Privacy Policy

1. Introduction & Scope

maha4d ("we", "us", "our") is committed to protecting the privacy and security of all personal data entrusted to us by our players. This Privacy Policy applies to all personal information collected through maha4d.cam (the "Website"), including all associated pages, services, features, and mobile-optimized interfaces.

This policy applies to all users of maha4d services, including registered account holders, visitors who browse the Website without creating an account, and any individual whose personal data is processed in connection with their use of our platform. By accessing and using maha4d, you agree to the data practices described in this policy. If you do not agree, you should discontinue use of the Website immediately.

maha4d serves the Indonesian market, and this policy reflects our obligations under applicable data protection principles recognized in the jurisdictions in which we operate. Our primary user base consists of Indonesian residents, and all data handling practices described herein are oriented toward protecting players based in cities including Jakarta, Surabaya, Bandung, Medan, Bali, Yogyakarta, Semarang, and throughout the Indonesian archipelago.

2. Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, identification number, location data, or any factors specific to the physical, economic, or social identity of that person.
• "Processing" — any operation performed on personal data, whether automated or not, including collection, recording, storage, adaptation, retrieval, use, disclosure, combination, restriction, erasure, or destruction.
• "Data Controller" — maha4d, which determines the purposes and means of processing personal data.
• "Data Subject" — you, the Player, whose personal data is being processed.
• "Third Party" — any natural or legal person, public authority, agency, or body other than the Data Subject and maha4d.
• "Cookies" — small text files placed on your device by a web server to store information about your browsing session and preferences.

3. Data We Collect

3.1 Information You Provide Directly

When you register an account, complete KYC verification, contact customer support, or use any feature of the maha4d platform, you may provide us with the following categories of personal data:

• Identity Information: Full legal name, date of birth, gender, and nationality as shown on your KTP Nasional (Indonesian National Identity Card) or other government-issued ID.
• Contact Information: Email address, Indonesian mobile phone number, and residential address (including city, province, and postal code).
• Financial Information: Bank account numbers (BCA, BRI, BNI, Mandiri, or other supported Indonesian banks), e-wallet account identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), and transaction history including deposits, withdrawals, and betting activity.
• Verification Documents: Copies of your KTP Nasional, selfie verification photos, and any additional documents submitted during the KYC process.
• Communications: Records of your correspondence with our customer support team via live chat or email, including support tickets and chat transcripts.

3.2 Information Collected Automatically

When you access and use the maha4d Website, we automatically collect certain technical information including:

• Device Information: Device type, operating system, browser type and version, screen resolution, and unique device identifiers.
• Usage Data: Pages visited, time spent on each page, features used, games played, bet history, click-through patterns, and navigation paths.
• Network Information: IP address, internet service provider, and approximate geographic location based on IP address geolocation.
• Session Data: Login timestamps, session duration, and logout events.

4. How We Collect Your Data

maha4d collects your personal data through the following channels:

Collection Method	Description	Data Types
Account Registration	When you create an account on maha4d	Name, email, phone, date of birth, password
KYC Verification	When you submit identity documents for account verification	Government ID, address proof, selfie photo
Financial Transactions	When you make deposits or withdrawals	Bank account details, transaction amounts, timestamps
Platform Activity	Automatically as you use the platform	Betting history, game activity, session data
Customer Support	When you contact us via live chat or email	Communication records, issue descriptions
Cookies & Tracking	Via browser cookies and analytics tools	IP address, device info, browsing behavior

5. How We Use Your Data

maha4d uses the personal data we collect for the following specific purposes:

5.1 Account Management and Service Delivery

We use your personal data to create and manage your maha4d Account, verify your identity, process deposits and withdrawals via Indonesian payment channels (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay), provide access to betting and gaming services, and send account-related communications such as transaction confirmations and security alerts.

5.2 Identity Verification and Fraud Prevention

We process your identity documents and financial information to comply with KYC (Know Your Customer) and AML (Anti-Money Laundering) obligations, detect and prevent fraudulent activity, unauthorized account access, and bonus abuse, and verify that you meet the eligibility requirements to use our services (Indonesian residency, minimum age of 21).

5.3 Legal and Regulatory Compliance

We are required by applicable law and our licensing obligations to retain certain records of financial transactions and account activity. We may process and disclose personal data when required to do so by law, court order, or competent regulatory authority.

