Privacy Policy — neng4d

neng4d ("we", "us", "our", "the Platform") operates the online sports betting and casino platform accessible at https://neng4d.lat. This Privacy Policy ("Policy") sets out the basis on which we collect, process, store, and share the personal data of individuals ("you", "UserMember") who access or use our Platform, including members based in Malaysia and other jurisdictions.

We are committed to protecting the privacy of our users and to processing personal data in a responsible, transparent, and lawful manner. This Policy has been drafted in accordance with broadly recognised international data protection principles, including those reflected in the General Data Protection Regulation (GDPR) framework and the Malaysian Personal Data Protection Act 2010(PDPA) where applicable.

This Privacy Policy is to be read in conjunction with our Terms & Conditions and our Responsible Gambling Policy. By registering an Account or continuing to use the neng4d Platform, you acknowledge that you have read and understood this Policy and that you consent to the collection and use of your personal data as described herein.

For the purposes of this Privacy Policy, the following terms carry the meanings assigned below:

neng4d collects several categories of personal data depending on how you interact with the Platform. The categories of data we may collect include the following:

We collect personal data through the following channels and mechanisms:

• Direct submission: Data you provide when registering an Account, completing the KYC verification process, making a deposit or withdrawal request, or contacting our support team.
• Automated collection: Technical data collected automatically when you access the Platform, including via cookies, server logs, and session tracking technologies.
• Payment processors: Transaction confirmation data received from third-party payment service providers — including DuitNow, FPX, and e-wallet operators — as part of the payment processing workflow.
• Third-party identity verification providers: KYC and document verification data received from contracted identity verification service providers during the account verification process.
• Fraud detection and compliance systems: Data received from anti-fraud and AML compliance platforms used to screen transactions and user activity against risk indicators.

neng4d processes your personal data only where a valid legal basis exists for doing so. The legal bases we rely on are as follows:

• Contractual necessity: Processing required to perform the contract between us — i.e., to operate your Account, process bets and transactions, and deliver the services you have requested.
• Legal obligation: Processing required to comply with applicable laws, regulations, and regulatory obligations, including anti-money laundering (AML) laws, Know Your Customer (KYC) requirements, and reporting obligations to licensing authorities.
• Legitimate interests: Processing necessary for our legitimate business interests, such as fraud prevention, platform security, improving our services, and direct marketing to existing members — where such interests are not overridden by your rights and freedoms.
• Consent: Where processing is based on your explicit consent — for example, receiving promotional email communications or marketing notifications — and which you may withdraw at any time without prejudice to the lawfulness of prior processing.

We use the personal data we collect for the following specific purposes:

• To create, maintain, and administer your neng4d Account, including processing registrations, login authentication, and account-level settings.
• To process deposits and withdrawals via your chosen payment method (including Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, DuitNow, and FPX) and to maintain accurate financial records.
• To verify your identity and age (21+) as required by our Terms & Conditions and applicable regulatory obligations, including KYC and AML compliance.
• To settle bets, calculate winings, apply bonuses, and manage VIP tier progression accurately.
• To detect and prevent fraud, collusion, bonus abuse, money laundering, and other forms of prohibited conduct in accordance with our Terms & Conditions.
• To respond to your enquiries, complaints, and requests submitted through our24/7 live chat and email support channels.
• To send you service communications — including account notifications, transaction confirmations, and security alerts — which are necessary for the operation of your Account.
• To send promotional communications and offers, including information about bonuses, VIP tier upgrades, and events — but only where you have provided consent or where permitted under applicable law.
• To analyse Platform usage patterns, improve user experience, and develop new features and services.
• To comply with legal obligations, respond to lawful requests from regulatory and law enforcement authorities, and protect our legal rights in the event of a dispute.

neng4d does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. We may share your personal data with third parties only in the following circumstances:

• Service providers and data processors: We engage trusted third-party service providers to perform functions on our behalf — including payment processing, KYC/identity verification, fraud detection, cloud infrastructure, customer support platforms, and data analytics. These providers are contractually bound to process your data only in accordance with our instructions and to maintain appropriate security measures.
• Regulatory and licensing authorities: We may disclose personal data to our licensing authority or other relevant regulatory bodies where required for compliance, audit, or reporting purposes.
• Law enforcement and legal proceedings: We may disclose personal data to law enforcement agencies, government authorities, or courts where required by applicable law, a court order, or a valid legal process, or where disclosure is necessary to protect our legal rights or the safety of others.
• Anti-money laundering screening: Transaction data may be shared with AML compliance platforms and financial intelligence systems as required under applicable anti-money laundering obligations.
• Business transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of neng4d's business, your personal data may be transferred to the acquiring entity as part of the transaction, subject to equivalent privacy protections being maintained.

neng4d uses cookies and similar tracking technologies (including local storage, session tokens, and pixel tags) to provide a functional, personalised, and secure Platform experience. The types of cookies we use are as follows:

Strictly necessary cookies are placed without requiring your consent as they are essential for the delivery of our services. For non-essential cookies, we will seek your consent where required by applicable law. You may manage your cookie preferences through your browser settings; however, disabling certain cookies may affect the functionality of the Platform.

neng4d retains your personal data for as long as necessary to fulfil the purposes for which it was collected, including for satisfying any legal, regulatory, accounting, or reporting obligations. The following general retention periods apply:

• Account data and transaction records: Retained for a minimum of five (5) years following account closure, in accordance with standard AML record-keeping requirements. In some jurisdictions or under applicable regulatory frameworks, longer retention periods may be mandated.
• KYC and identity verification documents: Retained for a minimum of five (5) years following the completion of the KYC process or account closure, whichever is later.
• Customer support communications: Retained for up to three (3) years to facilitate dispute resolution and quality assurance, unless the subject matter of a communication requires longer retention for legal purposes.
• Technical and log data: Retained for up to twelve (12) months, used primarily for security monitoring, fraud detection, and Platform diagnostics.
• Marketing consent records: Retained for as long as the consent is active, plus a reasonable period thereafter as evidence of consent where required by law.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.

neng4d implements appropriate technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Encryption in transit: All data transmitted between your device and the neng4d Platform is protected using 256-bit TLS (Transport Layer Security) encryption, consistent with bank-grade security standards.
• Encryption at rest: Sensitive personal data — including financial data and KYC documents — is encrypted at rest using strong cryptographic standards.
• Access controls: Access to personal data is restricted on a strictly need-to-know basis. Staff members who handle personal data are subject to confidentiality obligations and receive data privacy training.
• Infrastructure security: Our Platform infrastructure is hosted on secure, access-controlled cloud environments with intrusion detection, DoS protection, and regular security audits.
• Incident response: We maintain a documented data breach response procedure. In the event of a security incident affecting your personal data, we will notify you and relevant authorities in accordance with our legal obligations.

Despite our best efforts, no security system is entirely impenetrable. We cannot guarantee that your personal data will never be accessed, disclosed, altered, or destroyed in a breach of our security measures. We encourage you to use a strong, unique password for your neng4d Account and to notify us immediately if you suspect any unauthorised access.

neng4d operates on an internationally hosted infrastructure, and your personal data may be transferred to, stored in, or processed by systems or service providers located in countries outside Malaysia. Some of these countries may have data protection laws that differ from those applicable in Malaysia.

Where personal data is transferred internationally, neng4d takes steps to ensure that the transfer is lawful and that the receiving party maintains data protection standards equivalent to those described in this Policy. These steps may include:

• Entering into data processing agreements with service providers that include standard contractual clauses or equivalent data transfer mechanisms.
• Ensuring that receiving service providers are certified under recognised data protection frameworks or operate in jurisdictions with adequate data protection laws.
• Conducting due diligence on third-party processors to assess their data security and privacy practices before engagement.

Subject to applicable data protection law and in accordance with our legal obligations, you have the following rights in relation to your personal data held by neng4d. To exercise any of these rights, please contact us using the details provided in Section16.

We will respond to all verified data rights requests within thirty (30) calendar days. In complex or high-volume cases, this period may be extended by a further sixty (60) days with prior notification. There is no fee for exercising your data rights; however, we reserve the right to charge a reasonable administrative fee for manifestly unfounded or excessive repeat requests.

The neng4d Platform is strictly intended for adults aged21 years and above. We do not knowingly collect or process personal data from individuals below this age. If you are below 21 years of age, you are not permitted to use this Platform under any circumstances.

If we become aware that personal data has been collected from an individual under 21 years of age, we will take immediate steps to delete that data and permanently close the associated Account. If you believe that a minor has registered on our Platform, please contact us immediately using the details in Section 16 so that we can take appropriate action.

The neng4d Platform may contain references to or integration with third-party services — such as payment processors (DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay) and live game streaming providers. These third parties operate under their own privacy policies, which are independent of this Policy.

neng4d is not responsible for the privacy practices, data handling, or security of any third-party service providers. We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of the neng4d Platform.

neng4d reserves the right to update, amend, or replace this Privacy Policy at any time in response to changes in applicable law, our business practices, or the services we offer. The most recent version of this Policy will always be published at https://neng4d.lat/privacy-policy, with the "Last Updated" date revised accordingly.

Where a material change is made to this Policy, we will endeavour to notify you via a platform notice or by email to the address registered to your Account before the change takes effect. Your continued use of the neng4d Platform following the posting of any updated Policy constitutes your acceptance of the revised terms.

We recommend reviewing this page periodically to stay informed about how we protect and handle your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy, or if you wish to exercise any of your data rights as described in Section 12, please contact neng4d's support team through the following channels:

• Live Chat: Available24 hours a day, 7 days a week via the neng4d Platform interface. This is the most efficient channel for urgent data rights requests.
• Email (non-clickable, plain text only): [email protected]

Please include your registered account username and a clear description of your request or concern to allow us to respond efficiently. We will acknowledge receipt of all data privacy requests within two (2) business days and provide a substantive response within thirty (30) calendar days unless otherwise required by law.