Privacy Policy

1 Introduction

This Privacy Policy ("Policy") issued by chk4d ("Company", "We", "Us", "Our"), the operator of the online casino and sports betting platform accessible at https://chk4d.cam ("Platform"). This Policy applies to all individuals who access, register on, or otherwise interact with the Platform, including registered players and visitors ("You", "User", "Data Subject").

chk4d is committed to protecting the privacy and personal data of all individuals who use our Platform. We recognise that when you share your personal information with us — whether during registration, identity verification, payment processing, or in the course of using our services — you are placing trust in us. We take that responsibility seriously.

This Policy describes in detail what personal data we collect, the purposes for which we use it, the legal basis on which we process it, how long we retain it, and your rights in relation to it. This Policy should be read in conjunction with our Terms & Conditions, which govern the broader relationship between you and chk4d.

2 Definitions

For the purposes of this Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial data, and online identifiers.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, erasure, or destruction.
• "Data Controller" means chk4d, the entity that determines the purposes and means of processing personal data.
• "Data Processor" means any third party that processes personal data on behalf of chk4d under a contractual arrangement.
• "KYC" means Know Your Customer — the identity and age verification process required under anti-money laundering and platform eligibility obligations.
• "Sensitive Personal Data" means a subset of personal data warranting heightened protection, including government-issued identification numbers (e.g., MyKad), financial account details, and health-related information.
• "Consent" means a freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data for a specified purpose.
• "Cookie" means a small text file stored on your device by a website for the purpose of tracking sessions, preferences, and analytics.

3 Data We Collect

chk4d collects personal data in the following categories depending on how you interact with the Platform:

3.1 Registration Data — Collected when you create an account:

• Full legal name
• Date of birth
• Email address
• Mobile phone number
• Residential address (including city and postcode)
• Username and encrypted password

3.2 Identity Verification (KYC) Data — Collected to comply with age verification and anti-money laundering obligations:

• Copy of Malaysian MyKad (front and back) or valid passport photo page
• Proof of address document (utility bill, bank statement dated within 90 days)
• Proof of payment method ownership where required

3.3 Financial Transaction Data — Collected when you make deposits or withdrawal requests:

• Payment method type (e.g., Touch 'n Go eWallet, DuitNow, FPX, Maybank2u, CIMB Clicks)
• Transaction amounts in MYR
• Transaction timestamps and reference numbers
• Partial payment account identifiers (e.g., last 4 digits of account number)

3.4 Technical & Usage Data — Collected automatically when you access the Platform:

• IP address and approximate geolocation
• Device type, operating system, and browser version
• Session duration and page interaction data
• Game play logs (game type, bet amounts, outcomes session times)
• Login timestamps and authentication events

3.5 Communications Data — Collected when you contact us:

• Contents of live chat transcripts
• Email correspondence content and metadata
• Support ticket records and resolution notes

4 Data Processing

We use the personal data we collect for the following specific purposes:

5 Legal Basis for Processing

chk4d processes personal data one or more of the following legal bases, as applicable to each processing activity:

• Contractual Necessity: Processing is necessary to perform our contract with you — specifically, to provide you with access to the chk4d Platform and associated services as described in our Terms & Conditions.
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including anti-money laundering obligations, age verification requirements, and financial record-keeping mandates.
• Legitimate Interests: Processing is necessary for the legitimate interests of chk4d or a third party, provided these interests do not override your fundamental privacy rights. This includes fraud prevention, platform security, and improving user experience through anonymised analytics.
• Consent: Where we rely on your consent — for example, to send you promotional emails or enable non-essential cookies — we will obtain your explicit consent before doing so. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6 Data Sharing

chk4d does not sell, rent, or trade your personal data. We share personal data with third parties only in the following defined circumstances:

• Payment Service Providers: We share necessary transaction data with licensed Malaysian payment processors including DuitNow operators, FPX (Financial Process Exchange), and e-wallet service providers (Touch 'n Go eWallet, Boost, GrabPay) solely to process deposits and withdrawals. These providers are contractually bound to handle data in accordance with applicable data protection standards.
• Identity Verification Providers: KYC documents may be processed by contracted third-party identity verification specialists to validate authenticity and comply with age and AML requirements. These processors operate under strict data processing agreements.
• Game Content Providers: Anonymised gameplay data (game ID, bet amount, outcome) may be shared with licensed game software providers for the purpose of game performance and fairness auditing. No personally identifiable information is shared for this purpose.
• Regulatory Authorities and Law Enforcement: We will disclose personal data to relevant authorities where required by applicable law, court order, or regulatory direction, including to assist with investigations into financial crime, fraud, or money laundering.
• Professional Advisors: Our legal, accounting, and compliance advisors may access personal data on a strictly need-to-know basis and are bound by professional confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of assets, personal data may be transferred to the successor entity, provided that the successor agrees to process such data in a manner consistent with this Policy.

7 Cookies & Tracking Technologies

chk4d uses cookies and similar tracking technologies to operate the Platform, maintain your session, analyse usage patterns, and personalise your experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential to the functioning of the Platform — including session authentication, security tokens, and language preferences. These cannot be disabled without impairing Platform functionality. No consent is required for these cookies.
• Functional Cookies: Used to remember your preferences, such as preferred payment method or game lobby filter settings. These enhance usability but are not strictly required for the Platform to operate.
• Analytics Cookies: Used to collect anonymised data about how users interact with the Platform — page views, session duration, and feature usage. This data is aggregated and used to improve Platform performance.
• Responsible Gambling Cookies: Used to track session times and trigger responsible gambling notifications such as time-on-site reminders and spending alerts. These are considered necessary for player protection.

