Privacy Policy

1 Introduction

This Privacy Policy (hereinafter referred to as "Policy") sets out the principles, practices, and obligations of hari4u (hereinafter referred to as "hari4u", "we", "us", or "the Platform") with respect to the collection, use, storage, disclosure, and protection of personal data provided by users (hereinafter referred to as "User", "you", or "Data Subject") in connection with use of the online gaming and sports betting platform operated at https://hari4u.cam.

hari4u is committed to handling personal data responsibly and in full compliance with applicable data protection legislation, including the principles enshrined in Malaysia's Personal Data Protection Act 2010 (PDPA) and any international data protection standards applicable to our licensing jurisdiction. This Policy explains what data we collect, why we collect it, how we use it, who we may share it with, and what rights you have in relation to that data.

This Policy applies to all users of the hari4u platform, including visitors who have not yet registered for an account. It should be read alongside our Terms and Conditions, which govern the broader contractual relationship between you and hari4u.

2 Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings assigned below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial information, and online identifiers.
• "Processing" means any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" refers to hari4u in its capacity as the entity that determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" refers to any third party that processes personal data on behalf of hari4u under a contractual arrangement, such as payment processors, KYC verification providers, or cloud infrastructure providers.
• "Consent" means a freely given, specific, informed, and unambiguous indication of a Data Subject's agreement to the processing of their personal data for one or more stated purposes.
• "Cookies" means small text files stored on a User's device by the Platform for the purpose of session management, analytics, preference storage, and security monitoring.
• "KYC" refers to the Know Your Customer identity verification process conducted to comply with anti-money laundering (AML) obligations and regulatory requirements.

3 Personal Data We Collect

hari4u collects personal data through a number of channels, including the account registration process, ongoing platform use, KYC verification, payment transactions, customer support interactions, and automated technical collection. The categories of personal data we collect include:

hari4u does not collect special categories of sensitive personal data (such as health information, racial or ethnic origin, or biometric data) unless strictly required for regulatory compliance purposes, in which case explicit consent will be sought separately.

4 Purposes of Data Processing

hari4u processes your personal data for the following specific purposes:

• Account Registration and Management: To create, administer, and maintain your hari4u user account, including authenticating your identity at login and enabling access to platform features.
• Identity Verification (KYC): To verify your identity and age (21+ requirement) in compliance with applicable anti-money laundering (AML) regulations and our operating licence conditions. Malaysian players are required to submit valid Malaysian IC (MyKad), passport, or driver's licence documentation.
• Payment Processing: To process deposits and withdrawals via supported Malaysian payment methods including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, and selected cryptocurrencies. Financial data is processed through certified payment processors under contractual data protection agreements.
• Service Delivery and Platform Operation: To provide access to games, sports betting markets, live casino, promotions, VIP programmes, and customer support services.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, account takeover attempts, money laundering, collusion, and other prohibited conduct. This includes automated and manual review of transaction patterns, device fingerprinting, and IP analysis.
• Regulatory Compliance: To fulfil obligations under applicable laws, respond to requests from competent regulatory authorities, and maintain records required by our operating licence.
• Responsible Gambling: To monitor usage patterns that may indicate problem gambling behaviour, administer responsible gambling tools (deposit limits, self-exclusion, cool-off periods), and reach out proactively to users showing at-risk indicators.
• Marketing and Promotions: To send you promotional communications about bonuses, new games, events, and other hari4u offerings — but only where you have provided explicit consent or where a legitimate interest exists in communicating with existing customers. You can opt out at any time.
• Analytics and Platform Improvement: To analyse aggregated usage data for the purpose of improving platform performance, user experience, game library curation, and business decision-making. Where possible, this analysis is conducted on anonymised or pseudonymised data sets.