5.4 Platform Improvement and Analytics

We use aggregated and anonymized usage data to understand how players interact with the maha4d platform, identify areas for improvement, test new features, and optimize the overall user experience. No individual player is identified in this analytical processing.

5.5 Responsible Gaming

We monitor account activity and betting patterns to identify potential signs of problem gambling behavior. This data is used to proactively offer responsible gaming tools, enforce self-exclusion requests, and ensure compliance with our duty of care to vulnerable players. For full details, please review our Responsible Gaming page.

5.6 Marketing Communications

With your consent, we may send you information about promotions, bonuses, new game releases, and seasonal offers relevant to the Indonesian market (such as Idul Fitri promotions or BRI Liga 1 betting enhancements). You may withdraw your marketing consent at any time by contacting customer support.

6. Legal Basis for Processing

maha4d processes your personal data on the following legal grounds:

• Contractual Necessity: Processing your data is necessary to perform our contract with you (i.e., to operate your Account, process transactions, and deliver betting services).
• Legal Obligation: We are required to process certain data to comply with KYC, AML, and record-keeping obligations imposed by applicable licensing and regulatory requirements.
• Legitimate Interests: We process data to protect the integrity of our platform, prevent fraud and bonus abuse, and maintain security — activities that serve the legitimate interests of maha4d and its player community.
• Consent: For optional activities such as marketing communications or optional cookies, we rely on your explicit, freely given consent. You may withdraw this consent at any time.

7. Data Sharing & Disclosure

maha4d does not sell, rent, or trade your personal data to third parties for commercial gain under any circumstances. However, we may share your personal data in the following limited circumstances:

7.1 Payment Processing Partners

To process deposits and withdrawals, we share necessary financial information (such as bank account numbers and transaction amounts) with Indonesian bank partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja). These partners are contractually obligated to process your data solely for payment processing purposes and in compliance with applicable data protection standards.

7.2 Game Providers and Technology Partners

We work with licensed game studios (including Pragmatic Play, Evolution Gaming, Microgaming, Spribe, and Pocket Games Soft) and technology vendors that provide platform infrastructure, security systems, and analytics tools. These partners may access limited data necessary to provide their contracted services. All third-party service providers are bound by strict data processing agreements.

7.3 Legal and Regulatory Disclosure

We may disclose your personal data to law enforcement agencies, regulatory authorities, or courts when required to do so by applicable law, valid legal process, or to protect the rights, property, or safety of maha4d, our players, or the public.

7.4 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of our business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material changes to this Privacy Policy that may result.

8. Cookies & Tracking Technologies

8.1 What Are Cookies

Cookies are small text files placed on your device when you visit the maha4d Website. They allow us to recognize your browser, remember your preferences, and gather information about how you interact with our platform. We also use similar technologies such as web beacons, pixel tags, and local storage objects for comparable purposes.

8.2 Types of Cookies We Use

Cookie Type	Purpose	Duration
Strictly Necessary	Essential for login sessions, security tokens, and core platform functionality. Cannot be disabled.	Session
Functional	Remember your preferences such as language settings, display options, and last-visited game category.	30 days
Analytics	Collect anonymized data on how players navigate the platform to help us identify performance issues and improve the user experience.	90 days
Security	Detect unusual login behavior, prevent cross-site request forgery (CSRF), and flag suspicious activity patterns associated with fraud or bonus abuse.	Session

8.3 Managing Cookies

You can control and manage cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies. Please note that disabling strictly necessary cookies will prevent you from logging in and using core platform features. Disabling functional or analytics cookies will not impair your ability to place bets or process transactions, but may affect the quality of your browsing experience.

9. Data Retention

maha4d retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, comply with our legal obligations, resolve disputes, and enforce our agreements. The following retention schedule applies:

• Account Information: Retained for the duration of your account plus a minimum of 5 years after account closure, in compliance with AML record-keeping obligations.
• Transaction Records: All deposit and withdrawal records are retained for a minimum of 5 years from the date of each transaction.
• KYC Documents: Identity documents are retained for a minimum of 5 years after the closure of your account or the last transaction, whichever is later.
• Customer Support Records: Live chat transcripts and email correspondence are retained for 2 years from the date of each interaction.
• Analytics Data: Anonymized and aggregated usage data may be retained indefinitely as it cannot be used to identify individual players.
• Marketing Consent Records: Records of your marketing consent status are retained for the lifetime of your account and for 2 years following any withdrawal of consent.