You may manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. Withdrawing consent for functional or analytics cookies will not affect your ability to access core Platform features.

8 Data Retention

chk4d retains personal data for the minimum period necessary to fulfil the purposes described in this Policy, or as required by applicable law. Specific retention periods by data category are as follows:

• Account & Registration Data: Retained for the duration of the active account plus 5 years following account closure, to comply with financial record-keeping and AML obligations.
• KYC Documents: Retained for a minimum of 5 years from the date of verification, in accordance with applicable anti-money laundering regulatory requirements.
• Financial Transaction Records: Retained for 7 years from the date of each transaction, consistent with standard financial record-keeping requirements.
• Customer Support Communications: Retained for 3 years from the date of the last interaction, for quality assurance and dispute resolution purposes.
• Technical & Session Logs: Retained for 12 months, after which they are automatically deleted or fully anonymised.
• Marketing Preferences and Consent Records: Retained until consent is withdrawn, plus a reasonable administrative period thereafter.

Upon expiry of the relevant retention period, personal data is either securely deleted using industry-standard deletion methods or irreversibly anonymised such that it can no longer be linked to any individual.

9 Data Security

chk4d implements a comprehensive set of technical and organisational security measures designed to protect personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption in Transit: All data transmitted between your device and chk4d servers is protected using 256-bit TLS/SSL encryption.
• Encryption at Rest: Sensitive personal data — including KYC documents, payment account identifiers, and government ID data — is encrypted at rest using AES-256 or equivalent standards.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. All internal system access is subject to role-based access control (RBAC), multi-factor authentication, and audit logging.
• Two-Factor Authentication (2FA): Available to all registered players and required for internal administrative access to systems containing personal data.
• Regular Security Auditing: chk4d conducts regular internal security reviews and periodic independent vulnerability assessments of its infrastructure and applications.
• Incident Response: In the event of a confirmed personal data breach that poses risk to affected individuals, chk4d will notify relevant parties within the timeframe required by applicable law.

10 User Rights

Subject to applicable law and any overiding legal obligations on chk4d, you have the following rights in relation to your personal data:

• Right of Access: You may request a copy of the personal data we hold about you, along with information about how it is being processed.
• Right to Rectification: You may request that inaccurate or incomplete personal data be corrected or updated. For registration details, many corrections can be made directly within your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where: it is no longer necessary for the original purpose; you have withdrawn consent and no other legal basis applies; or it has been unlawfully processed. This right is subject to overiding legal retention obligations.
• Right to Restriction of Processing: You may request that we temporarily restrict processing of your data — for example, while a rectification request is being assessed.
• Right to Data Portability: You may request that personal data you have provided to us be transmitted to you or a nominated third party in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests, including profiling. You may also withdraw consent for marketing communications at any time through your account preferences.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of prior processing.

To exercise any of these rights, contact our support team via live chat or by emailing [email protected]. We will respond to all verifiable requests within 30 days. We may need to verify your identity before fulfilling any data rights request. Requests that are manifestly unfounded or excessive may be subject to a reasonable fee or refusal.

11 Minors & Age Policy

The chk4d Platform is strictly intended for individuals aged21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Registration requires date of birth confirmation, and KYC verification is used to confirm age eligibility before withdrawal privileges are granted.

If we become aware that personal data has been collected from a person under the age of 21 without appropriate verifiable parental consent, we will take immediate steps to delete that data and close the associated account. If you believe a minor has registered on the Platform, please notify us immediately at [email protected].

12 International Data Transfers

As an online platform, chk4d may process or store certain personal data on servers or through service providers located outside of Malaysia. Where personal data is transferred internationally, chk4d ensures that adequate safeguards are in place to protect the data in transit and at the destination, including:

• Transfers to jurisdictions deemed to provide an adequate level of data protection by relevant authorities;
• Standard contractual clauses or equivalent contractual protections agreed with data processors operating in third countries;
• Technical and organisational measures ensuring that data in transit remains encrypted and access-controlled regardless of the processing location.

All Malaysian player data — including MyKad numbers, financial transaction records, and KYC documents — is subject to heightened protection requirements during any international transfer.

13 Policy Changes

chk4d reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. When changes are material — meaning they significantly affect how we use your personal data or your rights as a Data Subject — we will notify you via a notice on the Platform or by email to your registered address prior to the changes taking effect.

Continued use of the Platform after the revised Policy takes effect constitutes your acceptance of the updated terms. If you do not agree with any changes to this Policy, you should discontinue use of the Platform and may request account closure.

The current version of this Policy is always accessible at https://chk4d.cam/privacy-policy. The "Last Updated" date at the top of this page reflects the most recent revision.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by chk4d, please contact us through the following channels:

• Live Chat: Available 24/7 via the chat feature on the Platform. Our data privacy team can be reached directly through this channel for data rights requests.
• Email: [email protected] — please include "Privacy Request" in your subject line for faster routing to the relevant team.
• Response Time: We aim to respond to all privacy-related enquiries within 5 business days and to fulfil verified data rights requests within 30 days.

For general platform queries, please visit our FAQ page. For questions about how we use your data in connection with responsible gambling monitoring, please visit our Responsible Gambling page.