1004 Privacy Policy — User Personal Data Protection

Information collected by the 1004 platform is used exclusively for the purposes stated below and will never be used for any other purpose without user consent. First, personal information is used to process account registration, verify user identity, and fulfil compliance obligations under Malaysian law, including the Personal Data Protection Act 2010 (PDPA). Second, MYR payment information is used solely to process deposits, withdrawals, and financial transaction verification within the 1004 platform. Third, usage data and device information are analysed in aggregate to improve platform performance, detect and prevent fraudulent activity, and safeguard user account security. Fourth, email addresses and phone numbers are used to send important account-related notifications, security alerts, and service updates relevant to your use of the 1004 platform.

The 1004 platform will not use your information for third-party marketing purposes without your explicit consent. If you have previously agreed to receive promotional communications, you may withdraw that consent at any time through your account settings or by contacting our support team.

The 1004 platform runs on server infrastructure protected by 256-bit SSL/TLS encryption, ensuring that all data transmitted between your device and our servers remains inaccessible to unauthorised parties. User personal data is stored in databases secured by multiple layers of protection, including firewalls, intrusion detection systems, and strict need-to-know access controls. MYR payment information is processed through certified payment channels and is not stored in full on 1004's servers — only transaction reference tokens are retained for historical purposes. All account data is regularly backed up to secure, isolated locations to ensure service continuity in the event of an unexpected technical incident. The 1004 security team conducts regular internal and external security audits to identify and patch any system vulnerabilities before they can be exploited.

Data retention periods are determined based on operational needs and Malaysian legal requirements. Active account data is retained for the duration the account remains active, while closed account data is kept for a minimum of seven years to meet financial compliance obligations. After this period, data is securely deleted using industry-standard disposal methods.

As a user of the 1004 platform operating in Malaysia, you have certain rights regarding your personal data under the Personal Data Protection Act 2010 (PDPA). First, the right of access — you may request a copy of all personal information we hold about you, and we will provide it within 21 business days from the date your request is received. Second, the right of correction — if any of your information is inaccurate or out of date, you may submit a correction request through the 1004 support team and we will update our records promptly. Third, the right of erasure — in certain circumstances, you may request the deletion of your personal data from 1004's systems, subject to legal and operational requirements that prevent immediate erasure, such as financial records mandated by law. Fourth, the right to object — you may object to the processing of your data for specific purposes such as direct marketing, and we will honour that objection immediately.

To exercise any of the rights above, please contact the 1004 support team through the channels provided within the platform. All requests will be taken seriously and responded to within the timeframes stipulated by Malaysia's PDPA. We are committed to respecting every user's right to privacy and will make every reasonable effort to fulfil legitimate requests in accordance with applicable law.