Gurita4D is committed to protecting the personal data of every player on our platform. This Privacy Policy explains what information we collect, how we use it, who we share it with, and what rights you hold as a data subject under applicable law.
This Privacy Policy ("Policy") is issued by Gurita4D ("we", "us", or "the Platform"), accessible at gurita4d.click. It sets out the basis on which we collect, process, store, and disclose personal data obtained from users ("you", "User", or "Member") who register an account, access our services, or otherwise interact with the Gurita4D platform.
Gurita4D operates as a premium online casino and sports betting platform serving players across Malaysia, including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam. In providing our services, we necessarily collect and process personal data, and we are committed to doing so responsibly, transparently, and in accordance with applicable data protection principles.
By registering an account on the Gurita4D platform or by continuing to access our services, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with the terms of this Policy, you should discontinue your use of the Platform immediately.
The following terms carry the meanings assigned to them below throughout this Policy:
| Term | Definition |
|---|---|
| "Personal Data" | Any information that relates to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial data, and device identifiers. |
| "Processing" | Any operation performed on personal data, including collection, storage, use, disclosure, erasure, or any combination thereof. |
| "Data Controller" | Gurita4D, as the entity that determines the purposes and means by which personal data is processed. |
| "Data Processor" | Any third-party entity that processes personal data on behalf of Gurita4D under a contractual arrangement. |
| "Consent" | Freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data. |
| "Sensitive Data" | A subset of personal data that warrants heightened protection, including financial account details, identity document numbers, and biometric data where applicable. |
| "KYC" | Know Your Customer — the regulatory identity verification process conducted by Gurita4D prior to processing withdrawal requests. |
Gurita4D collects personal data through multiple channels. The categories of data we collect include, but are not limited to, the following:
When you create a Gurita4D account, we collect the following information:
To facilitate deposits and withdrawals, we collect transactional and payment information, including:
Gurita4D does not store full card numbers or CVV codes. Payment processing for applicable methods is handled by regulated third-party payment service providers.
Prior to processing withdrawal requests, we require you to complete our KYC process, which involves submission of identity documents, proof of address, and where applicable, source-of-funds documentation. This data is processed solely for regulatory compliance and fraud prevention purposes.
We automatically collect certain technical data when you access the Platform, including:
When you contact our customer support team — whether via live chat, email ([email protected]), or any other support channel — we retain records of those communications for training, quality assurance, and dispute resolution purposes.
Gurita4D processes your personal data for a range of clearly defined operational and regulatory purposes. The table below summarises the primary purposes of processing and the corresponding data categories used:
| Purpose of Processing | Data Categories Used |
|---|---|
| Account registration and management | Registration data, identity documents |
| Identity verification and KYC compliance | KYC documents, registration data, financial data |
| Processing deposits and withdrawals | Financial data, payment method identifiers |
| Fraud detection and prevention | Technical data, financial data, usage patterns |
| Customer support and dispute resolution | Communications data, account data |
| Responsible gambling monitoring and intervention | Usage data, wagering history, account data |
| Marketing communications (where consented) | Registration data, usage preferences |
| Platform improvement and analytics | Technical data, aggregated usage data (anonymised) |
| Regulatory and legal compliance | All categories as required by applicable law |
Gurita4D processes your personal data on one or more of the following legal bases, depending on the specific processing activity:
Gurita4D does not sell, rent, or commercially exploit your personal data to third parties. We share your data only in the following limited and defined circumstances:
We share relevant financial and identity data with regulated Malaysian payment service providers — including those facilitating DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, and Public Bank transactions — for the sole purpose of processing your transactions. These providers are contractually bound to process your data only for that purpose.
KYC and identity verification may be conducted with the assistance of specialist third-party verification service providers, who are required to maintain the same data protection standards as Gurita4D.
We may be required to disclose your personal data to regulatory bodies, law enforcement agencies, or courts of competent jurisdiction where required by applicable law, a valid legal order, or where we reasonably believe disclosure is necessary to protect our legal rights or the safety of our users and the public.
In the event of a merger, acquisition, or sale of all or substantially all of the assets of Gurita4D, personal data held by the Platform may be transferred to the acquiring entity, subject to the same data protection commitments set out in this Policy. You will be notified of any such transfer in advance.
Gurita4D retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account plus 5 years post-closure | Regulatory / legal obligation |
| KYC documents | Minimum 5 years from date of verification | Anti-money laundering regulations |
| Financial transaction records | Minimum 7 years from date of transaction | Financial regulatory requirements |
| Customer support communications | 3 years from date of interaction | Dispute resolution / legitimate interest |
| Technical and usage logs | 12 months from collection | Security and fraud prevention |
| Marketing consent records | Until withdrawal of consent plus 3 years | Legal obligation / consent compliance |
Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with our internal data destruction procedures.
