Rujukan Laman

How We Handle Your Account, Data & Legal Rights

We built 4dsweep to respect your privacy and meet local standards in Malaysia.

Data protection aligned with Malaysia lawClear privacy policyAccess & deletion rights explainedContact paths for legal queriesAccount security practices
4dsweep How We Handle Your Account, Data & Legal Rights
CONTACT PATHS

How to Reach Us for Legal or Privacy Questions

If you need to exercise your rights—request a copy of your data, ask us to delete your account, or clarify how we handle your information—use any of the three paths below. Our compliance team usually replies within two business days. For urgent account-security matters, live chat gets you the fastest response.

Team online

Live Chat

Open the chat widget in the bottom right corner of any page when you're logged in. Our support team is online daily from 10:00 to 22:00 Malaysia time. Legal and privacy queries are routed to the compliance desk, and you'll get a reference number to track your request until it's resolved.

Email Support

Send your question to the address listed in your account dashboard under Settings > Contact. Include your registered email and a brief description of your request. We aim to respond within 48 hours on weekdays. For data-deletion requests, we'll confirm your identity before processing.

Help Centre

Visit our Help Centre from the footer link on any page. The Legal & Privacy section has step-by-step guides for common requests: downloading your data, updating your email, or closing your account. If the guides don't cover your case, use the contact form at the bottom of the Help Centre.

DATA HANDLING

What We Collect, How We Protect It & Your Rights

We keep your account secure and your data under your control. This section covers the practical steps we take—password hashing, session management, retention timelines—and how you can request changes or deletions.

What We Collect

When you open an account, we ask for your email and a password. During deposits we log the payment method you picked—Touch 'n Go, GrabPay, Boost or FPX—and the transaction ID your bank provides. Withdrawals require us to verify the destination account matches your registered details. We do not request identity documents unless a withdrawal hits a threshold that triggers local reporting rules.

How We Store It

Passwords are hashed using bcrypt before storage; we never see or store plain-text passwords. Payment details—card numbers, e-wallet tokens—are handled by the payment gateway; we only log the transaction reference and amount. Your data sits on encrypted servers in a facility that meets regional security standards. Access is role-restricted: only compliance and senior support staff can view full account records.

Cookies & Sessions

We use session cookies to keep you logged in and a preferences cookie to remember your language choice. No third-party tracking cookies are set by 4dsweep. If you disable cookies in your browser, you'll need to log in every time you visit, and some settings won't persist. Cookies expire after 30 days of inactivity.

Data Retention

Active account data is kept as long as your account is open. After you request closure, we anonymise your profile within 14 days but retain transaction logs for seven years to comply with record-keeping norms. You can request a copy of your data at any time before closure; we deliver it as a JSON file within five business days.

Your Rights

You can access, correct, or delete your personal data by contacting support. Deletion means we anonymise your email and username; transaction records stay in the system with no personally identifiable link. If you believe we've mishandled your data, you can lodge a complaint with the relevant authority in Malaysia; we'll cooperate fully with any investigation.

Who to Contact

For legal, privacy, or data-protection questions, reach out via live chat, the email in your account dashboard, or the Help Centre contact form. Include your registered email and a clear description of your request. Our compliance team handles these inquiries and will confirm receipt within 48 hours, then provide a timeline for resolution.

Legal & Privacy Questions We Hear Most Often

Below are the six questions that come up most when account holders want to understand their rights, our policies, or how to make changes. If your question isn't here, use the contact paths in the Support section above.

We collect your email address, the password you create (stored as a hashed value), and the payment method you select during your first deposit—Touch 'n Go, GrabPay, Boost or FPX. Transaction history is logged automatically to verify deposits and withdrawals. We do not request identity documents unless a withdrawal crosses a reporting threshold set by local rules.

Yes. Contact support via live chat or email and ask for a data export. We'll verify your identity by sending a confirmation link to your registered email, then deliver a JSON file containing your account details, transaction log, and preferences within five business days. The export does not include hashed passwords or internal fraud-prevention flags.

Log in, go to Settings > Account, and select Close Account. We'll ask you to confirm via email. Within 14 days we anonymise your profile—your email and username are replaced with random strings. Transaction records remain in the system for seven years with no personal link, as required by record-keeping standards. Once anonymised, we cannot restore your account.

No. We do not sell or share your personal data with advertisers or marketing platforms. Payment gateways see only the transaction amount and reference; they do not receive your full account profile. If a legal authority in Malaysia requests data under a valid court order, we comply and notify you unless the order forbids disclosure.

We use a session cookie to keep you logged in and a preferences cookie to remember your language and layout choices. Both are first-party cookies set by 4dsweep; no third-party trackers are present. You can disable cookies in your browser, but you'll need to log in on every visit and your settings won't persist. Session cookies expire after 30 days of inactivity.

We retain transaction logs—deposits, withdrawals, timestamps—for seven years after account closure to meet standard record-keeping requirements. During that period the logs are anonymised: your email and username are removed, leaving only transaction references and amounts. After seven years the records are purged. You cannot request early deletion of these logs because they serve compliance and audit purposes.

Start by reaching out to our compliance team via live chat or the email in your account dashboard. Explain your concern and we'll investigate within five business days. If you're not satisfied with our response, you can lodge a formal complaint with the relevant data-protection authority in Malaysia. We'll cooperate fully with any regulatory inquiry.