Bambu4D Privacy Policy – Player Data Protection Malaysia

Welcome to the Bambu4D Privacy Policy page. This document explains in detail how Bambu4D ("we", "platform" or "Company") collects, uses, stores, protects and discloses your personal data as a member or visitor of our platform at bambu4d.best.

Bambu4d operates on the principle that player privacy is the foundation of trust. We understand that you entrust us with sensitive personal information — including identity details, financial information, and activity history — and we take that responsibility very seriously. This policy clearly explains how that trust is upheld every day.

This Privacy Policy applies to all bambu4d services, including the web platform, mobile applications, customer support, and all communications between bambu4d and its members. It should be read together with Terms & Conditions and Responsible Gaming Policy us.

Bambu4d collects various types of data depending on how you interact with our platform. Below is a detailed breakdown of each data category:

Registration & Identity Data

• Full name as stated in your official Malaysian identity document.
• Identity card number (MyKad) or passport for KYC identity verification purposes.
• Date of birth to verify age eligibility (18 years and above).
• An active email address for account communications and notifications.
• Malaysian mobile number for SMS verification and support.
• Malaysian residential address for AML compliance purposes.

Financial & Transaction Data

• Malaysian bank account number or eWallet details (Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay) registered for deposits and withdrawals.
• Records of all deposit and withdrawal transactions in MYR (RM), including date, time, amount and payment method.
• Account balance history and fund movements.

Gaming Activity Data

• Gaming session records including games played, bets placed, outcomes and session duration.
• Esports betting history for Mobile Legends, DOTA 2, CS2, Valorant and other match titles.
• Bonus and promotion usage statistics.

Technical & Device Data

• IP address and approximate geographic location for security and compliance purposes.
• Device type, operating system and web browser version used.
• Login session data, including access times and in-account activity.
• Cookie data and similar technologies — explained further in Section 8.

Bambu4D uses your personal data for the following purposes only. We do not use data for anything not listed below without prior notice and your consent:

• Account management: Creating, verifying and managing your Bambu4D account, including password resets, 2FA verification and profile information updates.
• Transaction processing: Processing deposits, withdrawals and bonus payments made in MYR through your chosen Malaysian payment method.
• Identity verification (KYC): Complying with anti-money laundering (AML) and know your customer (KYC) legal requirements that platforms are obligated to meet in order to operate responsibly.
• Provision of gaming services: Gives you access to all bambu4d games, including slots, Live Casino, table games, esports, and the VIP Rewards programme.
• Security & fraud prevention: Detecting and preventing unauthorised access, money laundering, bonus abuse and other fraudulent activities that could harm the platform or other members.
• Customer support: Resolving enquiries, complaints and assistance requests that you submit via Live Chat, email or WhatsApp.
• Legal compliance: To meet reporting, record-keeping, and cooperation obligations with Malaysian authorities as required by law.
• Service communications: Sending important account-related notifications covering transactions, security verifications and policy updates. These are not marketing communications and cannot be disabled as they form part of the core service.
• Platform improvement: Analysing aggregated, anonymised usage patterns to improve the user experience, platform performance, and game variety based on the needs of Malaysian players.

If bambu4d wishes to use your data for direct marketing purposes such as promotional emails or special offer notifications, we will seek your separate consent, and you may withdraw that consent at any time through the notification settings in your account.

Bambu4D processes your personal data on the basis of one or more of the following legal grounds, as applicable to the processing in question:

• Contractual performance: The majority of our data processing is necessary to fulfil the service agreement between you and Bambu4D — including account management, payment processing and providing access to games.
• Legal obligation: bambu4d is required under Malaysian law to maintain financial transaction records, carry out KYC procedures, and cooperate with authorities in lawful investigations. This is not discretionary — it is our legal obligation.
• Legitimate interest: Some data processing is carried out on the basis of Bambu4D's legitimate interests in operating a safe and responsible business — such as fraud detection, security analysis and service improvement.
• Consent: For processing not covered by the bases above — such as optional marketing communications — we will obtain your explicit consent beforehand. You may withdraw this consent at any time.

Bambu4d complies with Malaysia's Personal Data Protection Act 2010 (PDPA), which governs how personal data of Malaysians is collected and used by business organisations. All data processing is carried out within the bounds permitted by applicable Malaysian law.

Bambu4d does not sell or rent your personal data. Data sharing with third parties occurs only in the following limited circumstances and with strict controls in place:

• Malaysia payment providers: Required transaction information is shared with service providers such as Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay and FPX (Maybank2u, CIMB Clicks) solely to process your deposits and withdrawals. All these providers are bound by strict confidentiality agreements.
• Game providers: Gaming platform providers such as Evolution (live casino) and Playtech may receive session data required to run the games. This data is limited to what is necessary and governed by data processing agreements.
• Legal authorities: bambu4d will disclose data when required by a court order, a lawful request from Malaysian authorities, or other legal obligations. We will not disclose data beyond what is legally required.
• Technical services: The cloud infrastructure and cybersecurity providers we work with may process data as part of delivering technical services to bambu4d. All such providers are bound by data protection agreements.