5 Legal Basis for Processing

hari4u relies on the following lawful bases for processing personal data, in accordance with applicable data protection principles:

• Contractual Necessity: Processing required to perform our contractual obligations to you under the Terms and Conditions — including account management, payment processing, game access, and customer support.
• Legal Obligation: Processing necessary to comply with AML legislation, KYC requirements, licensing conditions, and any lawful requests from regulatory or law enforcement authorities.
• Consent: Processing for marketing communications, certain cookie categories, and any non-essential data uses for which we have sought and received your explicit, informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.
• Legitimate Interests: Processing necessary for hari4u's legitimate interests in fraud prevention, platform security, responsible gambling monitoring, and service improvement, provided these interests are not overridden by your fundamental rights and interests.

6 Data Sharing & Third-Party Disclosure

hari4u does not sell, rent, or trade personal data to any third party for commercial purposes. We may share personal data with the following categories of recipients, strictly on a need-to-know basis and under appropriate contractual data protection safeguards:

• Payment Service Providers: Financial institutions and payment processors that facilitate deposits and withdrawals, including operators of Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and cryptocurrency payment rails. These processors receive only the data necessary to complete the transaction.
• KYC and Identity Verification Providers: Third-party verification services that assist in validating identity documents and screening against sanctions lists or politically exposed persons (PEP) databases.
• Cloud Infrastructure and Technology Partners: Providers of hosting, data storage, content delivery, and cybersecurity services that support platform operations. All such providers are contractually obligated to process data only as instructed by hari4u and to maintain appropriate security standards.
• Regulatory Authorities and Law Enforcement: Government bodies, regulatory agencies, or law enforcement authorities where disclosure is required by law, court order, or our licensing obligations. hari4u will notify affected users of such disclosures where legally permitted to do so.
• Professional Advisors: Legal counsel, auditors, and compliance consultants where necessary for the conduct of their professional services, subject to professional secrecy obligations.
• Fraud Prevention Networks: Industry fraud-prevention consortia or shared risk databases to which hari4u may contribute anonymised or flagged account data for the purpose of protecting the broader online gambling community from bad actors.

Any third party that receives personal data from hari4u is contractually required to process that data solely for the agreed purpose, to maintain appropriate technical and organisational security measures, and to delete or return the data upon termination of the relevant agreement.

7 International Data Transfers

As hari4u operates with technology infrastructure and service partners distributed across multiple jurisdictions, your personal data may be transferred to and processed in countries outside Malaysia. Where such transfers occur, hari4u ensures that appropriate safeguards are in place to protect the data to at least the same standard as required under Malaysian data protection law.

Safeguards applied to international transfers may include: standard contractual clauses between hari4u and the receiving entity; adequacy determinations where the receiving country is recognised as providing an equivalent level of data protection; or binding corporate rules where the transfer is to a member of an affiliated group operating under a common privacy framework.

8 Data Retention

hari4u retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by legal or regulatory obligation. The following general retention guidelines apply:

• Account and Identity Data: Retained for the duration of the account relationship and for a minimum of five (5) years following account closure, in accordance with AML record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of seven (7) years in accordance with financial record-keeping obligations applicable under our licensing jurisdiction.
• KYC Documents: Retained for five (5) years following account closure or the conclusion of any related compliance investigation, whichever is later.
• Marketing Preference Records: Retained for as long as required to demonstrate compliance with consent obligations — typically for three (3) years from the date consent was last confirmed or withdrawn.
• Support Correspondence: Retained for three (3) years from the date of the interaction unless the matter forms part of an ongoing legal or compliance process.
• Technical and Log Data: Typically retained for ninety (90) days to twelve (12) months, depending on the type of log and its relevance to ongoing security monitoring.

Upon expiry of the applicable retention period, personal data is securely deleted, anonymised for statistical purposes, or archived in accordance with hari4u's data lifecycle management procedures.