Gurita4D uses cookies and similar tracking technologies to operate the Platform effectively, enhance your user experience, and gather aggregate analytical insights. The types of cookies we use include:
You may manage your cookie preferences through your browser settings at any time. Please note that disabling strictly necessary cookies may impair your ability to use certain features of the Platform, including logging in and accessing your account balance.
Gurita4D implements a comprehensive set of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security infrastructure includes:
As an individual whose personal data is processed by Gurita4D, you hold a number of important rights regarding that data. These rights are summarised below. To exercise any of these rights, please contact us using the details provided in Section 14.
Request a copy of the personal data we hold about you and information about how it is processed.
Request correction of any inaccurate or incomplete personal data we hold about you.
Request deletion of your personal data where it is no longer necessary, subject to our legal retention obligations.
Request that we restrict the processing of your data in certain circumstances (e.g., while a dispute is being resolved).
Receive your personal data in a structured, machine-readable format and have it transmitted to another controller where technically feasible.
Object to processing based on legitimate interests, including direct marketing where consent was previously given.
Gurita4D will respond to all verified data subject requests within 30 calendar days of receipt. We may request proof of identity before acting on any request to ensure we are disclosing data to the correct individual.
The Gurita4D platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or retain personal data from individuals under the age of 21.
Age verification is a mandatory component of our registration process. You are required to confirm your date of birth during registration, and Gurita4D reserves the right to request documentary proof of age at any time during the KYC process. Any account where the registered member is found to be under the age of 21 will be immediately suspended, all balances will be frozen pending investigation, and the relevant data will be handled in accordance with our obligations under applicable child protection and data protection law.
If you have reason to believe that a person under the age of 21 has registered an account on the Gurita4D platform, please notify us immediately at [email protected] so that appropriate action can be taken.
The Gurita4D platform integrates with a number of third-party service providers to facilitate payment processing, identity verification, analytics, and other operational functions. These include Malaysian payment infrastructure providers (such as those operating the DuitNow, FPX, and e-wallet networks), KYC verification platforms, cloud infrastructure providers, and customer support tooling.
Each third-party service provider engaged by Gurita4D is contractually required to process personal data only for the purposes specified, to maintain appropriate technical and organisational security measures, and to comply with applicable data protection obligations. We conduct due diligence on third-party providers before engagement and review those relationships periodically.
This Policy does not govern the privacy practices of third-party providers operating their own platforms (such as Maybank's internet banking portal or the Touch 'n Go eWallet application). We recommend that you review the privacy policies of any third-party services you use in conjunction with your Gurita4D account.
Gurita4D reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory guidance, or operational requirements. Where amendments are material, we will provide advance notice to registered members by email and/or through a prominent notice on the Platform prior to the changes taking effect.
The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. We encourage you to review this Policy periodically to stay informed about how we protect your personal data. Your continued use of the Platform following the publication of a revised Policy constitutes your acceptance of the updated terms.
If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by Gurita4D, please contact our Data Protection team using the following details:
To exercise your rights under Section 10 of this Policy — including requests for data access, rectification, erasure, or portability — please submit your request in writing to the contact details above, including your full name, registered email address, and a clear description of your request. We may require identity verification before acting on your request.
Our Privacy Policy reflects six core commitments to every Gurita4D member. These are not aspirational statements — they are operational realities built into how we handle your data every day.
Every byte of data exchanged between your device and our platform travels under 256-bit SSL/TLS encryption. Sensitive data at rest — including KYC documents and financial records — is encrypted with AES-256 standards.
Gurita4D has a firm no-data-sale policy. Your personal information is never sold to data brokers, advertisers, or third parties for commercial profiling. We share data only as strictly necessary to provide and protect our services.
Data is collected only for the specific, documented purposes outlined in this Policy. We do not repurpose your data for undisclosed activities. If we need to process your data for a new purpose, we will seek fresh consent.
This Policy gives you a comprehensive and honest picture of how we handle your data — what we collect, why we collect it, who we share it with, and how long we keep it. No hidden processes, no ambiguous language.
Access, rectification, erasure, portability, restriction, and objection rights are all supported. We respond to verified data subject requests within 30 days and maintain an accessible process for exercising them.
We apply data minimisation principles throughout: we collect only the personal information strictly necessary for the stated purpose. You will never be asked for data that serves no legitimate operational or regulatory function.
Your personal data is handled with the same level of care we apply to every aspect of the Gurita4D experience. Explore our platform knowing that your information is secure, your rights are protected, and our team is available 24/7 to help. Strictly for players aged 21 and above across Malaysia.