Bambu4d employs multiple layers of security to protect your personal data from unauthorised access, alteration, disclosure, or destruction:

• Encryption in transit: All communications between your browser or app and bambu4d's servers are protected with 256-bit TLS/SSL encryption. This means data cannot be read even if it is intercepted in transit.
• Data-at-rest encryption: Sensitive data stored in Bambu4D's databases — including financial and identity information — is stored in encrypted form using modern encryption algorithms.
• Access controls: Access to member personal data within bambu4d's internal systems is restricted on a need-to-know basis. Only staff with a legitimate business need may access specific data categories, and all access is logged and monitored.
• Security monitoring: Our 24/7 monitoring system detects unusual activity across the platform, including repeated failed login attempts, access from unrecognised locations and suspicious activity patterns.
• Regular security testing: Bambu4D conducts regular security audits and penetration testing to identify and address any vulnerabilities before they can be exploited.
• Staff training: All bambu4d staff with access to member data undergo regular data protection and information security training.

Your personal data is retained for as long as necessary for the original purpose of collection or to comply with legal obligations — as outlined in the schedule in Section 2. Once the retention period expires, data is securely deleted or anonymised.

In the event of a data security incident that materially affects your personal data, Bambu4D is committed to notifying you within 72 hours of the incident being identified, explaining what happened, what data was involved and the steps we have taken to resolve the issue and prevent recurrence.

As a Bambu4D member and a user whose personal data we process, you hold the following rights, which you may exercise at any time:

To exercise any of the above rights, contact us by email at support@bambu4d.best with the subject line "Data Rights Request" or via Live Chat within the platform. We will respond and process requests within 30 business days. In complex cases, this period may be extended to 60 days, with notification provided to you.

Identity verification may be required before a data rights request is processed, to ensure we only disclose or delete data to the verified account owner.

Bambu4D uses cookies and similar tracking technologies to keep the platform running smoothly and to deliver a better experience for our users. Here is an overview of the types of cookies we use:

You can manage your cookie settings through your web browser or via the privacy settings in your Bambu4D account. Disabling optional cookies will not affect the core functionality of the platform, but may reduce certain convenience features.

Bambu4D is a gaming platform for adults aged 18 and above only. We do not knowingly collect or process personal data from individuals under the age of 18.

The Bambu4D registration process requires age verification and identity verification. Should we discover that data collected belongs to a minor, the account in question will be closed immediately and all related data will be deleted from our systems within 30 days.

Parents or guardians who believe a minor in their care may have registered on Bambu4D should contact us immediately at support@bambu4d.best so that prompt action can be taken.

Bambu4d maintains complete records of all betting and gaming activity on your account. This includes esports betting history for Mobile Legends, DOTA 2, CS2, and Valorant matches, slots and jackpot game sessions, Live Casino table sessions, and all associated transactions in MYR.

This gaming activity data is used for the following purposes:

• Winnings verification and withdrawals: Accurate records ensure that every win is calculated correctly and that withdrawals are processed for the precise amount.
• Dispute resolution: In the event of a dispute over game outcomes or payouts, activity records serve as the evidence used to resolve the matter fairly.
• AML compliance: Unusual betting patterns are monitored as part of our anti-money laundering compliance responsibilities.
• Responsible gaming: Activity data enables Bambu4D's responsible gaming team to identify patterns that may indicate problem gambling and to reach out to members who may need support.
• VIP programme support: Activity data is used to calculate VIP Rewards points and determine membership tier eligibility.

Gaming activity history can be requested by members through account settings or by contacting Bambu4D support. We provide activity statements in a readable format upon request.

Bambu4D reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, Malaysian legal requirements, or the evolution of our services.

When we make significant changes to this policy, we will:

• Updating the "Last Updated" date at the top of this document.
• Sending notifications to all members via their registered email at least 14 days before changes take effect.
• Displaying a prominent notice within the Bambu4D platform upon login during the period before changes take effect.

For minor changes that do not affect your fundamental rights — such as clarifications of language or typographical corrections — we may update the document without specific notification beyond updating the document date.

Continued use of the Bambu4D platform after any changes to the Privacy Policy take effect will be considered acceptance of the updated policy. If you do not agree with the changes, please contact us to discuss your options, including account closure if necessary.

For any enquiries, requests or complaints regarding the Bambu4D Privacy Policy or how we handle your personal data, you can reach our privacy team at:

• Privacy email: support@bambu4d.best — Include "Privacy Enquiry" or "Data Request" in the email subject line. We respond within 24 hours on business days and process requests within 30 days.
• Live Chat: Available 24 hours a day within the Bambu4D platform. Suitable for general enquiries about privacy and data security.
• WhatsApp: For urgent matters relating to account security or privacy concerns that require prompt action.

All official communications from Bambu4D use the @bambu4d.best domain only. If you receive a communication claiming to be from Bambu4D but using a different domain, it is likely a phishing attempt — please report it to us and do not click any links in that message.

We value all privacy-related feedback, as it helps us continually improve the way we protect Malaysian players' data.