Privacy Policy — noah4d
This Privacy Policy explains how noah4d collects, uses, stores, discloses, and protects the personal data of all users who access or interact with our platform. We take your privacy seriously and handle all personal information in accordance with applicable data protection principles. Please read this document carefully before using the Platform.
- 1. Introduction
- 2. Definitions
- 3. Data We Collect
- 4. How We Collect Data
- 5. Legal Basis for Processing
- 6. How We Use Your Data
- 7. Data Sharing & Disclosure
- 8. Cookies & Tracking
- 9. Data Retention
- 10. Data Security
- 11. Your Privacy Rights
- 12. Third-Party Services
- 13. Children & Minors
- 14. Policy Amendments
- 15. Contact & Complaints
Introduction
noah4d (hereinafter "the Company", "we", "us", or "our") operates the online gaming and sports betting platform accessible at https://noah4d.lat and any associated mobile applications (collectively, "the Platform"). The Company is committed to protecting the privacy and personal data of all individuals ("Players", "Users", or "you") who register for, access, or otherwise interact with the Platform.
This Privacy Policy (hereinafter "this Policy" or "the Policy") describes in detail what personal data noah4d collects from you, the purposes for which that data is processed, how it is stored and protected, the circumstances under which it may be shared with third parties, and the rights available to you as a data subject.
By accessing the Platform, completing the registration process, or using any feature of the noah4d service, you acknowledge that you have read and understood this Privacy Policy and you consent to the collection and use of your personal data as described herein. If you do not agree with any aspect of this Policy, you should discontinue use of the Platform immediately.
Definitions
For the purposes of this Privacy Policy, the following terms carry the meanings specified below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies, or could reasonably be used to identify, a living individual — including name, identification number, contact details, financial information, device identifiers, and behavioural data. |
| "Processing" | Any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction — whether automated or manual. |
| "Data Controller" | The entity that determines the purposes and means of processing Personal Data. For the purposes of this Policy, noah4d is the Data Controller. |
| "Data Processor" | A third party that processes Personal Data on behalf of the Data Controller pursuant to a written data processing agreement. |
| "Account" | The registered player profile created by a User on the noah4d Platform. |
| "KYC" | Know Your Customer — the identity verification process through which noah4d confirms a player's identity, age, and payment method ownership before processing withdrawals above applicable thresholds. |
| "Cookies" | Small text files placed on a user's device by a website in order to store session information, preferences, analytics data, or tracking identifiers. |
Categories of Personal Data We Collect
noah4d collects personal data across the following categories, depending on your interactions with the Platform:
3.1 Registration and Identity Data
- Full legal name as it appears on your government-issued identification document
- Date of birth (used for age verification — you must be 21 years of age or older)
- Residential address, including postcode, city, and state
- Email address and mobile phone number
- Username and encrypted account password
- Malaysian MyKad number, passport number, or other national identification number (collected during KYC verification)
3.2 Financial and Transaction Data
- Payment method details, including bank account numbers, e-wallet identifiers (Touch 'n Go eWallet, Boost, GrabPay), or cryptocurrency wallet addresses used for deposits or withdrawals
- Transaction history — deposits, withdrawals, bonus credits, and adjustments
- Currency equivalents in Malaysian Ringgit (MYR)
- Bank account verification documents submitted during KYC
3.3 Gaming and Behavioural Data
- Game session history, including games played, wager amounts, win/loss records, and session duration
- Sports betting history, including markets wagered on, odds accepted, and settlement outcomes
- Responsible gambling tool usage — deposit limits set, cooling-off periods invoked, self-exclusion requests
- Promotional offer redemptions and bonus activity
3.4 Technical and Device Data
- IP address and geolocation data (country and city level — e.g., Kuala Lumpur, Penang, Johor Bahru)
- Device type, operating system, and browser information
- Session timestamps and access logs
- Cookies and similar tracking identifiers (see Section 8)
3.5 Communications Data
- Records of live chat transcripts, email correspondence, and support ticket exchanges between you and the noah4d support team
- Survey or feedback responses submitted voluntarily
- Promotional communication preferences (opt-in / opt-out status)
How We Collect Personal Data
noah4d collects personal data through the following mechanisms:
- Direct submission: Information you provide when creating an Account, completing the KYC verification process, making a deposit or withdrawal request, contacting our support team, or participating in a promotional offer.
