Cat4 Privacy Policy – Player Data Protection in Malaysia

Cat4 ("we", "Platform", "cat4") respects the privacy of every individual who uses our online casino platform. This Privacy Policy explains how we collect, use, disclose, store, and protect your personal information when you visit our website, register an account, make a deposit in MYR, or use any of the games and services offered by cat4.

This policy applies to all users of the cat4 platform in Malaysia, including registered players, guest users browsing our website, and applicants in the process of registering. It also covers all access methods — whether via a web browser on a laptop, an Android or iOS smartphone, or any other mobile device you use to access cat4.

By registering a cat4 account or using any part of our platform, you confirm that you have read and understood this Privacy Policy and agree to the data collection and processing practices described herein. If you do not agree with any part of this policy, please discontinue your use of the cat4 platform.

Cat4 only collects data necessary to provide our services safely and efficiently. Below are the categories of data we may collect from you:

We do not collect sensitive information such as biometric data, health information, or political views unless specifically required by law or a relevant regulatory body. We also do not collect data from individuals under the age of 18 — should we discover that a minor's information has been collected inadvertently, it will be deleted immediately.

Cat4 collects personal data through several different methods, depending on how you interact with our platform:

• Account Registration: When you register a cat4 account, you provide basic information such as your name, Malaysian phone number, email address, and password. This information is required to create and manage your account.
• Identity Verification: To comply with anti-money laundering regulations and ensure that only players aged 18 and above can participate, we may request identity verification documents such as a copy of your MyKad or passport.
• Financial Transactions: When you make a deposit using DuitNow, FPX (Maybank2u, CIMB Clicks), Touch 'n Go eWallet, GrabPay, Boost or ShopeePay, we record the transaction information required to securely process your payment in MYR.
• Platform Usage: Our system automatically records technical information such as your IP address, device type, web browser used, and platform usage patterns for security and user experience improvement purposes.
• Cookies & Tracking Technologies: cat4 uses cookies and similar technologies to enhance platform functionality, save your preferences and analyse usage patterns. See Section 7 for more details.
• Support Communications: When you contact the cat4 support team via Live Chat, email, or WhatsApp, we record these communications for issue resolution and service quality improvement purposes.

Cat4 uses the personal data we collect solely for legitimate purposes directly related to providing our online casino services to Malaysian players. Specifically, your data is used to:

• Account Management: To create, verify, and manage your cat4 account, including password recovery and profile information updates.
• Transaction Processing: Processing all deposits and withdrawals in Malaysian Ringgit (MYR) securely and accurately via your chosen local payment method.
• Legal Compliance: Fulfilling our obligations under the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 and other relevant legislation.
• Platform Security: Detecting and preventing fraud, unauthorised access, bonus abuse and any activity that violates cat4's Terms & Conditions.
• Experience Personalisation: Personalises content, promotions and game recommendations based on your preferences and play patterns at cat4 — making every session more relevant and enjoyable.
• Service Communications: Sending you important notifications regarding your account, transactions, changes to our terms or security matters that require your attention.
• Marketing Communications: With your consent, sending you information about promotions, bonuses and new games at cat4 that may be of interest to you.
• Platform Improvements: Analysing aggregated usage patterns to improve the design, functionality, and performance of the cat4 platform.

Cat4 will not use your data for any purpose other than those stated above without first obtaining your consent, or unless required by law.

Cat4 does not sell your personal data to any third party. However, in the course of our operations, there are certain situations where we may need to share your data with carefully selected parties:

• Payment Service Providers: To process deposits and withdrawals in MYR via DuitNow, FPX, Maybank2u, CIMB Clicks, Touch 'n Go, GrabPay, Boost and ShopeePay, the required transaction details are shared with the respective payment providers. All providers are bound by strict confidentiality agreements.
• Technical Service Providers: Technology companies that assist us in operating our platform infrastructure, data processing and customer support services. They are permitted to use your data only for the purposes specified in their service agreements with cat4.
• Game Providers: To enable you to enjoy Live Casino games and slots at cat4, the necessary session information may be shared with the relevant game content providers.
• Regulatory Authorities & Legal Bodies: cat4 will disclose required data to Malaysian authorities when mandated by a court order, police investigation, or relevant regulatory body, in accordance with applicable Malaysian law.
• Audit Body: To ensure fair play, independent auditors may access anonymised transaction and round data for verification and certification purposes.

