Billion4 Privacy Policy – Data Protection & Privacy for Malaysian Members

Billion4 collects your personal data through several means — directly when you register and use the platform, automatically through tracking technologies, and in certain cases from legitimate third-party sources. The following are the categories of data we collect:

Billion4 does not collect sensitive personal data unnecessarily. MyKad numbers and identity verification documents are only requested when required for KYC (Know Your Customer) processes, specifically for age verification, fraud prevention, and compliance with international regulations applicable to our betting platform's operations.

Personal data collected by Billion4 is used solely for legitimate purposes necessary to operate our platform. The following are the primary purposes for which your data is used:

• Account Management: Creating and managing your Billion4 account, processing registrations, verifying identity, and enabling secure login.
• Transaction Processing: Processing deposits via Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, and FPX, and managing withdrawals to your bank account or e-wallet in Malaysian Ringgit (MYR).
• Betting Record Retention: Maintaining a complete record of all bets placed — whether on Malaysia Super League football, the EPL, BWF badminton, MLBB MPL esports, the NBA, or casino games — for the purposes of winnings settlement and dispute resolution.
• Security & Fraud Prevention: Identifying and investigating suspicious activity, preventing the use of multiple accounts, and protecting the platform against misuse.
• Responsible Gambling: Monitoring usage patterns to identify members who may need responsible betting support, and enforcing limits set by members themselves.
• Service Communications: Sending important notifications about your account, policy updates, transaction confirmations, and security alerts via email or SMS.
• Platform Improvement: Analysing usage patterns in aggregate (not at an individual level) to improve the interface, performance, and overall experience on the Billion4 platform.
• Marketing Communications (with consent): Sending promotional information, the latest bonuses, and exclusive offers to members who have consented to receive such communications. You may unsubscribe at any time through your account settings or the unsubscribe link in any email.

Billion4 does not sell your personal data. However, in operating the platform, we may need to share certain data with selected third parties under limited and controlled circumstances:

• Payment Processor: Transaction information shared with e-wallet and banking providers (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, FPX banks) strictly for legitimate payment processing purposes. These providers are bound by stringent financial data security standards.
• Technology Service Providers: Companies that provide the technical infrastructure for our platform, including cloud services, security monitoring, and platform analytics. All such providers are bound by strict data confidentiality agreements.
• Lawful Authorities: Billion4 may disclose personal data to government authorities, law enforcement agencies, or regulatory bodies when required by court order, legal summons, or regulatory compliance obligations related to our licensed operations.
• Casino & Sports Game Providers: Minimum technical data required to integrate games from slots and live casino providers. No full identity data is shared — only session identifiers used strictly for technical purposes.

In all instances of data sharing, Billion4 ensures that the relevant third parties maintain a level of data protection that is equivalent to or higher than our own standards. We do not permit third parties to use your data for their own purposes beyond the scope of services provided to Billion4.

Your personal data is stored on secure servers with strict, controlled access. The following are billion4's data storage principles:

• Active Account Data: For as long as your billion4 account remains active, we retain all data necessary to manage your account and provide our services to you.
• Financial Transaction Data: Deposit and withdrawal records in MYR are retained for the duration required by audit and regulatory compliance obligations — typically between 5 and 7 years from the transaction date, in line with standard financial industry practice.
• Betting Record Data: Betting records for football, e-sports, casino, and other sports are retained for a minimum of 3 years for dispute resolution and internal analysis purposes.
• Data After Account Closure: After account closure, certain data may be retained for a specified period to meet legal and regulatory requirements. Once that period expires, the data is securely deleted.

Billion4 uses cookies and similar tracking technologies to enhance your experience on our platform. Below is an explanation of the types of cookies we use:

• Essential Cookies (Required): These cookies are essential for the basic functioning of the Billion4 platform — including maintaining your login session, remembering your language preference (Bahasa Melayu), and keeping your betting session secure. Without these cookies, the platform cannot function properly. They do not require your consent as they are strictly necessary for the service.
• Performance & Analytics Cookies: These cookies help us understand how members use the platform — which pages are visited most, how long users spend in each section, and which buttons are clicked most often. This data is collected in aggregate form without identifying any individual, and is used solely to improve the performance of the billion4 platform.
• Functional Cookies: Cookies that remember your preferences — such as your preferred odds format (Decimal, Fraction, or American), favourite sports displayed first, and other display settings. These make your experience more personalised and efficient each time you return to billion4.
• Marketing Cookies (with consent): Only activated with your explicit consent. These cookies help us display relevant promotions based on your platform activity — for example, showing football bonus offers if you frequently bet on the Malaysia Super League or EPL. You may withdraw this consent at any time.

