This Privacy Policy explains what personal data Sastra4D collects from you, why we collect it, how we use and protect it, and what rights you have over your own information. We encourage you to read it carefully before using our platform.
We collect only the personal data that is strictly necessary to operate your account, process MYR transactions, and comply with applicable legal obligations. Nothing more.
All personal data held by Sastra4D is stored with 256-bit SSL encryption. Access to your data is restricted to authorised personnel on a strict need-to-know basis.
Your personal information is never sold, rented, or traded to any third-party advertiser or data broker. Period. We share data only where strictly required by law or for service delivery.
You have the right to access, correct, and request deletion of your personal data at any time. Submit a request through our live chat support and we will respond promptly.
Payment details processed via FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, and other Malaysian channels are handled in accordance with the requirements of the respective payment networks.
We use cookies and similar technologies only to maintain session integrity, deliver platform functionality, and analyse aggregate traffic patterns. No invasive cross-site tracking.
Sastra4D ("we", "us", "our", "the Platform") operates the online gaming and sports betting platform accessible at sastra4d.cam. We are committed to protecting the privacy and personal data of every individual who registers an account, visits our website, or interacts with our services.
This Privacy Policy ("Policy") describes our practices with respect to the collection, use, storage, disclosure, and protection of personal data. It applies to all users of the Sastra4D platform, including registered players and visitors who browse the site without registering.
Sastra4D serves Malaysian players primarily, with all account balances and transactions denominated in Malaysian Ringgit (MYR). Our platform integrates with Malaysian payment networks including FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and Hong Leong. Where applicable, our data handling practices reflect the obligations associated with operating these integrations.
By registering an account on Sastra4D or continuing to use the platform after this Policy has been updated, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. If you do not agree, please discontinue use of the platform and contact us to close your account.
For the purpose of this Privacy Policy, the following terms carry the meanings assigned below:
Sastra4D collects the following categories of personal data from users of the platform:
Sastra4D does not collect full credit or debit card numbers. All payment card data, where applicable, is handled exclusively by our PCI-DSS compliant payment processor and is not stored on our own servers. We do not collect precise GPS location data from your device.
Sastra4D collects personal data through the following means:
| Collection Method | Data Collected |
|---|---|
| Account registration form | Name, email, date of birth, phone number, username, password |
| KYC verification process | Identity documents, selfie images, proof of address |
| Deposit and withdrawal processing | Payment method details, transaction amounts, bank or e-wallet references |
| Platform usage (automatic) | IP address, device data, session logs, gameplay records |
| Cookies and similar technologies | Session tokens, preference data, analytics identifiers |
| Customer support interactions | Live chat transcripts, email content, issue resolution notes |
| Third-party KYC and fraud detection providers | Identity verification scores, sanctions screening results |
Sastra4D uses the personal data it collects for the following purposes:
To create and maintain your player account, authenticate your identity at login, process deposits and withdrawals in MYR, credit bonus funds, and provide access to games and betting markets.
To verify that you are at least 21 years of age and to satisfy our obligations under applicable anti-money laundering and Know Your Customer regulations. KYC data is processed by authorised internal compliance personnel and, where necessary, by our third-party identity verification service providers.
To facilitate secure financial transactions via FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, and supported cryptocurrency channels. Transaction data is retained to support reconciliation, dispute resolution, and regulatory reporting obligations.
To detect, investigate, and prevent fraudulent activity, money laundering, collusion, bonus abuse, and other prohibited conduct. IP address, device, and behavioural data are analysed to identify anomalous account activity.
To monitor player activity for indicators of problem gambling, apply self-imposed limits set by the player, enforce self-exclusion requests, and provide proactive outreach where patterns of concern are identified.
To respond to support inquiries submitted via live chat or email, maintain a record of communications for quality assurance purposes, and resolve account-related disputes.
To comply with obligations imposed by our international gaming licence, applicable financial regulations, court orders, and any other lawful requirements from competent authorities.
To analyse aggregate usage data, improve platform performance, optimise the user experience, and inform decisions about game library curation and feature development. Analytics data is processed in aggregated and anonymised form wherever possible.
To send promotional offers, bonus notifications, and platform updates via email or in-platform notifications. We will only send marketing communications to players who have expressly consented to receive them. You may withdraw consent and unsubscribe at any time through your Account settings or by contacting our support team.
Sastra4D processes personal data under the following legal bases:
Sastra4D does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share personal data only in the following limited circumstances:
We engage third-party service providers who process data on our behalf under written data processing agreements. These include:
We may disclose personal data to governmental authorities, regulators, law enforcement agencies, or courts where we are required to do so by law, court order, or in connection with our obligations under our gaming licence.
In the event of a merger, acquisition, sale of assets, or corporate restructuring involving Sastra4D, personal data held by us may be transferred to the acquiring entity as part of that transaction, subject to equivalent privacy protections.
We may disclose personal data where we reasonably believe it is necessary to protect the rights, property, or safety of Sastra4D, our players, or the public — including the sharing of data with other operators for industry-wide self-exclusion scheme purposes.
In every case where personal data is shared with a third party, Sastra4D requires contractual assurances that the recipient will handle the data in a manner consistent with this Privacy Policy and applicable data protection standards.