Cat4 continually invests in security infrastructure to ensure your personal data remains protected at all times. Our security measures include:

• 256-bit SSL Encryption: All communications between your browser or app and cat4's servers are encrypted using the latest TLS/SSL protocols. This ensures that sensitive information such as passwords and financial details cannot be intercepted by unauthorised parties.
• Stored Data Encryption: Personal data stored in cat4's databases is encrypted at rest. Even in the event of a successful breach, the data cannot be read without the correct encryption key.
• Tiered Access Control: Access to player data is restricted to staff who require it to perform their duties. A layered access control system ensures that every instance of access is logged and auditable.
• Continuous Security Monitoring: cat4's automated monitoring system operates around the clock to detect any unauthorised access attempts, suspicious activity, or potential security breaches.
• Regular Security Audits: The cat4 platform undergoes periodic security audits conducted by independent third parties to identify and address any potential vulnerabilities.
• Staff Training: All cat4 staff who handle player data receive comprehensive data protection training and are bound by strict confidentiality agreements.

While no security system is entirely foolproof, cat4 is committed to upholding the highest industry security standards. In the event of a security breach affecting your data, we will notify you within a reasonable timeframe as required by applicable law.

Cat4 uses cookies and similar technologies to enhance your gaming experience and ensure the platform operates correctly. Below are the types of cookies we use:

• Essential Cookies (Session): Required for core platform functions such as login, game session management and security. These cookies cannot be disabled — without them, the platform will not function properly.
• Analytics Cookies: Helping us understand how players use the cat4 platform — which pages are visited most frequently, which games are most popular among Malaysian players, and where players encounter difficulties. This information is used to improve the platform.
• Preference Cookies: Saves your preferences — such as interface language, display theme and game settings — so you don't have to reconfigure them every time you log in to your cat4 account.
• Marketing Cookies: Used to display relevant cat4 promotions and offers based on your interests. These cookies can be disabled through your browser settings without affecting the platform's core functionality.

You can control or delete cookies through your web browser settings at any time. However, disabling essential cookies may affect the functionality of certain areas of the cat4 platform. For guidance on managing cookies in your browser, refer to your browser's help documentation.

As the cat4 platform involves real financial transactions in MYR, we pay particular attention to the protection of your financial data. All deposits and withdrawals — whether via DuitNow, FPX (Maybank2u, CIMB Clicks), Touch 'n Go eWallet, GrabPay, Boost, or ShopeePay — are processed through secure, encrypted payment channels.

Cat4 does not store full credit or debit card numbers in our systems. For payment methods involving card details, we only retain the secure token generated by the payment processor — never the actual card number. This means that even in the event of a security issue, your card details remain protected.

Every financial transaction at cat4 is assigned a unique transaction ID that is logged in our system. These records are retained in accordance with Malaysian legal requirements for a specified period and can be referenced in the event of any transaction dispute. Players can access their full transaction history via the "Transaction History" section of their cat4 account.

As a cat4 player and data subject under Malaysia's Personal Data Protection Act, you have the following rights with respect to the personal data we hold about you:

Cat4 retains your personal data only for as long as necessary for the purposes set out in this Privacy Policy, or as required by applicable Malaysian law. In general, our data retention principles are as follows:

• Active Account Data: For as long as your account remains active with cat4, we retain all data necessary to manage your account and deliver our services to you.
• Financial Transaction Records: Records of all deposits and withdrawals in MYR are kept for a minimum of 7 years in compliance with Malaysia's Anti-Money Laundering Act.
• Identity & Verification Data: Identity verification documents and KYC (Know Your Customer) records are retained for a minimum of 5 years from the date of account termination.
• Customer Support Records: Support communication records are retained for 2 years for reference and service quality improvement purposes.
• Technical Data & Logs: Access logs and technical data are retained for 12 months for security and troubleshooting purposes.

Once the specified retention period has ended, your data will be securely deleted or anonymised so that it can no longer be linked to your identity. The deletion process is carried out in accordance with approved security procedures to ensure no records can be recovered after deletion.

Cat4 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, new technology requirements, updates to Malaysian law, or feedback from our player community. When we make material changes to this policy, we will:

• Updating the "Effective Date" displayed at the top of this document.
• Sending notifications to the email address registered to your cat4 account.
• Displaying a clear notification within the platform upon your next login.

We encourage you to review this Privacy Policy periodically so you are always aware of how cat4 protects your information. Your continued use of the cat4 platform after the effective date of any amendment constitutes your acceptance of the updated policy.

If you have any questions, concerns or requests regarding this Privacy Policy or the way cat4 handles your personal data, please contact us through the following channels:

• Privacy Email: [email protected] (please include "Privacy Enquiry" in the subject line)
• Live Chat: Available directly within the cat4 platform — click the chat icon found on any page
• WhatsApp: Number available after logging in to your cat4 account
• Operating Hours: 24 hours a day, 7 days a week — no days off

Our team, proficient in Bahasa Malaysia, will respond to your privacy enquiries within 3 business days. For more complex matters requiring detailed investigation, we will keep you informed of the expected timeframe and provide updates throughout the process. You may also refer to the Frequently Asked Questions us for frequently asked questions about privacy and data security at cat4.

This Privacy Policy is effective from 1 January 2026. The latest version is always available on this page.