Privacy Policy Bento4D – Your Personal Data Protection

1Introduction

Bento4D is committed to protecting the privacy and data security of all our members. This Privacy Policy describes our practices regarding the collection, use, disclosure, and protection of information you provide to us when using the Bento4D platform.

By registering an account with Bento4D, you acknowledge that you have read, understood, and agreed to this Privacy Policy. This document forms part of the Bento4D Terms and Conditions and should be read together with them.

Bento4D operates in compliance with the provisions of Personal Data Protection Act 2010 (PDPA) Malaysia. We only process your personal data where a valid legal basis exists — whether based on your consent, contractual necessity, legal obligation, or our legitimate interest in operating our business safely and responsibly.

2Personal Data We Collect

Bento4D collects various types of personal data depending on how you interact with our platform. We only collect information that is genuinely necessary for the stated purposes.

2.1 Information You Provide Directly

This is information you voluntarily provide while using our platform:

• Registration information: Full name, mobile number, date of birth, username, and password.
• KYC verification documents: A copy of your Identity Card (MyKad), passport, or other valid identification document.
• Financial information: Bank account number, bank name, and digital wallet details used for deposits and withdrawals.
• Support communications: Any information you share when interacting with our customer support team via live chat or email.

2.2 Information Collected Automatically

When you use the Bento4D platform, our systems automatically record certain technical information:

• Device data: Device type, operating system, phone or computer model.
• Network data: IP address, internet service provider (ISP) name, and general location based on IP.
• Usage data: Pages visited, session duration, clicks, navigation behaviour, and betting records.
• Cookie data: Session cookies and preference cookies that help us deliver a better experience.

2.3 Information from Third Parties

In certain cases, we may receive information about you from trusted third-party sources, including identity verification service providers and fraud prevention agencies, to verify the accuracy of the information you have provided.

3Data Collection and Processing Purpose

Bento4D uses your personal data only for legitimate and transparent purposes. The following are the primary purposes for which we process your data:

• Account Management: Create, verify, and maintain your member account.
• Transaction Processing: Process deposits, withdrawals, and all financial activity in your account.
• KYC/AML Verification: Meet legal obligations related to anti-money laundering and identity verification.
• Platform security: Detect and prevent fraud, unauthorised access, and suspicious activity.
• Customer Support: Respond to enquiries, resolve complaints, and provide technical assistance.
• Service Enhancement: Analyse usage patterns to improve platform quality and usability.
• Marketing communications: Send promotional offers and platform update notifications — with your consent only.
• Legal Compliance: Comply with legal obligations, regulatory directives, and court orders.

4Data Sharing and Disclosure

Bento4D does not sell or rent your personal data to any party. However, under certain circumstances, we may need to share your information with the following parties:

4.1 Service Providers

We work with selected third-party service providers to support our platform operations. These include game providers, payment processors, identity verification service providers, and cloud infrastructure providers. All service providers are required to adhere to the same strict data security standards we uphold.

4.2 Legal Requirements

We may disclose your personal data to authorities when required to do so by law, court order, or direction from a law enforcement agency. In such situations, we will disclose only the minimum necessary information and will notify you where permitted.

4.3 Protection of Rights and Safety

In situations where there is a threat to the security of the platform, other members, or the public, we reserve the right to disclose relevant information to the appropriate parties to prevent harm or criminal activity.

4.4 Business Transfers

If bento4d is involved in a merger, acquisition, or asset sale, members' personal data may be transferred to the new entity. We will notify members before any such transfer takes place and ensure an equivalent level of data protection is maintained.

5Data Security and Protection

Bento4D continuously invests in the latest security infrastructure to ensure your personal data remains protected at all times. The key security measures we implement include:

• Data-in-transit encryption: TLS 1.3 protocol ensures all data transmitted between your device and our servers cannot be intercepted.
• Data-at-rest encryption: Sensitive data stored in our databases is encrypted using AES-256.
• Two-Factor Authentication (2FA): An additional security layer is available for all member accounts, requiring verification via your registered mobile number.
• Continuous Monitoring: A 24-hour anomaly detection system monitors suspicious activity on the platform.
• Periodic security audits: Independent security assessments are conducted regularly to identify and address any vulnerabilities.
• Internal access controls: The principle of least privilege is applied to ensure only authorised personnel can access personal data.

6Data Retention Period

Bento4D retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law.

• Active account data: Retained for the duration your account is active and for a reasonable period after account closure.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysia's financial and tax legal requirements.
• KYC documents: Retained for a minimum of 5 years from the date of verification or account closure, in accordance with AML requirements.
• Support communication logs: Retained for 2 years for reference and dispute resolution purposes.
• Cookie data: Session cookies are deleted when you close your browser; persistent cookies expire after a set period.

When data is no longer needed and there is no legal obligation to retain it, we will securely delete or anonymise it.

7Cookies and Tracking Technologies

Bento4D uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device by your web browser.

7.1 Types of Cookies We Use

• Essential cookies: Required for core platform functions such as session login and security. These cookies cannot be disabled.
• Preference cookies: Save your preferences such as language and time zone to provide a more personalised experience.
• Analytics cookies: Help us understand how members use the platform for continuous improvement. This data is collected in aggregate and cannot identify individuals.
• Security cookies: Help detect suspicious login attempts and fraudulent activity.

7.2 Cookie Controls

You can manage cookie usage through your web browser settings. Please note that disabling certain cookies may affect platform functionality. For detailed instructions on managing cookies, please refer to your web browser's help documentation.

8Your Rights as a Data Subject

As a data subject under Malaysia's PDPA, you have the following rights regarding your personal data that we hold:

9Changes to the Privacy Policy

Bento4D reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform improvements. When material changes occur, we will notify you via:

• In-platform notification upon your next login
• Update the "Last Updated" date at the top of this document
• Direct messages to your registered mobile number for significant changes

Your continued use of the bento4d platform after the effective date of any changes will be deemed as your acceptance of the updated Privacy Policy. We encourage you to review this policy periodically.

10Contact Us

If you have any questions, concerns, or wish to exercise your personal data rights, please contact our Data Protection Officer through the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 via the chat icon at the bottom-right corner of the platform
• Response time: We aim to respond to all privacy-related enquiries within 5 business days

All data rights requests will be processed promptly and in strict confidence. You may be required to provide proof of identity before your request is processed to ensure the security of your data.