Privacy Policy
Your Data, Our Responsibility

mas4d is an internationally operated online gambling platform accessible at mas4d.lat, offering sports betting, live casino games, slot titles, togel (Indonesia's traditional numbers lottery), and sabung ayam (cockfighting wagering) to players primarily in Indonesia and the broader Asia-Pacific region.

For the purposes of this Privacy Policy, mas4d is the data controller — meaning we determine the purposes and means by which your personal data is processed. Our designated contact for data protection matters is reachable at [email protected].

All transactions on the Platform are denominated in Indonesian Rupiah (IDR) and processed through local payment channels including BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja. The processing of payment data through these channels is subject to both this Policy and the applicable terms of those payment providers.

We collect personal data in the following categories. We do not collect more data than is reasonably necessary to fulfil the purposes set out in Section 4.

We do not intentionally collect special category data (such as racial or ethnic origin, religious beliefs, health data, or biometric data) unless it is incidentally present in a KYC document required for regulatory compliance. Where such data is encountered, it is not processed for any purpose beyond identity verification and is not stored separately from the parent document.

mas4d collects personal data through the following channels:

• Direct Input. Data you provide when you register an account, complete KYC verification, make a deposit or withdrawal request, contact customer support, respond to a survey, or participate in a promotion.
• Automated Technologies. Data collected automatically as you navigate the Platform, including via cookies, server logs, and similar tracking technologies. See Section 8 for full details of our cookie usage.
• Payment Processors. Transaction confirmation data relayed by our payment partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, OVO, DANA, GoPay, ShopeePay, LinkAja) when you initiate a deposit or withdrawal.
• KYC Verification Providers. Identity data returned by our third-party KYC verification partners when they process the documents you submit during account verification.
• Game Content Providers. Aggregated play data and session logs shared by our integrated game studios (including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft) for the purpose of dispute resolution, responsible gaming monitoring, and fraud detection.
• Anti-Fraud and AML Systems. Behavioural and transactional risk signals generated by our automated compliance monitoring tools as part of our anti-money laundering (AML) obligations.

We process your personal data for the following defined purposes. We do not use your data for any purpose that is incompatible with the purpose for which it was originally collected, except where we have your consent or a legitimate legal basis to do so.

• Account Creation and Management. To register and maintain your mas4d account, verify your identity, manage your Wallet balance in IDR, and enable you to access the full range of Services.
• Payment Processing. To process deposits and withdrawals via your chosen local payment method and to maintain accurate financial records of all IDR transactions associated with your account.
• KYC and AML Compliance. To meet our obligations under internationally recognised Know Your Customer (KYC) and anti-money laundering (AML) standards, including verifying your identity before processing withdrawals and monitoring transaction patterns for suspicious activity.
• Responsible Gaming. To monitor your usage patterns and proactively offer responsible gaming tools (deposit limits, session caps, self-exclusion) where your behaviour suggests a potential gambling problem. See our Responsible Gaming page for details.
• Fraud Prevention and Security. To detect, prevent, and investigate fraud, bonus abuse, multi-accounting, cheating, and other prohibited conduct as defined in our Terms & Conditions.
• Customer Support. To respond to your enquiries, resolve disputes, and manage formal complaints via our 24/7 Indonesian-speaking support team.
• Platform Improvement. To analyse usage data in aggregate form in order to improve the Platform's functionality, performance, and user experience for players across Jakarta, Surabaya, Bandung, Medan, Bali, and throughout Indonesia.
• Marketing Communications. To send you promotional offers, seasonal bonuses (including Idul Fitri, Ramadhan, and Chinese New Year / Imlek promotions), and personalised recommendations — but only where you have opted in to receive such communications. You may opt out at any time.
• Legal Obligations. To comply with any legal or regulatory requirement, court order, or demand from a competent authority.

