4lotto is committed to protecting the personal data of every player on our platform. This Privacy Policy explains exactly what we collect, why we collect it, how it is used, and the rights available to you as a Malaysian user.
All personal data transmitted between your device and our servers is protected using 256-bit SSL/TLS encryption — the same standard used by major Malaysian financial institutions such as Maybank and CIMB.
4lotto does not sell, rent, or trade your personal information to any third party for marketing purposes. Your data exists to operate your account and improve your experience — nothing else.
You have the right to access, rectify, port, and request deletion of your personal data at any time by contacting our support team. We will action verified requests within 30 days.
All personal and financial records are stored in access-controlled, encrypted data environments. Physical and logical access is restricted to authorised personnel on a strict need-to-know basis.
We use cookies only for session management, security, and analytics. We do not deploy tracking cookies for cross-site advertising. Cookie preferences can be managed through your browser settings.
Promotional communications are strictly opt-in. You can unsubscribe from all marketing emails and SMS messages at any time through your account settings or by contacting support directly.
4lotto ("Company", "Platform", "we", "us", "our") operates the online gaming platform accessible at https://4lotto.cam. We are committed to protecting and respecting the privacy and personal data of all individuals who access or use our services ("Player", "User", "you", "your").
This Privacy Policy ("Policy") explains how 4lotto collects, processes, stores, shares, and protects your personal information when you visit our website, register an account, make deposits using Malaysian payment methods (including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, and Public Bank Online), place wagers, or otherwise interact with our services.
By accessing our Platform and registering an account, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, please do not use the Platform.
This Policy should be read together with our Terms & Conditions and our Responsible Gambling Policy, both of which are incorporated by reference.
For the purposes of this Privacy Policy, the following terms have the meanings ascribed below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial information, and behavioural data. |
| "Processing" | Any operation performed on personal data, including collection, storage, use, transfer, deletion, and disclosure. |
| "Data Controller" | 4lotto, as the entity that determines the purposes and means of processing your personal data. |
| "Data Processor" | A third-party service provider that processes personal data on behalf of 4lotto in accordance with our instructions and this Policy. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data, provided by a clear affirmative action such as account registration. |
| "KYC" | Know Your Customer — the regulatory identity verification process applied to all registered accounts prior to any withdrawal processing. |
| "Cookies" | Small text files placed on your device by the Platform to enable functionality, maintain sessions, and collect anonymised analytics data. |
4lotto collects the following categories of personal data from players. We collect only information that is necessary for the stated purposes. We do not collect sensitive personal data (such as biometric data, racial or ethnic origin, or political opinions) unless required by applicable regulatory obligations.
| Category | Examples of Data Collected | Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, MyKad / passport number, nationality | Account registration, KYC verification, age verification (21+) |
| Contact Data | Email address, mobile number, residential address | Account communication, transaction notifications, support |
| Financial Data | Bank account details, e-wallet identifiers, transaction history, deposit and withdrawal records in MYR | Payment processing, fraud prevention, AML compliance |
| Account & Gaming Data | Username, login history, betting history, game session data, bonus usage records | Account management, responsible gambling monitoring, dispute resolution |
| Technical Data | IP address, device type, browser type and version, operating system, session timestamps | Security, fraud detection, platform optimisation |
| Usage Data | Pages visited, features accessed, time on site, click-stream data | Analytics, user experience improvement, product development |
We collect personal data through the following mechanisms:
When you register an account, complete KYC verification, make a deposit, submit a withdrawal request, contact customer support, or participate in any promotion, you provide personal data directly to us through input forms and uploaded documents.
As you interact with our Platform, we automatically collect Technical Data and Usage Data via cookies, server logs, and similar technologies. This collection occurs as part of normal website operation and does not require separate action on your part.
We may receive personal data from third-party identity verification providers during the KYC process, payment processors (including those facilitating DuitNow, FPX, and e-wallet transactions), fraud prevention and anti-money-laundering databases, and analytics service providers — all of whom are contractually bound to provide data to us only in accordance with applicable law.
4lotto processes your personal data for the following purposes:
We process your personal data only where we have a lawful basis to do so. The legal bases applicable to our processing activities include:
4lotto does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We share personal data only in the following limited circumstances:
We engage carefully selected third-party service providers who process personal data on our behalf, including payment processors (DuitNow, FPX, e-wallet operators), KYC and identity verification services, cloud infrastructure providers, customer support platform operators, and fraud prevention services. All processors are bound by data processing agreements that restrict use of your data to the specified purpose only.
