Security by Design
bento4d applies administrative and technical safeguards intended to reduce unauthorised access, misuse, loss or alteration of account information.
Personal data and account privacy
This Privacy Policy explains how bento4d may collect, use, store, disclose and protect personal information when Malaysian adults access the website, manage an account or use gaming services.
Our privacy principles
bento4d uses personal information for defined operational, security and account-management purposes. These principles summarise our approach; the complete policy appears below.
bento4d applies administrative and technical safeguards intended to reduce unauthorised access, misuse, loss or alteration of account information.
Information is used for stated purposes such as registration, KYC checks, MYR payment processing, fraud prevention and player support.
bento4d aims to explain what data may be requested, why it is needed and how a Malaysian player can raise a privacy enquiry.
Personal information is not intended to be kept indefinitely. bento4d considers legal, security, financial and dispute-resolution needs when setting retention periods.
Subject to applicable limitations, users may request access, correction or further information about the personal records associated with their bento4d account.
bento4d is intended only for people aged 21 and above. Information associated with a suspected underage account may be reviewed so protective action can be taken.
Full privacy terms
Last reviewed: 1 January 2026. Please read this policy together with the bento4d Terms & Conditions.
Important: By continuing to use bento4d, you acknowledge that you have read this Privacy Policy. If you do not agree with the described practices, discontinue use of the platform and request clarification before providing personal information.
bento4d respects the importance of privacy and recognises that users need clear information about the handling of their personal data. This Privacy Policy describes the categories of information bento4d may process when a person visits the website, creates an account, completes verification, deposits or withdraws MYR, places a casino or sports wager, uses account controls or asks for support.
This policy uses formal language where legal clarity is required, but bento4d has also included practical Malaysian examples. References to Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, DuitNow and FPX describe payment information that may be relevant when those methods are available.
This policy applies to personal information processed through the bento4d website and associated account services. It covers visitors, registered users, self-excluded users and people who contact support. It does not create rights beyond those available under applicable law or contractual terms.
In this policy, personal data means information that identifies or may reasonably be linked to an individual. Processing includes collecting, recording, organising, storing, reviewing, using, disclosing, restricting and deleting personal data. Service provider means an organisation assisting bento4d with a defined operational function.
The precise information processed by bento4d depends on how a person uses the platform. Registration and payment activity generally require more information than simply viewing a public page.
| Data category | Examples | Typical purpose |
|---|---|---|
| Identity data | Full name, date of birth, nationality and identification records | Age checks, KYC verification and account security |
| Contact data | Email address, phone number and residential address | Account notices, verification and support |
| Transaction data | MYR deposits, withdrawals, method used and transaction references | Payment processing, reconciliation and fraud review |
| Gaming data | Game history, sports selections, stakes, results and bonus activity | Account records, settlement and safer-play monitoring |
| Technical data | IP address, browser type, device details, timestamps and security logs | Website operation, security and troubleshooting |
| Communication data | Support enquiries, complaint records and account instructions | Customer service and dispute resolution |
bento4d asks users to provide only accurate information that belongs to them. Documents relating to another person or payment methods held in another name must not be supplied unless bento4d has expressly requested them for a legitimate review.
bento4d may receive information directly from a user during registration, KYC verification, payment activity, account management or support communication. Data may also be generated automatically when the platform records login activity, browser details, game sessions, sports wagers or security events.
Where permitted and necessary, bento4d may receive confirmation data from payment processors, identity-verification providers or fraud-prevention services. For example, a DuitNow or FPX transaction may generate a reference, status and amount, while an e-wallet transaction may confirm whether a transfer was completed.
bento4d may process personal information for the following purposes:
bento4d does not intend to use personal information for an incompatible purpose without providing an appropriate explanation or obtaining permission where required.
When a player uses Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay, DuitNow or FPX, bento4d may process the account name, payment channel, transaction reference, MYR amount, status and timestamp. Complete banking credentials or e-wallet passwords should never be supplied to bento4d support.
