▮▮▮ DATA & PRIVACY ▮▮▮
Privacy Policy
Your personal data belongs to you. This Privacy Policy explains in full how yola4d collects, uses, stores, and protects the personal information you share with us — and the rights you hold over that data at all times.
01 Introduction
yola4d ("Company", "Platform", "we", "us", "our") operates the online gaming platform accessible at https://yola4d.click and is committed to protecting the privacy and personal data of all individuals who interact with our Services. This Privacy Policy ("Policy") describes how we collect, use, store, disclose, and safeguard your personal information when you access or use the yola4d platform, including all associated features, games, payment services, and customer support channels.
This Policy applies to all registered account holders and unregistered visitors to the yola4d website. It should be read alongside our Terms & Conditions, which govern the overall contractual relationship between you and yola4d. In the event of any conflict between this Policy and the Terms & Conditions on a privacy-related matter, this Policy shall prevail.
By accessing the yola4d platform or submitting any personal information to us, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you must discontinue your use of the Services immediately.
Our Core Commitment: yola4d does not sell, rent, or trade your personal data to third-party marketers or advertisers under any circumstances. Your information is used exclusively for the purposes described in this Policy and to deliver the Services you have requested.
02 Definitions
The following terms carry the meanings ascribed to them below throughout this Privacy Policy:
| Personal Data | Any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial information, IP address, and device identifiers. |
| Processing | Any operation performed on Personal Data, whether automated or manual — including collection, storage, use, disclosure, erasure, or any combination thereof. |
| Data Subject | The natural person to whom the Personal Data relates — in most cases, a registered User or visitor to the yola4d platform. |
| Data Controller | yola4d, being the entity that determines the purposes and means of processing Personal Data collected through the platform. |
| Data Processor | A third party that processes Personal Data on behalf of the Data Controller in accordance with documented instructions and applicable data protection obligations. |
| Consent | Freely given, specific, informed, and unambiguous indication of the Data Subject's agreement to the processing of their Personal Data for a stated purpose. |
| Services | The full suite of online gaming, sports betting, 4D lottery, casino, and account management services offered by yola4d through the platform. |
| Cookies | Small data files placed on your device by the platform to facilitate user authentication, session management, analytics, and personalisation functions. |
03 Data We Collect
yola4d collects Personal Data from you through several channels: directly when you register an account or interact with our Services; automatically when you browse the platform; and from third parties such as payment processors and identity verification providers where necessary to operate the Services securely and compliantly.
The table below summarises the categories of data we collect, the context in which they are collected, and the primary purpose for which they are used:
| Data Category | Examples | Collection Context |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, MyKad / Passport number | Account registration and KYC verification |
| Contact Data | Email address, phone number, residential address, city (e.g. Kuala Lumpur, Penang, Johor Bahru) | Account registration, support interactions |
| Financial Data | Bank account details, e-wallet identifiers (Touch 'n Go, Boost, GrabPay), transaction history in MYR | Deposit and withdrawal processing |
| KYC Documents | Copies of MyKad, Driver's License, Passport, proof of address, selfie photographs | Age and identity verification |
| Technical Data | IP address, browser type and version, device identifiers, operating system, screen resolution | Automatic collection on platform access |
| Usage Data | Pages visited, games played, bet amounts, session duration, click behaviour, feature interactions | Automatic collection during platform use |
| Communications Data | Live chat transcripts, email correspondence, support ticket content | Customer support interactions |
| Marketing Preferences | Opt-in / opt-out status, preferred communication channel, promotion engagement history | Marketing consent management |
We do not collect special categories of sensitive personal data — such as racial or ethnic origin, religious beliefs, health data, or biometric data — except where expressly required for age verification purposes, and only with your explicit consent in such circumstances.
04 How We Process Your Data
yola4d processes your Personal Data for the following specific purposes, each of which is grounded in a defined legal basis described in Section 5 of this Policy:
- Account Management: Creating, maintaining, and administering your yola4d user account, including password management, session handling, and account security monitoring.
- Service Delivery: Processing your deposits, withdrawals, game participation, sports bets, and any other transactions conducted through the platform in Malaysian Ringgit (MYR).
- Identity & Age Verification: Conducting KYC checks to verify your identity and confirm that you meet the minimum age requirement of 21 years before withdrawal of funds is permitted.
- Fraud & Security: Monitoring transactions, account activity, and device behaviour to detect, investigate, and prevent fraudulent activity, money laundering, collusion, and other policy violations.
- Customer Support: Responding to your queries, resolving complaints, and providing technical assistance through live chat and email channels.
- Legal Compliance: Fulfilling obligations under applicable laws and regulations, including anti-money laundering requirements, data retention obligations, and regulatory reporting where required.
- Platform Improvement: Analysing aggregated Usage Data to understand platform performance, identify technical issues, and improve the overall player experience.
- Marketing Communications: Sending you promotional offers, game updates, and platform news — only where you have provided explicit opt-in consent, and subject to your right to withdraw that consent at any time.
- Responsible Gambling: Monitoring gaming patterns to identify indicators of problem gambling and, where necessary, applying responsible gambling tools such as deposit limits or cooling-off periods. See our Responsible Gambling page for details.
