400k Privacy Policy — Data Protection & User Rights
This Privacy Policy explains how the 400k platform collects, uses, stores and protects the personal information of users in Malaysia. We are committed to handling your data transparently and securely.
Effective Date: 1 January 2026. This policy applies to all registered users of the 400k platform.
Information We Collect
400k collects several categories of information when you register or use the platform. All data collection is carried out for a clear purpose and limited to what is necessary for the platform's operation.
Full name, date of birth, email address, phone number, and encrypted password. This information is required to verify your identity and protect your account from unauthorised access.
Deposit and withdrawal transaction details in Malaysian Ringgit (RM), including payment methods used such as DuitNow and GrabPay. Full bank account numbers are not stored directly by 400k.
Device type, operating system, browser version, IP address, and screen resolution. This data helps us optimize platform display across mobile devices and detect suspicious activity.
Activity records such as logins, pages visited, games played, bets placed and session duration. This data is used to improve the user experience and detect unusual usage patterns.
How We Use Your Information
400k uses the information collected for the following purposes. All data use is limited to legitimate operational needs and will not be used for undisclosed purposes without user consent:
- Identity verification and account security — ensuring that only the rightful account owner can access the account and carry out financial transactions.
- Payment processing — processing deposits and withdrawals accurately in MYR through approved local payment providers.
- Customer support — enabling the 400k support team to resolve queries, complaints, or technical issues reported by users.
- Platform improvements — analysing aggregated usage patterns to improve the platform's interface, performance and content.
- Legal compliance — meeting applicable legal requirements in Malaysia, including fraud prevention and anti-money laundering compliance.
- Account-related communications — sending important notifications about transactions, policy changes or security issues that require your attention.
400k does not sell, rent or commercially share users' personal data with any third party for marketing purposes.
Cookies & Tracking Technologies
What Cookies Are Used?
The 400k platform uses cookies and similar tracking technologies to enhance the user experience. There are three main types of cookies in use:
- Session cookies — keeping you logged in during an active session so you don't need to sign in again each time you navigate between pages.
- Preference cookies — storing personal preferences such as your preferred language and display settings.
- Analytics cookies — collecting anonymised usage data to help us understand how users interact with the platform.
You can manage your cookie settings through your browser. However, disabling certain cookies may affect the functionality of the platform.
Data Storage, Security & Sharing
Security & Data Retention
All personal data collected by 400k is stored on servers protected by SSL encryption and strict access controls. User passwords are never stored in plain text — they are processed using secure hashing methods.
Active account data is retained for the duration your account remains active and for a defined period after account closure to meet legal and audit requirements. Data that is no longer needed will be securely deleted or anonymised.
Third-Party Sharing
400k only shares user data with third parties in limited and lawful circumstances:
- Approved payment service providers authorized to process transactions in MYR.
- Regulatory authorities or law enforcement agencies when required under Malaysian law.
- Technical service providers who support platform operations under binding confidentiality agreements.
All third parties that receive user data are required to protect that information to a standard equal to or higher than what is set out in this policy.
User Rights & How to Contact Us
Right to Access, Correction & Erasure
As a 400k platform user, you have the following rights regarding your personal data:
- Right to Access — you may request a copy of the personal data we hold about you at any time by contacting customer support.
- Right to Correction — if any information we hold about you is inaccurate or out of date, you have the right to request a correction. Some details can be updated directly through your account settings.
- Right to Erasure — you may request the deletion of your personal data, subject to legal requirements that prohibit deletion before a specified retention period expires. Deletion requests will be processed within a reasonable timeframe.
- Right to Object — you may object to the processing of your data for certain purposes, including marketing communications where applicable.
Privacy Policy Updates
400k reserves the right to update this Privacy Policy from time to time. Users will be notified of any material changes via in-platform notifications or email. Continued use of the platform after changes are published constitutes acceptance of the updated policy.
Contact Us
For any enquiries regarding this Privacy Policy or to submit a data-related request, please contact the 400k support team by email at [email protected] or via the live chat channel within the platform. You can also visit our FAQ us for answers to general enquiries.
Still Have Questions About Your Privacy?
The 400k team is here to help. Contact us or visit the FAQ for more information on how we protect your data.