For each category of processing described in Section 4, mas4d relies on one or more of the following legal bases:

• Contractual Necessity. Processing that is necessary to perform the contract between you and mas4d — specifically, the registration, payment processing, account management, and game delivery functions described in our Terms & Conditions.
• Legal Obligation. Processing that is required to comply with applicable legal and regulatory obligations, including KYC identity verification, AML transaction monitoring, and record-keeping requirements mandated by internationally recognised compliance standards.
• Legitimate Interests. Processing for purposes that serve the legitimate interests of the Company — including fraud prevention, platform security, responsible gaming monitoring, dispute resolution, and aggregated analytics — provided that such interests are not overridden by your fundamental rights and freedoms.
• Consent. Processing for purposes that are not strictly necessary to deliver the Services, in particular: marketing communications (email, SMS, and in-platform promotions) and the placement of non-essential cookies. You may withdraw consent for these activities at any time without affecting the lawfulness of processing carried out prior to withdrawal.

mas4d does not sell your personal data to any third party. We share personal data only in the following circumstances, and only to the minimum extent necessary:

• Payment Partners. We share transaction-relevant data (name, bank account or e-wallet identifier, amount in IDR) with our payment processing partners — including BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja — strictly for the purpose of processing your deposit or withdrawal.
• KYC Verification Providers. We share identity documents with our contracted KYC verification service providers for the sole purpose of confirming your identity, age, and residential address. These providers are contractually prohibited from using your data for any other purpose.
• Game Studio Integrations. Aggregate session and wagering data is shared with integrated game content providers (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Pocket Games Soft) for the purpose of game delivery, technical support, and dispute resolution. Individual identity data is not passed to game studios.
• Fraud and AML Screening. In cases where our automated or manual review systems flag a transaction or account for potential fraud or money laundering, relevant data may be shared with specialist third-party compliance screening services and, where legally required, with competent authorities.
• Legal and Regulatory Disclosure. We will disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction when we are legally required to do so, or when disclosure is necessary to protect our legal rights or the safety of our users.
• Corporate Transactions. In the event of a merger, acquisition, or sale of all or substantially all of the Company's assets, personal data held by mas4d may be transferred to the acquiring entity, subject to equivalent data protection obligations being imposed on the recipient.

As an internationally operated platform serving players primarily in Indonesia, mas4d's servers, data processors, and game content providers may be located outside of Indonesia. Personal data processed in connection with your account may therefore be transferred to, stored in, or processed in jurisdictions other than your country of residence.

Where such transfers occur, mas4d ensures that appropriate safeguards are in place to protect your data to a standard that is at least equivalent to the protections that would apply within Indonesia. These safeguards include:

• Contractual data processing agreements incorporating internationally recognised data protection clauses with all third-party processors.
• Transfers only to jurisdictions or processors that meet adequate data protection standards as assessed by the Company's compliance function.
• Encryption of data in transit (SSL/TLS) and at rest for all data subject to international transfer.

If you have questions about the specific international transfer mechanisms applicable to your data, you may contact us at [email protected].

mas4d uses a limited and purposeful set of cookies and similar tracking technologies on the Platform. The following table describes each category of cookie we use:

mas4d does not deploy third-party advertising cookies, social media tracking pixels, or cross-site behavioural tracking technologies. You can manage cookie preferences through your browser settings at any time. Disabling strictly necessary cookies will prevent you from logging in and using the Platform.

mas4d retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or compliance obligations. The following retention periods apply:

• Active Account Data. Retained for the full duration of your account's active status plus a minimum of 5 years following permanent account closure, in line with internationally recognised AML record-keeping standards.
• KYC Documents. Retained for a minimum of 5 years from the date of verification or from the date of account closure, whichever is later, to satisfy AML and compliance obligations.
• Financial Transaction Records. Retained for a minimum of 5 years from the date of each transaction, consistent with standard financial record-keeping requirements.
• Customer Support Communications. Retained for 3 years from the date of the last communication, for the purpose of dispute resolution and quality assurance.
• Marketing Preference Records. Retained for the duration of your account and for 2 years following account closure, to demonstrate compliance with opt-in and opt-out requests.
• Technical and Usage Logs. Retained in anonymised or pseudonymised form for up to 24 months for analytics and security purposes.

Upon expiry of the relevant retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual. The timelines above represent minimum obligations; where a legal dispute or investigation is ongoing, data may be retained until that matter is fully resolved.

