Privacy Policy stc4d – Protecting Your Personal Data

This Privacy Policy applies to all users who register, browse, or use any services provided by stc4d through our official website. By using the stc4d platform, you consent to the collection and use of your personal information as described in this policy.

Stc4d operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). We take our responsibilities seriously as both a data processor and data controller, ensuring that all information we hold is handled in a lawful, fair, and transparent manner.

This policy explains the types of information we collect, why we need it, how we use it, who we share it with (if anyone), and what rights you have regarding your personal data that we hold.

Stc4d collects various types of information from our users to ensure our services function properly and securely. The information we collect falls into two main categories:

A. Information You Provide Directly

• Full name as per official identification document (MyKad or passport)
• Date of birth and gender
• An active email address and Malaysian mobile number
• Current residential address in Malaysia
• Malaysian bank account number or e-wallet details (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay) for withdrawal purposes
• A copy of your identity document when required for identity verification purposes (KYC)
• Communications you send to our customer support team

B. Automatically Collected Information

• Your device's IP address and general geolocation information
• Web browser type, operating system, and device model used
• Activity log data — including pages visited, access times, and actions taken on the platform
• Gaming activity records — bets placed, games played, wins, and losses
• Cookie data and other tracking technologies as described in Section 6
• Financial transaction details — deposits, wagers, and withdrawals in MYR (RM)

Stc4d does not collect biometric data, health information, or any other sensitive data that is not relevant to the provision of our services.

Stc4d uses the information collected for lawful and transparent purposes. Below is a full list of the purposes for which your personal data is used:

• Identity Verification (KYC): To verify your identity, confirm that you meet the minimum age requirement of 18 years, and prevent fraud and money laundering.
• Account Management: To create and maintain your stc4d account, process registrations, manage logins, and ensure account security.
• Transaction Processing: To process deposits via DuitNow, FPX (Maybank2u, CIMB Clicks), Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay, as well as withdrawals to your bank account in MYR (RM).
• Gaming Services Provision: To allow you to access and play all games on stc4d, including slots, live casino, and table games.
• Service Communications: To send important account notifications, transaction alerts, security updates, and other necessary service communications.
• Customer Support: To handle enquiries, complaints, and assistance requests submitted to the stc4d support team.
• Promotions & Marketing (with consent): To send you promotional offers, bonuses, and special campaign information — only where you have given your consent to receive marketing communications.
• Platform Improvements: To analyse usage patterns, identify technical issues, and continually improve the quality of the user experience on stc4d.
• Legal Compliance: To fulfil legal obligations, meet regulatory reporting requirements, and cooperate with authorised authorities when required under Malaysian law.
• Fraud Prevention: To detect and prevent suspicious activity, fraud, collusion, or money laundering on our platform.

Stc4d will not use your data for any purpose beyond those stated above without first obtaining your explicit consent.

Stc4d does not sell, rent, or disclose your personal data to third parties for commercial purposes without your consent. However, under certain limited circumstances, we may share your information with the following parties:

• Payment Service Providers: Required transaction information will be shared with payment gateway providers such as DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay solely for the purpose of processing your financial transactions.
• Game Providers: Minimum necessary data may be shared with game software providers to enable access to the games you play on the stc4d platform.
• IT Service Providers: Companies providing technology infrastructure, hosting, and cybersecurity services for stc4d — all of whom are bound by strict confidentiality agreements.
• Legal Authorities: stc4d may share user information with Malaysian authorities (such as the police, courts, or regulatory bodies) when required by law or a valid court order.
• Fraud Investigators: In cases of suspected fraud, money laundering, or other unlawful activity, relevant information may be shared with authorised investigative agencies.

All third parties that receive data from stc4d are bound by strict data processing agreements and are required to uphold data protection standards equal to or higher than those we practise.

Stc4d implements comprehensive technical and organisational measures to protect your personal data from unauthorised access, alteration, disclosure, or destruction. The key security measures we employ include:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser and stc4d servers is encrypted using advanced SSL/TLS protocols.
• Data-at-Rest Encryption: Sensitive data such as passwords, bank account numbers, and personal identification details are stored in encrypted form within our databases.
• Strict Access Control: Only authorised stc4d staff are permitted to access users' personal data, and such access is strictly limited to what is necessary for their respective roles.
• 24/7 Security Monitoring: Our automated monitoring system operates around the clock to detect any suspicious activity or intrusion attempts.
• Regular Security Audits: stc4d conducts regular security audits and penetration testing to identify and address any vulnerabilities.
• Secure Data Backup: Your data is regularly backed up to secure, redundant locations to ensure continuous availability.

