This Privacy Policy ("Policy") is published by Suster4D ("we", "us", "our", "the Operator", "the Platform") and applies to all personal data collected, stored, processed, and used in connection with the operation of the website located at https://suster4d.cam and any associated digital services, mobile-optimised interfaces, or related applications.

Suster4D is an online casino and sports betting platform primarily serving adult players in Malaysia. Our payment infrastructure integrates directly with Bank Negara Malaysia's FPX (Financial Process Exchange) and DuitNow real-time transfer systems, as well as with major Malaysian e-wallet providers including Touch'n Go eWallet, Boost, and GrabPay. As a consequence of these integrations, Suster4D processes certain categories of financial and identity-related personal data as a necessary component of its core service delivery.

By registering an account with Suster4D, accessing the platform, or submitting any personal information to us, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. This Policy should be read alongside the Suster4D Terms & Conditions, which govern the broader contractual relationship between you and the Operator.

For the purposes of this Privacy Policy, the following terms carry the meanings assigned below:

Suster4D collects personal data across several categories, depending on the nature of your interaction with the platform. The categories and specific data points collected are as follows:

3.1 Account Registration Data

• Full legal name (as appearing on government-issued identity document)
• Date of birth (for age verification — minimum 21 years required)
• Residential address (including postcode, city — e.g., Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Shah Alam)
• Email address and contact telephone number
• Username and encrypted password
• Preferred currency (MYR as standard for Malaysian players)

3.2 KYC & Identity Verification Data

• Government-issued photo identity document (e.g., Malaysian MyKad, passport, driving licence) — including document number, issue date, and expiry date
• Proof of residential address (e.g., utility bill, bank statement)
• Proof of payment method ownership (e.g., screenshot of bank account or e-wallet interface showing account holder name)
• Source of funds documentation where required under AML obligations

3.3 Financial Transaction Data

• Deposit and withdrawal transaction records including amount (in MYR), timestamp, payment method used (e.g., Maybank FPX, CIMB Clicks, Touch 'n Go eWallet, Boost, DuitNow), and transaction reference numbers
• Partial payment account identifiers (e.g., last four digits of bank account number associated with FPX transactions)
• Cryptocurrency wallet addresses used for USDT TRC20 or BTC transactions

3.4 Gameplay & Betting Activity Data

• Records of all wagers placed, game sessions initiated, and results recorded on the platform
• Sports betting selections across markets including Liga Super Malaysia, EPL, UFC, and esports
• Bonus and promotion usage history
• Responsible gambling tool usage (deposit limits set, self-exclusion periods requested)

3.5 Technical & Device Data

• IP address and approximate geolocation derived therefrom
• Device type, operating system, and browser version
• Session duration, login timestamps, and access logs
• Cookie and session token identifiers

3.6 Communications Data

• Content of live chat support conversations
• Email correspondence with the Suster4D support team
• Feedback or complaint submissions

Suster4D collects personal data through the following channels and mechanisms:

• Directly from you: At the point of account registration, when you submit KYC documentation, when you initiate a deposit or withdrawal via FPX, DuitNow, or any other accepted payment method, or when you contact our support team via live chat or email.
• Automatically during platform use: Technical data including IP addresses, device identifiers, session logs, and cookie identifiers are collected automatically whenever you access or interact with the Suster4D website. This collection is necessary for platform security, fraud prevention, and service delivery.
• From payment processors and gateway providers: When you initiate a financial transaction, Suster4D receives confirmation data from FPX, DuitNow, and e-wallet providers including Touch 'n Go, Boost, and GrabPay. This data is limited to what is necessary to confirm transaction success and reconcile your account balance.
• From identity verification service providers: Suster4D may engage third-party KYC verification services to authenticate identity documents. Such services process your submitted documentation on our behalf under strict data processing agreements.

Suster4D processes your personal data for the following specific, documented purposes:

Suster4D does not process your personal data for the purpose of targeted advertising, third-party marketing campaigns, or sale to data brokers. All processing is limited to the purposes listed in the table above.

Suster4D relies on the following legal bases to process your personal data, as applicable to each processing activity:

• Contractual necessity: Processing required to fulfil our contractual obligations to you as a registered player — including account management, payment processing, and gameplay facilitation.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, KYC requirements, and tax reporting duties.
• Legitimate interests: Processing undertaken to pursue the legitimate interests of Suster4D, including fraud prevention, platform security, responsible gambling monitoring, and internal service analytics — where such interests are not overridden by your rights and freedoms.
• Consent: Where neither contractual necessity, legal obligation, nor legitimate interests provide a sufficient legal basis — for example, in the context of non-essential cookies or optional marketing communications — Suster4D will obtain your explicit consent before processing. Consent may be withdrawn at any time by contacting support at [email protected].