- Automated collection: Technical data collected automatically when you access the Platform, including IP address, device identifiers, browser type, session data, and cookie-based tracking data.
- Third-party sources: Identity verification data returned by our KYC service providers; fraud and risk screening data from anti-money laundering (AML) compliance partners; payment confirmation data from payment processors including FPX, DuitNow, and cryptocurrency network intermediaries.
- Inferred data: Behavioural profiles, responsible gambling risk indicators, and marketing segmentation data derived from your activity on the Platform.
Legal Basis for Data Processing
All processing of your personal data is carried out on one or more of the following legal bases:
| Legal Basis | Application at noah4d |
|---|---|
| Contractual Necessity | Processing necessary to perform the gaming services contract — account creation, identity verification, payment processing, withdrawal execution, and game delivery. |
| Legal Obligation | Processing required to comply with anti-money laundering (AML) obligations, age verification requirements, regulatory reporting duties, and law enforcement requests made pursuant to lawful authority. |
| Legitimate Interest | Processing necessary for fraud prevention, platform security, responsible gambling monitoring, abuse detection, and internal analytics — provided such interests are not overridden by your fundamental privacy rights. |
| Consent | Processing for marketing communications, promotional notifications, and optional personalisation features — where you have explicitly opted in and may withdraw consent at any time. |
Purposes of Data Processing
noah4d processes your personal data for the following purposes:
- Account management: Creating and maintaining your player Account, verifying your identity, processing login sessions, and managing Account security including two-factor authentication.
- Payment processing: Executing deposit transactions via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and cryptocurrency channels; processing withdrawal requests to verified payment methods; reconciling transaction records in MYR.
- KYC and regulatory compliance: Verifying your identity, age (21+), and payment method ownership in accordance with applicable AML and responsible gambling obligations.
- Game delivery and personalisation: Delivering casino games, live dealer experiences, and sports betting markets; personalising your game lobby and promotional offers based on your activity history.
- Responsible gambling monitoring: Identifying patterns of behaviour associated with problem gambling risk; applying account-level limits, interventions, or support referrals where appropriate.
- Fraud prevention and security: Detecting and preventing fraudulent transactions, bonus abuse, identity fraud, multi-account violations, and other prohibited conduct outlined in our Terms and Conditions.
- Customer support: Responding to support queries, resolving account disputes, and maintaining records of your service interactions for quality assurance and training.
- Marketing communications: Sending promotional emails, platform notifications, and personalised offers — only where you have opted in. You may withdraw marketing consent at any time via your Account settings or by contacting support.
- Legal compliance and reporting: Maintaining records required by applicable law; responding to lawful regulatory or law enforcement requests; complying with financial crime prevention obligations.
Data Sharing & Third-Party Disclosure
noah4d does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data only in the following strictly defined circumstances:
- Payment processors and financial service providers: Transaction data is shared with payment intermediaries (FPX, DuitNow, e-wallet operators, cryptocurrency processors) solely to the extent necessary to execute your deposit or withdrawal instruction.
- KYC and identity verification providers: Identity documents and personal identifiers are shared with licensed KYC verification partners to fulfill our age verification and AML obligations. These partners are bound by data processing agreements and may not use your data for any independent purpose.
- Fraud prevention and risk screening services: Limited transactional and behavioural data may be shared with fraud detection platforms to identify and prevent financial crime. This processing is conducted on the legal basis of legitimate interest.
- Game content providers: Anonymised or pseudonymised session data may be shared with game studios that supply content to the Platform for auditing, RTP certification, and technical performance purposes. No directly identifiable personal data is shared with game providers without your consent.
