Official Documents Updated January 1, 2026 Malaysia PDPA

Mama4 Privacy Policy – Member Personal Data Protection

Mama4 is committed to protecting the privacy and security of your personal data. This policy clearly outlines the types of information we collect, how it is used, and your rights as the owner of that data.

Effective Date: January 1, 2026 Version: v3.1 Relevant Acts: PDPA 2010 (Malaysia) Amendments will be communicated via email and platform notifications

mama4 Privacy Commitment: We respect every member's right to privacy and operate in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). Your data will not be sold, rented, or shared with third parties for marketing purposes without your explicit consent.

1Introduction

Mama4 ("we", "Platform", or "mama4.pro") cares about the privacy of every individual who uses our platform. This Privacy Policy explains in detail how we handle personal information provided to us when you register, use our services, or interact with the mama4 platform in any way.

This policy applies to all users of the mama4 platform, including website visitors, registered members, and any other parties who interact with our systems. By using the mama4 platform, you agree to the collection and use of information as described in this policy.

We encourage you to read this entire Privacy Policy carefully. If you have any questions or concerns, our support team is available at any time via live chat or email.

2Information We Collect

Mama4 collects various types of information depending on how you interact with the platform. The following are the categories of data we collect:

2.1 Information You Provide Directly

  • Account username and password.
  • An active mobile number for two-factor authentication.
  • Bank account or e-wallet details for deposit and withdrawal purposes.
  • Identity document (MyKad) during the KYC process.
  • Proof of address such as a recent bank statement or utility bill.
  • Any additional information you provide to the support team.

2.2 Information Collected Automatically

  • IP address and location information derived from IP.
  • Device type, operating system, and web browser used.
  • Login history including date, time, and access location.
  • Game session data including bets placed and results.
  • Cookie and related tracking technology data (see Section 5).
  • Records of interactions with the customer support team.
Data Category Example Primary Purposes
Identity Full name, phone number, MyKad KYC & account verification
Financial Bank account number, TNG, DuitNow Deposits & Withdrawals
Technical IP, device, browser Security & fraud detection
Games Betting history and wins Compliance & responsible gaming
Communications Support Chat Records Service enhancements

3How We Use Your Data

Every piece of information we collect is used for a clear and legitimate purpose. mama4 does not use your data for purposes unrelated to the provision of platform services. The primary purposes of data use are as follows:

  • Account Management: Creating, verifying, and managing member accounts, including KYC and identity verification processes.
  • Transaction Processing: Processing deposits, withdrawals, and financial records accurately and securely.
  • Platform Security: Detecting and preventing fraud, money laundering, unauthorised access, and other suspicious activity.
  • Legal Compliance: Meeting the requirements of regulatory bodies, operating licences, and relevant legal obligations.
  • Responsible Gaming: Monitoring gameplay patterns to identify early signs of problem gambling and offer appropriate assistance.
  • Service Improvements: Analysing aggregate usage patterns to enhance the platform experience.
  • Communications: Sending important notifications, account updates, and promotional information to members who have agreed to receive them.
  • Customer Support: Helping to resolve inquiries, complaints, and technical issues more effectively.

Mama4 will never use your data for third-party marketing purposes without your explicit consent. You may withdraw consent to receive marketing communications at any time through your account settings.

4Information Sharing with Third Parties

Mama4 does not sell, rent, or disclose your personal information to third parties for marketing or commercial purposes. However, in the following limited situations, information sharing may occur:

4.1 Trusted Service Providers

We work with third-party service providers who help us operate the platform, including payment processors, KYC service providers, and cloud infrastructure providers. All these providers are bound by strict confidentiality agreements and are only permitted to use your data for specified purposes.

4.2 Legal Requirements

Mama4 may disclose your personal information to authorities when required to do so by law, court order, or a competent regulatory body — including for the purposes of investigating financial crime, money laundering, or terrorism financing.

