Privacy Policy

1 Introduction

Cermin4D ("we", "us", "our", "Platform") is committed to protecting the privacy and personal data of all individuals who access or interact with our online casino and sports betting services atcermin4d.cam. This Privacy Policy ("Policy") sets out in clear terms what personal data we collect, why we collect it, how it is used, who it may be shared with, and what rights you hold as a data subject.

This Policy applies to all Users who register an account, visit the Platform, contact our support team, or otherwise provide personal information to Cermin4D in any form. It covers data collected through the website, any associated mobile interfaces, live chat systems, email correspondence, and payment processing channels.

We encourage you to read this Policy carefully and in its entirety. If you have questions about any section, our data protection team can be reached through the contact details provided in Section 15. This Policy is to be read alongside our Terms & Conditions, which govern the broader contractual relationship between you and Cermin4D.

2 Definitions

The following terms carry specific meanings throughout this Policy:

3 Data We Collect

Cermin4D collects personal data through various touchpoints across the Platform. The categories of data we collect and the circumstances of collection are detailed below:

3.1 Registration Data

When you create an Account, we collect your full legal name, date of birth, email address, username, password (stored in hashed form), preferred currency, and country of residence.

3.2 Identity Verification (KYC) Data

To comply with our anti-money laundering and player protection obligations, we collect copies of government-issued identity documents (such as a Malaysian MyKad, Passport, or Driver's Licence), proof of residential address (utility bill or bank statement issued within three months), and a selfie photograph for biometric identity confirmation.

3.3 Financial & Transaction Data

We record all deposit and withdrawal transactions, including payment method details (e.g., Touch 'n Go eWallet account reference, Maybank account last four digits, DuitNow identifier), transaction amounts in MYR or equivalent, timestamps, and processing outcomes. We do not store full bank account numbers or full card numbers on our systems.

3.4 Gameplay & Behavioural Data

We record your game history, wager amounts, session durations, win/loss records, bonus claim history, and in-platform navigation patterns. This data supports platform integrity, responsible gambling monitoring, and personalisation of your experience.

3.5 Technical & Device Data

We automatically collect IP addresses, browser type and version, device identifiers, operating system, screen resolution, referring URL, and session timestamps when you access the Platform.

3.6 Communications Data

Records of all communications between you and our support team — including live chat transcripts, email correspondence, and any complaints or formal submissions — are retained for service quality and dispute resolution purposes.

4 How We Use Your Data

Cermin4D uses personal data only for defined, legitimate purposes. The following table summarises each processing purpose alongside the data categories involved:

Cermin4D does not use personal data to make fully automated decisions that produce significant legal or comparable effects on users without the opportunity for human review.

5 Legal Basis for Processing

Cermin4D processes personal data on the following lawful bases, consistent with internationally recognised data protection principles:

• Contractual Necessity: Processing required to fulfil the services described in our Terms & Conditions — including account management, deposits, withdrawals, and gameplay.
• Legal Obligation: Processing required to comply with applicable laws and regulations — including anti-money laundering (AML), Know Your Customer (KYC), and fraud prevention obligations.
• Legitimate Interests: Processing for fraud detection, platform security, responsible gambling monitoring, and service analytics — where these interests are not overridden by your rights.
• Consent: Processing for direct marketing, promotional communications, and optional personalisation features — where you have provided explicit, freely given consent that you may withdraw at any time.

6 Data Sharing & Disclosure

Cermin4D does not sell your personal data. We may share data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment Service Providers: Malaysian payment processors including FPX network operators, Touch 'n Go eWallet, Boost, GrabPay, DuitNow infrastructure operators, and cryptocurrency exchange gateways — for the purpose of processing transactions.
• Identity Verification Partners: Third-party KYC and AML screening services that assist in validating identity documents and screening against sanctions and PEP databases.
• Technology and Hosting Providers: Cloud infrastructure, server hosting, and platform software providers operating under binding data processing agreements.
• Game Content Providers: Licensed game studios whose software operates on the Platform — who may receive anonymised session identifiers for game integrity purposes.
• Regulatory and Law Enforcement Authorities: Where disclosure is required by applicable law, court order, or a lawful request from a competent authority.
• Professional Advisors: Legal counsel, auditors, and compliance consultants under strict confidentiality obligations.

