Privacy Policy

This Privacy Policy ("Policy") issued by mas4d, the operator of the online casino and sports betting platform accessible at mas4d.click ("the Platform", "we", "us", "our"). This Policy describes how mas4d collects, uses, stores, shares, and protects personal information in connection with the operation of its services.

This Policy applies to all registered users ("you", "your", "User") of the Platform, including visitors who access the Platform without registering an account. By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, both of which are incorporated by reference.

For the purposes of this Privacy Policy, the following terms shall have the meanings ascribed to them below:

• "Personal Data" means any information that relates to an identified or identifiable natural person, including but not limited to: name, email address, phone number, residential address, date of birth, payment details, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, erasure, or destruction.
• "Data Controller" means mas4d, as the entity that determines the purposes and means of processing Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of mas4d under a written data processing agreement.
• "Cookies" means small text files placed on your device by the Platform to store session and preference information.
• "KYC" means Know Your Customer — the identity and age verification process required by mas4d to comply with anti-money laundering and responsible gambling obligations.
• "MYR" means Malaysian Ringgit, the primary transaction currency on the Platform.

mas4d collects the following categories of personal data in the course of operating the Platform:

We do not collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data unless specifically required and separately disclosed.

mas4d collects personal data through the following channels:

• Direct collection: When you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or update your account settings.
• Automated collection: When you browse or interact with the Platform, our servers and analytics tools automatically collect technical and usage data such as IP address, device type, session duration, and pages visited.
• Third-party payment processors: When you complete a payment transaction via Touch 'n Go eWallet, DuitNow, FPX, Boost, Maybank, CIMB, Public Bank, Hong Leong Bank, or GrabPay, transaction reference data is shared with us by the relevant payment processor to confirm and reconcile the transaction.
• Identity verification providers: When you submit KYC documents, our third-party verification partner processes the documents and returns a verification result. We store the outcome, not the full document images, in most cases.
• Cookies and tracking technologies: The Platform uses cookies and similar technologies to maintain session state, remember preferences, and gather aggregate analytics. See Section 10 for full details.

5.1 Account Management

Personal data collected during registration and ongoing account use is processed to create, maintain, and administer your Account on the Platform. This includes authentication, account settings, communication preferences, and responsible gambling controls such as deposit limits, loss limits, and self-exclusion settings.

5.2 Transaction Processing

Financial data and payment method references are processed solely for the purpose of executing MYR deposits and withdrawals. mas4d does not store full card numbers or complete bank account credentials. Transaction data is also processed for anti-money laundering (AML) monitoring in compliance with international financial crime prevention standards.

5.3 Responsible Gambling Monitoring

Usage data — including bet history, session frequency, and deposit patterns — is processed as part of our responsible gambling programme. This allows us to identify potentially at-risk behaviour and proactively offer support tools such as deposit limits or cooling-off periods where appropriate. This processing is a core part of our commitment to player wellbeing.

5.4 Marketing Communications

Where you have provided explicit consent, we may use your email address or phone number to send you promotional offers, bonus alerts, and platform updates. You may withdraw this consent at any time by updating your communication preferences in your account settings or by contacting our support team.

5.5 Legal and Regulatory Compliance

Certain personal data is processed because we are required to do so under applicable laws and regulations — including anti-money laundering laws, age verification obligations, and directions from our licensing authority. This processing is mandatory and cannot be opted out of without affecting your ability to use the Platform.

mas4d processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and mas4d — including account creation, transaction processing, and customer support.
• Legal obligation: Processing required to comply with applicable laws, including AML regulations, age verification requirements, and directions from our licensing authority.
• Legitimate interests: Processing carried out in the legitimate interests of mas4d, including fraud prevention, platform security, and responsible gambling monitoring, where those interests are not overridden by your rights and interests.
• Consent: Processing based on your explicit consent, such as receipt of marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

mas4d does not sell, rent, or trade your personal data to any third party. We share personal data only in the following limited and controlled circumstances:

• Payment processors: Transaction data is shared with relevant Malaysian payment providers (including Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, and others) solely to process your MYR deposits and withdrawals.
• KYC and identity verification providers: Identity data submitted during KYC is processed by our third-party verification partner operating under a data processing agreement with mas4d.
• Game software providers: Your username and game session data may be visible to the software provider whose game you are playing in order to resolve disputes or technical issues. These providers do not receive your full identity or financial data.
• Regulatory and legal authorities: We may be required to disclose personal data to our licensing authority, law enforcement agencies, or financial intelligence units where required by applicable law or a valid legal order.
• Internal service providers: Trusted internal teams and contracted data processors (e.g., cloud hosting providers, customer support platforms) who assist in operating the Platform under binding data processing agreements.

mas4d retains personal data only for as long as it is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. In general:

• Account data is retained for the duration of your active Account plus a minimum of 5 years following account closure, to comply with AML record-keeping requirements.
• Transaction records are retained for a minimum of 5 years from the date of the transaction.
• KYC documents and verification results are retained for the period required by our licensing authority's AML policies.
• Support communications are retained for up to 2 years to allow for dispute resolution and quality monitoring.
• Marketing consent records are retained for the duration of the consent period plus 2 years.

Where personal data is no longer required for any lawful purpose, it is securely deleted or anonymised in accordance with our internal data destruction procedures.

mas4d implements a range of technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• Hashed storage of passwords using industry-standard algorithms — we never store passwords in plain text.
• Two-factor authentication (2FA) available for all user accounts.
• Role-based access controls limiting internal staff access to personal data on need-to-know basis.
• Regular security audits and penetration testing of the Platform's infrastructure.
• Segregated data environments ensuring player data is isolated from operational systems.

Despite these measures, no system is entirely immune to security risks. In the event of a data breach that is likely to result in a risk to your rights or freedoms, we will notify you and the relevant supervisory authority in accordance with applicable legal requirements.

10.1 Types of Cookies Used

mas4d uses the following categories of cookies on the Platform:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies and security tokens. They cannot be disabled.
• Functional cookies: Used to remember your preferences, such as language settings and display preferences, to improve your experience.
• Analytics cookies: Used to collect aggregated, anonymised data about how users interact with the Platform. This information is used to improve Platform performance and usability.
• Responsible gambling cookies: Used to maintain session time tracking and self-imposed limit settings across browsing sessions.

10.2 Managing Cookies

You may manage non-essential cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Platform. Please note that strictly necessary cookies cannot be disabled, as they are required for the Platform to operate securely.

As a user of the mas4d Platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team via live chat or at [email protected]. We will respond to all valid requests within 30 days.

mas4d is strictly intended for persons aged21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21 — whether through a falsified registration or any other means — we will immediately suspend the relevant account and permanently delete all associated personal data.

Age verification is enforced through our KYC process. If you believe a person under 21 has registered an account on mas4d, please notify us immediately at [email protected].

As an internationally operated platform, mas4d may transfer personal data to servers or service providers located outside of Malaysia. Such transfers are carried out in accordance with applicable data protection standards, and we ensure that appropriate safeguards are in place — including data processing agreements with contractual clauses that require overseas recipients to protect your data to a standard equivalent to that required in Malaysia.

Where personal data is transferred to third-party game software providers or payment processors located outside Malaysia, such transfers are governed by the data processing terms between mas4d and those providers, which include obligations of confidentiality and security equivalent to those described in this Policy.

mas4d reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, a change in the types of data collected or a new category of third-party sharing — we will notify registered users via email and/or a prominent in-Platform notification at least 7 days before the updated Policy takes effect.

The "Last Updated" date displayed at the top of this page reflects when the most recent version was published. Your continued use of the Platform after any updates have taken effect constitutes your acknowledgement of the revised Policy. We recommend reviewing this page periodically.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact our support team through any of the following channels. We are available24 hours a day, 7 days a week.