son4d Privacy Policy

1 Introduction

son4d ("we", "us", "our", "Platform") is committed to safeguarding the privacy and personal data of all individuals who access or use the son4d website at https://son4d.asia and its associated services ("Platform Services"). This Privacy Policy sets out the basis on which we collect, process, store, and disclose your personal data in connection with your use of the Platform.

son4d operates as an online casino and sports betting platform primarily serving players in Malaysia. Our services include sports betting (football, EPL, Liga Super Malaysia, UFC, and more), live dealer casino games, online slots, and associated account, payment, and promotional services. In providing these services, we process personal data as both a data controller and, where we engage licensed third-party providers, as a data processor on behalf of those parties.

2 Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, identification number, contact details, location data, or online identifiers.
• "Processing" — any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" — son4d, in its capacity as the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" — a third party that processes Personal Data on behalf of son4d under a binding data processing agreement.
• "Account" — a registered user account on the son4d Platform.
• "KYC Data" — identity verification documentation submitted during the Know Your Customer process, including government-issued identification and proof of address.
• "Cookies" — small text files stored on your device by the Platform to enable functionality, session management, and analytics.
• "Third-Party Provider" — an external company engaged by son4d to deliver specific services, including game providers, payment processors, and fraud prevention services.

3 Personal Data We Collect

son4d collects personal data across several categories, described in the table below. We collect only the data that is necessary for the specific purpose identified.

4 How We Collect Your Data

son4d collects personal data through the following channels and mechanisms:

4.1 Direct Collection

Data you provide directly when registering an Account, completing KYC verification, making a deposit or withdrawal, contacting Customer Support, or participating in a promotion. This includes information submitted via web forms, email, and live chat.

4.2 Automated Collection

Technical and usage data collected automatically when you access the Platform, including through cookies, web beacons, server logs, and similar tracking technologies. This data includes your IP address, device identifier, session activity, and interaction patterns on the Platform.

4.3 Third-Party Sources

We may receive supplementary data from third-party identity verification providers, fraud detection services, and payment processors used to fulfil your transactions. Where we engage licensed payment providers — including those processing Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong transfers — those providers may share transaction confirmation data with son4d.

5 Legal Basis for Processing

son4d processes your personal data on the following legal grounds:

• Contractual Necessity: Processing required to provide Platform Services under the Terms and Conditions you have agreed to, including Account management, transaction processing, and dispute resolution.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and reporting obligations to licensing and regulatory authorities.
• Legitimate Interests: Processing necessary for son4d's legitimate business interests, including fraud prevention, platform security, responsible gambling monitoring, and business analytics — where those interests are not overridden by your fundamental rights.
• Consent: Processing for which you have provided explicit and freely given consent, including the receipt of marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6 How We Use Your Personal Data

son4d uses your personal data for the following specific purposes:

6.1 Account Management & Service Delivery

To create, maintain, and manage your Account; to process deposits and withdrawals in MYR via your chosen payment method; to verify your identity and age; to communicate account-related notifications; and to provide Customer Support in English, Bahasa Melayu, or Chinese.

6.2 Regulatory Compliance

To satisfy our obligations under applicable licensing conditions, anti-money laundering regulations, and Know Your Customer requirements. This includes retaining transaction records, conducting periodic account reviews, and reporting to relevant authorities where required by law.

6.3 Fraud Prevention & Security

To detect, investigate, and prevent fraudulent activity, account takeovers, money laundering, bonus abuse, and other security threats. This includes analysing technical and usage data to identify unusual patterns and cross-referencing data with third-party fraud prevention databases.

6.4 Responsible Gambling

To monitor betting and gaming patterns that may indicate problem gambling behaviour; to apply self-imposed limits or cooling-off periods requested by players; to flag accounts showing indicators of gambling harm for intervention by our responsible gambling team.

6.5 Platform Improvement & Personalisation

To analyse usage data to improve Platform performance, user experience, and game recommendations. Personalisation is applied to surfacing relevant promotions and features based on your activity and preferences — subject to your marketing preferences.

6.6 Marketing Communications

To send you promotional offers, bonus notifications, and platform updates where you have provided consent to receive such communications. You may opt out of marketing communications at any time by contacting Customer Support or updating your preferences in your Account settings.

7 Data Sharing & Disclosure

son4d does not sell your personal data to third parties. We may share your personal data with the following categories of recipients where it is necessary for the purposes set out in this Policy:

7.1 Licensed Service Providers

Third-party companies engaged by son4d to deliver specific services, including game software providers, payment processing companies (including those facilitating Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong bank transfers), identity verification providers, fraud detection services, and cloud hosting providers. All third-party processors operate under binding data processing agreements that restrict the use of your data to the specific service being provided.

7.2 Regulatory & Law Enforcement Authorities

Where required by applicable law, court order, or regulatory direction, son4d may disclose personal data to government authorities, law enforcement agencies, financial intelligence units, or son4d's licensing authority. Such disclosures are made only to the extent required and in compliance with applicable legal procedures.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of son4d's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer where required by law, and your rights under this Policy will be preserved.

