This Privacy Policy explains how Roma4D collects, uses, stores, and protects your personal data when you access or use our platform. We are committed to handling your information with care, transparency, and integrity.
Six key principles that govern how we treat your personal information on the Roma4D platform.
We only collect personal data that is strictly necessary for the purposes outlined in this Policy. We do not collect data speculatively or in excess of what is needed.
All personal data is stored with AES-256 encryption. Access is restricted to authorised personnel on a need-to-know basis. We conduct regular security audits.
Roma4D does not sell, rent, or trade your personal information to third-party marketers or data brokers under any circumstances, ever.
You have the right to access, correct, export, and request deletion of your personal data at any time by contacting our support team.
This Policy explains exactly what data we collect, why we collect it, how long we retain it, and who we may share it with under limited, defined circumstances.
We use only essential and functional cookies. Our cookie practices are fully explained in this Policy, including what each category does and how to manage preferences.
This Privacy Policy (hereinafter "Policy") sets out the basis on which Roma4D (the "Company", "We", "Us", or "Our"), the operator of the online gaming platform accessible at roma4d.click (the "Platform" or "Website"), collects, processes, stores, and discloses personal data relating to individuals who access or use the Platform (hereinafter "you", "your", or "the User").
Roma4D is committed to protecting the privacy and security of all users of the Platform. This Policy is intended to be clear, comprehensive, and accessible. We encourage all users — including our Malaysian players — to read this Policy carefully before providing any personal information to Roma4D.
By registering an account on roma4d.click, accessing the Platform, making a deposit, or interacting with any feature of the Website, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not consent to the practices described in this Policy, you should not access or use the Platform.
For the purposes of this Policy, the following definitions apply:
Roma4D, the operator of roma4d.click, acts as the Data Controller in respect of all personal data collected through the Platform. Roma4D operates under international online gaming licensing and is responsible for determining the purposes and means of all personal data processing activities described in this Policy.
Roma4D does not represent itself as subject to any Malaysian domestic data protection regulatory authority for the purposes of this Policy. Malaysian players are advised that data protection regulation in Malaysia is governed by the Personal Data Protection Act 2010 (PDPA) at the domestic level. Roma4D processes personal data in accordance with its international licensing obligations and its own data protection commitments as set out in this Policy.
For all data protection enquiries, requests, or complaints, please contact Roma4D via the support channels set out in Section 17 of this Policy.
Roma4D collects personal data across several categories, each of which is necessary for the purposes described in Section 6 of this Policy.
Roma4D collects personal data through the following means:
Roma4D processes personal data for the following defined purposes:
| Purpose | Data Categories Used |
|---|---|
| Account creation and management | Registration data, device data |
| Identity verification (KYC) and age verification (21+) | KYC documents, registration data |
| Processing deposits and withdrawals (MYR, Touch 'n Go, Boost, GrabPay, Maybank, CIMB, DuitNow, FPX, BTC, USDT, ETH) | Financial data, KYC data |
| Anti-money laundering (AML) compliance and fraud prevention | Financial data, KYC data, device data |
| Responsible gaming programme administration (deposit limits, self-exclusion) | Gaming activity data, registration data |
| Customer support and dispute resolution | Communications data, account data, transaction data |
| Platform security and fraud detection | Device data, technical data, IP address |
| Regulatory compliance and record-keeping obligations | All applicable categories |
| Service improvement and analytics (aggregated, non-identifiable) | Technical data, gaming activity (anonymised) |
| Promotional communications (where consent has been given) | Registration data, gaming activity data |
Roma4D processes personal data on the following legal bases:
Roma4D does not sell, rent, or trade personal data. We may share personal data with third parties only in the following strictly defined circumstances:
Roma4D engages licensed third-party service providers to perform specific functions on its behalf. These providers process personal data only in accordance with Roma4D's instructions and are contractually prohibited from using the data for any other purpose. Categories of service providers include:
Roma4D may disclose personal data to regulatory authorities, law enforcement agencies, or other competent bodies where required to do so by applicable law, court order, or the requirements of Roma4D's international licensing authority. In such cases, Roma4D will disclose only the minimum data necessary to satisfy the relevant obligation.
In the event that Roma4D undergoes a merger, acquisition, restructuring, or sale of all or substantially all of its assets, personal data held by Roma4D may be transferred as part of that transaction. Users will be notified of any such transfer via on-platform notification or email prior to the transfer taking effect, and the receiving entity will be required to honour the commitments made in this Policy.
Roma4D operates under international online gaming licensing and utilises cloud infrastructure and service providers that may be located in jurisdictions outside Malaysia. As a result, your personal data may be transferred to, stored in, or processed in countries other than Malaysia.
Where personal data is transferred internationally, Roma4D ensures that appropriate safeguards are in place to protect the data to a standard at least equivalent to the commitments made in this Policy. Such safeguards may include contractual data protection clauses with service providers, transfer to jurisdictions with recognised data protection frameworks, or other lawful transfer mechanisms.