We may disclose personal data to licensing authorities, financial intelligence units, law enforcement agencies, or courts where required by law or in response to a valid legal order. We will, where legally permitted, notify you of such a disclosure.
In the event of a merger, acquisition, or sale of all or substantially all of our assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy. You will be notified of any such transfer in advance.
When you make a deposit or withdrawal using a third-party payment method — including Maybank2u, CIMB Clicks, Public Bank Online, Hong Leong Connect, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, or USDT TRC20 — your transaction data is processed by those third-party providers in accordance with their own privacy policies and terms of service.
4lotto is not responsible for the privacy practices of these third-party payment providers. We encourage you to review their respective privacy notices before initiating transactions. Our role is limited to initiating and recording the transaction on the 4lotto Platform.
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, regulatory, accounting, or reporting obligations. The following general retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account & Identity Data | Duration of account plus 5 years from account closure |
| Financial Transaction Records | 7 years from the date of the transaction (regulatory requirement) |
| KYC Documentation | 5 years from the date of verification or account closure, whichever is later |
| Customer Support Records | 3 years from the date of the last interaction |
| Technical & Usage Data | Up to 24 months from collection, then anonymised or deleted |
Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised. Where data is required for an ongoing legal dispute or investigation, retention may be extended until the matter is fully resolved.
4lotto implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:
In the event of a personal data breach that poses a material risk to your rights and freedoms, 4lotto will notify affected users and relevant authorities within the timeframes required by applicable law.
4lotto uses cookies and similar technologies (including web beacons and local storage) to operate certain features of the Platform, maintain your session, and collect anonymised analytics data. We do not use cookies to track your activity across unrelated third-party websites or to serve targeted advertising.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Essential for login, session management, and security. Cannot be disabled without breaking core functionality. | Session / up to 24 hours |
| Functional | Remember your language, display preferences, and last-visited page to improve your experience. | Up to 30 days |
| Analytics | Collect anonymised data on page views, feature usage, and navigation paths to help us improve the Platform. | Up to 12 months |
You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the Platform. Disabling functional or analytics cookies will not affect your ability to place wagers or access your account.
Subject to applicable law and our ability to verify your identity, you have the following rights with respect to your personal data held by 4lotto:
Request a copy of all personal data we hold about you.
Request correction of inaccurate or incomplete personal data.
Request deletion of your personal data where we no longer have a lawful basis to retain it.
Request that we limit how we use your data while a dispute or complaint is being resolved.
Receive your personal data in a structured, machine-readable format for transfer to another service.
Object to processing based on legitimate interests, including profiling for marketing purposes.
To exercise any of the above rights, please contact our Data Protection team via live chat or email using the details in Section 16 below. We will respond to all verified requests within 30 calendar days. There is no charge for exercising your rights, except in cases of manifestly unfounded or excessive requests.
The 4lotto Platform is strictly intended for use by persons aged 21 years and above. We do not knowingly collect, process, or retain personal data from individuals under the age of 21. If we become aware that personal data has been submitted by or on behalf of an individual under 21, we will immediately deactivate the associated account, delete the personal data, and refund any deposits to the source payment method.
If you are a parent or guardian and believe that a minor has registered an account or submitted personal data to 4lotto, please contact us immediately via live chat or the email address provided in Section 16. We take underage access extremely seriously and will act upon all such reports without delay.
As 4lotto operates under an international gaming licence and utilises globally distributed infrastructure, your personal data may be transferred to and processed in countries outside of Malaysia. These countries may not have data protection laws equivalent to those applicable in Malaysia.
Where such transfers occur, we ensure appropriate safeguards are in place, including contractual clauses that impose equivalent data protection standards on all recipient entities. By using our Platform, you acknowledge and consent to such transfers in accordance with the terms of this Policy.
We may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or Platform functionality. Material changes will be notified to registered users via email or a prominent in-platform notice at least 14 days before taking effect.
The "Last Updated" date at the top of this page indicates when the current version was published. Your continued use of the Platform after any amendment constitutes acceptance of the revised Policy. We encourage you to review this page periodically.
If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact 4lotto's Data Protection team through the following channels:
Please include "Privacy Request" in your message subject and provide your registered username or email address so we can verify your identity before processing any data rights request.
Now that you understand exactly how 4lotto collects, uses, and protects your data, you can play with confidence. Explore our full range of games — lottery, live casino, sports betting — all in MYR with same-day withdrawals and 24/7 support.
For players aged 21 and above only. Please also review our Terms & Conditions and Responsible Gambling guidelines.