Privacy Policy

1 Introduction

This Privacy Policy ("Policy") is published by Ernita4D, operator of the online platform accessible at ernita4d.cam ("the Platform", "we", "us", "our"). This Policy describes how Ernita4D collects, processes, stores, and shares personal data in connection with the operation of our online casino, sports betting, live dealer, and 4D lottery services.

Ernita4D is committed to handling personal data in a responsible, transparent, and lawful manner. We respect the privacy of every registered player and all visitors to the Platform, whether accessing from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, or any other location in Malaysia.

By registering an account on Ernita4D, making a deposit, or otherwise using any service provided through the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with the terms of this Policy, you should discontinue use of the Platform immediately.

2 Definitions

For the purposes of this Policy, the following definitions apply:

• "Personal Data" — Any information relating to an identified or identifiable natural person, including name, identification number, location data, email address, financial information, and any combination of data that could be used to identify an individual.
• "Processing" — Any operation performed on personal data, including collection, recording, storage, alteration, retrieval, consultation, use, disclosure, transmission, restriction, erasure, or destruction.
• "Data Controller" — Ernita4D, as the entity that determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" — A third party that processes personal data on behalf of Ernita4D under a contractual data processing agreement.
• "Player" — Any individual who has registered a valid account on the Ernita4D Platform.
• "Consent" — A freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data for one or more stated purposes.
• "KYC" — Know Your Customer identity and address verification documentation required prior to processing withdrawals or as part of ongoing account monitoring.
• "Cookies" — Small text files placed on a user's device by a web server to store session information, preferences, and anonymised usage data.

3 Data We Collect

Ernita4D collects personal data through several channels, detailed in the table below. We collect only what is necessary for the stated purpose.

4 How We Use Your Data

Personal data collected by Ernita4D is used for the following purposes:

• Account Administration: Creating and managing your registered account, verifying your identity at registration and during KYC review, and maintaining accurate account records.
• Payment Processing: Facilitating deposits via Touch 'n Go eWallet, GrabPay, Boost, DuitNow, FPX, and supported banks (Maybank, CIMB, Public Bank, Hong Leong Bank), and processing withdrawal requests in Malaysian Ringgit (MYR) or cryptocurrency.
• Platform Services: Enabling your participation in slots, live dealer games, sports betting (including Liga Super Malaysia and EPL markets), 4D lottery, and all other services offered on the Platform.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, money laundering, underage gambling, and other prohibited conduct as required under our obligations to our licensing authority.
• Legal and Regulatory Compliance: Meeting anti-money-laundering (AML) obligations, KYC requirements, age verification, and responding to lawful requests from regulatory authorities.
• Customer Support: Responding to your enquiries, resolving account disputes, and providing assistance in English, Bahasa Melayu, and Mandarin via live chat, email, and other support channels.
• Responsible Gambling: Administering deposit limits, cooling-off periods, and self-exclusion requests; monitoring gaming patterns that may indicate problem gambling behaviour.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to players who have provided explicit consent. Consent may be withdrawn at any time.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve platform performance, user experience, and game offerings.

5 Legal Basis for Processing

Ernita4D processes personal data under the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform the contract between Ernita4D and the Player — including account creation, payment processing, game delivery, and customer support. Without this processing, we cannot provide the services you have registered for.
• Legal Obligation: Processing necessary to comply with applicable legal requirements, including anti-money-laundering regulations, KYC verification mandates, age verification requirements, and regulatory reporting obligations.
• Legitimate Interests: Processing for fraud prevention, platform security, and internal analytics where such interests are not overridden by the Player's rights and freedoms. We conduct a documented balancing test before relying on this basis.
• Consent: Processing of personal data for optional purposes — principally direct marketing communications — where the Player has given freely, specific, and informed consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

6 Data Sharing & Disclosure

Ernita4D does not sell, rent, or trade your personal data to any third party. We may share personal data with carefully selected third parties only in the circumstances described below:

• Payment Service Providers: Sharing of payment reference data with e-wallet operators (Touch 'n Go, GrabPay, Boost), banking partners participating in DuitNow and FPX, and cryptocurrency processing services — solely for the purpose of executing your transactions.
• KYC and Identity Verification Providers: Identity documents submitted for KYC verification may be processed by third-party verification services operating under strict data processing agreements with Ernita4D.
• IT Infrastructure and Cloud Services: Personal data may be stored and processed on secure cloud infrastructure provided by reputable third-party providers bound by data processing agreements that include appropriate security and confidentiality obligations.
• Regulatory Authorities and Law Enforcement: Ernita4D will disclose personal data to regulators, licensing authorities, financial intelligence units, or law enforcement agencies where required by law, court order, or regulatory directive.
• Professional Advisers: Personal data may be shared with legal counsel, auditors, or professional advisers under strict confidentiality obligations where necessary for the operation or defence of our business interests.