Sastra4D retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by law or regulation.
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | Legal obligation (AML) |
| KYC verification documents | Duration of account + 5 years post-closure | Legal obligation (KYC) |
| Financial transaction records | 7 years from transaction date | Legal obligation (financial records) |
| Gameplay and betting history | 5 years from session date | Legitimate interests (dispute resolution) |
| Customer support communications | 3 years from last interaction | Legitimate interests (quality assurance) |
| Marketing consent records | Until consent is withdrawn + 3 years | Legal obligation (consent records) |
| Session / technical logs | 12 months from creation | Legitimate interests (security) |
Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in such a way that it can no longer be associated with you as an individual.
Sastra4D implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:
Despite these measures, no system is entirely impenetrable. In the unlikely event of a data breach that poses a material risk to affected individuals, Sastra4D will notify impacted players and relevant authorities as required by applicable law.
You are responsible for maintaining the security of your own account credentials. Never share your password or 2FA codes with anyone, including Sastra4D support staff (we will never ask for your password). If you suspect your account has been compromised, contact our live chat support team immediately.
Sastra4D uses cookies and similar technologies on the platform. These are small data files stored on your device that help us deliver a functional, personalised, and secure experience.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Session management, login authentication, security tokens | Session / short-term |
| Functional | Language preferences, display settings, last-viewed game category | Up to 12 months |
| Analytics | Aggregate traffic analysis, page performance, feature usage metrics | Up to 24 months |
Strictly necessary cookies cannot be disabled as they are essential for the platform to function. You may manage functional and analytics cookies through your browser settings or our in-platform cookie preference controls. Please note that disabling certain cookies may affect your experience on the platform, including your ability to remain logged in.
Sastra4D does not currently deploy third-party advertising or tracking pixels from advertising networks on the platform. We do not permit external parties to set advertising cookies through our platform.
As a user of the Sastra4D platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact our support team via live chat or email as detailed in Section 15.
You have the right to request a copy of the personal data that Sastra4D holds about you, along with information about how it is being used. We will respond to access requests within 30 days.
If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic contact details directly through your Account settings.
You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected. Please note that certain data must be retained by us to comply with legal obligations (e.g., AML record-keeping) and cannot be deleted on request.
In certain circumstances, you may request that we restrict the processing of your personal data — for example, while a rectification request is being assessed, or where you dispute the legal basis for processing.
Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
You have the right to object to the processing of your personal data where that processing is based on our legitimate interests. Where your objection relates to direct marketing, we will cease processing immediately upon receipt.
Where processing is based on consent (e.g., marketing emails), you may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. You can opt out via your Account settings or by contacting our support team.
The Sastra4D platform is strictly intended for persons aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory component of our KYC process, and no player may withdraw funds without completing age verification.
Where Sastra4D discovers or reasonably suspects that an Account has been registered by or is being used by a person under 21, we will immediately suspend the Account, freeze all associated funds, conduct an investigation, and — where a minor is confirmed — refund any net deposits made by that individual (excluding any winnings generated during the period of underage access, which will be forfeited).
If you believe that a minor has registered an Account on Sastra4D, please notify us immediately via live chat.
Sastra4D operates as an internationally licensed gaming platform. Your personal data may be processed in, or transferred to, countries outside of Malaysia in the course of our operations — for example, in connection with our cloud hosting infrastructure, our gaming licence authority, or our third-party KYC and fraud detection providers.
Where personal data is transferred outside Malaysia, Sastra4D will ensure that appropriate safeguards are in place to protect your data, including contractual clauses that impose obligations on the recipient equivalent to those under this Policy.
Sastra4D is not regulated by the Personal Data Protection Commissioner of Malaysia for the purposes of the Personal Data Protection Act 2010 (PDPA) in the context of its gaming operations, as these services are offered through an internationally licensed entity. However, we voluntarily apply data protection principles consistent with international best practice to all users, including Malaysian players.
Sastra4D may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform functionality. When material changes are made, we will update the "Last Updated" date at the top of this page and, where practicable, notify registered players via email or an in-platform notice prior to the changes taking effect.
We encourage you to review this Policy periodically. Your continued use of the Sastra4D platform following any update constitutes your acceptance of the revised Policy. If you do not accept the revised Policy, please discontinue use of the platform and contact us to close your account.
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to submit a privacy-related complaint, please contact Sastra4D through the following channels:
We aim to acknowledge all privacy-related inquiries within 48 hours and to provide a substantive response within 30 days of receiving a completed request. Complex requests may take longer, in which case we will inform you of the expected timeframe.
For questions specifically about our Terms of Service, please visit our Terms & Conditions page. For guidance on responsible gambling tools and support resources, please visit our Responsible Gambling page.
At Sastra4D, your privacy is not an afterthought. It is built into the way we design our systems and processes. We are committed to handling your personal data with the same level of care and trust that we apply to your financial transactions — and to always being transparent about how your data is used.
Our FAQ covers the most common questions about your account, payments, and platform policies. For privacy-specific inquiries, our support team is available 24/7 via live chat.
For players aged 21 and above only. Terms & Conditions | Responsible Gambling