8 Cookies & Tracking Technologies

son4d uses cookies and similar technologies to operate the Platform effectively. Cookies are small data files stored on your device when you access the Platform. They enable core functionality including session authentication, and also help us understand how the Platform is used.

8.1 Types of Cookies Used

• Strictly Necessary Cookies: Essential for the Platform to function — enabling login sessions, security tokens, and core user interface elements. These cannot be disabled without impairing Platform functionality.
• Functional Cookies: Remember your preferences such as language selection, display settings, and recently accessed game categories to improve your experience.
• Analytics Cookies: Collect aggregate, anonymised data on how users navigate the Platform to help us identify performance issues and improve usability.
• Security Cookies: Support fraud detection and bot prevention functions by maintaining session integrity checks.

8.2 Managing Cookies

You may configure your browser to block or delete cookies at any time. Please note that disabling strictly necessary cookies will affect your ability to log in and use core Platform features. Instructions for managing cookies are available in your browser's help documentation.

9 Data Retention

son4d retains personal data for as long as necessary to fulfil the purposes described in this Policy and to comply with applicable legal and regulatory obligations. The following retention principles apply:

• Active Account Data: Retained for the duration of your Account's active status and for a period of five (5) years following Account closure, unless a longer retention period is required by applicable law.
• Financial & Transaction Records: Retained for a minimum of seven (7) years to satisfy anti-money laundering recordkeeping requirements and applicable tax regulations.
• KYC Documentation: Retained for five (5) years following Account closure or the end of the business relationship, in line with standard regulatory requirements.
• Customer Support Records: Retained for three (3) years following resolution of the relevant support interaction, to enable dispute resolution and quality review.
• Marketing Preference Records: Retained until you withdraw consent, after which your opt-out preference is retained to honour your request.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data disposal procedures.

10 Data Security

son4d implements technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Key measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the son4d Platform.
• Encryption of sensitive stored data, including financial records and KYC documents, using industry-standard algorithms.
• Strict access controls ensuring that personal data is accessible only to authorised staff with a legitimate operational need.
• Regular internal security audits and vulnerability assessments conducted by qualified security personnel.
• Segregated storage of player funds from operational accounts, with independent reconciliation.
• Multi-factor authentication requirements for staff accessing systems that hold personal data.

Notwithstanding the above, no data transmission over the internet or electronic storage system is entirely secure. While son4d takes all reasonable precautions, we cannot guarantee absolute security. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected individuals and relevant authorities in accordance with applicable breach notification requirements.

11 Your Data Rights

Depending on the laws applicable to your jurisdiction, you may hold some or all of the following rights in relation to your personal data held by son4d. Requests to exercise any of these rights should be submitted to our Customer Support team.

12 Minors & Age Verification

Parents and guardians who believe a minor has registered an Account on son4d should contact our Customer Support team immediately via live chat or email. We will investigate and act promptly on any such notification.

13 International Data Transfers

son4d is primarily operated to serve players in Malaysia. In delivering Platform Services, your personal data may be transferred to and processed in countries other than Malaysia — particularly where we engage third-party providers whose infrastructure operates across multiple jurisdictions.

Where personal data is transferred internationally, son4d takes appropriate safeguards to ensure that your data receives a level of protection consistent with this Privacy Policy. Such safeguards may include contractual data processing agreements incorporating standard protective clauses, or transfers to jurisdictions that provide an adequate level of data protection as recognised by relevant regulatory authorities.

14 Third-Party Services & Links

The son4d Platform integrates services from third-party game providers, payment processors, and analytics tools. These providers process personal data strictly in accordance with their own privacy policies and the data processing agreements they hold with son4d.

son4d is not responsible for the privacy practices of third-party websites or services that are not directly part of the Platform. This Privacy Policy applies exclusively to data processed by son4d in connection with the Platform and the services described herein.

15 Amendments to This Policy

son4d may update this Privacy Policy periodically to reflect changes in our data processing practices, applicable law, or the structure of our Platform Services. Where changes are material, we will provide advance notice via email to your registered address or via a prominent notice on the Platform, no less than 14 days before the changes take effect.

The effective date at the top of this document reflects the most recent update. Your continued use of Platform Services following the effective date of any revision constitutes your acceptance of the updated Policy. We recommend reviewing this Policy periodically.

16 Contact Us & Data Rights Requests

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the son4d Customer Support and Data Protection team through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 via the Platform in English, Bahasa Melayu, and Chinese
• Average response time: Under 5 minutes via live chat; under 2 hours via email for general queries; up to 30 days for formal data rights requests

For data erasure, data access, and other formal data rights requests, please state "Data Rights Request" clearly in your message subject line. We may require identity verification before processing any such request to confirm you are the Account holder.

For matters related to responsible gambling, Account self-exclusion, or gambling harm support, please visit our dedicated Responsible Gambling page.