Billion4 Privacy Policy – Malaysian Member Data Protection

Billion4 Asia Sdn. Bhd. ("billion4", "we") takes privacy protection seriously. This Privacy Policy clearly explains how we collect, use, store, protect and disclose your personal information when you use the billion4.asia platform and all related services.

This policy applies to all registered billion4 members, website visitors and any individual who interacts with our platform — whether via the website, live chat, e-mail or any other communication channel provided by billion4. By using billion4's services, you agree to the collection and use of your personal data as described in this document.

Billion4 reserves the right to update this Privacy Policy from time to time to reflect changes in how we operate or in applicable laws. Any material changes will be communicated to members via their registered e-mail or in-platform notification at least 7 days before the changes take effect. The latest effective date is always displayed at the top of this document.

Billion4 collects several categories of personal information from members and users of our platform. Below is a full list of the types of data we collect and how they are gathered:

Data You Provide Directly:

• Registration Information: Full name, mobile number, email address, date of birth, and the password you set when registering your billion4 account.
• Identity Verification (KYC) Information: A copy of your MyKad or passport, a selfie for facial verification, and proof of address such as a utility bill or bank statement, if required for legal compliance purposes.
• Financial Information: Malaysian local bank account details, e-Wallet numbers (Touch 'n Go, GrabPay, Boost, ShopeePay) and DuitNow information you registered for deposit and withdrawal purposes.
• Communications: Any messages, complaints or enquiries you submit to the billion4 support team via live chat, e-mail, WhatsApp or Telegram.

Automatically Collected Data:

• Technical Data: IP address, device type, operating system, web browser type and version.
• Usage Data: Pages you visit within the billion4 platform, time of visit, matches you watch or bet on, games you play, and your full transaction history.
• Cookie Data: Information collected through cookies and similar tracking technologies to enhance your user experience and secure your login session.
• Location Data: General location information based on your IP address, for the purpose of verifying that you are within an approved operating region.

The personal data billion4 collects is used solely for legitimate operational purposes and to provide you with the best possible experience as a member. The following are the specific purposes for which your data is used:

• Account Management: Creating and managing your billion4 account, processing registrations, verifying your identity and securing your login.
• Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, and handling withdrawals to your Malaysian bank account or e-Wallet quickly and securely.
• Service Delivery: Giving you access to all billion4 services, including Sports Betting on events such as the Malaysia Super League and EPL football, cricket, e-sports, blackjack, jackpot games, lottery, and virtual sports.
• Customer Support: Handling enquiries, complaints, and assistance requests submitted via live chat, email, or WhatsApp.
• Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, multiple account usage and other forms of platform abuse.
• Promotions & VIP Programme: Managing your eligibility for promotions, calculating VIP points, delivering weekly cashback, and notifying you of offers relevant to your activity on billion4.
• Legal Compliance: Compliance with applicable Malaysian laws, including PDPA 2010, AML, and KYC requirements.
• Platform Improvements: Analysing usage patterns on an aggregated, non-personal basis to improve the billion4 platform's interface, performance and new features.

Billion4 does not sell members' personal data to any party. However, there are limited situations where billion4 may need to share certain information with selected third parties:

• Payment Providers: Required transaction information is shared with approved payment providers, including e-Wallet processors and FPX banking, to facilitate your deposits and withdrawals. All such providers are bound by strict data protection agreements.
• Game Software Providers: Minimum account information is shared with third-party game software providers to grant you access to Live Casino, jackpot slots and other categories operated by licensed providers.
• Malaysian Authorities: Billion4 will disclose required information to Malaysian authorities when mandated by court order, legal obligation, or within the framework of financial crime prevention. In such cases, we will notify you if permitted by law to do so.
• Identity Verification Services: During the KYC process, your identity information may be verified through approved third-party identity verification services. These services are used solely for verification purposes and do not retain your data once the process is complete.

Billion4 does not share member personal data with advertisers, partner companies or any other commercial entities for third-party marketing purposes. Should this policy change in the future, you will be notified and your explicit consent will be sought beforehand.

