Privacy Policy

Introduction

This Privacy Policy (hereinafter the "Policy") is published by Arta4D (hereinafter "Arta4D", "we", "us", or "our"), the operator of the online sports betting and live casino platform accessible at https://arta4d.asia (the "Platform"). This Policy applies to all personal data collected from or about users of the Platform and describes how that data is processed in accordance with applicable data protection legislation.

By registering an account, accessing the Platform, or otherwise providing your personal data to Arta4D, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein.

This Policy should be read in conjunction with our Terms and Conditions, which govern the use of the Platform and all associated services. Where this Policy uses defined terms without specific definition, those terms carry the meaning given to them in the Terms and Conditions.

Definitions

For the purposes of this Privacy Policy, the following terms shall bear the meanings assigned below:

• "Personal Data" — any information that identifies or could reasonably be used to identify a natural person, directly or indirectly, including but not limited to name, identification number, contact details, financial information, and device identifiers.
• "Processing" — any operation or set of operations performed on personal data, including collection, recording, storage, use, disclosure, erasure, or destruction, whether or not by automated means.
• "Data Subject" — the natural person to whom a given set of Personal Data relates; in the context of this Policy, this is primarily the registered User of the Platform.
• "Data Controller" — the entity that determines the purposes and means of the processing of Personal Data. Arta4D is the Data Controller in respect of data collected through the Platform.
• "Data Processor" — a third party that processes Personal Data on behalf of the Data Controller, subject to a binding data processing agreement.
• "Cookies" — small text files placed on your device by a website to store information about your browsing session, preferences, or behaviour.
• "KYC" — Know Your Customer; the regulatory process of verifying the identity, age, and eligibility of a User prior to the provision of certain services.

Data Controller

Arta4D is the Data Controller for all personal data collected through the Platform. If you have any questions regarding the exercise of your data rights, the lawful basis for any processing activity, or any other matter relating to this Privacy Policy, you may contact us via the details provided in Section 16 (Contact Us) of this document.

Data We Collect

Arta4D collects personal data in the categories described below. We collect only the minimum data necessary for the specified purposes and do not engage in excessive or disproportionate data collection.

4.1 Identity and Contact Data

• Full legal name as it appears on government-issued identification
• Date of birth (for age verification purposes)
• Malaysian NRIC number or passport number (for KYC verification)
• Residential address, including postcode and state within Malaysia
• Email address and mobile telephone number

4.2 Financial and Transactional Data

• Bank account details associated with Maybank, CIMB, Public Bank, or Hong Leong accounts used for deposits or withdrawals
• E-wallet identifiers for Touch 'n Go eWallet, Boost, or GrabPay accounts linked to your Arta4D profile
• Cryptocurrency wallet addresses used for BTC or USDT transactions
• Transaction history, including deposit amounts, withdrawal amounts, and dates
• Betting history, including markets wagered on, stake amounts, and outcomes

4.3 Technical and Usage Data

• Internet Protocol (IP) address and approximate geolocation
• Device type, operating system, and browser version
• Session duration, pages visited, and features accessed within the Platform
• Login timestamps and access logs
• Cookie identifiers and similar tracking technology data (see Section 9)

4.4 Communications Data

• Content of live chat transcripts, email exchanges, and support ticket submissions
• Responses to surveys, feedback forms, or promotional communications

How We Collect Your Data

Arta4D collects your personal data through the following mechanisms:

Legal Basis for Data Processing

Arta4D processes your personal data only where a valid legal basis exists under applicable data protection law. The legal bases we rely upon are set out below:

• Performance of a Contract: Processing necessary to provide the Services you have requested, including account management, bet settlement, deposit processing, and withdrawal execution.
• Legal Obligation: Processing required to comply with applicable laws, including anti-money laundering (AML) regulations, KYC obligations, tax reporting requirements, and responses to lawful requests from regulatory or law enforcement authorities.
• Legitimate Interests: Processing carried out in pursuit of Arta4D's legitimate business interests — such as fraud prevention, Platform security, service improvement, and responsible gambling monitoring — where those interests are not overridden by your fundamental rights.
• Consent: Processing based on your freely given, specific, and informed consent, such as for the delivery of marketing communications or the use of non-essential cookies. You may withdraw consent at any time without detriment to your continued use of the Platform.

How We Use Your Personal Data

Arta4D uses the personal data we collect for the following purposes:

7.1 Account Management and Service Delivery

To create and maintain your Arta4D account, verify your identity and age, process deposits and withdrawals in MYR, settle bets, apply promotional credits, and communicate with you about your account status and transactions.

7.2 Regulatory Compliance

To fulfil our obligations under applicable anti-money laundering regulations, to perform identity verification checks, to monitor transactions for suspicious activity, and to report to regulatory authorities as required by law.

7.3 Fraud Prevention and Platform Security

To detect, investigate, and prevent fraudulent activity, account compromise, and abuse of promotions, using both automated systems and human review. This includes monitoring for the creation of duplicate accounts and the use of unauthorised automated tools.

7.4 Responsible Gambling Monitoring

To monitor betting and gaming activity for patterns that may indicate problem gambling behaviour, to intervene proactively where appropriate, and to administer self-exclusion and deposit-limit tools requested by Users.

7.5 Platform Improvement and Analytics

To analyse usage patterns, diagnose technical issues, test new features, and improve the performance and user experience of the Platform for all Malaysian users.