Suster4D does not sell or rent your personal data to any third party. Disclosure of personal data to third parties is limited to the following categories of recipients and circumstances:

• Payment processors and gateway providers: Data necessary to initiate and confirm financial transactions is shared with the relevant payment infrastructure providers (e.g., FPX gateway operators, DuitNow, Touch 'n Go, Boost, GrabPay). All such providers operate under their own privacy policies and applicable regulatory frameworks.
• KYC and identity verification providers: Where Suster4D engages a third-party identity verification service, your KYC documents and associated data are processed on our behalf under a processing agreement that binds the provider to data protection standards consistent with this Policy.
• Fraud prevention and AML compliance services: Suster4D may share transaction and identity data with specialist fraud-prevention and AML screening services to meet its legal compliance obligations.
• Regulatory authorities and law enforcement: Suster4D may disclose personal data to competent regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, court order, or valid regulatory direction — including but not limited to AML-related disclosures.
• Professional advisers: Legal, audit, and compliance advisers engaged by Suster4D may access personal data where strictly necessary to provide their professional services, subject to professional confidentiality obligations.

Suster4D uses cookies and similar tracking technologies on its website. Cookies are small text files placed on your device when you visit the platform. They serve the following functions:

You may manage your cookie preferences through your browser settings. Please note that disabling essential cookies may impair the functionality of the Suster4D platform, including the ability to maintain a secure logged-in session. Optional analytics cookies may be declined without any impact on platform functionality.

Suster4D retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following indicative retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with Suster4D's internal data lifecycle management procedures. Where specific legal obligations require extended retention (e.g., court orders or ongoing AML investigations), data will be retained until such obligations are resolved.

Suster4D implements a multi-layered technical and organisational security framework to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Key security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Suster4D platform — the same encryption standard deployed by Maybank2u, CIMB Clicks, and other major Malaysian financial platforms.
• AES-256 encryption at rest for sensitive data stored in Suster4D's database infrastructure, including KYC documents and payment account identifiers.
• Two-factor authentication (2FA) is available to all registered players and is enforced for administrative access to internal systems.
• Access controls and role-based permissions ensure that internal staff may only access personal data on a strictly need-to-know basis.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists to identify and remediate potential weaknesses.
• Intrusion detection systems and real-time security monitoring of platform infrastructure around the clock.

As a data subject whose personal information is processed by Suster4D, you hold the following rights with respect to your personal data. These rights may be exercised by contacting Suster4D at[email protected] with a clear description of your request:

• Right of Access: You have the right to obtain confirmation of whether Suster4D processes your personal data and, where it does, to receive a copy of that data along with information about the purposes and scope of processing.
• Right to Rectification: Where your personal data held by Suster4D is inaccurate or incomplete, you have the right to request correction or completion without undue delay.
• Right to Erasure ("Right to Be Forgotten"): In certain circumstances — where data is no longer necessary for the original purpose, where consent has been withdrawn, or where processing was unlawful — you may request deletion of your personal data. This right is subject to overiding legal retention obligations (e.g., AML requirements).
• Right to Restrict Processing: You may request that Suster4D restrict processing of your personal data in certain circumstances, such as during a dispute about the accuracy of data or the lawfulness of processing.
• Right to Data Portability: Where processing is based on consent or contractual necessity and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests, including processing for direct marketing purposes (though Suster4D does not engage in third-party marketing as noted above).
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

Suster4D will respond to all data rights requests within 14 business days of receipt. In cases of particular complexity or volume, a 30-day response period may apply. We will always notify you if an extension is required.

Suster4D is strictly an adult gaming platform. The minimum age to register and use Suster4D is 21 years. The platform does not knowingly collect personal data from any person under the age of 21.

Where Suster4D discovers or has reasonable grounds to believe that personal data has been provided by a person under 21 years of age — whether through a fraudulent registration or otherwise — all data associated with that person will be immediately and permanently deleted, the associated account will be closed, and any funds held will be handled in accordance with applicable legal obligations.

Suster4D reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable legal requirements, or platform functionality. The "Last Updated" date at the top of this document will be amended whenever the Policy is revised.

When material changes are made to this Policy — particularly changes that affect the legal basis for processing, the categories of data collected, or the rights available to data subjects — Suster4D will notify registered players via their registered email address and/or through a prominent notice on the platform website prior to the changes taking effect.

Your continued use of the Suster4D platform following the effective date of any revision constitutes your acceptance of the updated Privacy Policy. If you do not accept the revised Policy, you should cease using the platform and contact support to request account closure and data deletion where applicable.

For all questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by Suster4D, please contact our Data Privacy team through the following channels:

• Email: [email protected] — please use the subject line "Privacy Policy Enquiry" or "Data Rights Request" as appropriate.
• Live Chat: Available 24/7 on this website — average first-response time under 90 seconds.

When submitting a privacy-related enquiry or data rights request, please provide your registered account username and, where relevant, the specific data category or processing activity to which your request relates. This will allow our team to locate and process your request as efficiently as possible.

All privacy enquiries and data rights requests are handled confidentially and with priority. Suster4D does not share details of data rights requests with any party other than those directly involved in fulfilling the request.