πŸ”’ Personal Data Protection – PDPA 2010 Malaysia

Istana404 Privacy Policy – Malaysia Personal Data Protection

At istana404, your privacy is not merely a legal obligation β€” it is a core value we uphold. This Privacy Policy clearly and transparently explains how we collect, use, store, and protect your personal data in accordance with Personal Data Protection Act 2010 (PDPA) Malaysia. Please read this document carefully.

Last Updated: 1 January 2026  Β·  Version 2.4

Istana404's Privacy Commitment to You

Six data protection guarantees we extend to every Malaysian member.

πŸ‡²πŸ‡Ύ
Compliant with Malaysia's PDPA 2010

All data management practices istana404 developed in full compliance with Malaysia's Personal Data Protection Act 2010. You have complete rights over your data as guaranteed under Malaysian law.

πŸ”
256-bit SSL encryption

All personal data and transaction information transmitted between your device and our servers istana404 is protected with 256-bit SSL encryption β€” the same standard used by leading Malaysian financial institutions and banks such as Maybank and CIMB.

🚫
No Sale of Data to Third Parties

istana404 has never and will never sell, rent, or transfer members' personal data to any third party for marketing or commercial purposes. Your data belongs to you β€” not to us as a business asset.

πŸ—‘οΈ
Right to Erasure

You have the right to request the deletion of your personal data from our systems istana404 at any time. Requests will be processed within 30 working days, subject to legal obligations that require us to retain certain records.

πŸ‘οΈ
Full Transparency in Data Use

We clearly explain every purpose for which data is collected β€” there is no hidden data collection or use of data for purposes you have not been made aware of. You know what we collect and why it is needed by istana404.

βš™οΈ
Your Data, Your Control

Via the account portal istana404, you can access, update, and manage your privacy settings at any time. Marketing notification preferences, cookie settings, and data sharing controls can all be easily managed by you directly.

1Introduction & Scope of Privacy Policy

This Privacy Policy ("Policy") is published by istana404 ("We", "Platform") and applies to all current and prospective users of the platform istana404 in Malaysia. This Policy explains how we manage your personal data in accordance with Personal Data Protection Act 2010 (PDPA) and the regulations made thereunder.

By using the istana404, registering an account, or simply browsing our website, you acknowledge that you have read, understood, and agreed to this Privacy Policy. If you do not agree with any part of this Policy, please discontinue use of our platform.

Data Controller: istana404 acts as the Data Controller for all personal data collected through this platform. All privacy-related enquiries may be directed to our Privacy Officer at privacy@istana404.ws.

2Types of Personal Data We Collect

istana404 only collects personal data that is strictly necessary to provide our services. The following are the categories of data we collect:

2.1 Identity Data

  • Full name as per Malaysian identity card or passport
  • National identity card number (MyKad) or passport number
  • Date of birth
  • Gender
  • Images of identity documents (for the KYC process)

2.2 Contact Data

  • An active Malaysian mobile number
  • Email address
  • Residential address (if required for verification)

2.3 Financial & Transaction Data

  • Deposit and withdrawal history (via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or FPX)
  • E-wallet account number registered for withdrawals (stored in encrypted format)
  • Betting and gaming records

2.4 Technical & Usage Data

  • Device IP address
  • Browser type and operating system
  • Access time and date logs
  • Session data and pages visited
  • Cookie data (subject to your stated preferences)
Data Category Collected at Registration Collected During Gameplay Mandatory / Optional
Name & IC/Passport βœ“ Yes No Mandatory
Phone Number βœ“ Yes No Mandatory
Email βœ“ Yes No Mandatory
Transaction Data No βœ“ Yes Mandatory
IP & Device Data βœ“ Yes βœ“ Yes Automatic
User Preference Cookies No βœ“ If Consented Optional

3Purpose of Data Collection & Processing

istana404 processes your personal data only for legitimate and stated purposes. The following are the primary purposes for which we collect data:

  • Identity verification (KYC): To verify that you meet the age eligibility requirement (21 years and above) and to prevent identity fraud.
  • Account management: To create, maintain, and manage your account on the platform istana404.
  • Transaction processing: To process your deposits and withdrawals via your registered Malaysian payment methods.
  • Legal compliance (AML/KYC): To comply with legal obligations relating to the prevention of money laundering and terrorism financing.
  • Platform security: To detect and prevent fraud, hacking, and suspicious activity.
  • Service communications: To send important notifications relating to your account, transactions, and policy updates.
  • Marketing (with consent): To send you promotional offers and bonuses β€” only if you have provided explicit consent.
  • Platform improvements: To analyse usage patterns and improve the overall user experience.

Minimum Purpose Principle: istana404 only collects data that is strictly necessary for the stated purposes. We do not collect excessive data or data unrelated to the services we provide to you.

4How Personal Data Is Collected

Your personal data is collected by istana404 through a number of different means, including:

  • Account registration: Information you enter directly when registering a new account at istana404.
  • KYC process: The identification documents you upload for account verification.
  • Platform usage: Data automatically generated when you use the platform β€” including access logs, device IP, and session data.
  • Financial transactions: Information collected when you make a deposit via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or FPX, and when withdrawals are processed.
  • Support communications: Information you share when contacting our customer support team istana404.
  • Cookies and similar technologies: Data collected via cookies and tracking pixels (subject to your consent).

Data From Third Parties: In certain cases, istana404 may receive verification data from licensed KYC service providers that assist us in confirming your identity. All such third-party providers are bound by strict data protection agreements with us.

5Personal Data Sharing

istana404 is committed to not selling or transferring your personal data to third parties for commercial purposes. However, there are limited circumstances in which data sharing may occur:

  • Our service providers: Technical partners such as Live Casino providers (Evolution Gaming, Pragmatic Play Live, SA Gaming, etc.), payment processors, and hosting service providers β€” all bound by strict data privacy agreements.
  • Legal obligations: If required by a court, regulatory body, or Malaysian authority (such as Bank Negara Malaysia or the PDRM) through a valid legal order.
  • Crime prevention: To assist Malaysian law enforcement agencies in investigating fraud, money laundering, or financial crimes involving our platform.

Our Commitment: istana404 never sells members' email lists or phone numbers to advertisers. You will not receive calls or messages from third parties claiming to be associated with istana404 unless you have personally opted in to receive such communications.

6Data Retention & Security Measures

All members' personal data istana404 stored on secure servers protected by multiple layers of security:

  • Encryption of data at rest: All sensitive data is stored in encrypted format using AES-256 standard.
  • Encryption of data in transit: All communications between your device and our servers are protected with 256-bit SSL/TLS.
  • Access controls: Only istana404 staff who require access to your personal data for their work duties are permitted to do so, with varying levels of authorisation.
  • Security auditing: Our systems undergo regular security audits conducted by independent third parties.
  • Two-factor authentication (2FA): All administrative access requires 2FA to prevent unauthorised access.

6.1 Data Retention Period

Your personal data will be retained for as long as necessary to fulfil the purposes stated in this Policy, or as required by applicable law:

  • Active account data: Retained for as long as your account remains active on istana404
  • Transaction data: Minimum 7 years as required under Malaysia's accounting legislation
  • KYC records: Minimum 5 years following account closure in accordance with AML requirements
  • Usage data and logs: 24 months after the date of generation

7Cookies & Tracking Technologies

Platform istana404 uses cookies and similar tracking technologies to enhance the user experience and analyse platform performance. We use several types of cookies:

  • Essential Cookies (Required): Required for core platform functions such as login sessions and security. Cannot be disabled without affecting platform functionality.
  • Performance Cookies (Optional): Collects information about how you use the platform β€” such as the most frequently visited pages β€” to help us improve our services.
  • Functional Cookies (Optional): Saves your preferences such as interface language and display settings for a smoother repeat experience.
  • Marketing Cookies (Optional, with consent): Used to display relevant advertisements and measure the effectiveness of istana404 promotional campaigns.

