) months in identifiable form; thereafter in anonymised aggregate form.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or irreversibly anonymised. You may request early deletion of certain data categories under your rights set out in Section 12, subject to our legal retention obligations which may override deletion requests.

10 Data Security

metro4d implements appropriate technical and organisational measures designed to protect Personal Data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers;
• Encryption of sensitive data fields (including passwords and payment identifiers) at rest using industry-standard algorithms;
• Strict access controls ensuring that employee access to Personal Data is limited to those with a legitimate operational need;
• Regular security assessments, vulnerability scanning, and penetration testing of Platform infrastructure;
• Multi-factor authentication requirements for administrative Platform access;
• Incident response procedures for the detection, investigation, and mitigation of potential data security breaches.

11 Cookies & Tracking Technologies

The metro4d Platform uses cookies and similar tracking technologies to operate certain features, remember your preferences, and understand how visitors interact with the site. The categories of cookies we use are set out below:

You may control the use of optional cookies through your browser settings. Disabling certain cookies may affect the functionality of parts of the Platform. metro4d does not use third-party advertising cookies or behavioural advertising networks.

12 Your Data Rights

As a Data Subject, you hold the following rights in relation to your Personal Data held by metro4d. These rights may be exercised at any time by contacting our support team, subject to applicable legal limitations and verification of your identity.

13 Children's Privacy & Age Restriction

The metro4d Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or store Personal Data from any person under the age of 21.

All registration submissions are subject to age verification checks. Where metro4d identifies or suspects that Personal Data has been provided by a person under 21 — whether during registration, KYC review, or at any subsequent point — the Account will be immediately suspended, all data associated with that Account will be deleted, and any deposits will be returned net of applicable regulatory obligations.

If you are a parent or guardian and believe your child has submitted Personal Data to metro4d, please contact us immediately at the details provided in Section 15 and we will take prompt action to investigate and, where confirmed, to delete the data concerned.

14 Changes to This Privacy Policy

metro4d reserves the right to update or amend this Privacy Policy at any time. Material changes — meaning changes that substantively affect how we collect, use, or share your Personal Data — will be communicated to registered Players via email or through a prominent notice on the Platform, with a minimum of fourteen (14) days' advance notice before the changes take effect.

Minor or administrative amendments (such as correcting typographical errors or updating contact details) may take effect immediately upon publication without prior notice. The date of the most recent revision is indicated in the "Last Updated" field at the top of this document.

Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not accept the revised Policy, you must discontinue use of the Platform and may close your Account in accordance with our Terms and Conditions.

15 Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact the metro4d data team via any of the following channels. We respond in English, Bahasa Melayu, and Chinese.