4.3 Business Transfers

If mama4 undergoes a merger, acquisition, or business asset transfer, member data may be transferred as part of that transaction. We will notify you in advance and ensure the receiving party adheres to equivalent data protection standards.

Privacy Guarantee: In all of the above data sharing situations, mama4 ensures that the minimum protection standards set out under Malaysia's PDPA 2010 are always observed. Your data will never be sold to data brokers or advertising platforms.

5Cookies & Tracking Technologies

Mama4 uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use

  • Essential Cookies: Required for core platform functions such as login authentication and session security. Cannot be disabled.
  • Performance Cookies: Collecting information on how you use the platform to help us improve performance and stability.
  • Functional Cookies: Saving your preferences such as language and display settings to speed up navigation on future visits.
  • Analytics Cookies: Helping us understand aggregate usage patterns for platform improvement purposes.

You can manage or disable non-essential cookies through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality of some parts of the platform.

6Data Security

Protecting your personal data is mama4's highest priority. We continuously invest in the latest security infrastructure to ensure your information is always safeguarded against both external and internal threats.

  • 256-bit SSL Encryption: All data transmitted between your device and mama4 servers is protected with 256-bit SSL encryption — the same security standard used by major banking institutions.
  • Stored Data Encryption: Sensitive information such as passwords is stored in hashed form using the latest encryption algorithms and cannot be decrypted by anyone, including our own staff.
  • Strict Access Control: Access to members' personal data is restricted to staff who require it to carry out their duties, and all access is logged for audit purposes.
  • 24/7 Monitoring: Our threat detection system operates around the clock to identify and respond to any suspicious activity promptly.
  • Regular Security Audits: The mama4 platform undergoes regular third-party security audits to identify and address any vulnerabilities.
  • Two-Factor Authentication (2FA): The 2FA system via SMS OTP protects your account from unauthorised access even if your password has been compromised.

While we take all reasonable precautions, no security system in the world can be guaranteed 100% secure. In the event of a data breach affecting you, mama4 will notify you within 72 hours in accordance with the data breach notification requirements under the PDPA.

7Data Storage & Deletion

Mama4 only retains your personal data for as long as necessary to fulfil the purpose for which it was collected or to comply with applicable legal obligations.

  • Active Account Data: Retained for the duration your account is active and for 7 years after account closure for financial legal compliance purposes.
  • KYC Records: Retained for a minimum of 6 years in accordance with Malaysia's anti-money laundering legal requirements.
  • Transaction Logs: Retained for 7 years for financial audit and regulatory compliance purposes.
  • Game Data: Retained for 2 years for dispute resolution and responsible gaming analysis purposes.
  • Communication Logs: Customer support records are retained for 1 year for quality control purposes.

Once the applicable retention period has expired, your data will be securely deleted or anonymised using methods that ensure it cannot be recovered or linked back to you.

8Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by mama4. We respect and facilitate the exercise of all these rights:

Right of Access

You have the right to request a copy of the personal data we hold about you at any time. Requests will be processed within 21 working days.

Right to Rectification

If your data is inaccurate or outdated, you have the right to request that we correct or update it promptly.

Right to Erasure

You may request the deletion of your data, subject to mandatory legal retention obligations that the platform is required to comply with.

Right to Object

You have the right to object to the processing of your data for specific purposes such as direct marketing at any time.

Right to Data Portability

You may request your data in a machine-readable format for transfer to another service provider.

Right to Restriction of Processing

In certain situations, you may request that we restrict the processing of your data while an issue is being resolved.

How to Exercise Your Rights: To submit any requests related to your personal data rights, please contact our privacy team via email at [email protected] or via the platform's live chat. We will respond within 21 business days from the date the request is received.

9Children's Privacy

The mama4 platform is not intended for individuals under the age of 21. We do not knowingly collect personal information from children or minors below the stipulated age limit.

If we find that personal data has been inadvertently collected from an ineligible individual, we will immediately delete that information and close the relevant account. Parents or guardians who suspect their child has registered on this platform are advised to contact our support team immediately.