Billion4 continuously invests in security infrastructure to ensure your personal and financial data remains protected at all times. The following are the security layers we have in place:

• 256-Bit SSL Encryption: All communication between your browser and billion4's servers is encrypted using TLS protocol with 256-bit encryption. This means that even if someone were to intercept your data traffic, they would be unable to read its contents.
• Fund Segregation: Member funds are held in accounts entirely separate from billion4's operational funds. This ensures your money is always available for withdrawal and is not affected by the company's internal operations.
• Two-Factor Authentication (2FA): Billion4 offers 2FA for additional account protection. When enabled, logging in from a new device or location will require further verification via an OTP code sent to your phone number.
• Anomaly Detection System: billion4's security monitoring system operates around the clock to detect suspicious logins, unusual transactions and unauthorised access attempts. Accounts showing suspicious activity will be temporarily suspended and the affected member will be contacted for verification.
• Regular Security Audits: Billion4 conducts regular internal and external security audits to identify and address any vulnerabilities in our security infrastructure before they can be exploited.
• Access Control Management: Access to billion4's member database is restricted on a need-to-know basis. All access is automatically logged and monitored by our internal security team.

As a billion4 member, you have certain rights regarding your personal data, all of which we fully uphold under Malaysia's PDPA 2010. Below are your rights and how to exercise them:

• Right of Access: You have the right to request a copy of the personal data we hold about you. This request will be processed within 21 working days.
• Right to Rectification: If any personal data we hold about you is inaccurate or outdated, you have the right to request a correction. Some data can be updated directly through your billion4 account settings.
• Right to Erasure: Under certain circumstances, you have the right to request the deletion of your personal data from billion4's systems. Such requests are subject to the minimum record retention requirements mandated by Malaysian law.
• Right to Object to Marketing: You may withdraw your consent to receive marketing communications from billion4 at any time, without affecting your eligibility to continue using our platform.
• Right to Data Portability: You may request a copy of your personal data in a digitally readable format for your own personal reference.
• Right to Lodge a Complaint: If you believe billion4 has processed your personal data incorrectly, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia, or contact us directly for internal resolution first.

To exercise any of the above rights, please contact billion4's support team by email at support@billion4.asia, clearly stating the right you wish to exercise and your account details for identity verification purposes. Billion4 will process your request promptly and respond within the stipulated timeframe.

Billion4 uses cookies and similar tracking technologies to enhance your experience on our platform. Below is an explanation of the types of cookies we use:

• Essential Cookies (Required): These cookies are required for the core functions of the billion4 platform — including maintaining your login session, saving items in your betting cart and securing your session. Without them, the platform will not function properly and they cannot be disabled.
• Performance Cookies: These cookies collect information about how you use the billion4 platform — such as the pages you visit most frequently and any error messages you encounter. All information collected is aggregated and does not contain any personally identifiable information.
• Functionality Cookies: These cookies allow billion4 to remember your preferences — such as your preferred language, region and display settings — to provide a more personalised experience during your session.
• Security Session Cookies: Used exclusively to monitor suspicious session activity and protect your account from unauthorised access while you are logged in to the billion4 platform.

You can manage cookie usage through your web browser settings. Disabling certain cookies may affect the functionality of some parts of the billion4 platform. Please note that disabling essential cookies will prevent you from logging in and using the platform fully.

Billion4 does not retain your personal data for longer than is necessary for the purposes stated in this policy. Retention periods for the different categories of data are as follows:

• Active Account Data: Retained for the duration your account is active and for 5 years following the final closure of your account, for legal compliance purposes and the resolution of any disputes that may arise.
• Financial Transaction Records: Retained for 7 years from the transaction date, in line with Malaysia's anti-money laundering legislation and applicable accounting requirements.
• KYC Documents: Retained for the period required under Malaysia's AML laws, being a minimum of 6 years from the date of verification or account closure, whichever is later.
• Support Communication Logs: Retained for 2 years for reference purposes and to improve the quality of billion4's customer support services.
• Technical Data & Security Logs: Retained for 90 days for fraud detection and system security purposes, unless a longer period is required for an active investigation.

Once the designated retention period ends, your personal data will be securely deleted or anonymised using methods that comply with recognised information security standards.

The billion4 platform is strictly limited to individuals aged 18 and above. Billion4 does not knowingly collect personal data from individuals under the age of 18.

Billion4 employs age verification methods during registration and reserves the right to request additional proof of age at any time. If there is reasonable cause to believe a user is underage, the account in question will be suspended immediately until satisfactory age verification is provided.

If you have any questions, concerns, or complaints regarding how billion4 handles your personal data, please reach out to us through the following channels:

• Privacy Email: support@billion4.asia (please indicate "Privacy Enquiry" in the subject line)
• Live Chat: Available 24 hours a day, 7 days a week via the chat icon at billion4.asia
• WhatsApp & Telegram: Through official billion4 channels listed on our website

Billion4 is committed to responding to all privacy-related enquiries within 5 business days. For more complex complaints requiring thorough investigation, we will provide progress updates every 5 business days until the matter is fully resolved.