Wing4D Privacy Policy

Introduction

Wing4D ("we", "us", "our", "the Company", "the Platform") is committed to protecting the privacy and personal data of all individuals who interact with our online betting and casino platform, accessible at wing4d.click. This Privacy Policy ("Policy") describes how Wing4D collects, uses, stores, shares, and protects personal information in connection with the provision of our services to players across Malaysia, including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam.

This Policy applies to all personal data processed by Wing4D in connection with the Platform, including data collected during account registration, identity verification, deposits and withdrawals, gameplay, customer support interactions, and marketing communications.

By registering a Wing4D account or otherwise using our services, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the Platform.

Definitions

For the purposes of this Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person ("Data Subject"), including name, identification number, contact details, financial information, and online identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Controller" means Wing4D, as the entity that determines the purposes and means of Processing your Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of Wing4D pursuant to a written data processing agreement.
• "KYC Data" means identity and address verification documents submitted by a Member in fulfilment of Know Your Customer requirements, including government-issued identification, proof of address, and selfie verification images.
• "Cookies" means small text files placed on your device by a website to store browsing preferences, session information, and analytical data.
• "Member" means a registered user of the Wing4D Platform who holds an active Account.

Data We Collect

Wing4D collects Personal Data across several categories, depending on your level of engagement with the Platform:

3.1 Registration Data

When you create a Wing4D account, we collect your full legal name, date of birth, Malaysian mobile phone number, email address, and a self-selected password (stored in hashed, non-recoverable form).

3.2 Identity Verification (KYC) Data

Before processing withdrawal requests, we collect government-issued photo identification (Malaysian MyKad, Passport, or Driver's Licence), proof of residential address (utility bill or bank statement), and a selfie photograph holding the submitted identification document.

3.3 Financial Data

We collect transaction records including deposit amounts, withdrawal requests, payment method identifiers (e-wallet account references, bank account numbers), and transaction timestamps. We do not store full credit or debit card numbers on our systems; card tokenisation is handled by our PCI-DSS compliant payment partners.

3.4 Gameplay & Betting Data

We collect records of your betting and gaming activity on the Platform, including bet placement times, bet amounts, game types, outcomes, and session durations. This data is used for account management, responsible gambling monitoring, and dispute resolution.

3.5 Technical & Usage Data

We automatically collect technical data including your IP address, device type and operating system, browser type and version, referral URLs, pages visited within the Platform, and session duration. This data is collected via server logs and first-party analytics tools.

3.6 Communications Data

When you contact Wing4D's support team via live chat, email, or other channels, we retain records of those communications — including the content of messages, timestamps, and support agent notes — for quality assurance and dispute resolution purposes.

How We Collect Data

Wing4D collects Personal Data through the following methods:

• Directly from you: Through account registration forms, KYC document uploads, deposit and withdrawal requests, and contact with our support team.
• Automatically: Through server logs, browser cookies, and first-party analytics tools as you navigate and interact with the Platform.
• From third-party identity verification providers: When we use licensed third-party KYC services to verify the authenticity of documents you submit.
• From payment service providers: Including transaction confirmation data from Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX, and cryptocurrency networks when you make deposits or withdrawals.
• From fraud prevention services: In circumstances where Wing4D engages third-party fraud detection providers to protect the integrity of our Platform.

Data Processing & Use

Wing4D uses your Personal Data for the following purposes. Where a legal basis is required, it is identified in Section 6.

Legal Basis for Processing

Wing4D processes your Personal Data on the following legal bases:

• Contract Performance: Processing necessary to perform the services you have contracted for — including account management, deposits, withdrawals, and gameplay — is conducted on the basis of contract performance.
• Legal Obligation: Wing4D is subject to regulatory requirements including anti-money laundering (AML) obligations, KYC requirements, and responsible gambling rules. Processing undertaken to comply with these obligations is conducted on the basis of legal obligation.
• Legitimate Interests: Where Wing4D has a legitimate interest that is not overridden by your privacy rights — such as fraud prevention, platform security, and service improvement through analytics — data is processed on that basis.
• Consent: Where Wing4D relies on your consent — such as for direct marketing communications — you may withdraw that consent at any time by updating your communication preferences within your Account settings.

Data Sharing & Disclosure

Wing4D does not sell your Personal Data. We may share your data with trusted third parties in the following limited circumstances:

7.1 Payment Service Providers

We share transaction data with payment providers — including Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, DuitNow, and FPX — solely for the purpose of processing your deposits and withdrawals.

7.2 Identity Verification Providers

KYC documents may be shared with licensed third-party identity verification services that operate under binding data processing agreements with Wing4D. These providers are not permitted to retain or use your documents for any purpose other than identity verification on our behalf.