As a data subject, you hold the following rights in relation to the personal data that mas4d processes about you. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 5 business days (WIB, UTC+7) and aim to respond in full within 30 calendar days.

During the KYC verification process, mas4d confirms that all account holders meet the minimum age requirement of 21 years by reviewing government-issued identity documents. Any account found to belong to an individual under 21 years of age will be immediately suspended and permanently closed. Any funds deposited by an underage user will be returned to the originating payment method after deducting any bonuses received, and the relevant data will be retained only for the minimum period required to process the closure and comply with applicable legal obligations.

If you are a parent or guardian and you believe that your child has registered an account on mas4d, please contact us immediately at [email protected]. We will investigate and close the account promptly.

mas4d supports the use of parental control software to prevent minors from accessing online gambling sites. We encourage parents and guardians in Indonesia to take proactive steps to restrict access to gambling platforms on shared or family devices.

mas4d implements a multi-layered security framework to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include:

• Encryption in Transit. All data transmitted between your device and mas4d servers is encrypted using industry-standard TLS 1.2 or higher (SSL). This applies to your login session, payment submissions, KYC document uploads, and all other Platform interactions.
• Encryption at Rest. Sensitive data fields — including identity document data, bank account details, and password hashes — are encrypted at rest using AES-256 encryption within our database infrastructure.
• Password Security. User account passwords are stored as salted cryptographic hashes. We never store passwords in plain text, and our team never has access to your password. We strongly recommend using a unique, strong password and enabling any available two-factor authentication.
• Access Controls. Access to personal data within our organisation is restricted on a strict need-to-know basis. Staff with access to sensitive data undergo background checks and regular data protection training. Access logs are audited periodically.
• Infrastructure Security. Our Platform infrastructure is hosted in facilities with physical security controls, network firewalls, intrusion detection systems, and regular vulnerability assessments and penetration testing.
• Incident Response. In the event of a data security breach that is likely to affect your rights and freedoms, mas4d will notify affected users and the relevant authorities within the timeframe required by applicable law and as promptly as operationally possible.

While we maintain robust security standards, no online platform can guarantee absolute security. You are responsible for keeping your account credentials confidential and for notifying us immediately at [email protected] if you suspect unauthorised access to your account.

The mas4d Platform may contain references to third-party services, including the payment providers and game studios named in this Policy. While we take care to work only with reputable partners, mas4d is not responsible for the privacy practices of third-party websites or services that operate independently of the Platform.

When you interact with a third-party payment provider — for example, when you are redirected to your BCA or OVO interface to authorise a transaction — you are subject to that provider's own privacy policy and terms of service. We encourage you to review the privacy notices of any third-party service you use in connection with your mas4d account.

This Privacy Policy applies exclusively to personal data collected and processed by mas4d through the mas4d.lat Platform. It does not extend to any third-party service, even where that service is integrated into or linked from the Platform.

mas4d reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform functionality. When we make material changes to this Policy, we will:

• Update the "Last Updated" date at the top of this page and in the hero section above.
• Display a prominent notice on the Platform for a period of not less than 14 days following the change.
• Where the change materially affects how we use data you have already provided, send a direct notification to the email address registered on your account.

Your continued use of the Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should stop using the Platform and may request account closure by contacting our support team.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way mas4d handles your personal data, please contact us using the details below. Our support team includes Indonesian-speaking agents available 24 hours a day, 7 days a week, including Indonesian public holidays such as Idul Fitri, Idul Adha, Indonesian Independence Day (17 August), Nyepi, and Christmas.

When submitting a data rights request, please include: your registered email address, a description of your request (e.g., access, rectification, erasure), and — for identity verification purposes — a reference to the KYC document type you submitted during registration (document type only; do not attach the document itself to an email). We may need to verify your identity before processing your request to ensure we do not disclose data to an unauthorised party.

For responsible gaming support, self-exclusion requests, and deposit limit adjustments, please visit our dedicated Responsible Gaming page, where you will find guidance, tools, and external support resources available to players across Indonesia.