All third-party processors engaged by Ernita4D are subject to contractual data processing agreements that require equivalent standards of data protection. Ernita4D retains responsibility as Data Controller for all personal data shared with processors.

7 Data Retention

Ernita4D retains personal data for no longer than is necessary for the purpose for which it was collected, or as required by applicable law. The following retention periods apply:

• Account and Identity Data: Retained for the duration of the active account relationship, plus a minimum of 5 years after account closure, in accordance with standard anti-money-laundering record-keeping obligations.
• KYC Documents: Retained for a minimum of 5 years following the end of the account relationship, or longer if required by the applicable licensing authority or law enforcement.
• Transaction Records: Financial transaction records are retained for a minimum of 5 years from the date of each transaction for regulatory audit purposes.
• Customer Support Records: Support communications are retained for up to 3 years from the date of the interaction to support dispute resolution and service quality monitoring.
• Usage and Analytics Data: Aggregated and anonymised analytics data may be retained indefinitely. Individually identifiable usage data is retained for up to 2 years from collection.
• Marketing Consent Records: Consent and opt-out records are retained for the duration of the account relationship to demonstrate compliance with consent obligations.

At the end of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data disposal procedures.

8 Cookies & Tracking Technologies

Ernita4D uses cookies and similar technologies to ensure the Platform functions correctly, maintain your session, and collect anonymised analytical data to improve the user experience. We do not use advertising cookies or cross-site tracking technologies.

The categories of cookies used on the Platform are as follows:

• Essential Cookies: Required for the Platform to function. These cookies maintain your login session, remember your account preferences, and ensure secure connections. They cannot be disabled without affecting Platform functionality.
• Analytics Cookies: Collect anonymised data on how visitors use the Platform — pages visited, session duration, device type, and browser version — to help us identify and resolve usability issues. No personally identifiable information is included in analytics data sets.
• Functional Cookies: Remember your language preference, responsible gambling settings, and display preferences to personalise your experience across sessions.

You may manage cookie preferences through your browser settings. Disabling essential cookies may prevent you from logging in or using core Platform features. Disabling analytics cookies will not affect your ability to use the Platform.

9 Data Security

Ernita4D implements technical and organisational security measures appropriate to the nature and sensitivity of the personal data we hold. These measures include, but are not limited to:

• Transport Security: All data transmitted between your device and the Platform is encrypted using TLS 1.2 or higher. HTTPS is enforced across all Platform pages.
• Storage Encryption: Personal data stored on our servers is encrypted using AES-256 encryption. KYC documents are stored in isolated, access-controlled environments with additional encryption at rest.
• Access Controls: Access to personal data is restricted on a need-to-know basis. Staff with access to personal data are subject to confidentiality obligations and regular security training.
• Two-Factor Authentication: Two-factor authentication is available and encouraged for all player accounts to prevent unauthorised access.
• Penetration Testing and Audits: Ernita4D conducts periodic security assessments of its infrastructure to identify and remediate vulnerabilities.
• Incident Response: A documented data breach response procedure is in place. In the event of a data breach that is likely to result in high risk to affected individuals, Ernita4D will notify affected players and relevant authorities without undue delay.

10 International Data Transfers

Ernita4D's infrastructure may involve the transfer and storage of personal data in jurisdictions outside Malaysia. Where such transfers occur, we ensure that appropriate safeguards are in place to protect the personal data transferred, including:

• Transfers to processors in jurisdictions that provide an adequate level of data protection as determined by applicable standards.
• Use of standard contractual clauses or equivalent data transfer mechanisms that impose binding obligations on data processors to maintain equivalent protections.
• Data processing agreements with all third-party infrastructure providers that include data security, confidentiality, and access control requirements.

By using the Platform, you acknowledge and consent to the transfer of your personal data to countries outside Malaysia for the purposes described in this Policy, subject to the safeguards described above.

11 User Rights

As a registered player and data subject, you hold the following rights with respect to your personal data held by Ernita4D. To exercise any of these rights, contact us at [email protected] with the subject line "Data Subject Request". We will acknowledge your request within 5 business days and respond in full within 30 days.