Privacy Policy

This Privacy Policy ("Policy") sets out how Himalaya4D ("the Platform", "we", "us", "our") collects, uses, stores, discloses, and otherwise processes the personal data of individuals ("you", "User", "Player") who access or use the Himalaya4D website at himalaya4d.cam and all associated services (collectively, the "Services").

Himalaya4D takes the privacy of its players seriously. We operate as an online gaming platform serving players across Malaysia — including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and beyond — and we handle personal data in accordance with applicable data protection laws and the principles of transparency, data minimisation, and purpose limitation.

By registering an Account, accessing the Platform, or otherwise using our Services, you acknowledge that you have read, understood, and consent to the data practices described in this Policy. If you do not agree with any part of this Policy, you should refrain from using the Services.

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person — including name, email address, phone number, date of birth, identity document number, IP address, and financial account details.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, consultation, use, disclosure, transmission, restriction, erasure, or destruction.
• "Data Controller" means Himalaya4D, which determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" means any third party that processes Personal Data on behalf of Himalaya4D in accordance with our instructions and a binding data processing agreement.
• "Consent" means any freely given, specific, informed, and unambiguous indication of a User's agreement to the processing of their Personal Data.
• "KYC Documents" means identity and address verification materials submitted by a User, including Malaysian NRIC (MyKad), passport, driver's licence, utility bills, and bank statements.
• "Cookies" means small text files placed on a User's device by the Platform for the purposes of session management, analytics, and personalisation.

Himalaya4D collects Personal Data through several means, including data provided directly by you, data collected automatically through your use of the Platform, and data received from third-party payment and identity verification providers.

Himalaya4D applies the principle of data minimisation — we collect only the Personal Data that is necessary for the specific purposes described in this Policy. We do not collect special category data (such as racial or ethnic origin, religious beliefs, or health data) unless it is strictly required for compliance purposes and we have a valid legal basis for doing so.

Personal Data collected by Himalaya4D is processed for the following purposes:

• Account Registration and Management: To create and maintain your player Account, verify your identity and age, and administer your Account settings and preferences.
• Transaction Processing: To process deposits, withdrawals, and bonus credits via payment channels including FPX, DuitNow, Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay, and cryptocurrency options where applicable.
• KYC and Regulatory Compliance: To verify your identity and age in accordance with applicable regulatory requirements, and to conduct anti-money laundering (AML) and counter-terrorist financing (CTF) checks as required by law.
• Fraud Prevention and Platform Security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, bonus abuse, and other conduct that violates our Terms and Conditions.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance through our support channels.
• Responsible Gambling: To monitor gaming activity for indicators of problem gambling behaviour, and to facilitate the operation of deposit limits, session reminders, and self-exclusion tools as requested by Users.
• Service Improvement and Analytics: To analyse aggregated usage patterns, improve Platform performance, and enhance the overall player experience.
• Marketing Communications: Where you have provided explicit consent, to send you information about promotions, bonuses, and new features relevant to your account type. You may withdraw consent at any time by contacting our support team.

Himalaya4D processes your Personal Data on one or more of the following legal bases:

• Contractual Necessity: Processing is necessary to fulfil our contractual obligations to you under the Terms and Conditions — including Account administration, payment processing, and service delivery.
• Legal Obligation: Processing is required to comply with applicable legal requirements, including KYC obligations, AML/CTF regulations, and any mandatory reporting obligations imposed by regulatory authorities.
• Legitimate Interests: Processing is necessary for the legitimate interests of Himalaya4D, including fraud detection, platform security, and service improvement — provided that such interests are not overridden by your fundamental rights and freedoms.
• Consent: Where processing is not otherwise justified by the above bases — in particular for direct marketing communications — Himalaya4D will seek your explicit and informed consent prior to processing. You have the right to withdraw consent at any time without penalty.

Himalaya4D does not sell, rent, or trade your Personal Data to unaffiliated third parties for their own marketing or commercial purposes. Your data may be shared in the following circumstances only:

• Payment Service Providers: We share financial data with licensed payment processors — including FPX, DuitNow, Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, and GrabPay — solely for the purpose of processing your deposit and withdrawal transactions.
• Identity Verification Providers: KYC documentation may be shared with licensed third-party verification services engaged to conduct identity checks on our behalf. These providers operate under strict data processing agreements and are prohibited from using your data for any purpose beyond verification.
• Game Technology Partners: Aggregated, non-personally-identifiable game activity data may be shared with game studio partners for the purposes of game performance analysis and fairness auditing.
• Regulatory and Law Enforcement Authorities: We are legally obligated to disclose certain Personal Data to regulatory authorities, law enforcement agencies, or financial intelligence units where required by applicable law — including in cases of suspected money laundering, terrorist financing, or fraud.
• Professional Advisers: We may share Personal Data with our legal advisers, auditors, or accountants where necessary in the course of obtaining professional advice, subject to confidentiality obligations.