7 International Data Transfers

As an internationally operating platform, Cermin4D may transfer personal data to, and process it in, countries outside Malaysia. Where such transfers occur, we take steps to ensure that your data receives a comparable level of protection to that which applies within your home jurisdiction.

Protective measures for international transfers include:

• Binding contractual clauses with all data processors and sub-processors operating in third countries.
• Data processing agreements that incorporate internationally recognised standard contractual clauses where applicable.
• Transfers only to jurisdictions that maintain adequate data protection frameworks assessed by our compliance team.

8 Data Retention

We retain your personal data for the minimum period necessary to fulfil the purposes set out in this Policy, unless a longer retention period is required by applicable law or regulatory obligation. General retention guidelines are as follows:

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymised in accordance with our data destruction procedures.

9 Cookies & Tracking Technologies

Cermin4D uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device that help us deliver and improve our services. Below is a summary of the types of cookies we use:

10 Your Rights as a Data Subject

Subject to applicable law and certain conditions, you hold the following rights in relation to your personal data held by Cermin4D. To exercise any of these rights, contact our data protection team at the details in Section 15. We will respond within 30 calendar days of receiving a valid request.

11 Children's Privacy

Cermin4D strictly prohibits access by individuals under 21 years of age. The Platform is designed and intended exclusively for adults. We do not knowingly collect personal data from persons under the age of 21.

If we become aware that personal data has been submitted by or on behalf of a minor, we will immediately suspend the associated Account, delete the data in question, and refund any deposits made (net of any withdrawals already processed). Age verification through KYC documentation is mandatory for all withdrawal requests and forms part of our registration verification process.

12 Security Measures

Cermin4D implements a multi-layered security infrastructure to safeguard your personal data against unauthorised access, disclosure, alteration, or destruction:

• Transport Layer Security (TLS 1.3): All data transmitted between your browser or device and the Cermin4D Platform is encrypted using current TLS standards.
• Password Hashing: User passwords are stored exclusively in hashed form using industry-standard cryptographic algorithms. Cermin4D employees cannot view your raw password.
• Two-Factor Authentication (2FA): Optional but strongly recommended two-factor authentication is available for all registered accounts.
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis, with role-based access controls and comprehensive audit logging.
• Regular Security Audits: The Platform undergoes periodic penetration testing and vulnerability assessments by qualified security professionals.
• Data Breach Response: In the event of a data breach that poses a risk to affected users, Cermin4D will notify impacted individuals and, where required, relevant regulatory bodies within the timeframes mandated by applicable law.

13 Third-Party Services

The Cermin4D Platform integrates with a number of third-party services to deliver its full functionality — including payment gateways, KYC verification providers, game studios, and analytics tools. While Cermin4D selects third-party partners carefully and requires contractual data protection commitments from all processors, we are not responsible for the independent privacy practices of third-party entities.

The Platform does not contain links to external third-party websites for general browsing. Where interactions with payment providers (such as Touch 'n Go eWallet, Maybank2u, CIMB Clicks, DuitNow, GrabPay, or Boost) occur via redirect, users are subject to those providers' own privacy policies during those interactions. We recommend reviewing their policies before proceding with any transaction.

14 Policy Updates & Amendments

Cermin4D may update this Privacy Policy periodically to reflect changes in our data processing practices, applicable law, or regulatory requirements. The "Last Reviewed" date at the top of this page will be updated to reflect the date of any material revision.

Where changes are material and affect your rights or the way we use your data, we will make reasonable efforts to notify registered Users via in-platform notification or email prior to the changes taking effect. Continued use of the Platform following the effective date of any revised Policy constitutes acceptance of the updated terms.

15 Contact & Data Enquiries

For any questions, concerns, or formal requests relating to your personal data or this Privacy Policy, please contact Cermin4D's data protection team through the following channels:

This Privacy Policy was last reviewed on 1 January 2026. Cermin4D is committed to continuous improvement of our data protection practices and welcomes feedback from Users on this Policy.