nara4d Privacy Policy — How We Handle Your Data

1 Introduction

This Privacy Policy ("Policy") describes how nara4d ("we", "us", "our") collects, processes, stores, and discloses personal data obtained from individuals ("you", "Player", "User") who access or use the nara4d online casino and sports betting platform available at nara4d.click (the "Platform").

This Policy applies to all personal data collected through the Platform, including data provided during account registration, identity verification, financial transactions, customer support interactions, and general use of the Platform's features and services.

nara4d is committed to handling personal data responsibly, transparently, and in accordance with applicable data protection principles. This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy.

2 Definitions

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial information, and behavioural data linked to an account.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure, or destruction, whether automated or manual.
• "Data Controller" means the entity that determines the purposes and means of processing personal data — in this context, nara4d.
• "Data Processor" means any third party that processes personal data on behalf of nara4d under a data processing agreement.
• "Consent" means a freely given, specific, informed, and unambiguous indication of the data subject's agreement to the processing of their personal data.
• "KYC" means Know Your Customer verification procedures, including identity document submission and address verification, required under nara4d's licensing obligations.
• "Cookies" means small text files stored on a user's device by a web browser at the instruction of a website, used to retain session and preference information.
• "Sensitive Data" means personal data warranting heightened protection, including government-issued identity numbers (e.g., Malaysian IC / MyKad number), financial account details, and source-of-funds documentation.

3 Data Controller

nara4d acts as the Data Controller in respect of all personal data collected through the Platform. As Data Controller, nara4d determines the purposes for which personal data is collected and the means by which it is processed.

For all privacy-related enquiries, data subject access requests, or complaints, Players may contact the nara4d Data Protection contact point at:

• Email: [email protected] (subject line: "Privacy / Data Request")
• Live Chat: Available 24/7 via the Platform interface

Where nara4d engages third-party Data Processors (for example, KYC verification providers, payment processors, or cloud infrastructure providers), those processors act strictly on nara4d's instructions and are bound by data processing agreements that prohibit unauthorised use of your personal data.

4 Data We Collect

nara4d collects the following categories of personal data, depending on how you interact with the Platform:

4.1 Identity & Registration Data

• Full legal name as it appears on your identity document;
• Date of birth (used for mandatory 21+ age verification);
• Malaysian IC (MyKad) number or passport number;
• Username and hashed account password;
• Nationality and country of residence.

4.2 Contact Data

• Email address (primary communication channel);
• Mobile phone number (for two-factor authentication and account alerts);
• Residential address (collected during KYC for address verification).

4.3 Financial & Payment Data

• Payment method details: e-wallet account identifiers (Touch 'n Go eWallet, Boost, GrabPay), DuitNow phone number or account number, FPX bank account identifiers (Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect);
• Transaction history: deposit amounts, withdrawal amounts, dates, and payment method used;
• Source of funds documentation where required for enhanced due diligence;
• All amounts are processed and recorded in Malaysian Ringgit (MYR).

4.4 KYC & Verification Documents

• Copies of government-issued identity documents (Malaysian IC, passport);
• Proof of address documents (utility bills, bank statements) dated within 3 months;
• Selfie photographs submitted for liveness verification where required.

4.5 Platform Usage & Behavioural Data

• Login timestamps, session durations, and IP addresses;
• Device information: device type, operating system, browser, and screen resolution;
• Gameplay data: games played, bets placed, wagers, wins and losses, and time spent per session;
• Sportsbook data: betting markets selected, odds accepted, bet types (single, accumulator, Mix Parlay);
• Responsible gambling tool usage: deposit limit settings, self-exclusion requests, session timer activations.

4.6 Customer Support Data

• Live chat transcripts and email correspondence with the nara4d support team;
• Details of complaints, disputes, and their resolutions.

5 How Data Is Collected

Personal data is collected through the following channels and methods:

6 Legal Basis for Processing

nara4d processes personal data on the following legal bases, depending on the purpose:

• Contractual necessity: Processing required to perform the contract with you — including account creation, payment processing, game facilitation, and withdrawal handling;
• Legal obligation: Processing required to comply with nara4d's licensing conditions, including KYC verification, anti-money laundering (AML) procedures, and retention of transaction records;
• Legitimate interests: Processing for fraud prevention, platform security, responsible gambling monitoring, and service improvement — where such interests are not overridden by your data protection rights;
• Consent: Processing for non-essential communications (promotional emails, personalised offers) where you have given explicit opt-in consent. Consent may be withdrawn at any time via your account settings or by emailing [email protected].

