Istana404 is committed to protecting the personal data of every member. This Privacy Policy explains what information we collect, why we collect it, how it is used, and the rights available to you as a user of our platform.
Six ways Istana404 keeps your personal data safe, transparent, and in your control.
All personal data held by Istana404 is stored on encrypted, access-controlled servers. We apply 256-bit SSL encryption across all data transfers, and access to personal records is restricted to authorised personnel only.
Istana404 does not sell, rent, or share your personal data with third-party advertisers or data brokers. Data sharing is limited to essential service providers and is governed by strict contractual data protection obligations.
We believe you have the right to know exactly what data we hold about you and why. This Privacy Policy is written in plain English to ensure every Istana404 member — from Kuala Lumpur to Johor Bahru — can fully understand our data practices.
You retain meaningful rights over your personal data, including the right to access, correct, and request deletion of your records. We provide clear processes to exercise these rights and respond to all valid requests within a reasonable timeframe.
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve any outstanding disputes. Data no longer needed is securely deleted.
Istana404 uses cookies and similar tracking technologies to improve platform performance and user experience. We provide clear information on the types of cookies used and how you can manage your cookie preferences through your browser settings.
This Privacy Policy ("Policy") sets out the data protection practices of Istana404 ("the Company", "we", "us", "our"), the online gaming and sports betting platform operated at istana404.cam. This Policy governs the collection, processing, storage, disclosure, and protection of personal data provided by or collected from users ("you", "your", "the User") who access or use our platform.
Istana404 is committed to handling personal data responsibly and in accordance with applicable data protection laws and regulations. We recognise that privacy is a fundamental right and we take our obligations seriously — not merely as a regulatory requirement, but as a core component of the trust we seek to build with every member across Malaysia, including players in Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, and Johor Bahru.
By registering an account, accessing the platform, or using any service provided by Istana404, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should cease using the platform and may request account closure by contacting our support team.
For the purposes of this Privacy Policy, the following terms carry the meanings assigned below:
Istana404 collects personal data that is necessary to provide our services, comply with legal obligations, and maintain account security. The categories of data we collect are set out below:
Identity & Contact Data:
Financial Data:
Behavioural & Technical Data:
Communication Data:
Istana404 collects personal data through the following channels:
Istana404 processes your personal data for the following specific and lawful purposes:
Istana404 processes personal data only where a valid legal basis exists. The legal bases on which we rely are as follows:
Istana404 does not sell, rent, or otherwise commercially transfer your personal data to any third party. We disclose personal data only in the following limited circumstances, and only to the extent necessary for the specified purpose:
Istana404 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal and regulatory requirements, and to resolve any outstanding disputes or enforce our agreements.
The following indicative retention periods apply:
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual.
Istana404 implements appropriate technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security measures include, but are not limited to:
While we take all reasonable precautions, no data transmission over the internet or electronic storage system can be guaranteed to be completely secure. We encourage you to use a strong, unique password for your Istana404 account and to never share your login credentials with any third party.
If you suspect that your account security has been compromised, please contact our support team immediately at [email protected].
Istana404 uses cookies and similar tracking technologies (including pixel tags and local storage) to operate and improve the platform, maintain session continuity, and analyse usage patterns. The types of cookies we use are as follows:
You can manage your cookie preferences through your browser settings. Most browsers allow you to view, block, or delete cookies. Please note that disabling certain cookies may affect the functionality of the Istana404 platform.
As a user of the Istana404 platform, you hold the following rights in respect of your personal data. We are committed to facilitating the exercise of these rights promptly and without undue restriction:
You have the right to request a copy of the personal data Istana404 holds about you, along with information about how and why it is being processed.
You have the right to request correction of any inaccurate or incomplete personal data held in your account records.
In certain circumstances, you may request the deletion of your personal data. This right is subject to legal retention obligations that may require us to retain certain records.
You have the right to request that we restrict the processing of your personal data in specific circumstances, such as where you contest its accuracy or object to its processing.
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller where technically feasible.
You have the right to object to the processing of your personal data where it is based on legitimate interests, including direct marketing and profiling activities.
To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 5 business days and endeavour to fulfil all valid requests within 30 days. In complex cases, this period may be extended by a further 30 days with prior notification.
We may ask you to verify your identity before processing certain data rights requests to ensure we do not disclose or delete data in response to an unauthorised request.
The Istana404 platform is strictly intended for individuals aged 21 and above. We do not knowingly collect or process personal data from persons under the age of 21. Age verification is a mandatory component of our account registration and KYC process.
If Istana404 becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and permanently close the associated account. Any balances held in such an account will be handled in accordance with our Terms & Conditions.
The Istana404 platform may contain references to third-party services, including payment providers such as Maybank, Touch 'n Go eWallet, DuitNow, and FPX, as well as game content providers. These services are governed by their own independent privacy policies, and Istana404 accepts no responsibility for the data practices of third-party operators.
When you interact with a third-party payment method or service provider through the Istana404 platform, you are subject to that provider's terms and privacy policy in addition to ours. We recommend that you review the relevant privacy notices of any third-party services you use in connection with your Istana404 account.
Istana404 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. The "Last Updated" date at the top of this page will be revised whenever material changes are made.
Where amendments are material — affecting how we collect, use, or share your personal data — we will make reasonable efforts to notify registered users via their registered email address or through an in-platform notification prior to the changes taking effect.
Continued use of the Istana404 platform following publication of an updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically to stay informed of our current data protection practices.
If you have any questions, concerns, or requests relating to this Privacy Policy or Istana404's data protection practices, please contact our team using the following details:
For account closure requests, self-exclusion, or responsible gambling support, please visit our Responsible Gambling page or include "Account Closure" or "Self-Exclusion Request" in your email subject line.
For a complete understanding of the rules governing your use of the Istana404 platform, we also recommend reviewing our Terms & Conditions.
Your privacy is taken seriously at every level of our platform. If you have any data-related questions before or after registering, our support team is available around the clock on Malaysia Standard Time.
For players aged 21 and above only. Please gamble responsibly.