Privacy Policy

1.Introduction

This Privacy Policy ("Policy") describes how mama4 ("we", "us", "the Platform") collects, uses, discloses, stores and protects the personal data of users ("you", "the Player") who access the mama4 website at mama4.cam and all associated services.

mama4 is an English-language information and entertainment platform directed at Malaysian adults aged 21 and above. We are committed to handling personal data responsibly and transparently. This Policy explains what data we collect, why we collect it, how it is processed, and the rights you have in relation to your information.

This Policy should be read alongside the mama4 Terms and Conditions and Responsible Gambling Policy. By registering an Account or using the Platform, you confirm that you have read and understood this Policy.

2.Definitions

• "Account" means the registered user profile created by a Player on the mama4 platform.
• "Personal Data" means any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial information and online identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure or destruction.
• "Data Controller" means mama4, the entity that determines the purposes and means by which Personal Data is processed.
• "Third-Party Processor" means any external organisation engaged by mama4 to process Personal Data on our behalf, such as payment providers or KYC verification partners.
• "Cookies" means small text files placed on your device by the Platform to enable certain functions and collect analytical data.
• "KYC" (Know Your Customer) means the identity verification process required to comply with anti-money-laundering obligations and to confirm player eligibility.

3.Data We Collect

3.1 Registration Data

When you create an Account on mama4 we collect the information you provide during registration, which typically includes your full name, date of birth, residential address (including Malaysian city and postcode), email address, mobile phone number, and preferred currency (MYR).

3.2 Identity Verification Data

To comply with KYC requirements we may collect copies of your Malaysian identity document (MyKad or passport), proof of address (such as a utility bill or bank statement issued within the last three months), and, where required, additional documentation confirming the source of funds.

3.3 Financial and Transaction Data

We record details of every deposit and withdrawal you make, including the payment method used (e.g. Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, BTC, ETH or USDT), transaction amounts in MYR or the applicable cryptocurrency equivalent, transaction timestamps, and reference numbers.

3.4 Technical and Device Data

We automatically collect certain technical information when you access the Platform, including your IP address, browser type and version, operating system, device identifiers, screen resolution, referring URL and session duration. This information is used for security monitoring, fraud detection and platform performance analysis.

3.5 Behavioural and Usage Data

We collect records of your Platform activity, including pages visited, games played, wagers placed, bonus claims made, promotional offers viewed and customer support interactions. This helps us improve the Platform experience and deliver relevant communications.

3.6 Communications Data

If you contact the mama4 support team by email or live chat, we retain records of the content and timing of those communications. This allows us to handle queries efficiently and maintain an accurate history of any issues raised.

4.Data Processing

mama4 processes your Personal Data for the following purposes:

• Account management: creating, maintaining and securing your Account, verifying your identity and processing login requests.
• Transaction fulfilment: processing deposits and withdrawals through your selected payment method, including reconciliation and chargeback management.
• Fraud prevention and security: detecting suspicious activity, preventing unauthorised Account access, investigating potential breaches and complying with anti-money-laundering obligations.
• Regulatory compliance: meeting KYC obligations, responding to lawful requests from regulatory authorities and maintaining records required under applicable law.
• Responsible gambling: monitoring betting patterns to identify signs of problem gambling, enforcing deposit limits, processing self-exclusion requests and triggering player-protection interventions where necessary.
• Platform improvement: analysing usage patterns, diagnosing technical issues, developing new features and optimising performance for Malaysian users.
• Communications: responding to support requests, sending account-related notifications and, where you have opted in, delivering promotional communications.

mama4 does not use personal data for automated decision-making that produces significant legal effects on Players without human review, except where such processing is required by law or where you have given explicit consent.

5.Legal Basis for Processing

mama4 relies on the following legal bases for processing Personal Data:

• Contractual necessity: processing required to perform the services you have agreed to receive under the mama4 Terms and Conditions, including operating your Account and processing transactions.
• Legal obligation: processing required to comply with applicable law, including anti-money-laundering legislation, KYC requirements and regulatory reporting obligations.
• Legitimate interests: processing carried out to pursue mama4's legitimate business interests, such as fraud prevention, security monitoring and platform performance analysis, where such interests are not overridden by your rights and interests.
• Consent: where you have given clear, specific consent, such as opting in to marketing communications. You may withdraw consent at any time by contacting support at [email protected]. Withdrawal of consent does not affect processing carried out before that withdrawal.

6.Data Sharing

6.1 Third-Party Processors

mama4 engages Third-Party Processors to deliver certain services on our behalf. These include payment gateway providers (including those supporting Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX and bank transfers), identity verification and KYC service providers, fraud detection platforms, cloud hosting providers, and customer support tools. All such processors are bound by contractual data protection obligations and are permitted to use Personal Data only for the specified purpose.

6.2 Regulatory and Law Enforcement Authorities

mama4 may disclose Personal Data to government agencies, regulators or law enforcement bodies where required by law, where we receive a legally valid request, or where disclosure is necessary to protect the rights, property or safety of mama4, its users or the public.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring or sale of assets, Personal Data held by mama4 may be transferred to the acquiring entity as part of that transaction. Players will be notified of any material change to data controller details.