7 How We Use Your Data

nara4d uses collected personal data for the following purposes:

7.1 Account Management

Creating, maintaining, and securing your nara4d account; verifying your identity and age (21+); enabling login and two-factor authentication; processing account settings changes.

7.2 Financial Transactions

Processing deposits and withdrawals via Malaysian payment methods (Touch 'n Go eWallet, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, Boost, GrabPay); maintaining accurate transaction records; verifying payment method ownership.

7.3 Regulatory Compliance & AML

Conducting KYC identity and address verification; screening transactions against AML risk thresholds; reporting suspicious transactions to relevant authorities under our licensing obligations; maintaining records as required by applicable regulations.

7.4 Fraud Prevention & Platform Security

Detecting and preventing account fraud, bonus abuse, multi-accounting, money laundering, and underage access; maintaining platform integrity through automated and manual risk monitoring systems.

7.5 Responsible Gambling

Monitoring gameplay patterns for indicators of problem gambling; enforcing deposit limits, session limits, and self-exclusion requests; contacting Players proactively where responsible gambling concerns are identified.

7.6 Customer Support

Investigating and resolving account queries, complaints, and disputes; providing personalised support through live chat and email.

7.7 Platform Improvement & Analytics

Analysing aggregated and anonymised usage data to improve Platform performance, user experience, and product offerings. Individual behavioural data is not sold or shared with third parties for commercial profiling purposes.

7.8 Marketing Communications (Consent-Based)

Sending promotional offers, bonus notifications, and event alerts to Players who have opted in to marketing communications. Marketing messages will always be relevant to the Platform's services and will not involve third-party advertising. Opt-out is available at any time.

8 Data Sharing & Disclosure

nara4d does not sell, rent, or trade personal data with third parties. We share personal data only in the circumstances described below, and only to the minimum extent necessary:

• KYC & Identity Verification Providers: Third-party identity verification services that process document submissions and liveness checks on nara4d's behalf under strict data processing agreements;
• Payment Processors: Payment infrastructure providers facilitating MYR transactions via DuitNow, FPX, and e-wallet platforms. These providers receive only the transaction data necessary to process and verify payments;
• Cloud Infrastructure Providers: Hosting and data storage providers that store encrypted platform data on nara4d's behalf, subject to confidentiality and security obligations;
• Regulatory & Law Enforcement Authorities: Where required by applicable law, our licensing conditions, or a valid legal order — including mandatory AML reporting obligations. nara4d will disclose the minimum data required to comply and will notify affected Players where legally permitted to do so;
• Fraud Prevention Networks: Shared fraud intelligence services used to detect multi-accounting, bonus abuse, and financial crime patterns across the online gaming industry;
• Professional Advisers: Legal, accounting, and compliance advisers bound by professional confidentiality obligations, where disclosure is necessary for nara4d to obtain professional advice.

9 International Transfers of Personal Data

As nara4d operates under international online gaming licensing, some personal data may be transferred to, stored in, or processed in countries outside of Malaysia. These countries may have data protection laws that differ from those in Malaysia.

Where such international transfers occur, nara4d ensures that appropriate safeguards are in place to protect your personal data, including:

• Standard contractual clauses or equivalent data transfer agreements with receiving entities;
• Ensuring receiving parties maintain security standards equivalent to nara4d's own requirements;
• Limiting data transferred internationally to the minimum necessary for the relevant processing purpose.

By registering an account and using the Platform, you acknowledge and consent to the international transfer of your personal data as described in this section.

10 Cookies & Tracking Technologies

nara4d uses cookies and similar tracking technologies on the Platform. The following categories of cookies are used:

nara4d does not use third-party advertising cookies, retargeting pixels, or social media tracking tags. You may manage non-essential cookie preferences via your browser settings. Disabling strictly necessary cookies may impair Platform functionality.