Cookie Controls: You can manage your cookie settings through your web browser. Most modern browsers (Chrome, Firefox, Safari, Edge) allow you to view, delete, or block cookies. Please note that blocking essential cookies may affect the functionality of the billion4 platform, including your ability to log in and place bets.

As a Billion4 member, you have the following rights regarding your personal data. All requests will be processed within 30 calendar days of receipt:

The Billion4 platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from anyone under the age of 18.

Billion4 conducts age verification during registration and as part of the KYC process. Should we find that personal data belonging to a child under the age of 18 has been collected inadvertently, we will take immediate steps to delete that data and close the account in question.

If you are a parent or guardian who believes your child under the age of 18 has registered an account on Billion4, please contact our support team immediately at support@billion4.best with the relevant details so we can take prompt action.

Billion4 implements a range of technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• Data Encryption in Transit: All data transmitted between your device and Billion4's servers is encrypted using 256-bit TLS/SSL — the same technology used by Malaysia's leading banks such as Maybank and CIMB to protect their customers' online transactions.
• Data Encryption at Rest: Sensitive data stored in our databases — including passwords and financial information — is encrypted using the latest cryptographic algorithms. Passwords are stored as irreversible hashes, meaning not even Billion4 staff can view your password.
• Strict Access Controls: Only Billion4 staff with a legitimate business need may access members' personal data, and all such access is logged and monitored. A least privilege principle ensures each staff member can only access the data required to perform their specific duties.
• 24/7 Security Monitoring: Billion4 conducts continuous security monitoring to detect and respond to cybersecurity threats in real time. An active intrusion detection system (IDS) monitors for any unusual activity.
• Regular Security Audits: The Billion4 platform undergoes regular penetration testing and security audits conducted by independent cybersecurity experts to identify and address potential vulnerabilities before they can be exploited.
• Two-Factor Authentication (2FA): Billion4 provides and actively encourages the use of 2FA for all member accounts. Once enabled, logging in from a new device will require an additional verification code sent to your registered phone — adding a strong layer of protection even if your password is compromised.

While we take all reasonable steps to protect your data, no system can guarantee absolute 100% security. We encourage you to use a strong, unique password, enable 2FA, and report any suspicious activity in your account to the Billion4 support team promptly.

In the course of operating our platform, your personal data may be processed outside Malaysia — for example, by cloud service providers or casino game suppliers operating across multiple countries. When this occurs, billion4 ensures:

• Data transfers to other countries only occur where necessary for the stated operational purposes.
• All data recipients outside Malaysia are bound by data processing agreements that require them to adhere to equivalent data protection standards.
• Billion4 uses internationally recognised data transfer mechanisms to ensure your data remains protected across borders.

Billion4 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or service improvements. The most current version of the Privacy Policy is always available on this page, with the last updated date clearly stated at the top of the document.

For material changes — meaning changes that significantly alter how we collect or use your data — billion4 will provide at least 14 days' advance notice before the changes take effect, through:

• Email to your registered address.
• A clear in-platform notification on Billion4 whenever you log in.
• Updates to this Privacy Policy page with a summary of key changes.

Your continued use of the billion4 platform after any changes take effect will be considered your acceptance of the updated Privacy Policy. If you do not agree with the changes, you have the right to close your account and request data deletion in accordance with the process outlined in Section 6 above.

If you have any questions, concerns, or requests regarding this Privacy Policy or how billion4 handles your personal data, please contact us through the following channels:

• Privacy Email: support@billion4.best — Use the email subject line "Data Privacy Enquiry" to ensure your message is directed to the right team. We will respond within 5 business days.
• Live Chat: Available 24/7 in Bahasa Melayu via the chat icon at the bottom corner of the Billion4 platform. Suitable for general privacy enquiries — for formal requests such as data access or erasure requests, email is more appropriate for documentation purposes.

Billion4 is committed to addressing all privacy enquiries seriously and in a timely manner. We value the trust you place in us by becoming a Billion4 member, and we will continue to uphold our data protection responsibilities to you as a Malaysian player.