10Changes to Privacy Policy

Mama4 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, current legal requirements, or improvements to platform services. All changes will take effect immediately upon publication on this page.

For significant and material amendments, we will notify you via:

  • Pop-up notification upon your next login to the platform.
  • Email to the address registered to your account.
  • Update the "Last Updated" date at the top of this page.

Continued use of the mama4 platform after any changes are published means you accept the updated Privacy Policy. We encourage you to review this page periodically.

11Contact Us Regarding Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, the mama4 privacy team is ready to assist through the following channels:

  • Privacy Email: [email protected] — for all personal data enquiries and requests.
  • Support Email: [email protected] — for general assistance and account issues.
  • Live Chat: Available 24/7 directly within the mama4 platform — average response time under 3 minutes.

Privacy complaints will be handled with the utmost seriousness, and we are committed to providing a satisfactory response within 14 working days. If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.

mama4 Privacy Commitment

Why Your Data Is Safe with mama4

We don't just comply with the law — we go further to ensure your privacy is protected

Banking-Grade Encryption

All data transmitted between your device and mama4 servers is protected with 256-bit SSL encryption — the same technology used by leading banks in Malaysia to safeguard customer transactions.

Secure & Regulated KYC

The mama4 KYC process is managed by a PDPA-certified and compliant system. Your identity documents are stored in a strictly controlled environment and are only accessible by authorised personnel for verification purposes.

Two-Factor Authentication

The 2FA system via SMS OTP ensures only you can access your account, even if your password is compromised. Every login from a new device requires additional verification for layered protection.

Real-Time Threat Monitoring

The mama4 security monitoring system operates 24 hours a day, 7 days a week to detect any unauthorised access attempts, suspicious activity, or anomalies in your account usage patterns.

Full PDPA Compliance

Mama4 operates in full compliance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. We conduct regular internal compliance reviews and third-party audits to ensure the highest standards are consistently maintained.

Full Control in Your Hands

You have full control over your personal data — from accessing and correcting it to having it deleted. Privacy rights requests are processed within 21 working days at no charge.

FAQ

Frequently Asked Questions About the mama4 Privacy Policy

Not at all. mama4 does not sell, rent, or disclose your personal data to any third party for commercial or marketing purposes. Your data is only shared in very limited situations such as legal requirements or with service providers bound by strict confidentiality agreements, and solely for platform operational purposes.

You may submit a data access request by emailing [email protected] or via the platform's live chat, specifying the type of data you wish to access. We will process your request within 21 working days and deliver the data in a readable format. Identity verification may be required before data is shared to ensure the security of your information.

Yes, you have the right to request the deletion of your personal data. However, please note that certain categories of data — such as KYC records and financial transaction logs — must be retained for the minimum period prescribed by Malaysian law (typically 6 to 7 years) even after account closure. Data not subject to legal obligations will be securely deleted within 30 days from the date the request is received.

Accounts inactive for 12 months will be classified as dormant, but your personal data will not be automatically deleted. Data will be retained in accordance with the retention policy stated in Section 7 of this document. If an account is permanently closed after 24 months of inactivity, data not subject to legal retention obligations will be anonymised or deleted within 90 days.

Your bank account and e-wallet information is stored in an environment protected by multi-layered encryption, accessible only for deposit and withdrawal processing purposes. We do not directly store your credit or debit card numbers — all card transactions are processed through an integrated payment gateway that complies with PCI DSS standards. Bank account numbers displayed on the platform are masked for additional protection.
Trusted & Secure Platform

Join mama4 — Where Your Privacy Is Our Priority

Your data is fully protected. Now that you understand how mama4 manages your privacy, join over 500,000 Malaysian members who already trust our platform for a safe and responsible entertainment experience.

By registering, you confirm that you have read and agreed to the Terms and Conditions and Privacy Policy mama4.

Bahasa Melayu