At istana404, your privacy is more than a legal obligation โ it is a genuine commitment. This document explains exactly how we collect, use, store, and protect the personal data of all members on our Malaysia platform.
256-bit SSL Encryption ยท Never sold to third parties ยท Restricted & controlled access
Six core principles that underpin how istana404 handles the personal data of all our members
All your personal data and transaction information at istana404 is protected with 256-bit SSL encryption โ the same security standard used by Maybank, CIMB, and other leading Malaysian financial institutions. Your data cannot be read by any unauthorised party.
256-bit SSLIstana404 has never and will never sell, rent, or trade our members' personal data to any third party for marketing or any other commercial purpose. Your data belongs to you โ we only use it to keep the platform running well.
Privacy AssuredIstana404 only collects data that is strictly necessary to operate the platform, process transactions, and meet legal requirements. We do not collect irrelevant or excessive data. Every piece of data collected has a clear and legitimate purpose.
Data MinimisationWe clearly state why we collect each type of data, how it is used, and how long it is retained. There are no hidden data collection practices at istana404. This is a living document that we update whenever our practices change.
100% TransparentIstana404 members have the right to access, correct, download, and request deletion of their personal data at any time. The process for exercising these rights is straightforward and can be done directly through your account or by contacting our team.
Your RightsThe istana404 Privacy Policy is designed to comply with Malaysia's Personal Data Protection Act 2010 (PDPA). We ensure that all our data collection and processing practices meet applicable Malaysian legal requirements.
PDPA 2010For any queries relating to your data privacy:
Privacy@istana404.biz
This Privacy Policy describes the personal data handling practices of istana404 (istana404.biz). By using our platform, you agree to the collection and use of information as described in this policy. Please read this document in full carefully.
Istana404 takes personal data privacy extremely seriously. As an online betting platform serving hundreds of thousands of members across Malaysia โ from Peninsular Malaysia to Sabah and Sarawak โ we have a significant responsibility to ensure every member's personal data is handled responsibly, transparently, and securely.
This Privacy Policy explains:
This Policy applies to all information you provide to istana404 through our website, mobile platform, and all other communication channels including email and customer support live chat.
istana404 acts as the "data controller" under Malaysia's Personal Data Protection Act 2010 (PDPA) for all personal data we process.
Istana404 collects various types of personal data depending on how you interact with our platform. The table below outlines the categories of data we collect and the sources from which it is gathered:
Istana404 does not collect sensitive data categories such as health information, religious beliefs, political views, or biometric data unless specifically required for identity verification purposes and explicitly consented to by you.
Istana404 uses your personal data solely for the following legitimate purposes:
Creating and managing your istana404 account, including identity verification (KYC) and account settings.
Processing deposits via TNG, GrabPay, DuitNow, FPX Maybank2u, CIMB Clicks, and withdrawals to your account.
Detecting and preventing fraud, match-fixing, money laundering, and platform abuse.
Handling enquiries, resolving complaints, and providing technical support in Bahasa Melayu 24/7.
Analysing usage patterns to improve the user experience, platform speed, and game selection.
Compliant with Malaysian legal requirements including PDPA 2010, AML/KYC requirements, and mandatory reporting obligations.
Marketing: istana404 may send you promotional and bonus information via email or SMS. You can opt out of marketing communications at any time by clicking the "unsubscribe" link in any email or by contacting our team.
Istana404 do not sell your personal data. However, there are limited situations where we need to share data with certain parties in order to operate our services:
All third parties that receive data from istana404 are bound by strict data processing agreements and may only use the data for permitted purposes. We do not share your data with third-party advertisers.
The security of your personal data is a top technical and operational priority at istana404. Below are the comprehensive measures we implement:
SSL/TLS 256-bit for all data in transit. AES-256 encryption for data stored in our databases.
Multi-layered web application firewall (WAF) and DDoS protection to defend our infrastructure against cyber attacks.
Only authorised personnel may access members' personal data, and only to the extent required for their duties.
Internal security audits and third-party independent penetration testing are conducted on a regular basis.
While we take all reasonable steps to protect your data, no security system is 100% foolproof. You also play an important role in keeping your account safe โ use a strong password, enable two-factor authentication where available, and never share your login credentials.
Istana404 uses cookies and similar tracking technologies to enhance your user experience. The table below describes the types of cookies we use:
You can manage and delete cookies at any time through your browser settings. Please note that disabling certain cookies may affect the functionality of the istana404 platform.
Istana404 retains your personal data for as long as your account is active or as long as necessary to provide services to you. Below is our data retention policy:
Once the relevant retention period has expired, your data will be securely deleted or anonymised.
Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by istana404:
Request a copy of the personal data istana404 holds about you. We will respond within 21 business days.
Request correction of any inaccurate or incomplete personal data held in istana404's records.
Request the deletion of your personal data, subject to any applicable legal retention obligations.
Request your personal data in a machine-readable format for transfer to another service.
Request that istana404 restrict how we process your data under certain circumstances permitted by law.
Object to the processing of your data for direct marketing purposes at any time, without needing to provide a reason.
To exercise any of the rights above, contact our Data Protection Officer (DPO) at privacy@istana404.biz. We will respond within 21 business days. Identity verification may be required before we process your request.
The istana404 platform is strictly for individuals aged 18 years and above. We do not knowingly collect personal data from individuals under the age of 18.
If we discover that we have unknowingly collected data from a minor, we will take immediate steps to delete that data and close the associated account. If you believe a child has registered on our platform, please contact us at privacy@istana404.biz immediately.
Istana404 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or platform improvements. When we make material changes:
We encourage you to review this page periodically. Your continued use of the istana404 platform after any changes are published will be considered your acceptance of the updated Privacy Policy.
If you have any questions, concerns, or complaints about how istana404 handles your personal data, please reach out to us through the following channels:
Privacy@istana404.biz
Response time: 3โ5 business days
Available 24/7 on the istana404 platform
For general privacy enquiries
Support@istana404.biz
For complaints and general enquiries
If you are not satisfied with our response to your privacy complaint, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia under the Personal Data Protection Act 2010.
This Privacy Policy was last updated on 1 January 2026 (Version 2.4). This policy is written in Bahasa Melayu and in the event of any conflict with other translations, the Bahasa Melayu version shall prevail.
Register at istana404 with confidence โ your privacy is protected to the highest security standards. A MYR 100 bonus awaits new members. Easy deposits via TNG, GrabPay, DuitNow & more.
256-bit SSL ยท PDPA Compliant ยท Data Not Sold ยท 24/7 BM Support