Payment information may be compared with registration and KYC records to confirm that a transaction belongs to the registered account holder. bento4d may pause a withdrawal and request clarification where names do not match, activity appears unusual or required verification remains incomplete.
bento4d may use cookies or similar browser storage to maintain sessions, remember preferences, support security controls and understand how pages function. Technical logs may include an IP address, approximate location, browser version, device type, login time and pages viewed.
Users can manage cookies through browser settings, although disabling essential storage may prevent secure login or cause account features to work incorrectly. bento4d does not use this policy to promise that every cookie can be disabled while retaining full platform functionality.
bento4d may disclose limited personal information to service providers supporting payment processing, identity verification, hosting, security, fraud prevention, game operation or customer support. Such disclosure should be limited to information reasonably needed for the assigned function.
Information may also be disclosed where bento4d reasonably believes it is necessary to comply with a valid legal process, protect users, investigate prohibited conduct, enforce the Terms & Conditions or defend legal rights. bento4d does not describe personal information as being sold as a routine business activity.
Online services may use systems or providers operating in more than one country. Consequently, bento4d information may be processed outside Malaysia where hosting, security, verification, payment or game-operation functions are performed.
Where a cross-border transfer occurs, bento4d seeks to use contractual, organisational or technical safeguards appropriate to the information and circumstances. Data-protection standards may differ between countries, and no internet-based transfer can be described as completely free from risk.
bento4d keeps personal data for as long as reasonably necessary for account operation, transaction reconciliation, security, responsible gambling controls, complaint management and applicable record-keeping duties. Different categories may therefore have different retention periods.
Closing an account does not always require immediate deletion of every record. bento4d may retain selected KYC, transaction, self-exclusion, dispute and fraud-prevention information where continued retention is reasonably necessary. Data that is no longer required should be deleted, anonymised or securely restricted.
bento4d uses a combination of access controls, account authentication, monitoring, internal procedures and technical protections intended to safeguard personal information. Access should be limited to authorised personnel or providers with a genuine operational need.
No system can guarantee absolute security. Players also have responsibilities: use a unique password, keep verification codes private, log out on shared devices and contact support if account access looks unfamiliar. bento4d will never need a user's online banking password or full e-wallet login credentials.
Subject to identity verification, applicable law and legitimate restrictions, a bento4d user may ask for information about personal data held in relation to the account. A user may also request correction of inaccurate or incomplete details.
Depending on the circumstances, a privacy request may concern:
bento4d may ask for reasonable identity evidence before responding. Certain requests may be limited where information must be retained for security, transaction records, self-exclusion enforcement, dispute handling or another valid requirement.
bento4d services are intended only for adults aged 21 and above. bento4d does not knowingly invite underage individuals to create accounts or participate in casino-style gambling. Age information and identity documents may be reviewed as part of KYC checks.
If bento4d identifies an account held by an underage person, access may be restricted while the circumstances are investigated. A parent or guardian who believes an underage individual has provided information should contact support using the plain-text email shown below.
bento4d may revise this Privacy Policy to reflect changes in services, security practices, payment methods, operational requirements or applicable rules. The updated version will be published on this page with a revised review date where appropriate.
Users should revisit this page periodically. Continued use of bento4d after an update means the user acknowledges the revised notice, but it does not remove any consent or notification requirement that may apply to a specific type of processing.
Privacy questions, access requests and correction requests may be sent to the bento4d support team. Include the registered username, a clear explanation of the request and enough non-sensitive detail for the team to locate the relevant account.
Website email: [email protected]
Do not include passwords, one-time codes or online banking credentials. General account information is available in the FAQ, while safer-play controls are explained on the Responsible Gambling page.
Continue with confidence
Explore Malaysian payment guidance, casino information and sports content after reviewing how bento4d handles account data. Play responsibly and remember that access is for adults aged 21+.