7.3 Fraud Prevention and Security Services

Technical data such as IP addresses and device fingerprints may be shared with fraud detection service providers to identify and prevent fraudulent activity on the Platform.

7.4 Legal and Regulatory Authorities

Wing4D may disclose Personal Data to law enforcement agencies, regulatory authorities, or other governmental bodies where required to do so by applicable law, court order, or regulatory direction. We will notify you of such disclosure where legally permitted to do so.

7.5 Corporate Transactions

In the event of a merger, acquisition, or sale of Wing4D's business assets, Personal Data may be transferred to the acquiring entity as part of that transaction, subject to equivalent privacy protections being maintained.

Data Retention

Wing4D retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention schedule applies:

• Account and registration data: Retained for the duration of the account's active status, plus 7 years following account closure to meet AML and financial record-keeping obligations.
• KYC verification documents: Retained for a minimum of 5 years following the end of the Member relationship, in accordance with applicable AML regulations.
• Financial transaction records: Retained for 7 years from the date of each transaction.
• Gameplay and betting records: Retained for 5 years from the date of each transaction or session.
• Customer support communications: Retained for 3 years from the date of the interaction.
• Technical and usage data (logs): Retained for 12 months, after which they are anonymised or deleted.
• Marketing consent records: Retained until you withdraw consent, plus 3 years thereafter for compliance evidence purposes.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised such that it can no longer be attributed to an individual.

Cookies & Tracking Technologies

Wing4D uses first-party cookies and similar tracking technologies to operate and improve the Platform. We do not deploy third-party advertising cookies or cross-site tracking technologies.

9.1 Types of Cookies Used

• Essential Cookies: Required for the Platform to function correctly, including maintaining your login session, storing cart/betting slip data, and enabling security features. These cookies cannot be disabled without impairing Platform functionality.
• Performance Cookies: First-party analytics cookies that help us understand how Members use the Platform — including which pages are most visited, session duration, and error occurrences. This data is aggregated and anonymised.
• Preference Cookies: Store your Platform preferences, including language settings, odds format, and display options, so they are retained across sessions.

9.2 Managing Cookies

You may configure your browser to block or delete cookies. Please note that disabling essential cookies will prevent you from logging in and using the Platform. Blocking performance or preference cookies will not affect core functionality but may degrade your experience.

Data Security

Wing4D implements appropriate technical and organisational measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or alteration. Our security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• AES-256 encryption for sensitive data at rest, including KYC documents and payment method identifiers.
• Password hashing using bcrypt with per-user salting — we cannot recover your password and will never ask for it.
• Two-factor authentication (2FA) available and strongly recommended for all Member accounts.
• Access controls ensuring that only authorised Wing4D personnel with a business need can access Member data.
• Regular penetration testing and vulnerability assessments conducted by third-party security specialists.
• Incident response procedures that enable Wing4D to identify, contain, and notify affected parties of data breaches within required timeframes.

Your Rights as a Data Subject

You have the following rights in respect of your Personal Data held by Wing4D. To exercise any of these rights, please contact us using the details in Section 15. We will respond to all data subject requests within 14 business days of receipt.

Minors & Age Verification

The Wing4D Platform is strictly intended for individuals who are 21 years of age or older. Wing4D does not knowingly collect Personal Data from persons under the age of 21. During the KYC verification process, we verify the date of birth stated by each Member against government-issued identification documents. Any account found to have been opened by a person under 21 years of age will be immediately closed and all associated data deleted in accordance with our retention policy, except where retention is required by law.

If you believe that Wing4D has inadvertently collected Personal Data from an underage individual, please contact us immediately at the details provided in Section 15. We will investigate and take corrective action without delay.

International Data Transfers

Wing4D's primary infrastructure and data storage is operated with Malaysian players in mind. Where Personal Data is transferred to or processed by third-party service providers — including identity verification partners and payment processors — that are located outside Malaysia, Wing4D ensures that appropriate safeguards are in place.

Such safeguards include: (i) binding contractual clauses in data processing agreements with all third-party processors; (ii) transfers to jurisdictions with adequacy decisions or equivalent data protection frameworks; and (iii) confirmation that recipient entities maintain data security standards equivalent to those applied by Wing4D.

Policy Amendments

Wing4D reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or Platform functionality. Where material changes are made, we will notify registered Members via email or a prominent in-platform notice at least 7 days before the updated Policy takes effect.

The "Last Updated" date at the top of this Policy reflects when the most recent revision was made. Your continued use of the Platform after the effective date of a revised Policy constitutes your acceptance of the updated terms. We encourage you to review this Policy periodically.

Contact Us

For any questions, concerns, or data subject requests related to this Privacy Policy or Wing4D's handling of your Personal Data, please contact our Data Protection team through the following channels. All contact details are provided for reference as plain text.