Privacy Policy

Section 01

Introduction

harum4d ("harum4d", "we", "us", "our") operates the online gaming platform accessible at harum4d.casa and any associated mobile applications or subdomains (collectively, the "Platform"). This Privacy Policy describes how harum4d collects, uses, stores, discloses, and protects personal data provided by or collected from individuals who access or use the Platform ("Member", "User", "you").

This Privacy Policy should be read in conjunction with harum4d's Terms & Conditions and Responsible Gambling Policy, which are incorporated herein by reference. By registering an account or using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

harum4d serves players across Malaysia, including residents of Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other cities. Where applicable, our data practices are aligned with internationally recognised data protection principles appropriate to the jurisdictions in which we operate.

Section 02

Definitions

In this Privacy Policy, the following terms shall have the meanings set out below:

• "Personal Data" — Any information that identifies or could reasonably be used to identify a specific individual, including name, identification number, contact details, financial data, and device identifiers.
• "Processing" — Any operation performed on personal data, including collection, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" — harum4d, the entity that determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" — A third party that processes personal data on behalf of harum4d in accordance with harum4d's instructions and this Privacy Policy.
• "Sensitive Personal Data" — Categories of personal data warranting heightened protection, including financial account information, government-issued identity documents, and health-related information where applicable.
• "Consent" — A freely given, specific, informed, and unambiguous indication of agreement by a Member to the processing of their personal data for stated purposes.
• "Cookie" — A small text file stored on a Member's device by the Platform for the purposes of session management, analytics, and personalisation.

Section 03

Personal Data We Collect

harum4d collects personal data across several categories depending on the nature of your interaction with the Platform:

3.1 Registration Data

When you create an account, we collect:

• Full legal name as it appears on your identity document
• Date of birth (to verify the 21+ age requirement)
• Current residential address (including postcode and city — e.g., Kuala Lumpur, Petaling Jaya, Johor Bahru)
• Email address and Malaysian mobile phone number
• Username and hashed password

3.2 Identity Verification (KYC) Data

To comply with anti-money laundering obligations and process withdrawals, we collect:

• Copy of valid Malaysian identity document: MyKad, Driver's Licence, or Passport
• Proof of residential address: utility bill, bank statement, or government correspondence (within 3 months)
• Selfie photograph holding the primary identity document
• Payment method verification documentation where required

3.3 Financial Transaction Data

When you make deposits or withdrawals via accepted payment methods — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, and cryptocurrency — we collect:

• Transaction amounts, dates, and timestamps
• Payment method type and masked account identifiers (e.g., last four digits of a bank account)
• Transaction reference numbers and processing status

3.4 Gaming & Activity Data

• Game history, wager amounts, and results
• Sports betting markets selected (e.g., Liga Super Malaysia, EPL, UFC events)
• Session durations, login timestamps, and Platform navigation behaviour
• Bonus usage and promotional engagement records

3.5 Technical & Device Data

• IP address and approximate geolocation derived therefrom
• Device type, operating system, browser type and version
• Cookie identifiers and session tokens
• Referral source or affiliate tracking parameters

3.6 Communication Data

• Records of communications with harum4d customer support via live chat, WhatsApp, email, or other channels
• Feedback, survey responses, and complaint records

Section 04

How Personal Data Is Collected

harum4d collects personal data through the following means:

• Directly from you — through account registration forms, KYC document submissions, deposit and withdrawal requests, live chat conversations, and customer support interactions.
• Automatically — through cookies, web beacons, server logs, and similar tracking technologies when you access the Platform via a browser or mobile device.
• From third-party payment processors — transaction confirmation data from e-wallet providers, FPX gateways, and cryptocurrency networks used to facilitate your deposits and withdrawals.
• From identity verification partners — third-party KYC service providers engaged to assist with document authentication and fraud screening.
• From analytics providers — aggregated usage and performance data from analytics tools integrated into the Platform to support operational improvements.

Section 05

How We Use Your Personal Data

harum4d processes personal data for the following purposes:

Section 06

Legal Basis for Processing

harum4d processes personal data on the following legal bases:

• Contractual necessity — Processing required to perform our obligations under the Terms & Conditions, including account management, payment processing, and delivery of gaming services.
• Legal obligation — Processing required to comply with applicable anti-money laundering laws, KYC regulations, and gaming licence conditions, including the mandatory verification of Member identity and age.
• Legitimate interests — Processing necessary for harum4d's legitimate business interests, including fraud prevention, Platform security, responsible gambling monitoring, and analytical improvements, where such interests are not overridden by your rights and interests.
• Consent — Where harum4d relies on consent as the legal basis (e.g., for direct marketing communications), you have the right to withdraw consent at any time by contacting customer support or updating your account preferences.

Section 07

Sharing of Personal Data

harum4d does not sell personal data. We share personal data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

7.1 Service Providers & Data Processors

We engage trusted third-party service providers to assist in delivering the Platform, including payment processors (e.g., FPX gateway operators, e-wallet providers), KYC verification partners, cloud hosting providers, customer support software vendors, and fraud screening services. All such providers are bound by contractual obligations to process personal data only as instructed by harum4d and to maintain appropriate security standards.