Data Retention Period: stc4d retains your personal data for as long as your account remains active or as long as necessary to provide our services. Once your account is closed, we may retain your data for up to 7 years to comply with Malaysian legal and financial reporting requirements. After this period, your data will be securely deleted or anonymised.

While we take all reasonable precautions, no security system can be guaranteed 100% breach-proof. Should a data security breach involving your information occur, stc4d will notify you and the relevant authorities within the timeframe required by law.

The stc4d website uses cookies and similar tracking technologies to enhance user experience and gather usage statistics. The following are the types of cookies we use:

• Essential Cookies: Required for core website functions such as login authentication, session management, and security. These cookies cannot be disabled.
• Performance Cookies: Collects information on how visitors use the stc4d website — the most frequently visited pages, time spent, and navigation paths. This information is used to improve website performance.
• Functional Cookies: Allows the website to remember your preferences, such as language, display settings, and login details, for a more convenient experience.
• Analytics Cookies: Used to analyse website traffic in aggregate for platform improvement purposes. Analytics data is anonymised and does not identify you personally.

You can manage your cookie preferences through your web browser settings. However, disabling certain cookies may affect the functionality and user experience of the stc4d website. By continuing to use the stc4d website, you consent to the use of cookies as described above.

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data that we hold:

• Right to Access: You have the right to request a copy of the personal data we hold about you. Such requests will be processed within 21 business days.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data. You may also update your profile information directly through your stc4d account settings.
• Right to Erasure: Under certain circumstances, you may request the deletion of your personal data. However, we may be unable to fulfil such requests in full where retention of that data is required for legal compliance or dispute resolution.
• Right to Restrict Processing: You may request that we restrict how we process your data in certain circumstances, such as while you are verifying the accuracy of your data or contesting its processing.
• Right to Object to Marketing: You may object to the use of your data for direct marketing purposes at any time by updating your communication preferences in your account settings or by contacting our support team.
• Right to Data Portability: You have the right to receive your personal data in a machine-readable format for transfer to another service provider, should you wish to do so.

To exercise any of the above rights, please contact our Data Protection Officer by email at [email protected] or through stc4d's customer support channels. We will endeavour to resolve your request within the timeframe prescribed by law.

The stc4d platform is exclusively restricted to adult users aged 18 years and above. stc4d does not knowingly collect, process, or store any personal data belonging to individuals under the age of 18.

Should we discover that we have collected data from an individual under the age of 18, we will take immediate steps to delete that data and close the associated account without any compensation or refund.

The stc4d website may contain links to third-party websites or services in certain contexts. This Privacy Policy applies solely to the stc4d platform and does not cover the privacy practices of any third-party websites or services you may access via links from our platform.

Stc4d is not responsible for the privacy policies, content, or security practices of any third-party websites. We encourage you to read and understand the privacy policy of any third-party website before providing them with your personal information.

In particular, when you are redirected to a third-party payment portal such as DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost, or ShopeePay to process a financial transaction, the privacy practices of that provider will apply to the portion of the transaction handled by them.

Stc4d reserves the right to modify, supplement, or amend this Privacy Policy at any time to reflect changes in our practices, legal developments, or operational requirements. We will notify you of any material changes to this Policy through:

• A prominent notice on the stc4d homepage
• Notification emails sent to the email address registered on your account
• A pop-up notification upon your next login after changes take effect

The "Last Updated" date at the top of this document will always reflect the most current version of our Privacy Policy. Your continued use of the stc4d platform after the effective date of any amendment will be deemed as your acceptance of the revised Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. If you disagree with any amendments, you have the right to close your account and discontinue use of the stc4d platform.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by stc4d, please reach out to us through the following channels:

• Privacy Email: [email protected] (for enquiries specifically related to data protection)
• Support Email: [email protected] (for general enquiries)
• Live Chat: Available 24 hours a day, 7 days a week via the stc4d website
• WhatsApp: The official WhatsApp number as listed on the stc4d website

Our Data Protection team will endeavour to respond to all privacy-related enquiries within 14 business days. For more complex data subject access requests, the resolution period may extend to up to 21 business days, as provided under Malaysia's PDPA.

This Privacy Policy is governed by and construed in accordance with the laws of Malaysia, including the Personal Data Protection Act 2010 (PDPA). Should any privacy-related dispute arise that cannot be resolved directly with stc4d, you have the right to refer your complaint to the Personal Data Protection Commissioner of Malaysia.