11 Data Retention

nara4d retains personal data for the periods specified below, after which data is securely deleted or anonymised:

• Active account data (identity, contact, and account settings): Retained for the duration of your account's active status;
• KYC documents and identity verification records: Retained for a minimum of five (5) years following account closure, as required by our licensing and AML compliance obligations;
• Financial transaction records: Retained for a minimum of seven (7) years from the transaction date for regulatory compliance and audit purposes;
• Customer support correspondence: Retained for three (3) years from the date of the last interaction, unless the matter is subject to an ongoing dispute;
• Marketing consent records: Retained for the duration of the consent, plus three (3) years from the date of opt-out to evidence historical consent status;
• Analytics and behavioural data: Aggregated and anonymised after 12 months; individual-level data is not retained beyond this period.

Upon account closure at a Player's request, nara4d will delete or anonymise personal data beyond what is required for ongoing regulatory retention obligations, typically within 60 days of the closure being confirmed and all pending matters resolved.

12 Your Rights as a Data Subject

Subject to applicable law and our regulatory obligations, you have the following rights in relation to your personal data held by nara4d:

• Right of Access: You may request a copy of the personal data we hold about you, along with information about how it is processed. We will respond within 30 days;
• Right to Rectification: If any personal data we hold is inaccurate or incomplete, you may request that it be corrected. Minor details (email address, phone number) may be updated directly in your account settings;
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data. This right is subject to limitations where we are required to retain data under our regulatory and legal obligations (e.g., KYC records, transaction records);
• Right to Restrict Processing: You may request that we limit the processing of your data in certain circumstances — for example, while a rectification request is under review;
• Right to Data Portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format where technically feasible and legally applicable;
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of prior processing;
• Right to Object: You may object to processing based on legitimate interests, including profiling, where you believe your interests outweigh nara4d's legitimate purpose.

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Subject Request". We may require identity verification before processing your request. All requests will be acknowledged within 5 business days and resolved within 30 calendar days.

13 Data Security

nara4d implements a comprehensive set of technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• Encryption: All data in transit is protected by 256-bit SSL/TLS encryption. Sensitive data at rest (including KYC documents and financial records) is stored using AES-256 encryption;
• Access Controls: Personal data is accessible only to nara4d personnel and authorised processors who require it for a specific, defined purpose. Role-based access controls and least-privilege principles are enforced;
• Two-Factor Authentication: Mandatory 2FA is available for all player accounts and required for all internal administrative access to systems holding personal data;
• Regular Security Audits: nara4d engages independent security professionals to conduct penetration testing and infrastructure audits on a regular basis;
• Incident Response: A documented data breach response procedure is maintained. In the event of a breach affecting personal data, affected Players will be notified as required by applicable obligations.

You also have a role in keeping your data secure. You are responsible for maintaining the confidentiality of your account credentials and for logging out of the Platform on shared devices. If you suspect your account has been compromised, contact our support team immediately.

14 Minors & Age Policy

The nara4d Platform is strictly for players aged 21 years and above. nara4d does not knowingly collect, store, or process personal data from individuals under the age of 21. Age verification is conducted as part of the mandatory KYC process prior to withdrawals being processed.

If nara4d becomes aware that personal data has been collected from a person under 21 years of age, the account will be immediately suspended, all winnings will be forfeited, and deposited funds will be returned to the source payment method following verification. The relevant personal data will be permanently deleted from our systems beyond what is required for regulatory reporting.

Parents and guardians who believe their child has registered an account on the nara4d Platform are encouraged to contact us immediately at [email protected].

15 Policy Amendments

nara4d reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or Platform functionality. The effective date at the top of this page will be updated whenever material changes are made.

Where changes are material and affect how your personal data is processed, nara4d will notify registered Players via email or a prominent in-Platform notice at least 14 days before the changes take effect, where practicable. For non-material changes (e.g., clarifications or formatting updates), the revised Policy will be posted without advance notice.

Continued use of the Platform following the effective date of any amendment constitutes acceptance of the revised Privacy Policy. If you do not accept the revised Policy, you may request account closure as described in our Terms & Conditions.

16 Contact Us & Complaints

For all privacy-related enquiries, data subject access requests, or concerns about how nara4d handles your personal data, please contact us using the following details:

• Email: [email protected] — subject line: "Privacy / Data Request"
• Live Chat: Available 24/7 through the Platform. State "Data Privacy Request" at the start of the chat session to be connected with our compliance team.
• Response time: Acknowledgement within 5 business days; full resolution within 30 calendar days.

If you are not satisfied with nara4d's response to a data privacy concern, you may escalate the matter to the relevant data protection authority or our Platform's licensing oversight body. Full escalation contact details are available from our compliance team upon request.