Mea4 Privacy Policy – Our Commitment to Protecting Your Data

To provide a safe, fair, and responsible service, mea4 needs to collect certain types of personal information from our users. This collection is carried out transparently and covers only data genuinely necessary for platform operations, legal compliance, and improving the user experience.

Below are the categories of information we collect along with their specific purposes:

In addition to information you provide directly during registration or platform use, we also collect data automatically through technologies such as cookies, server logs, and tracking pixels. All such collection is subject to your consent and can be managed through your account settings.

Mea4 uses collected personal data solely for lawful and stated purposes. We do not use your information for any other purpose without notifying you in advance. The following are the primary purposes for which your data is used:

• Account Management: Creating and maintaining your account, processing registration, verifying identity and facilitating secure login including two-factor authentication (2FA).
• Transaction Processing: Processing deposits via FPX, bank transfer, Touch 'n Go eWallet and GrabPay, as well as withdrawals to your bank account — securely and swiftly.
• Platform Security: Detecting and preventing fraudulent activity, hacking attempts, money laundering and system abuse. Your technical data helps us identify suspicious patterns.
• Responsible Gambling: Monitoring wagering patterns to identify signs of problem gambling and providing appropriate support tools to users who need them.
• Service Communications: Sending important account-related notifications, transaction confirmations, security updates and promotional alerts (with your consent).
• Platform Improvement: Analysing usage data in aggregate and anonymised form to understand usage patterns, improve the interface and enhance the overall mea4 user experience.
• Legal Compliance: Meeting mandatory reporting requirements to regulatory authorities, including Anti-Money Laundering (AML) and Know Your Customer (KYC) obligations.

Every purpose for which data is used is supported by a valid legal basis — whether your explicit consent, contractual necessity, a legal obligation, or mea4's legitimate interest in operating a responsible business.

Mea4 firmly upholds the principle that your personal data will not be sold, rented, or traded to any third party for commercial gain. However, there are limited situations where data sharing is necessary to deliver our services properly:

• Payment Service Providers: To process your deposits and withdrawals, required transaction information is shared with verified payment providers such as local banks and digital wallet operators. All such parties are bound by strict confidentiality agreements.
• Game Providers: Your username and account ID may be shared with game software providers to enable access to games in the mea4 catalogue. This information is minimal and does not include personal financial details.
• Regulatory Authorities: mea4 fully complies with all lawful directives from regulatory authorities, law enforcement agencies, or courts requiring the disclosure of user information in the context of legitimate investigations.
• Identity Verification Service Providers: For KYC purposes, identity documents may be verified through approved third-party services subject to security standards equivalent to those of mea4.
• Analytics Partner: Anonymised and aggregated usage data may be shared with analytics partners for statistical purposes without revealing individual user identities.

Mea4 continuously invests in robust technical security infrastructure to ensure your personal data is always protected against both external and internal threats. The following measures are constantly active in safeguarding your information:

• 256-bit SSL/TLS Encryption: All communications between your device and mea4 servers are encrypted using the latest TLS protocols, rendering your data unreadable even if intercepted.
• Encrypted Data Storage: Sensitive information such as passwords (stored in hashed form) and financial details are encrypted when stored in our database.
• Two-Factor Authentication (2FA): mea4 supports 2FA as an added layer of security during login. We strongly recommend all users enable this feature.
• 24/7 Monitoring: Our automated monitoring system operates around the clock to detect unusual activity, suspicious login attempts, and potential security breaches.
• Internal Access Controls: Access to user data within the mea4 organisation is restricted to staff with a legitimate business need only, with a full audit trail maintained.
• Regular Security Testing: mea4 conducts regular vulnerability assessments and penetration testing by independent security experts to ensure our systems remain up to date.

While we take all reasonable steps to protect your data, no digital system can guarantee 100% absolute security. You also play an important role in keeping your account safe by using a strong password and never sharing your login credentials with anyone.

Mea4 uses cookies and similar tracking technologies to enhance platform functionality, personalise your experience, and maintain session security. The following are the types of cookies we use:

• Essential Cookies (Required): These cookies are required for core platform functions such as login session management, security and navigation. The platform cannot function properly without them and they cannot be disabled.
• Performance & Analytics Cookies: Helping us understand how users interact with the platform — most visited pages, time spent and errors encountered. This data is aggregated and anonymised.
• Functional Cookies: Saving your preferences such as language, display settings and game preferences to provide a more personalised experience on your next visit.
• Security Cookies: Used to detect and prevent fraudulent activity, verify user sessions, and protect accounts from unauthorised access.

You can manage cookie settings through your web browser. Most browsers allow you to view, delete, and block cookies. Please note that disabling certain cookies may affect the functionality of some parts of the mea4 platform. For the best experience, we recommend allowing necessary and functional cookies.

Personal data collected by mea4 is stored on secure, protected servers. Below is information regarding data retention periods and data transfers:

• Active Account Retention Period: Your data is retained for as long as your account is active or as long as necessary to provide services to you.
• After Account Closure: Upon account closure, mea4 will retain your personal data for the period required by law (typically between 5 and 7 years) for compliance, audit, and resolution of any outstanding claims.
• Technical Log Data: Access logs, security logs and other technical data are retained for shorter periods depending on operational and security requirements.
• International Transfers: In some cases, your data may be processed in other countries through our service providers. mea4 ensures that any international data transfers are protected by equivalent safeguards, including standard contractual clauses and data processing agreements.

Once the required retention period has expired, your data will be securely deleted or anonymised so that it can no longer be linked back to your identity.

As a mea4 platform user and data subject under Malaysia's data protection laws, you have the following rights regarding your personal data. mea4 is committed to facilitating the exercise of these rights in a straightforward and transparent manner:

To exercise any of the above rights, contact the mea4 privacy team by email at [email protected] or via 24/7 live chat within our platform. We will process your request within the timeframe required by law, typically no more than 30 days from the date we receive your complete request.

The mea4 platform is strictly for individuals aged 18 and above. We do not knowingly collect, store or process any personal data from underage individuals.

If we discover that personal data of an individual under the age of 18 has been collected without our knowledge, we will take immediate action to delete the information and terminate the account in question. Parents or guardians who suspect their child has registered an account with mea4 are welcome to contact us immediately via [email protected].

Mea4 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or platform improvements. Whenever a material change occurs, we will:

• Updating the "Last Updated" date at the top of this document
• Displaying clear notices on the mea4.app website about changes that take effect
• Sending notifications via your registered email for significant changes that directly affect your rights
• Providing a reasonable period for you to review changes before they take effect

We encourage you to review this Privacy Policy periodically. Continued use of the mea4 platform after any changes take effect constitutes your acceptance of the updated Privacy Policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how mea4 handles your personal data, do not hesitate to contact us. Our privacy team is ready to assist you:

• 24/7 Live Chat: The fastest way to get a response — available in the mea4 app or at mea4.app anytime.
• Privacy Email: [email protected] — for more detailed enquiries, data access requests, or formal privacy complaints.
• Response Time: We aim to respond to all privacy-related enquiries within 72 business hours. Formal data rights requests will be processed within 30 days.