- Legal and regulatory authorities: noah4d will disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, court order, or valid regulatory demand. Where permissible, we will notify you of such disclosure.
- Corporate transactions: In the event of a merger, acquisition, or sale of substantially all of our business assets, your personal data may be transferred to the successor entity subject to the privacy protections described in this Policy continuing to apply.
Cookies & Tracking Technologies
The noah4d Platform uses cookies and similar tracking technologies to enable core Platform functionality, improve user experience, and support our security and analytics operations. The following categories of cookies are used:
| Cookie Type | Purpose | Retention |
|---|---|---|
| Essential / Session | Maintain your login session, store authentication tokens, enable secure page navigation, and manage responsible gambling tool states. | Session duration |
| Functional / Preference | Remember your language and display preferences, notification settings, and last-used game categories. | Up to 12 months |
| Analytics / Performance | Aggregate and anonymised data on page visits, feature usage, and error rates — used to improve Platform performance and user experience. | Up to 24 months |
| Security / Anti-Fraud | Device fingerprinting and risk scoring data used to detect suspicious login attempts, multi-account violations, and automated bot activity. | Up to 12 months |
You can manage cookie preferences through your browser settings. Please note that disabling essential cookies will impair the functionality of the Platform and may prevent you from accessing your Account or completing transactions.
Data Retention
noah4d retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:
- Account and identity data: Retained for the duration of your Account plus a minimum of 5 years following Account closure — to comply with AML record-keeping obligations and resolve any outstanding disputes.
- Transaction and financial records: Retained for a minimum of 7 years from the date of each transaction in accordance with standard financial record-keeping requirements.
- KYC documentation: Retained for a minimum of 5 years following Account closure or the completion of the KYC verification process, whichever is later.
- Game session and betting history: Retained for a minimum of 3 years, or longer if required by a regulatory audit or ongoing dispute resolution.
- Support communications: Retained for 2 years following resolution of the relevant query or complaint.
- Marketing preferences and consent records: Retained for the duration of the consent relationship plus 2 years, to demonstrate compliance with consent obligations.
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.
Data Security Measures
noah4d implements a comprehensive suite of technical and organisational measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
- 256-bit SSL/TLS encryption applied to all data transmitted between your device and our servers — the same standard employed by major global financial institutions.
- Encryption at rest for all sensitive personal data stored in our databases, including identity documents, financial account details, and password hashes.
- Two-factor authentication (2FA) available to all players and mandatory for internal administrative access by Company staff.
- Role-based access controls ensuring that employee access to personal data is restricted to the minimum necessary for their specific job function.
- Real-time intrusion detection and monitoring systems that alert our security team to anomalous access patterns, data exfiltration attempts, and infrastructure vulnerabilities.
- Regular penetration testing and security audits conducted by independent third-party security specialists.
- Data breach response procedures — in the event of a confirmed personal data breach that creates a risk to your rights, noah4d will notify affected players and relevant authorities within the applicable regulatory timeframe.
Your Privacy Rights
As a data subject, you are entitled to exercise the following rights in relation to your personal data held by noah4d. To exercise any of these rights, contact us via the details in Section 15. We will respond to all rights requests within 30 days of receipt, or notify you if additional time is required.
Request a copy of the personal data noah4d holds about you, along with information about how it is processed.
Request correction of inaccurate or incomplete personal data. Update basic account details directly via Account Settings.
Request deletion of your personal data where it is no longer necessary for the original purpose, subject to our legal retention obligations.
Request that we limit the processing of your data in certain circumstances, such as while a dispute or accuracy challenge is pending.
Receive a copy of personal data you provided to us in a structured, commonly used, machine-readable format where technically feasible.
Object to the processing of your data for direct marketing or where processing is based on legitimate interest, subject to applicable legal constraints.
Third-Party Services & External Links
The noah4d Platform integrates with third-party services necessary for its operation, including payment gateway providers, KYC verification services, game content delivery systems, and analytics infrastructure. These integrations are governed by data processing agreements that require third parties to handle personal data only as directed by noah4d and in accordance with applicable data protection obligations.