Your Cookie Controls: You can manage your cookie preferences through your istana404 account settings or your device's browser settings at any time. Declining optional cookies will not affect your access to games or core platform services.

8Your Rights as a Data Subject

Under Personal Data Protection Act 2010 (PDPA) Malaysia, you as the data subject have the following rights regarding your personal data held by istana404:

πŸ‘οΈ
Right of Access

You have the right to request a copy of the personal data we hold about you. Requests will be processed within 21 working days after receipt of a complete request.

✏️
Right to Rectification

If your personal data is inaccurate or out of date, you have the right to request a correction. You can update your basic information directly through your istana404 account portal.

πŸ—‘οΈ
Right to Erasure

You have the right to request the deletion of your personal data, subject to legal retention requirements. Deletion requests will be processed within 30 working days.

🚫
Right to Object to Processing

You have the right to object to the processing of your data for direct marketing purposes at any time. You may unsubscribe from marketing communications via the "unsubscribe" link in any promotional email.

πŸ“¦
Data Portability Rights

You have the right to receive your personal data in a structured, machine-readable format and to have it transferred to another data controller where applicable.

⏸️
Right to Restriction of Processing

In certain circumstances β€” such as when you dispute the accuracy of our data β€” you have the right to request that we temporarily restrict the processing of your data.

How to Exercise Your Rights: To exercise any of the above rights, submit a written request to our Privacy Officer at privacy@istana404.ws by including your istana404 account number and a copy of your identification document for identity verification purposes.

9Children's Data Protection

Platform istana404 is for individuals aged 21 and above only. We do not knowingly collect personal data from individuals under the age of 21.

If you suspect that someone under the age of 21 has registered an account at istana404, please contact us immediately at privacy@istana404.ws or via Live Chat. We will investigate and close the account in question and immediately delete all associated data.

Parents and guardians are advised to monitor their children's online activities and ensure they do not access betting platforms such as istana404. Age verification is strictly enforced during the registration and KYC process.

10Links to Third-Party Websites

Platform istana404 may contain links to third-party websites or services, such as game provider sites or sports bodies related to Malaysian Super League football or esports betting. Please note that:

  • Our Privacy Policy does not apply to those third-party websites or services.
  • istana404 is not responsible for the privacy practices or content of third-party websites.
  • You are advised to read the privacy policy of any other website before providing your personal data there.

11Amendments to the Privacy Policy

istana404 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in law, technology, or our business practices. When material amendments are made:

  • The "Last Updated" date at the top of this document will be revised.
  • You will be notified via email to the address registered to your account.
  • For significant amendments, we may display a notice within the platform and ask you to confirm your acceptance of the updated terms.

Continued use of the platform istana404 after the effective date of any amendment to this Policy will be considered your acceptance of the revised Policy.

12Contact Our Privacy Officer

If you have any questions, concerns, or complaints regarding how istana404 handles your personal data, please contact our Privacy Officer through the following channels:

  • Privacy Email: privacy@istana404.ws
  • General Support Email: support@istana404.ws
  • Live Chat: Available 24/7 in Bahasa Malaysia via the istana404 platform

We are committed to responding to all privacy-related enquiries within 5 business days. For more complex cases involving data access or deletion requests, processing times are as stated in Section 8 of this Policy.

Complaint to the Commissioner: If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia through the official channels of Malaysia's Personal Data Protection Commissioner (PDPC).

This Privacy Policy constitutes the entire agreement between you and istana404 regarding personal data protection. In the event of any conflict between a translated version of this Policy and the original Malay version, the Malay version shall prevail.

Your Data Is Safe with istana404

Now that you understand how we protect your privacy, register today and enjoy a safe, fair, and secure gaming experience at istana404.

By registering, you agree to our Terms & Conditions and the istana404 Privacy Policy. Play responsibly.

Bahasa Melayu