9 Security Measures

hari4u takes the security of your personal data seriously and implements a comprehensive set of technical and organisational measures to protect it against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the hari4u platform.
• Encryption at rest for sensitive data stored in hari4u's database infrastructure, including identity documents, financial records, and authentication credentials.
• Two-factor authentication (2FA) available for all user accounts and mandatory for platform administration roles.
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis.
• Regular penetration testing and vulnerability assessments conducted by qualified third-party security specialists.
• 24/7 automated intrusion detection and anomaly monitoring systems.
• Mandatory data protection training for all hari4u personnel who handle personal data as part of their role.
• A documented incident response plan for data breaches, including notification procedures to affected users and relevant regulatory authorities where required by law.

10 Cookies & Tracking Technologies

hari4u uses cookies and similar tracking technologies on the Platform to support essential functionality, enhance user experience, and collect analytics data. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for the operation of the platform, including session management, authentication, and security functions. These cookies cannot be disabled without affecting core platform functionality.
• Functional Cookies: Store your preferences such as language settings, display preferences, and responsible gambling tool configurations so that they persist between sessions.
• Analytics Cookies: Collect aggregated, anonymised data about how users navigate and interact with the platform to help us improve user experience. No individual user is identifiable from analytics data.
• Security Cookies: Used for fraud detection, bot identification, and protection against automated attacks including credential stuffing and account takeover attempts.

hari4u does not use third-party advertising cookies or tracking pixels that share your browsing behaviour with external advertisers or data brokers. When you first access the Platform, you will be presented with a cookie consent notice. Strictly necessary cookies are deployed without consent; all other cookie categories require your explicit opt-in. You may withdraw consent for non-essential cookies at any time through the cookie settings accessible in your account or browser.

11 Your Data Rights

Subject to applicable data protection law, you have the following rights in relation to your personal data held by hari4u. To exercise any of these rights, please contact our Data Protection team using the contact details in Section 14 of this Policy.

hari4u will acknowledge all data rights requests within 7 business days and endeavour to fulfil verified requests within 30 calendar days. Where a request is complex or voluminous, we may extend this period by a further 30 days with prior notice. hari4u may need to verify your identity before fulfilling a data request to ensure data is not disclosed to an unauthorised party.

12 Minors & Age Policy

The hari4u platform is strictly intended for adults aged 21 years and above. We do not knowingly collect or process personal data from individuals under the age of 21. Age verification is conducted as part of the KYC process for all registered accounts, and any account found to belong to a person under 21 will be immediately suspended and all associated data reviewed in accordance with our safeguarding obligations.

If you are a parent or guardian and believe that a minor in your care has registered for or used hari4u, please contact our support team immediately at [email protected]. We will investigate the matter promptly and take appropriate action, including account closure and secure deletion of any personal data collected from the minor.

hari4u encourages parents and guardians to make use of parental control software to restrict access to online gambling platforms for minors. Details on responsible gambling protections are available on our Responsible Gambling page.

13 Policy Amendments

hari4u reserves the right to amend, update, or replace this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or the services we provide. When material changes are made to this Policy, we will notify registered users by email or through a prominent notice on the Platform, allowing reasonable time for review before the changes take effect.

The effective date of the most recent version of this Policy is displayed at the top of this page. We recommend that you review this Policy periodically to stay informed of how hari4u handles your personal data. Continued use of the platform following notification of any amendment constitutes your acknowledgement of the updated Policy.

Archived versions of previous Privacy Policy iterations are available on request by contacting our Data Protection team.

14 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise your data rights, or wish to raise a concern regarding hari4u's data handling practices, please contact us through the following channels:

• Data Protection Enquiries (Email): [email protected] — please include "Privacy / Data Request" in the subject line to ensure your message is directed to the appropriate team.
• Live Chat Support: Available 24 hours a day, 7 days a week, within the hari4u platform. Suitable for general privacy queries and initial reporting of data concerns.

hari4u is committed to addressing all privacy-related concerns promptly and in good faith. If you are dissatisfied with the outcome of your enquiry or complaint, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction.

We serve players across Malaysia — including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and beyond — and take our obligations to each of them under applicable privacy law with the utmost seriousness. Your trust is the foundation of the hari4u platform, and we are committed to honouring it.