05 Legal Basis for Processing
All processing of your Personal Data by yola4d is conducted on one or more of the following legal bases:
- Contractual Necessity: Processing required to perform the contract between you and yola4d — including account creation, fund processing, game delivery, and customer support — is carried out on the basis that it is necessary to fulfil our contractual obligations to you.
- Legal Obligation: Processing undertaken to comply with applicable legal or regulatory requirements, including KYC verification, anti-money laundering checks, and statutory data retention periods.
- Legitimate Interests: Processing carried out for purposes that constitute legitimate interests of the Company — including fraud prevention, platform security, system analytics, and responsible gambling monitoring — provided those interests are not overridden by your fundamental rights and freedoms.
- Consent: Processing of Personal Data for marketing communications and any non-essential cookies, carried out only on the basis of your freely given, informed, and explicit consent, which you may withdraw at any time without affecting the lawfulness of processing carried out before withdrawal.
06 Data Sharing & Disclosure
yola4d does not sell, rent, trade, or otherwise commercially transfer your Personal Data to any third party. We may, however, share your Personal Data with the following categories of recipients strictly as necessary to operate the Services:
- Payment Service Providers: Malaysian payment infrastructure partners including FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, and international card networks (Visa, Mastercard) — to process your deposit and withdrawal transactions.
- Identity Verification Providers: Third-party KYC and age verification service providers who process documentary evidence of identity on our behalf under strict data processing agreements.
- Technology Service Providers: Cloud hosting, database management, and software infrastructure providers who process data on our behalf under documented contractual obligations and data processing agreements.
- Game Studio Partners: Certified game content providers may receive limited technical session data (such as player token identifiers) necessary to deliver game rounds. These providers do not receive directly identifying information.
- Legal & Regulatory Authorities: Competent authorities, law enforcement agencies, or courts where we are required by law to disclose information, or where disclosure is necessary to protect the rights, safety, or property of the Company or other users.
- Professional Advisers: Legal, accounting, audit, and compliance advisers who are bound by professional confidentiality obligations, where access is necessary for the provision of professional services to the Company.
All third-party Data Processors engaged by yola4d are required to process Personal Data only in accordance with our documented instructions and to implement appropriate technical and organisational security measures. We conduct due diligence on all third-party processors prior to engagement.
08 Data Retention
yola4d retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following general retention periods apply:
- Account Data & KYC Documents: Retained for a minimum of five (5) years from the date of account closure, in compliance with applicable anti-money laundering record-keeping requirements.
- Financial Transaction Records: Retained for a minimum of seven (7) years from the date of each transaction, in compliance with applicable financial record-keeping obligations.
- Customer Support Communications: Retained for three (3) years from the date of the relevant interaction, to support dispute resolution and quality assurance.
- Marketing Preference Data: Retained until you withdraw your marketing consent, after which it is updated to reflect your opt-out status and retained solely for compliance audit purposes.
- Technical & Usage Data: Aggregated analytical data is retained indefinitely in anonymised form. Individual session logs are retained for up to twelve (12) months.
Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised in accordance with our internal data lifecycle management procedures.
09 Data Security
yola4d implements comprehensive technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, loss, or destruction. Key security controls in place include:
- Encryption at Rest: All Personal Data and KYC documentation stored in our systems is encrypted using AES-256 encryption. Encryption keys are managed through a dedicated key management infrastructure with strict access controls.
- Encryption in Transit: All data transmitted between your device and the yola4d platform is protected using TLS 1.2 or higher. We enforce HTTPS across all platform endpoints.
- Access Controls: Access to Personal Data within the Company is restricted on a strict need-to-know basis. Staff with access to sensitive data undergo background checks and regular security awareness training.
- Intrusion Detection & Monitoring: Our systems are monitored continuously for security incidents, anomalous access patterns, and indicators of compromise. Automated alerting systems flag potential incidents for immediate review.
- Vulnerability Management: We conduct regular security assessments and penetration testing of our platform infrastructure to identify and remediate vulnerabilities on an ongoing basis.
Notwithstanding these measures, no system of data transmission or storage can be guaranteed to be completely secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected individuals and relevant authorities in accordance with our incident response obligations.
You are responsible for maintaining the security of your own account credentials. Do not share your yola4d username or password with any third party. If you suspect that your account has been compromised, contact our support team immediately via live chat.
10 Your Rights as a Data Subject
As a Data Subject whose Personal Data is processed by yola4d, you hold the following rights. You may exercise any of these rights by contacting us through the channels described in Section 14 of this Policy:
- Right of Access: You have the right to request confirmation of whether we process your Personal Data and, if so, to receive a copy of that data together with information about how and why it is processed.
- Right to Rectification: You have the right to request the correction of inaccurate or incomplete Personal Data held about you without undue delay.
- Right to Erasure: You have the right to request deletion of your Personal Data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis applies. This right is subject to our statutory data retention obligations.
- Right to Restriction: You have the right to request that we restrict the processing of your Personal Data in certain defined circumstances — for example, while a rectification request is being assessed.
