4yes Privacy Policy — Our Commitment to Protecting Your Data

4yes collects your personal data in several ways as you use our platform. The following are the categories of data collected:

Data you provide directly:

• Full name and identity card number (for KYC verification)
• A valid Malaysian phone number
• Email address (if provided)
• Payment method details — Touch 'n Go, GrabPay, Boost, ShopeePay, or DuitNow e-wallet account numbers, or FPX, Maybank2u, CIMB Clicks bank account information
• Identity verification documents requested during the KYC process

Data collected automatically during platform use:

• IP address and approximate location information
• Device type, operating system, and browser used
• Records of all login and logout sessions
• Full betting activity history — date, time, game type, bet amount and outcome
• Deposit and withdrawal records, including method and amount
• Communication logs with the customer support team
• Cookie data and tracking technologies described further in Section 5

Personal data collected by 4yes is used solely for the following purposes:

• Account Management: Creating, verifying and managing your account. Processing phone number verification during registration and KYC verification when required.
• Payment Processing: Securely processes your deposits and withdrawals through your chosen Malaysian payment methods. Ensures payments are directed correctly and helps prevent fraud.
• Service Delivery: Running all games, maintaining accurate betting records, calculating and crediting winnings and bonuses, and managing your VIP Rewards programme at 4yes.
• Security & Fraud Prevention: To detect and prevent multi-account abuse, identity fraud, money laundering, and other suspicious activity that could compromise the security of the platform and other players.
• Customer Support: Resolving queries, disputes, and complaints with access to relevant account history.
• Legal Compliance: Fulfilling the reporting and record-keeping obligations required under Malaysian law, including the Anti-Money Laundering Act (AMLA).
• Platform Improvement: Analysing aggregated usage patterns to improve the interface, performance and games library 4yes.
• Marketing Communications: Delivering promotional offers, bonus information, and platform updates — only to users who have consented to receive such communications.

4yes does not sell or rent your personal data to third parties. However, there are situations where we need to share certain information with external parties in order to provide our services to you:

• Payment Processors: Required transaction information is shared with payment providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and banks supporting FPX, Maybank2u, and CIMB Clicks. This is a technical requirement for processing your deposits and withdrawals.
• Game Providers: Required game session information is shared with live casino studio providers and other game providers that the platform 4yes integrates, to ensure games run correctly.
• Technical Service Provider: Companies providing infrastructure, hosting, analytics, and security services to 4yes may have limited access to the data required for their specific tasks. All such providers are bound by strict confidentiality agreements.
• Regulatory Authority: 4yes will disclose information to Malaysian authorities when required to do so by a court order, warrant, or lawful directive from a relevant law enforcement agency.

In all cases where data is shared with third parties, 4yes ensures that only the data strictly necessary for that specific purpose is shared — nothing beyond that.

4yes implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or deletion:

• All data in transit is protected by TLS 1.3 / SSL 256-bit encryption — all communication between your device and 4yes cannot be intercepted.
• Data stored in our databases is encrypted using industry-standard AES-256 encryption.
• Access to player data within the company is restricted and governed on a need-to-know basis.
• Our 24/7 security monitoring system keeps watch for unauthorised access attempts and suspicious activity.
• Player account passwords are stored as one-way hashes that cannot be decrypted — even by 4yes itself.
• Data backups are performed regularly and stored in a secure, separate location.

In the event of a data breach that materially affects your account, 4yes will notify you as soon as possible via your registered phone number or email address, in accordance with the notification requirements under Malaysia's PDPA.

Platform 4yes uses cookies and similar tracking technologies to enhance your experience and enable essential platform functions. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functionality — secure login, session verification, CSRF protection, and access control. Without these cookies, the platform cannot operate. These cookies cannot be disabled.
• Session Cookies: Keeps you logged in so you don't have to sign in again each time you navigate to a new page. Expires automatically after a period of inactivity or when you log out.
• Analytics Cookies: Collects anonymised data on how players use the platform — pages visited, time spent, and navigation patterns. This data is used to improve the user experience 4yes.
• Preference Cookies: Saves your preferences such as display language, preferred table limits, and interface settings so you do not have to reconfigure them each time you use the platform.
• Security Cookies: Assists our fraud detection systems in identifying suspicious sessions and protecting your account from unauthorised login attempts.

You can manage your cookie preferences through your browser settings. Please note that disabling essential cookies will affect the functionality of the platform. 4yes significantly and may prevent you from logging in or playing.

Under Malaysia's PDPA 2010, you have the following rights regarding your personal data processed by 4yes:

• Right of Access: You have the right to request a copy of all personal data we hold about you. This request will be processed within 14 business days.
• Right to Rectification: If your data is inaccurate or incomplete, you can update it directly through your account profile settings or by contacting our support team.
• Right to Erasure: You may request the deletion of your personal data when it is no longer required for the original purpose it was collected, or when you withdraw your consent — subject to the minimum retention requirements under Malaysian law.
• Right to Object: You may object to the processing of your data for direct marketing purposes at any time. Such requests will be actioned immediately.
• Right to Portability: You may request your data in a structured, machine-readable format.
• Right to Withdraw Consent: Where data processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the validity of any processing that took place prior to that withdrawal.

To exercise any of the rights above, contact us by email at support@4yes.best with the subject line "PDPA Data Rights Request". Please include your registered phone number for identity verification purposes. 4yes will respond within 14 business days.

4yes may send you marketing communications relating to promotions, bonuses, new games and special offers — but only with your consent. Here's how we handle marketing communications:

• During registration, you are given the option to opt in or opt out of receiving marketing communications from 4yes.
• Types of marketing communications we may send include: SMS notifications about active promotions, alerts when bonuses have been credited, updates on new game releases, and invitations to tournaments or special events.
• You can opt out of marketing communications at any time via the notification settings in your account, or by clicking the "Unsubscribe" link in any promotional email.
• Unsubscribe requests will be processed within 5 business days. After that period, you will no longer receive any marketing communications from 4yes.
• Security-related account communications, transaction verification, and system notifications are distinct from marketing communications and cannot be fully disabled, as they are essential to the security of your account.

4yes reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, new legal requirements, or changes to the services we offer. When material changes are made:

• We will update the "Last Updated" date at the top of this document.
• For significant changes, we will send a notification to your registered phone number before the changes take effect.
• You will be given reasonable time to review any changes before they take effect — typically at least 14 days for material changes.
• Continued use of the platform 4yes after the changes take effect will be considered acceptance of the updated policy.
• If you do not agree with any changes made, you have the right to close your account and request a refund of your remaining balance in accordance with the established procedures.

The latest version of this Privacy Policy is always available at https://4yes.best/privacy-policy. We encourage you to check this page periodically to stay informed about how we protect your data. For any enquiries regarding this privacy policy, contact us at support@4yes.best.