By using the Roma4D Platform, you acknowledge and consent to the international transfer of your personal data as described in this section.
Roma4D retains personal data for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable law or Roma4D's licensing obligations. The following retention guidelines apply:
| Data Category | Retention Period |
|---|---|
| Account registration data | Duration of account plus 5 years following closure |
| KYC identity documents | 5 years following account closure or last transaction |
| Financial transaction records | 7 years from transaction date (AML compliance requirement) |
| Gaming activity logs | 5 years from date of activity |
| Customer support communications | 3 years from closure of support interaction |
| Self-exclusion records | Indefinitely, to prevent re-registration during exclusion period |
| Technical and device logs | 90 days rolling, except where retained for security investigation |
Following the expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised. Where anonymisation is applied, the resulting data is no longer considered personal data and may be retained indefinitely for statistical and analytical purposes.
Roma4D uses cookies and similar technologies on the Platform. Cookies are small text files placed on your device when you access the Website. They allow the Platform to recognise your browser, maintain session state, and deliver functionality that depends on persistent data across page loads.
| Cookie Type | Purpose | Consent Required |
|---|---|---|
| Session management, authentication, security tokens, CSRF protection. Required for the Platform to function correctly. | No — technically necessary | |
| User preference storage (language, display settings, last visited game category). Improves user experience but not strictly necessary. | Yes — consent required | |
| Aggregated, anonymised usage data used to improve Platform performance and user experience. No individual identification occurs. | Yes — consent required |
You can manage cookie preferences through your browser settings at any time. Disabling essential cookies may impair Platform functionality. Disabling functional or analytics cookies will not affect your ability to access or use the Platform's core features.
As a user of the Roma4D Platform, you hold the following rights in relation to your personal data. Roma4D will endeavour to respond to all valid data subject requests within 30 days of receipt. Complex requests may require up to an additional 60 days, in which case you will be notified of the extended timeline.
You have the right to request a copy of all personal data Roma4D holds about you, along with information about how it is being processed.
You have the right to request correction of any inaccurate or incomplete personal data held about you. Some corrections may require re-verification of identity documents.
You may request deletion of your personal data where Roma4D no longer has a legal basis for retaining it. Statutory retention obligations (e.g., AML record-keeping) may preclude complete erasure in some cases.
You may request that Roma4D suspends active processing of your data in certain circumstances, for example while a rectification request is being assessed.
Where processing is based on your consent or contract performance, you may request a copy of your data in a structured, commonly used, machine-readable format.
Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.
The Roma4D Platform is strictly intended for adult users aged 21 years and above. Roma4D does not knowingly collect personal data from individuals under 21 years of age. The minimum age restriction of 21 years is enforced at registration and through the mandatory KYC identity verification process.
If Roma4D becomes aware, through any means, that personal data has been collected from an individual under the age of 21, the account will be immediately closed, all data collected will be deleted, and any funds deposited will be returned in accordance with applicable regulatory requirements.
If you are a parent or legal guardian and believe that a minor in your care has created an account or submitted personal data to Roma4D, please contact our support team immediately at [email protected] so that we can take prompt action.
Roma4D implements and maintains a range of technical and organisational security measures designed to protect personal data against unauthorised access, disclosure, alteration, or destruction. Key security measures include:
While Roma4D employs rigorous security measures, no system is entirely immune to security risks. Users are advised to maintain strong, unique passwords for their Roma4D accounts and to enable two-factor authentication where available.
The Roma4D Platform may contain references or links to third-party services, payment providers, or informational resources. This Policy applies solely to the Roma4D Platform and does not extend to any third-party website or service. Roma4D is not responsible for the privacy practices or content of any third-party platform.
Users are encouraged to review the privacy policies of any third-party service they interact with in connection with their Roma4D account, including payment processors such as Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, DuitNow, and FPX, each of which operates its own independent privacy framework.
Roma4D reserves the right to update, amend, or replace this Privacy Policy at any time. The effective date of the most recent version is displayed at the top of this page. Where amendments are material in nature — including changes that affect the types of data collected, the purposes of processing, or User rights — Roma4D will provide reasonable advance notice to registered Users via on-platform notification or email.
Continued use of the Platform following the effective date of any revised Policy constitutes acceptance of the updated terms. Users are encouraged to review this Policy periodically to remain informed of Roma4D's current data practices.
For all privacy-related enquiries, data subject access requests, consent withdrawals, or complaints regarding Roma4D's data processing practices, please contact us through the following channels:
Roma4D takes all privacy concerns seriously and will acknowledge receipt of all formal requests within 3 business days. Where a request requires investigation or legal review, Users will be kept informed of progress and anticipated timelines.
Questions about how Roma4D handles your data? Our support team is available 24/7 to help. Or visit our FAQ for quick answers.
For players aged 21 and above only. Play responsibly.