- Right to Data Portability: Where processing is carried out on the basis of consent or contract and by automated means, you have the right to receive your Personal Data in a structured, commonly used, machine-readable format.
- Right to Object: You have the right to object to processing of your Personal Data carried out on the basis of legitimate interests, including profiling for marketing purposes. You may also withdraw marketing consent at any time with immediate effect.
- Rights Related to Automated Decision-Making: You have the right not to be subject to a decision based solely on automated processing — including profiling — that produces significant legal or similarly significant effects on you, without the involvement of a human review process.
We will respond to all valid data subject requests within thirty (30) calendar days of receipt. In complex cases, this period may be extended by a further sixty (60) days, of which you will be notified with reasons for the extension.
Please Note: The exercise of certain rights — such as erasure or restriction — may affect our ability to continue providing the Services to you. Where this is the case, we will advise you of the consequences before processing your request.
11 Minors & Age Policy
The yola4d platform is strictly operated for adults aged 21 years and above. We do not knowingly collect or process the Personal Data of any person under the age of 21. All account registrations are subject to age verification as part of the KYC process, and no withdrawal of funds is permitted until age has been formally verified.
If the Company becomes aware or has reasonable grounds to believe that Personal Data has been collected from an individual under the age of 21 — whether through fraudulent registration or any other means — the relevant account will be immediately suspended, all associated data will be reviewed, and appropriate steps will be taken including account closure and forfeiture of all associated balances.
If you are a parent or guardian and believe that a minor may have registered an account on the yola4d platform using false information, please contact our support team immediately via live chat or at the email address provided in Section 14 of this Policy.
12 International Data Transfers
Some of the third-party service providers engaged by yola4d may be located in, or process Personal Data in, jurisdictions outside Malaysia. Where such international transfers occur, yola4d takes steps to ensure that appropriate safeguards are in place to protect your Personal Data to a standard equivalent to that required under applicable data protection law.
Safeguards applied to international transfers include the execution of data processing agreements incorporating standard contractual clauses, assessment of the recipient country's data protection framework, and implementation of supplementary technical measures where necessary.
No Personal Data is transferred internationally without appropriate contractual and technical protections being in place. You may request details of any international transfers affecting your Personal Data by exercising your right of access as described in Section 10.
13 Policy Amendments
yola4d reserves the right to modify or update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the Services we offer. The "Last Updated" date displayed prominently on this page will reflect the date of the most recent revision.
Where changes are material — meaning they significantly affect how we collect or use your Personal Data — we will notify registered Users by email and by a prominent notice on the platform before the changes take effect. Non-material clarifications or structural updates may take effect without advance notice.
Your continued use of the yola4d Services following the effective date of any revised Privacy Policy constitutes your acknowledgment and acceptance of the updated terms. If you do not accept the amended Policy, you must discontinue use of the Services and may request account closure in accordance with our standard account termination process.
14 Contact Us & Data Protection Enquiries
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by yola4d, please contact us through the following channels. All privacy-related enquiries are handled by our designated data protection function:
| Live Chat | Available 24 / 7 via the yola4d platform. For urgent account or data security matters, live chat is the recommended first point of contact. |
| [email protected] (plain text — not a clickable link). For data subject rights requests, include the subject line "Data Rights Request". We respond within 30 calendar days. | |
| Formal Complaints | Privacy-related complaints should be submitted in writing via email with the subject line "Privacy Complaint". The Company will acknowledge receipt within 24 hours and provide a substantive response within 14 business days. |
| Coverage Area | We serve users across Malaysia including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and Bangsar. All correspondence is handled in English. |
▮ OUR DATA COMMITMENTS
Privacy You Can Count On
Six ways yola4d puts its data protection commitments into practice — not just on paper, but in the systems and policies that govern your account every day.
AES-256 Data Encryption
All Personal Data and KYC documents stored in our systems are encrypted using AES-256 — the same standard used by financial institutions. Encryption applies both at rest and in transit via TLS.
Zero Data Selling Policy
yola4d does not sell, rent, or trade your personal data to any third party under any circumstances. Your information is used exclusively to deliver and secure the Services you have requested.
Your Rights, Enforced
Access, rectification, erasure, portability — your data subject rights are clearly defined and our team is committed to responding to all valid requests within 30 calendar days without exception.
Minimal Data Collection
We apply data minimisation principles strictly — collecting only the Personal Data that is genuinely necessary for the purpose at hand. We do not collect data speculatively or for undefined future use.
Processor Accountability
Every third-party service provider that handles your data on our behalf — from payment processors like DuitNow and FPX to KYC partners — is bound by contractual data processing agreements with defined security requirements.
Transparent Marketing Consent
Marketing communications are sent only to players who have provided explicit opt-in consent. Unsubscribing takes effect immediately. We never use deceptive pre-checked consent mechanisms.
▮ PLAY WITH CONFIDENCE
Your Privacy is Part of the Platform
At yola4d, data protection is not an afterthought — it is built into the foundation of everything we do. Play knowing your information is secure and your rights are respected.
By using yola4d you confirm you are 21+ and have read this Privacy Policy. See also: Terms & Conditions | Responsible Gambling