4shared Privacy Policy – Data Protection for Malaysian Users

This Privacy Policy ("Policy") describes the data collection and usage practices of 4shared ("we", "Platform", or "4shared"), which operates the website at 4shared.xyz. This Policy applies to all users who access or use the 4shared platform, including website visitors, registered users, and former members.

By accessing or using the 4shared platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the terms set out in this Policy, please discontinue your use of the 4shared platform immediately.

1 Data Controller Information

The collector and processor of your personal data is 4shared, an online entertainment platform operating in 4shared.xyz. As a data processor registered under Malaysia's PDPA, 4shared bears full responsibility for the processing of personal data described in this Policy.

For any enquiries regarding your personal data, you may contact the 4shared Data Protection Officer by email at support@4shared.xyz or via live chat within the platform.

2 Data We Collect

2.1 Personal Identification Data

During registration and use of the 4shared platform, we collect the following information:

• Full name as stated in your official Malaysian identity document (MyKad).
• Malaysian mobile phone number that is active for OTP verification and important communications.
• Email address for account communications and notifications.
• Date of birth to verify the minimum age requirement of 18 years.
• MyKad number or other identity document when required for identity verification in high-value transactions.

2.2 Financial Data

To facilitate deposit and withdrawal transactions, 4shared collects information relating to the payment method used, including:

• Account holder name for e-wallets (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay) and the registered number.
• DuitNow account details and FPX bank account numbers (Maybank2u, CIMB Clicks) — only what is required to verify transactions.
• Transaction records including date, amount (in RM), and transaction type (deposit or withdrawal).

4shared does not store credit card numbers or sensitive financial information beyond what is required to process a transaction.

2.3 Platform Activity Data

While you use the 4shared platform, we automatically record:

• Gaming and betting records, including slots played, football bets (Malaysia Super League, EPL, and others), roulette, e-sports, and other sports.
• Bonus and promotion transaction history.
• Session duration and platform usage patterns.
• Customer support records and communication history with the 4shared team.

2.4 Technical Data

The 4shared platform also automatically collects technical data including IP address, device type and version, operating system, web browser type, and pages visited within the platform. This data is used for security purposes, performance monitoring, and improving the user experience.

3 How We Collect Your Data

4shared collects your personal data through the following means:

• Directly from you — when you register an account, make a deposit, make a withdrawal, contact customer support, or interact with any part of the 4shared platform.
• Automatically — via cookies, server logs, and other tracking technologies while you use the platform.
• From third-party payment providers — when you transact using Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX, the respective provider may share transaction information necessary for payment verification and processing.
• From identity verification bodies — when you submit identity documents for the KYC (Know Your Customer) process in connection with high-value transactions, we may verify that information with the relevant authority.

4 Purpose of Data Processing

4shared processes your personal data for the following purposes:

5 Disclosure of Data to Third Parties

5.1 Permitted Sharing

4shared does not sell your personal data. However, in certain circumstances, we may share data with a limited number of third parties as follows:

• Payment providers: Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX-participating banks to process your financial transactions.
• Game provider: Companies providing slots, roulette, and casino game content for the 4shared platform, to the extent necessary to enable you to access those games.
• Technical service providers: Companies that provide infrastructure, cybersecurity, and analytics services to 4shared, bound by strict confidentiality agreements.
• Legal authorities: When required by Malaysian law or pursuant to a valid request from law enforcement authorities.

5.2 Prohibited Sharing

4shared will not share your personal data with:

• Third-party advertising or marketing companies without your written consent.
• Competitors or any other online entertainment platform.
• Data brokers or information aggregators.
• Any party that does not have a valid contractual relationship with 4shared.

6 International Data Transfers

In the course of its operations, 4shared may need to transfer your personal data to servers located outside Malaysia. Any such transfer will only be carried out with adequate safeguards equivalent to the level of protection provided under Malaysia's PDPA. This includes the use of standard data transfer agreements or transfers to countries recognised as having adequate data protection standards.