Himalaya4D uses cookies and similar tracking technologies to operate and improve the Platform. By using our Services, you consent to the use of cookies in accordance with this Policy.

We use the following categories of cookies:

• Strictly Necessary Cookies: Required for the core operation of the Platform — including session authentication, security tokens, and preferences persistence. These cannot be disabled without impairing Platform functionality.
• Performance & Analytics Cookies: Used to collect aggregated and anonymised information about how visitors use the Platform, which pages are visited most frequently, and how users navigate between sections. This data is used solely to improve the Platform experience.
• Functionality Cookies: Allow the Platform to remember user preferences — such as language settings, preferred game categories, and display options — to provide a personalised experience.
• Security Cookies: Used to detect and prevent fraudulent activity, bot access, and other security threats to the Platform and its users.

You may control the use of non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the Platform. For full cookie management instructions, please refer to your browser's help documentation.

Himalaya4D retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations.

• Active Accounts: Personal Data is retained for the duration of your Account and Services relationship with Himalaya4D, and for a period of at least five (5) years thereafter, in order to satisfy AML/CTF regulatory record-keeping requirements.
• KYC Documentation: Identity and address verification documents are retained for a minimum of five (5) years following the closure or last active use of an Account, as required by applicable financial regulations.
• Transaction Records: Financial transaction records are retained for a minimum of seven (7) years from the date of the transaction, in line with standard accounting and regulatory record-keeping standards.
• Support Communications: Correspondence with our support team is retained for a period of three (3) years from the date of the interaction, unless a longer retention period is required in connection with an ongoing dispute or investigation.
• Marketing Data: Where consent has been withdrawn for marketing communications, we will cease further marketing processing promptly and remove relevant data from active marketing lists, though anonymised or aggregated records may be retained for analytics purposes.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with Himalaya4D's data disposal procedures.

Subject to applicable law, you hold the following rights in respect of your Personal Data held by Himalaya4D. To exercise any of these rights, please contact us at [email protected]. We will respond to all verified requests within thirty (30) days.

Himalaya4D implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-Bit SSL Encryption: All data transmitted between your device and our servers is encrypted using industry-standard TLS/SSL protocols.
• Access Controls: Access to Personal Data within our organisation is restricted on a strict need-to-know basis, with role-based access permissions enforced across all internal systems.
• Secure Data Storage: Personal Data and KYC documentation are stored on encrypted servers with multi-layer access protections and regular security audits.
• Account Security: Registered Accounts are protected by password authentication. Players are strongly encouraged to use strong, unique passwords and to enable any additional security features available on the Platform.
• Fraud Monitoring: Our systems include real-time monitoring for anomalous account activity, unauthorised login attempts, and patterns indicative of account compromise.

Notwithstanding these measures, no data transmission over the internet or electronic storage system can be guaranteed to be completely secure. While we take every reasonable precaution, Himalaya4D cannot provide an absolute guarantee against all security threats. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify you and the relevant authorities as required by applicable law.

Himalaya4D's Services are strictly intended for individuals who are 21 years of age or older. We do not knowingly collect or process Personal Data from persons under the age of 21.

Mandatory KYC age verification is required before any withdrawal can be processed from a registered Account. Where Himalaya4D discovers or has reasonable grounds to suspect that an Account is held by a person under the age of 21, that Account will be immediately suspended, all associated Personal Data will be reviewed in accordance with our data breach and regulatory procedures, and any funds in the Account will be handled in accordance with applicable legal requirements.

If you believe that a person under the age of 21 has registered an Account with Himalaya4D, please contact us immediately at [email protected] so that we may take the necessary steps.

In the course of operating the Platform and delivering its Services, your Personal Data may be transferred to, and processed in, countries or territories outside of Malaysia. This may occur when we use third-party service providers — such as cloud infrastructure providers, KYC verification services, or payment processors — whose servers are located internationally.

Where Personal Data is transferred outside Malaysia, Himalaya4D ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable Malaysian data protection law. Such safeguards may include binding contractual obligations between Himalaya4D and the recipient, adherence to recognised international data transfer frameworks, or reliance on adequacy determinations by relevant regulatory bodies.

By using our Services and accepting this Privacy Policy, you consent to the transfer of your Personal Data to jurisdictions outside Malaysia where necessary for the delivery of our Services, subject to the safeguards described above.

Himalaya4D reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, regulatory requirements, or Platform functionality. The "Last Updated" date at the top of this Policy indicates when the most recent revision was made.

Where changes to this Policy are material — particularly those that affect your rights or the way in which we process your data — Himalaya4D will endeavour to provide reasonable advance notice to registered Account holders via the email address on file.

Your continued use of the Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. We recommend that you review this Policy periodically to stay informed of how we handle your Personal Data.

If you have any questions, concerns, or requests in relation to this Privacy Policy — including requests to exercise your data subject rights — please contact Himalaya4D using the details below. We treat all privacy-related enquiries with priority and aim to respond within five (5) business days.

For information on our broader platform policies, please also review our Terms & Conditions and our Responsible Gambling page.