The Platform does not contain links to external third-party websites for commercial or advertising purposes. In the event that any informational reference to an external resource appears (for example, in the context of responsible gambling resources), those external sites operate under their own privacy policies and noah4d is not responsible for their data practices.
Minors & Under-Age Users
The noah4d Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21, and we do not permit persons under 21 to register for or access the Platform.
Where we discover — through age verification procedures, KYC checks, or any other means — that personal data has been submitted by a person under the age of 21, we will immediately suspend the associated Account, void any related transactions, and securely delete the under-age user's personal data to the extent that our legal obligations permit.
Amendments to This Privacy Policy
noah4d reserves the right to update or amend this Privacy Policy at any time in order to reflect changes in applicable data protection law, regulatory guidance, our data processing practices, or the operational structure of the Platform.
Where an amendment is material — meaning it substantially changes the way we collect, use, or share your personal data — we will provide at least 14 days' advance notice via a prominent notice on the Platform and, where available, an email notification to your registered address.
Non-material amendments — such as clarifications, reformatting, or typographical corrections — may be made without prior notice and take effect immediately upon publication. The "Effective Date" displayed at the top of this page reflects the date on which the current version of the Policy came into force.
Your continued use of the Platform after any amendment is published constitutes your acceptance of the updated Policy. If you do not accept the amended Policy, you should cease using the Platform and contact our support team to request Account closure.
Contact Us & Privacy Complaints
For any questions, concerns, or requests relating to this Privacy Policy or the personal data we hold about you — including the exercise of any data subject right described in Section 11 — please contact the noah4d data privacy team through the following channels:
- Live Chat: Available 24/7 on the Platform. State "Privacy Request" at the start of your chat for routing to the appropriate team member.
- Email: [email protected] (plain text — not a clickable link). Please include "Privacy Policy Request" in your subject line and include your registered username and Account email address so we can locate your record.
We acknowledge all privacy-related correspondence within 48 hours and aim to provide a substantive response within 30 calendar days. For complex requests, we may notify you within the initial 30-day period that an extension of up to a further 60 days is required, along with the reasons for the extension.
If you are not satisfied with our response to a privacy complaint, you may escalate the matter to the relevant data protection authority in your jurisdiction. For Malaysian players, this would be the Personal Data Protection Department (PDPD) under the Personal Data Protection Act 2010 (PDPA).
This Privacy Policy was last reviewed and updated on 1 January 2026. This is Version 2.4.
How noah4d Protects Your Privacy
This Privacy Policy isn't just legal text — it represents real commitments backed by real infrastructure. Here's what those commitments look like in practice.
End-to-End Encryption
All data exchanged between your device and our servers is encrypted with 256-bit SSL. Sensitive data stored in our systems — including identity documents and financial details — is encrypted at rest.
No Data Selling — Ever
noah4d does not sell, rent, or trade your personal data to third-party advertisers or data brokers. The only data shared externally is what's necessary to operate the Platform and comply with legal obligations.
You Control Your Data
Access, correct, delete, or export your personal data at any time. Manage marketing preferences and withdraw consent for optional processing through your Account settings or via our support team.
Clear Retention Limits
We retain your data only as long as required — defined retention periods are set for each data category. Once the period expires, your data is securely deleted or anonymised with no residual storage.
PDPA-Aware Practices
Our data handling practices are aligned with the principles of Malaysia's Personal Data Protection Act 2010 (PDPA), including lawful processing, purpose limitation, data quality, and the protection of sensitive personal data.
Breach Notification Commitment
In the unlikely event of a confirmed data breach that creates risk to your personal data, noah4d will notify affected players promptly and transparently — with clear information about what was affected and what action to take.
Play at noah4d With Confidence
Your privacy is protected at every layer of our Platform — from encrypted connections to strict data minimisation practices. For players aged 21 and above only.
🔞 21+ only | Please gamble responsibly | Privacy Policy last updated 1 January 2026