Daya4D is committed to protecting the personal data of every player. This Privacy Policy explains exactly what we collect, why we collect it, and how you can control it.
Last Updated: 1 January 2026Daya4D does not sell, rent, or trade your personal information to third parties for marketing purposes. Your data stays within our platform and its necessary service providers.
We only collect data that is necessary for the specific purpose it is needed — account management, KYC verification, fraud prevention, or service improvement. Nothing extraneous.
This policy sets out every category of data we process, why we process it, and how long we retain it. No hidden data practices and no buried disclosures in footnotes.
You have the right to access, correct, restrict, or request deletion of your personal data. Requests are processed within 30 days of receipt via our support team.
All data transmitted between your device and the Daya4D Platform is protected by bank-grade SSL encryption. Stored data is protected by equivalent security controls at rest.
We do not keep your data longer than necessary. Each data category has a defined retention window, after which records are securely deleted or anonymised.
This Privacy Policy ("Policy") sets out the manner in which Daya4D ("we", "us", "our", "the Platform") collects, uses, stores, shares, and protects the personal data of individuals ("you", "the user", "the player") who access or use the Daya4D online gaming platform located at https://daya4d.lat, including all associated services, features, promotions, and communications.
Daya4D is committed to handling your personal data with transparency, care, and in accordance with applicable data protection principles. This Policy is intended to provide you with a clear and complete picture of our data practices so that you can make informed decisions about your use of the Platform.
By registering an account, making a deposit, using any Platform feature, or otherwise providing your personal information to Daya4D, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.
This Policy should be read alongside our Terms & Conditions, which govern your contractual relationship with Daya4D.
For the purposes of this Privacy Policy, the following terms carry the meanings set out below:
Daya4D collects the following categories of personal data from users of the Platform. We do not collect data beyond what is described here, and all collection is limited to what is necessary for the stated purposes.
Daya4D collects personal data through the following means:
Data you provide directly when you register an account, complete KYC verification, make deposits or withdrawals, communicate with our support team, or participate in promotions. This is the primary source of personal data we hold.
Technical data collected automatically when you access the Platform, including IP addresses, device identifiers, session data, browser characteristics, and interaction logs. This data is collected via server logs, cookies, and similar tracking technologies described in Section 8.
In limited circumstances, Daya4D may receive personal data from authorised third-party sources including:
The following table summarises the purposes for which Daya4D processes personal data, the categories of data involved, and the applicable lawful basis for each processing activity:
| Purpose | Data Categories | Lawful Basis |
|---|---|---|
| Account creation & management | Registration data, contact data | Contract performance |
| Identity & age verification (KYC) | KYC documents, identity data | Legal obligation; contract |
| Processing deposits & withdrawals | Financial data, payment identifiers | Contract performance |
| Fraud detection & AML compliance | Transaction data, device IP | Legal obligation; legitimate interest |
| Responsible gambling monitoring | Gameplay data, session duration, deposit patterns | Legitimate interest; legal obligation |
| Customer support & dispute resolution | Communications data, account data | Contract performance; legitimate interest |
| Platform security & abuse prevention | Technical data, IP, session logs | Legitimate interest |
| Promotional & bonus administration | Registration data, transaction data, gameplay data | Contract performance; consent |
| Platform analytics & improvement | Technical data, interaction logs (anonymised) | Legitimate interest |
| Email & notification communications | Email, name, preferences | Consent; contract performance |
| Regulatory compliance & record keeping | All categories as required | Legal obligation |
Daya4D processes personal data one or more of the following legal bases, as applicable to each specific processing activity:
Daya4D does not sell, rent, or trade your personal data to third parties for their own commercial or marketing purposes. We share personal data only in the following limited circumstances:
We engage third-party service providers who process data on our behalf under binding data processing agreements. These providers act only on our instructions and are contractually prohibited from using your data for any purpose other than providing the service to us. Current categories of data processors include:
We may disclose personal data to law enforcement agencies, regulatory authorities, courts, or other governmental bodies where we are legally compelled to do so by a valid court order, subpoena, regulatory requirement, or applicable law. We will notify you of such disclosures where we are legally permitted to do so.
In the event of a merger, acquisition, restructuring, or sale of all or part of Daya4D's business, personal data held by the Platform may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material changes to data processing practices that would result.
Daya4D uses cookies and similar technologies (including local storage and session tokens) to operate the Platform, maintain your session state, and collect anonymised analytics data. Below is a summary of the cookie categories we use:
You can manage non-essential cookie preferences via your browser settings. Disabling analytics cookies will not affect your ability to use the Platform. Instructions for cookie management are available in your browser's help documentation.
Daya4D retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal or regulatory obligations. The following retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years | Legal / AML obligation |
| KYC documents | Duration of account + 7 years | Regulatory requirement |
| Financial transaction records | 7 years from transaction date | AML / legal obligation |
| Gameplay & betting logs | 3 years from session date | Dispute resolution; integrity |
| Customer support records | 3 years from last interaction | Legitimate interest |
| Technical / device logs | 12 months from collection | Security monitoring |
| Marketing consent records | Until consent withdrawn + 2 years | Consent audit trail |
| Self-exclusion records | Duration of exclusion + 10 years | Responsible gambling obligation |
Upon expiry of the applicable retention period, data is either securely deleted using industry-standard destruction methods or anonymised such that it can no longer be associated with an identifiable individual.
Daya4D implements a multi-layered technical and organisational security framework to protect personal data against unauthorised access, loss, destruction, or alteration. The following controls are in place:
Subject to applicable data protection laws, you have the following rights with respect to the personal data Daya4D holds about you. These rights may be subject to limitations where their exercise conflicts with our legal obligations — for example, our obligation to retain KYC records for regulatory purposes.
Request a copy of the personal data we hold about you. We will respond within 30 days of a verified request.
Request correction of inaccurate or incomplete personal data. Corrections that affect KYC records may require additional verification.
Request deletion of your personal data where processing is no longer necessary. This right is subject to our legal retention obligations.
Request that we restrict processing of your data in certain circumstances, such as while a dispute about data accuracy is pending.
Request a copy of data you have provided to us in a structured, commonly used, machine-readable format for transfer to another service.
Object to processing based on legitimate interests, including profiling. We will cease processing unless we can demonstrate compelling legitimate grounds.
Withdraw previously given consent for processing activities at any time. Withdrawal does not affect processing carried out before withdrawal.
Lodge a complaint with the relevant data protection supervisory authority if you believe your data rights have not been respected by Daya4D.
To exercise any of these rights, please contact our Data Protection team via the contact details provided in Section 16. We will verify your identity before processing any data subject request to prevent unauthorised access to your information.
The Daya4D Platform is strictly intended for persons who are 21 years of age or older. We do not knowingly collect or process personal data of individuals under the age of 21.
Age verification is a mandatory component of our KYC process. All accounts must pass age verification before withdrawal of funds is permitted. Where we discover, after the fact, that an account is held by an individual under the age of 21, we will:
As an internationally licensed platform serving players across Malaysia and other jurisdictions, Daya4D's infrastructure and certain service providers may be located in countries other than Malaysia. This means your personal data may be transferred to, stored in, or processed in a country with different data protection standards than those in your home jurisdiction.
Where personal data is transferred internationally, Daya4D ensures that appropriate safeguards are in place to protect the data, including:
The Daya4D Platform may reference or integrate with third-party services — including payment gateways (Touch 'n Go eWallet, Boost, GrabPay, DuitNow/FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, and cryptocurrency networks), analytics tools, and customer support infrastructure. These third parties operate under their own independent privacy policies.
Daya4D is not responsible for the privacy practices of third-party services. We encourage you to review the privacy policies of any third-party service you interact with in connection with your use of the Platform. Our responsibility extends only to the personal data we receive from those providers and how we handle it internally.
All third-party data processors engaged by Daya4D are subject to contractual data processing obligations as described in Section 7.1 of this Policy.
Daya4D reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform functionality. When material changes are made to this Policy, we will provide notice to registered players via email or Platform notification at least seven (7) days before the revised Policy takes effect.
The "Last Updated" date at the top of this Policy indicates when the most recent version was published. We recommend reviewing this Policy periodically. Continued use of the Platform following the effective date of any update constitutes your acceptance of the revised Policy.
If you object to any changes to this Policy, you must cease using the Platform and may request account closure in accordance with our Terms & Conditions.
If you have any questions, concerns, or requests regarding this Privacy Policy, or if you wish to exercise any of the data rights described in Section 11, please contact us through the following channels:
When submitting a data subject request, please include your registered account email address and a clear description of your request. We will verify your identity before processing the request to protect against unauthorised access.
We aim to respond to all privacy-related enquiries and data subject requests within 30 calendar days of receipt. Where a request is complex or involves multiple data categories, this period may be extended by up to 60 days, in which case we will notify you of the extension and the reasons for it.
Our support team is available around the clock to answer privacy questions, handle data requests, or guide you through your rights as a Daya4D player. 21+ only.