When your personal data is no longer required, we securely delete or anonymize it using industry-standard data destruction methods. Where deletion is not immediately practicable due to legal hold requirements, the data is isolated and protected from further processing until deletion becomes possible.

10. Data Security

maha4d employs a comprehensive set of technical and organizational security measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS Encryption: All data in transit between your browser and our servers is encrypted using TLS 1.2 or higher protocols.
• At-Rest Encryption: Sensitive data fields including identification numbers, bank account details, and passwords are encrypted in our databases using AES-256 encryption.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. All staff with data access rights are subject to confidentiality obligations and regular access reviews.
• Two-Factor Authentication: Our internal administrative systems require multi-factor authentication for all personnel accessing player data.
• Regular Security Audits: We conduct periodic penetration testing, vulnerability assessments, and security code reviews of our platform infrastructure.
• Intrusion Detection Systems: Automated monitoring systems operate 24/7 to detect and respond to potential security incidents in real time.

11. Your Rights

As a player whose personal data is processed by maha4d, you have the following rights with respect to your information:

11.1 Right of Access

You have the right to request a copy of all personal data we hold about you. We will provide this information within 30 days of receiving a valid request, free of charge for the first request in any 12-month period.

11.2 Right to Rectification

If any personal data we hold is inaccurate or incomplete, you have the right to request correction. We will update your records within 5 business days of receiving a valid correction request, subject to identity verification.

11.3 Right to Erasure

You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. Please note that we may be required to retain certain data for legal and regulatory compliance purposes even after a deletion request is received. In such cases, we will inform you of the specific retention obligation and delete all other data that is not subject to that obligation.

11.4 Right to Restrict Processing

You may request that we limit the processing of your personal data in certain circumstances — for example, while we investigate a dispute about data accuracy, or while we assess an erasure request.

11.5 Right to Data Portability

Where technically feasible and where processing is based on consent or contract, you may request a copy of your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON).

11.6 Right to Object

You have the right to object to processing of your personal data for direct marketing purposes at any time. You may also object to processing carried out on the basis of legitimate interests, subject to our being able to demonstrate compelling legitimate grounds that override your interests.

11.7 Exercising Your Rights

To exercise any of the rights described above, please contact our customer support team via 24/7 live chat or email at [email protected]. We will verify your identity before actioning any request. All requests are processed within 30 calendar days. If a request is particularly complex or numerous, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

12. Children's Privacy

maha4d's services are strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or retain personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account without prior notice.

If you are a parent or guardian and believe that a minor has created an account on maha4d, please contact us immediately at [email protected] so we can investigate and take appropriate action.

13. International Data Transfers

maha4d operates primarily in the Indonesian market and processes most player data within data center infrastructure located in Southeast Asia. However, certain third-party service providers (including game studios such as Evolution Gaming and Pragmatic Play, and technology infrastructure vendors) may process data in other regions including Europe or other parts of Asia.

Where personal data is transferred outside Indonesia to countries that may not offer an equivalent level of data protection, we ensure that appropriate safeguards are in place, including contractual obligations (such as data processing agreements incorporating standard contractual clauses) that require the recipient to protect your data to at least the same standard as described in this Privacy Policy.

14. Third-Party Links and Services

The maha4d Website may contain references to third-party services such as game providers or payment processors. This Privacy Policy applies solely to data processed by maha4d and does not cover the data practices of any third party. We encourage you to review the privacy policies of any third-party service you interact with in connection with your use of maha4d. We are not responsible for the privacy practices or content of third-party platforms.

15. Policy Updates

maha4d reserves the right to update or modify this Privacy Policy at any time. When we make material changes, we will update the "Last Updated" date displayed at the top of this document. For significant changes that materially affect how we process your personal data, we will notify active account holders via email or through a prominent notice on the Website at least 14 days before the changes take effect.

Your continued use of maha4d services after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this policy periodically to stay informed about how we protect your information.

16. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way maha4d handles your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 via the maha4d Website — our Indonesian and English-speaking support agents typically respond within 2 minutes.
• Email: [email protected] — responses to privacy-related inquiries are provided within 5 business days.