Privacy Policy gaya4d — How We Protect the Personal Data of Malaysia Users

1Introduction

This Privacy Policy explains how gaya4d (operating under the domain gaya4d.pro) collects, processes, stores and protects your personal information when you use our platform. This document has been written in English for the convenience of our Malaysia users.

We understand that privacy is a sensitive and important matter. When you register an account, make a transaction, or simply browse the website gaya4d, you are entrusting us with your personal information. We take that trust seriously through high-grade security systems and responsible data management practices.

This policy applies to all users of the platform gaya4d, including unregistered visitors, registered members and former members whose accounts have been closed. By continuing to use this platform, you agree to the terms of this Privacy Policy.

2Data We Collect

gaya4d collects various types of data for different purposes. Below is a summary of the data we collect and how it is sourced:

We only collect data that is genuinely necessary for the stated purposes. We do not collect sensitive data categories such as health information, political views or religious beliefs unless required by applicable law.

3How We Use Your Data

The data collected is used by gaya4d for the following purposes, and no further:

• Account management — allows you to register, log in, and manage your account securely
• Transaction processing — to process deposits, withdrawals, and all other financial transactions you make
• Identity verification (KYC) — to verify that you are a legitimate user and meet the minimum age eligibility requirements
• Fraud prevention — to detect and prevent unauthorised activity, money laundering, and platform abuse
• Customer support — enables our team to assist you more effectively when issues arise
• Platform improvements — to analyse usage patterns and improve overall platform performance and user experience
• Service communications — to send important notifications such as transaction confirmations, policy updates, and security alerts
• Legal compliance — to meet reporting and compliance requirements mandated by the relevant authorities

gaya4d will not use your data to make automated decisions that materially affect you without human involvement in the evaluation process.

4Data Sharing with Third Parties

gaya4d does not sell, rent, or trade your personal data to third parties for advertising or marketing purposes. Data sharing only occurs in the following limited situations:

• Payment service providers — payment processors we use (such as FPX, DuitNow, and e-wallet services) receive the transaction information necessary to complete payments. All such providers are bound by strict confidentiality agreements.
• Game providers — game providers such as Pragmatic Play, PG Soft, and others may receive a unique identifier (not your real name) for the purpose of game service delivery and technical dispute resolution.
• Legal authorities — we are legally required to disclose certain information to authorities upon receipt of a valid request, such as in financial crime or money laundering investigations.
• Identity verification services — third-party KYC service providers that assist us in verifying user identity receive the documents you submit, solely for verification purposes.

5Encryption & Security Measures

Your data security is our top priority gaya4d. We implement multiple layers of technical and organisational security to protect your information from unauthorised access, loss or misuse:

• 256-bit SSL Encryption — all communication between your device and Gaya4D servers is protected by the same bank-grade encryption used by financial institutions
• Data encryption at rest — sensitive data such as passwords is stored using one-way hashing that cannot be reversed
• Two-factor authentication (2FA) — an additional security layer is available to protect your account from unauthorised access
• 24/7 Monitoring — our security systems monitor for suspicious activity around the clock and will respond automatically upon detecting any anomaly
• Periodic Penetration Testing — independent security experts periodically test our systems to identify and address vulnerabilities before they can be exploited
• Internal access controls — Gaya4D staff only have access to data required for their specific duties — the principle of least privilege is strictly enforced

While we take every reasonable precaution, no security system can guarantee complete protection. Should a data breach occur that affects you, we will notify you via your registered email within a reasonable timeframe after the breach is detected.

6Cookies & Tracking Technologies

gaya4d uses cookies and similar tracking technologies to enhance your experience. Cookies are small text files stored on your device when you browse our website.

Types of cookies we use:

• Essential Cookies — required for core platform operations such as login authentication and session management. These cookies cannot be disabled without affecting platform functionality.
• Analytics Cookies — helps us understand how users interact with our platform — which pages are visited most, how long sessions last, and so on. This data is used in aggregate and cannot be traced back to any specific individual.
• Functional Cookies — to save your preferences such as language, display theme, and other settings so you do not need to reconfigure them each time you log in.

You can manage cookie settings through your web browser preferences. However, disabling essential cookies may affect your ability to use certain platform features. gaya4d.

7User Rights Regarding Personal Data

As a user gaya4d, you have several rights regarding your personal data, all of which we fully respect:

To exercise any of the above rights, please contact our support team gaya4d via Live Chat. We will process your request within 30 business days and may require identity verification before any action is taken.

8Data Retention Period

gaya4d retains your personal data for as long as necessary for the purposes stated in this policy, or as required by applicable law — whichever is longer.

• Active account data — retained for the duration your account is active and for a specified period after account closure
• Financial transaction records — retained for a minimum of seven (7) years in accordance with financial reporting legal requirements
• Security logs — retained for 90 days for security incident investigation purposes
• Support communication records — retained for two (2) years after a dispute or enquiry is resolved
• Analytics data — retained in aggregated and anonymised form indefinitely for platform improvement purposes

Once the retention period expires, your data will be securely deleted or anonymised so it can no longer be linked to you as an individual.

9Changes to This Privacy Policy

gaya4d may update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or service improvements. When material changes are made, we will:

• Updating the "Updated" date at the top of this document
• Displaying a prominent notice on the platform's home page for at least seven (7) days
• Sending a notification to the email address registered to your account

Continued use of the platform gaya4d after the effective date of any changes will be considered acceptance of the updated Privacy Policy. If you do not agree with the changes, you have the right to close your account and request data deletion before the changes take effect.

10Contact Us About Privacy

If you have any questions, concerns or requests regarding this Privacy Policy or the way we handle your personal data, we encourage you to contact us directly. The gaya4d committed to providing clear and timely responses.

The fastest way to reach us is through the Live Chat feature available at the bottom corner of every page on the platform. For more detailed privacy-related enquiries, you may also contact us via our official support email.