7.6 Marketing Communications

Where you have opted in to receive marketing communications, to send you information about promotions, bonuses, new features, and other Arta4D offerings relevant to your preferences. You may opt out of marketing communications at any time by contacting our support team.

Data Sharing & Disclosure

Arta4D does not sell, rent, or commercially transfer your personal data to third parties. We may share your data in the limited circumstances described below:

8.1 Service Providers and Data Processors

We engage third-party service providers to process data on our behalf, strictly for the purposes of operating the Platform. All processors are bound by contractual obligations that require them to maintain the confidentiality and security of your data and to process it only in accordance with our instructions. Categories of processors include: payment gateway operators, KYC and identity verification providers, fraud-detection technology suppliers, and cloud infrastructure providers.

8.2 Regulatory and Law Enforcement Authorities

We may disclose your personal data to relevant regulatory bodies, law enforcement agencies, tax authorities, or other governmental bodies where required to do so by applicable law, court order, or lawful regulatory instruction. In such cases, we will disclose only the minimum information necessary to satisfy the legal requirement.

8.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of the assets of Arta4D, your personal data may be transferred to the acquiring entity as part of that transaction, subject to equivalent data protection commitments.

Cookies & Tracking Technologies

Arta4D uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small data files stored on your device that allow the Platform to recognise your browser and remember certain information about your session and preferences.

You may manage your cookie preferences at any time through your web browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. For detailed browser-specific instructions, refer to your browser's help documentation.

Data Retention

Arta4D retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The principal retention periods applied by Arta4D are as follows:

• Account Data: Retained for the duration of your account registration and for a period of five (5) years following account closure, to comply with anti-money laundering and regulatory record-keeping requirements.
• Transaction and Betting Records: Retained for a minimum of five (5) years from the date of each transaction, in line with financial regulatory requirements applicable to gambling operators.
• KYC Documentation: Retained for a minimum of five (5) years following the completion of the KYC process, or longer if required by applicable regulations.
• Communications and Support Records: Retained for three (3) years from the date of the most recent communication, unless a longer period is required for the resolution of an ongoing dispute.
• Technical and Usage Logs: Retained for up to twelve (12) months for security and analytics purposes, after which they are anonymised or deleted.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with Arta4D's data disposal procedures.

Data Security

Arta4D implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the Arta4D Platform is encrypted in transit using TLS 1.2 or higher.
• AES-256 Encryption at Rest: Personal data stored in Arta4D's databases is encrypted at rest using AES-256, the same standard used by major financial institutions.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis, with role-based access controls enforced across all internal systems.
• Two-Factor Authentication (2FA): 2FA is available to all registered Users and is required for all internal administrative access to data systems.
• Continuous Security Monitoring: Automated security tools monitor Platform activity and network traffic 24 hours a day for indicators of compromise or anomalous behaviour.
• Regular Security Audits: Arta4D engages independent security professionals to conduct periodic penetration testing and vulnerability assessments of its systems.

International Data Transfers

In the course of operating the Platform and delivering services to Users across Malaysia — including in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam — Arta4D may transfer personal data to service providers or infrastructure partners located in jurisdictions outside Malaysia. Where such transfers occur, Arta4D ensures that adequate safeguards are in place to protect the transferred data, including:

• Standard contractual clauses approved by the relevant data protection authority, incorporated into all data processing agreements with non-Malaysian service providers.
• Transfers only to jurisdictions that provide an adequate level of data protection as assessed by Arta4D's legal and compliance team.
• Binding corporate rules or equivalent transfer mechanisms where applicable.

Arta4D will not transfer personal data to any jurisdiction that does not offer an acceptable standard of protection without first obtaining your explicit consent or ensuring that an approved transfer mechanism is in place.

Your Rights as a Data Subject

As a User of the Arta4D Platform and a data subject under applicable data protection law, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact our support team as described in Section 16.

Arta4D will respond to all verified data subject requests within the timeframe required by applicable law. We may require verification of your identity before processing a request to protect against fraudulent access to personal data.

Children's Privacy

The Platform and all associated Services are strictly intended for use by individuals aged 21 years and above. Arta4D does not knowingly collect personal data from or about individuals under the age of 21. Age verification is performed as part of the account registration and KYC process, and any account found to be held by a person under 21 will be immediately closed.

If you have reason to believe that a minor has provided personal data to Arta4D, or has registered an account in contravention of our age restriction, please contact our support team immediately. Upon receipt of a verified report, Arta4D will take prompt steps to close the relevant account and delete all associated personal data.

Amendments to this Privacy Policy

Arta4D reserves the right to amend, update, or replace this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our data processing practices, or the services we provide. The effective date displayed at the top of this document will be updated each time a new version is published.

Where a material change is made to this Policy that significantly affects how we process your personal data, Arta4D will endeavour to notify registered Users by email or via an in-platform notification prior to the change taking effect. Continued use of the Platform following publication of a revised Policy constitutes your acceptance of the amended terms.

We encourage you to review this Policy periodically to remain informed about how Arta4D is protecting your information. Previous versions of this document may be requested from our support team.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy, your personal data, or the exercise of your rights as a data subject, please contact the Arta4D data protection team through the channels set out below. We are committed to handling all privacy-related enquiries with the care, professionalism, and timeliness they deserve.

We will acknowledge all privacy-related requests within 2 business days and will endeavour to resolve them fully within the timeframe required by applicable data protection law. For questions relating to responsible gambling, please visit our Responsible Gambling page.