6.4 No Sale of Personal Data

mama4 does not sell, rent or otherwise transfer your Personal Data to third parties for their own independent marketing or commercial purposes.

7.Cookies & Tracking Technologies

7.1 What Cookies We Use

mama4 uses the following types of cookies on the Platform:

• Essential cookies: required for the Platform to function, including session management, login persistence and security tokens. These cannot be disabled.
• Analytical cookies: used to collect anonymised data on how Players navigate the Platform, which pages are most visited and where errors occur. This helps us improve the user experience.
• Functional cookies: used to remember your preferences, such as your preferred language, display settings and previously selected payment method.
• Marketing cookies: used only where you have opted in, to deliver relevant promotional content based on your Platform activity. You may opt out at any time.

7.2 Managing Cookies

You may configure your browser to block or delete cookies. Please note that disabling essential cookies will impair Platform functionality and may prevent you from logging in or completing transactions. Most browsers provide cookie management options within their settings menu.

8.Data Retention

mama4 retains Personal Data for as long as your Account remains active and for such further period as required by applicable law. Financial transaction records and KYC documentation are typically retained for a minimum of five years from the date of the last transaction, in compliance with anti-money-laundering regulations. Communications data is retained for a period sufficient to support dispute resolution and regulatory review.

Where data is no longer required and no legal obligation requires its retention, mama4 will securely delete or anonymise it. Upon Account closure at your request, non-mandatory data will be removed or anonymised within a reasonable period, subject to any ongoing investigations or outstanding legal obligations.

9.Data Security

mama4 implements technical and organisational measures designed to protect your Personal Data against unauthorised access, accidental loss, alteration or disclosure. These measures include transport-layer encryption (TLS) for data in transit, encryption of sensitive data at rest, role-based access controls limiting staff access to data on a need-to-know basis, regular security assessments, and incident response procedures.

Despite these measures, no transmission over the internet or electronic storage method is entirely secure. You also play a role in protecting your Account — use a strong, unique password, do not share your login credentials, and contact support immediately at [email protected] if you suspect unauthorised access.

10.User Rights

Subject to applicable law and certain exceptions, you have the following rights in relation to your Personal Data held by mama4:

• Right of access: you may request a copy of the Personal Data we hold about you.
• Right to rectification: you may request correction of inaccurate or incomplete Personal Data.
• Right to erasure: you may request deletion of Personal Data where there is no longer a lawful basis for its retention, subject to our legal obligations.
• Right to restriction: you may request that we restrict the processing of your data in certain circumstances, for example while a rectification request is under review.
• Right to data portability: where processing is based on your consent or a contract, you may request that we provide your data in a commonly used, machine-readable format.
• Right to withdraw consent: where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Right to object: you may object to processing based on legitimate interests where your particular circumstances justify doing so.

To exercise any of these rights, contact the mama4 support team at [email protected]. We will respond within a reasonable timeframe. We may need to verify your identity before processing your request. Some rights may be limited where we have overriding legal obligations or legitimate interests.

11.Minors

The mama4 platform is strictly intended for adults aged 21 and above. We do not knowingly collect Personal Data from individuals under the age of 21. If we become aware that a person under 21 has registered an Account or submitted personal information, we will suspend the Account, delete the associated data and, where appropriate, report the matter to the relevant authorities.

Parents and guardians who believe their child may have accessed the Platform should contact us immediately at [email protected] so that appropriate action can be taken promptly.

12.Third-Party Services

The mama4 platform may contain references to or integrations with third-party payment services such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow and FPX. When you initiate a transaction through one of these services, you are interacting directly with that third-party provider and their own privacy policy applies to any data you share with them. mama4 is not responsible for the data practices of third-party payment providers or financial institutions including Maybank, CIMB, Public Bank and Hong Leong Bank.

Similarly, any links to third-party sites — where present — are governed by those sites' own privacy policies. mama4 does not control or endorse the content or privacy practices of any external websites.

13.Amendments to this Policy

mama4 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations or platform functionality. Where a material change is made, we will endeavour to notify registered Players via their registered email address or via a prominent notice on the Platform. The date of the most recent revision is displayed at the top of this page.

Your continued use of the Platform following the effective date of any amendment constitutes acceptance of the updated Policy. If you do not agree with the revised terms, you should close your Account and cease using the Platform.

14.Contact Us

If you have any questions about this Privacy Policy, wish to exercise a data right, or have concerns about how your Personal Data is being handled, please contact the mama4 Data Support team:

Email: [email protected]

Support is provided in English. We will acknowledge your request promptly and aim to provide a substantive response within a reasonable period. Where your request is complex or relates to a large volume of data, this period may be extended and you will be informed accordingly.

mama4 takes data privacy seriously. If you are not satisfied with our response, you retain the right to raise a concern with the applicable data protection authority in your jurisdiction.