7 Data Retention Period

4shared retains your personal data for as long as necessary to fulfil the processing purposes described in this Policy, or for the period required under Malaysian law. General data retention periods are as follows:

• Active account data: Retained for as long as your account remains active on 4shared.
• Financial transaction records: Retained for a minimum of seven (7) years following the transaction date, in accordance with Malaysian accounting and anti-money laundering (AML) legal requirements.
• Customer support communication records: Retained for three (3) years from the date of the last communication.
• Log and technical data: Typically retained for twelve (12) months for security and troubleshooting purposes.
• Closed account data: Closed account data is retained for the minimum period required by law before being securely deleted.

8 Data Security

4shared continually invests in security infrastructure to protect users' personal data from unauthorised access, loss, or misuse. The key security measures we have in place include:

• 256-bit SSL/TLS Encryption for all data transmitted between your device and 4shared servers.
• Data encryption at rest for sensitive data stored in our databases.
• Two-factor authentication (2FA) for account login and major financial transactions.
• 24-hour threat monitoring by a dedicated cybersecurity team.
• Regular security audits by independent third parties to identify and address potential vulnerabilities.
• Role-based access control (RBAC) which ensures that only authorised staff can access specific user data.

9 Your Rights as a User

Under the Malaysian PDPA and 4shared's commitment to privacy, you have the following rights with respect to your personal data:

• Right to Access: You have the right to obtain a copy of the personal data we hold about you. Access requests can be submitted through the 4shared support team and will be processed within 21 working days.
• Right to Rectification: If the personal data held in 4shared's records is inaccurate or incomplete, you have the right to request a correction. Most account details can be updated directly through your profile settings.
• Right to Erasure: You may request the deletion of your personal data, subject to 4shared's legal obligations to retain certain records (such as financial transaction records) for periods prescribed under Malaysian law.
• Right to Restrict Processing: In certain circumstances, you have the right to request that 4shared restrict how we process your data while a dispute is being resolved.
• Right to Withdraw Consent: Where data processing is based on your consent (for example, for marketing communications), you may withdraw that consent at any time without affecting your core services on 4shared.
• Right to Lodge a Complaint: If you believe that 4shared has violated your privacy rights, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.

To exercise any of the above rights, please contact the 4shared support team via live chat or email at support@4shared.xyz. We will verify your identity before processing any data-related request.

10 Cookies & Tracking Technologies

10.1 What Are Cookies?

Cookies are small text files stored on your device when you visit the 4shared platform. They help us recognise your browser, remember your preferences, and enhance the overall user experience.

10.2 Types of Cookies Used by 4shared

• Essential Cookies: Required for core platform functions — login, session security, and navigation. These cookies cannot be disabled.
• Performance Cookies: Collects information about how you use the 4shared platform to help us improve performance and functionality.
• Functional Cookies: Stores your preferences such as language selection, game layout, and interface settings.
• Analytics Cookies: Used to understand platform usage patterns in aggregate and anonymised form for the purpose of continuous improvement.

10.3 Managing Cookies

You can control and manage cookies through your web browser settings. However, disabling certain cookies may affect specific features on the 4shared platform, including login functionality and session security.

11 Children's Privacy

The 4shared platform is exclusively for individuals aged 18 years and above. We do not knowingly collect or process personal data from individuals under the age of 18. Should we discover that a minor's personal data has been collected inadvertently, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that your child who is under age has registered an account with 4shared, please contact us immediately at support@4shared.xyz so that we can take the appropriate action.

12 Privacy Policy Amendments

4shared reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, technological developments, or new legal requirements. Significant amendments will be communicated to registered users via email or in-platform notification at least seven (7) days before taking effect.

The version date of this Privacy Policy is displayed at the top of this page. You are advised to check this page periodically. Continued use of the 4shared platform after the effective date of any amendment constitutes your acceptance of the changes.

13 How to Contact Us

For any enquiries, concerns, or requests relating to this Privacy Policy or 4shared's use of your personal data, please reach us through any of the following channels:

• Live Chat: Available directly within the 4shared platform, 24 hours a day, 7 days a week.
• Email: support@4shared.xyz — response within 1 to 2 business days.

For formal requests relating to your data protection rights (access, correction, deletion), please include "PDPA Request" in your email subject line along with your full name and 4shared account number to help us process your request promptly.