Privacy Policy

This Privacy Policy ("Policy") is published by Canyon44 ("Canyon44", "we", "us", or "our") and governs the collection, use, storage, disclosure, and protection of personal data obtained from individuals ("you", "Player", or "User") who access, register on, or use the Canyon44 online sports betting and live casino platform at canyon44.cam (the "Platform" or "Site").

Canyon44 recognises that privacy is a fundamental right. We are committed to processing personal data lawfully, fairly, and transparently — collecting only what is necessary, retaining it only for as long as required, and protecting it throughout its lifecycle with appropriate technical and organisational measures.

This Policy should be read alongside Canyon44's Terms & Conditions, which govern the overall contractual relationship between Canyon44 and its Players. In the event of any conflict, the Terms & Conditions shall prevail to the extent of the inconsistency, save where this Policy expressly states otherwise in respect of data protection matters.

The following terms have the meanings set out below throughout this Policy:

Canyon44 collects the following categories of personal data from Players, depending on the nature of the interaction:

Registration & Identity Data

• Full legal name, date of birth, and nationality.
• Malaysian identity card number (MyKad) or passport number, where submitted for KYC verification.
• Residential address, including postcode and city (e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam).
• Email address and mobile telephone number.
• Username and encrypted password.

Financial & Transaction Data

• Bank account details, e-wallet identifiers (e.g., Touch 'n Go eWallet, Boost, GrabPay), or cryptocurrency wallet addresses used for deposits and withdrawals.
• Transaction history, including deposit amounts, withdrawal requests, and wagering records in Malaysian Ringgit (MYR).
• Payment method type and last-used payment channel.

Technical & Usage Data

• IP address, device type, operating system, and browser type.
• Session duration, pages visited, and interactions with the Platform.
• Geolocation data (country and city level) derived from IP address.
• Login timestamps and access logs maintained for security purposes.

Communications Data

• Records of correspondence with Canyon44's customer support team via live chat or email.
• Complaint and dispute records.
• Preferences for marketing communications, where consent has been provided.

Canyon44 collects personal data through the following channels:

• Direct submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal request, or contacting support.
• Automated collection: Technical data collected automatically when you access or use the Platform, including IP address, device information, and session activity via cookies and server logs.
• Third-party sources: Identity verification data from licensed KYC and anti-fraud service providers; transaction data from payment processors including FPX, DuitNow, Maybank, CIMB, Public Bank, RHB, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay, and cryptocurrency network confirmations for BTC and USDT.
• Publicly available sources: In limited circumstances, publicly available information may be cross-referenced to fulfil our legal compliance obligations, including sanctions screening and fraud prevention.

Canyon44 processes personal data on the following legal bases:

Canyon44 uses the personal data collected for the following purposes:

• To establish, verify, maintain, and manage your Canyon44 account, including age and identity verification in compliance with our 21+ policy.
• To process deposits, withdrawals, and all financial transactions on the Platform in MYR and supported currencies.
• To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, multi-accounting, and other prohibited conduct as defined in the Terms & Conditions.
• To provide customer support, respond to enquiries, and resolve disputes via live chat or email.
• To operate and improve the Canyon44 Platform, including diagnosing technical issues, optimising performance, and developing new features.
• To comply with applicable legal, regulatory, and tax obligations, including record-keeping requirements and responses to lawful requests from competent authorities.
• To send you service-related notifications, including account alerts, transaction confirmations, and security notifications — these are not optional marketing messages.
• To send you promotional communications relating to Canyon44 offers, bonuses, and updates — only where you have provided explicit consent to receive such communications.
• To administer Canyon44's responsible gambling tools, including enforcing deposit limits, self-exclusion requests, and cool-off periods.

Canyon44 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Personal data is shared only in the circumstances described below:

• Licensed payment processors: Personal and financial data is shared with Canyon44's approved payment service providers — including FPX gateway operators, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, and major Malaysian banking institutions — solely to facilitate transaction processing.
• Identity verification providers: KYC data (including identity documents) may be processed by licensed third-party identity verification and age verification providers under data processing agreements with Canyon44.
• Anti-fraud and AML screening services: Transaction and identity data may be shared with licensed fraud prevention and anti-money laundering screening providers for compliance purposes.
• IT infrastructure and platform providers: Hosting, security, and software providers that support the operation of the Canyon44 platform may process certain technical data under strict confidentiality obligations.
• Legal and regulatory authorities: Canyon44 may disclose personal data to competent regulatory, law enforcement, or judicial authorities where required by applicable law, court order, or lawful regulatory demand.
• Business transfers: In the event of a merger, acquisition, or asset sale involving Canyon44, personal data may be transferred as part of the business assets, subject to equivalent privacy protections.

Canyon44 retains personal data for no longer than is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention principles apply:

• Active account data: Retained for the duration of your Canyon44 account relationship and for a period of at least five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements.
• Transaction records: Financial transaction records, including deposit and withdrawal history and wagering records, are retained for a minimum of seven (7) years to satisfy tax and AML compliance obligations.
• KYC documents: Identity verification documents are retained for the period required by applicable law following account closure, typically five (5) years.
• Support communications: Customer support correspondence is retained for a minimum of three (3) years to facilitate dispute resolution.
• Marketing consent records: Records of marketing consent are retained for the duration of the consent and for three (3) years thereafter as evidence of compliance.
• Technical logs: Server and access logs are retained for up to twelve (12) months for security and fraud detection purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be associated with an identifiable individual.

Canyon44 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and Canyon44's servers.
• Encryption of sensitive data at rest, including passwords (stored as hashed values, never in plaintext) and financial identifiers.
• Two-factor authentication (2FA) available to all registered Players and mandatory for administrative access.
• Role-based access controls limiting employee access to personal data on a need-to-know basis.
• Regular security assessments, vulnerability scanning, and penetration testing of the Platform infrastructure.
• Intrusion detection and 24/7 monitoring of network activity for anomalous behaviour.

Canyon44 uses cookies and similar tracking technologies to operate, maintain, and improve the Platform experience. The following categories of cookies are used:

Canyon44 does not use third-party advertising or retargeting cookies. You may manage cookie preferences through your browser settings. Disabling essential cookies may impair the functionality of the Platform. Continued use of the Platform without adjusting cookie settings constitutes acceptance of our cookie practices as described herein.

Subject to applicable law — including the Personal Data Protection Act 2010 (PDPA) of Malaysia — you have the following rights in relation to your personal data held by Canyon44:

• Right of Access: You may request confirmation of whether Canyon44 holds personal data about you and request a copy of that data in a readable format.
• Right to Correction: You may request that inaccurate or incomplete personal data held by Canyon44 be corrected. Minor corrections (e.g., typos in your registered address) may be made directly through your account profile.
• Right to Withdrawal of Consent: Where Canyon44 processes your data on the basis of consent (e.g., for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, where you have grounds relating to your particular situation.
• Right to Erasure: In certain circumstances, you may request the deletion of your personal data. This right is subject to Canyon44's legal retention obligations — where data must be retained for regulatory compliance, deletion requests may be partially or fully declined.
• Right to Data Portability: Where technically feasible and legally required, you may request that personal data you provided to Canyon44 be transferred to you or to another data controller in a structured, commonly used format.

To exercise any of the rights listed above, please contact Canyon44's support team using the contact details provided in Section 15 of this Policy. We will acknowledge all data rights requests within 24 hours and aim to resolve them within 30 calendar days. Complex requests may require up to 60 days, in which case we will notify you of the extension.

Canyon44 is strictly prohibited to persons under the age of 21 years. The Platform does not knowingly collect personal data from individuals under 21. All account registrations are subject to mandatory age verification, and Canyon44 may request identity documentation at any stage of the account lifecycle to confirm compliance with this requirement.

If Canyon44 becomes aware that personal data has been collected from an individual who is under 21, it will take immediate steps to close the associated account, return any uninvested funds in accordance with applicable regulations, and securely delete the personal data collected, subject to any mandatory regulatory retention obligations.

If you believe that Canyon44 has inadvertently collected data from a minor, please contact our support team immediately so that appropriate action can be taken.

Canyon44 may transfer personal data to service providers or infrastructure partners located outside of Malaysia in the course of providing its services. Where such transfers occur, Canyon44 takes appropriate steps to ensure that the receiving parties provide an equivalent level of data protection as required under Malaysian law and applicable international standards.

Safeguards employed for international data transfers may include contractual data processing agreements incorporating standard data protection clauses, transfers to jurisdictions recognised as providing adequate data protection, and other appropriate technical and organisational measures.

By using the Canyon44 Platform, you acknowledge and consent to the transfer of your personal data as described in this section, subject always to the protections outlined in this Policy.

Canyon44 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. Where changes are material, Canyon44 will provide reasonable notice to registered Players via their registered email address or through a prominent notice on the Platform prior to the effective date of the change.

The "Last Updated" date at the top of this Policy will be revised to reflect any amendments. Your continued use of the Canyon44 Platform following the effective date of an updated Policy constitutes acceptance of the revised terms.

Canyon44 recommends that Players review this Privacy Policy periodically to remain informed of how their personal data is being handled. The most current version of this Policy is always accessible at canyon44.cam/privacy-policy.

For any questions, concerns, or requests relating to this Privacy Policy or Canyon44's data practices, including requests to exercise your data rights under the PDPA or other applicable law, please contact our team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week directly through the Canyon44 Platform. Response commitment: under 2 minutes.
• Email: [email protected] (plain text — not a clickable link). Response commitment: within 4 hours.

All privacy-related enquiries and data rights requests will be handled by Canyon44's designated data protection contact. We commit to acknowledging all formal data enquiries within 24 hours and resolving them within 30 calendar days, or such extended period as may be required for complex requests.