7.2 Regulatory & Law Enforcement Authorities

harum4d may disclose personal data to regulatory bodies, licensing authorities, law enforcement agencies, or courts where we are legally obliged to do so or where disclosure is necessary to investigate, prevent, or take action with respect to illegal activities, suspected fraud, or violations of these Terms.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of harum4d's business, personal data held by harum4d may be transferred to the acquiring entity as part of the transaction. Members will be notified via their registered email address in the event of any such transfer that materially affects the processing of their personal data.

Section 08

Cookies & Tracking Technologies

harum4d uses cookies and similar tracking technologies to manage sessions, remember your preferences, analyse Platform performance, and support fraud detection. The following categories of cookies are used:

• Strictly Necessary Cookies — Essential for the Platform to function correctly. These include session authentication tokens and security cookies. They cannot be disabled.
• Functional Cookies — Used to remember your language preference, display settings, and other personalisation options to improve your experience.
• Analytical Cookies — Used to collect aggregated data about how Members interact with the Platform, enabling harum4d to identify areas for improvement. Data collected is anonymised where practicable.
• Fraud Prevention Cookies — Used to detect and prevent fraudulent activity, duplicate accounts, and multi-accounting attempts.

You may manage cookie preferences through your browser settings. Please note that disabling certain cookie categories may affect the functionality of the Platform or your ability to access certain features.

Section 09

Data Retention

harum4d retains personal data for the period necessary to fulfil the purposes for which it was collected, and in accordance with applicable legal and regulatory retention obligations. The following general retention periods apply:

• Account and registration data: Retained for the duration of the account relationship and for a minimum of five (5) years following account closure, to meet anti-money laundering record-keeping requirements.
• KYC documentation: Retained for a minimum of five (5) years following the completion of the KYC process or account closure, whichever is later.
• Financial transaction records: Retained for a minimum of seven (7) years in accordance with applicable financial record-keeping regulations.
• Gaming and activity data: Retained for the duration of the account relationship and for a period sufficient to resolve any pending disputes or regulatory inquiries.
• Communication and support records: Retained for a minimum of three (3) years following the last interaction.
• Technical and device data: Retained for a rolling period of up to twelve (12) months for operational and fraud prevention purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be associated with a specific individual.

Section 10

Data Security

harum4d implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform
• Encryption of sensitive personal data at rest within harum4d's infrastructure
• Access controls and role-based permissions restricting employee access to personal data on a need-to-know basis
• Two-factor authentication available for all Member accounts
• Regular security audits, penetration testing, and vulnerability assessments
• Incident response procedures in place to address any potential data breach in a timely manner

In the event of a data breach that is likely to result in a risk to your rights and interests, harum4d will notify affected Members and relevant regulatory authorities in accordance with applicable requirements.

Section 11

Your Rights as a Data Subject

Subject to applicable law, you have the following rights with respect to your personal data held by harum4d:

• Right of Access — You may request a copy of the personal data harum4d holds about you, along with information about how it is processed.
• Right to Rectification — You may request that inaccurate or incomplete personal data be corrected or updated.
• Right to Erasure — You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations that may override this right.
• Right to Restriction of Processing — You may request that harum4d restrict the processing of your personal data in certain circumstances, such as where you contest its accuracy.
• Right to Data Portability — You may request that personal data provided by you be transferred in a structured, machine-readable format where technically feasible.
• Right to Object — You may object to processing based on harum4d's legitimate interests, including direct marketing, where your interests override harum4d's.
• Right to Withdraw Consent — Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of your rights, please contact harum4d's customer support team using the details in Section 15. harum4d will respond to verifiable rights requests within a reasonable timeframe, and in any event within thirty (30) days of receipt. Identity verification may be required before a request is processed.

Section 12

Protection of Minors

The harum4d Platform is strictly intended for individuals who are 21 years of age or older. harum4d does not knowingly collect or process personal data of individuals under the age of 21. Age verification is conducted as part of the mandatory KYC process for all Members.

If harum4d becomes aware that personal data of an individual under the age of 21 has been collected, the relevant account will be immediately suspended, all personal data associated with that account will be deleted in accordance with our data retention policy, and any deposits will be refunded net of applicable deductions as prescribed by our Terms & Conditions.

If you believe a minor may have registered on the Platform, please contact our support team immediately at [email protected].

Section 13

International Data Transfers

harum4d operates under an international gaming licence and may engage service providers whose infrastructure is located outside Malaysia. Where personal data is transferred to recipients in other jurisdictions, harum4d takes steps to ensure that such transfers are conducted in accordance with applicable data protection requirements, including the use of appropriate contractual safeguards with recipient service providers.

harum4d will not transfer your personal data to jurisdictions that do not provide adequate levels of data protection without implementing appropriate contractual, technical, and organisational safeguards to protect your rights and interests.

Section 14

Changes to This Privacy Policy

harum4d may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or Platform functionality. The effective date of the current version is displayed at the top of this page. Where material changes are made, harum4d will notify registered Members via their email address on record and/or via a prominent notice on the Platform prior to the changes taking effect.

Your continued use of the Platform following notification of any update constitutes your acknowledgement of the revised Privacy Policy. We encourage you to review this page periodically to stay informed of how harum4d protects your personal data.

Section 15

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or harum4d's processing of your personal data, please contact our team: