Data Protection
Privacy Policy — How mba4d Handles Your Data
mba4d is committed to protecting the privacy and security of every player's personal information. This policy explains clearly what data we collect, why we collect it, and the rights you hold over your own information.
Last updated: January 2026Privacy at a Glance
Our Data Protection Commitments
These highlights summarize our approach to data protection. They do not replace the full policy below, which all players are required to read in full.
All data transmitted between your device and the mba4d platform is protected by bank-grade 256-bit SSL encryption. Your personal and financial information is never transmitted in plain text over any connection.
mba4d does not sell, rent, or trade your personal data to any third party for commercial purposes. Data shared with service partners — such as payment processors or KYC providers — is strictly limited to what is necessary to deliver the service.
We document every category of personal data we collect, the purpose for which it is processed, and the legal basis that justifies its use. Nothing is collected without a stated reason disclosed in this policy.
You have the right to access, correct, delete, or export the personal data mba4d holds about you. You may exercise these rights at any time by contacting our support team, and we will respond within the timeframes specified in this policy.
mba4d uses cookies to operate the platform and, with your consent, to improve your experience and analyze usage. Non-essential cookies can be disabled at any time through your browser settings without affecting your ability to use core platform features.
Identity documents submitted for KYC verification — including KTP (Indonesian National Identity Card) scans and selfies — are stored in encrypted form and accessed only by authorized compliance personnel. They are never shared without a lawful basis.
This Privacy Policy ("Policy") describes how mba4d ("mba4d", "we", "us", "our") collects, uses, stores, shares, and protects the personal information of individuals ("you", "Player", "User") who access or use the mba4d website at https://mba4d.cam and all related services offered thereon.
mba4d is committed to handling personal data responsibly and in accordance with applicable international data protection standards. We serve Players primarily located in Indonesia and have designed our data practices to reflect the trust our players place in us when they share personal and financial information on this platform.
By registering an account on mba4d, completing any transaction, or otherwise using any service on the platform, you confirm that you have read and understood this Policy and consent to the collection and use of your personal information as described herein. If you do not agree with any part of this Policy, you must discontinue use of the platform and contact us to close your account.
This Policy should be read alongside our Terms & Conditions and Resp onsible Gaming Policy, both of which are incorporated by reference into this Policy.
This Policy applies to personal data processed in connection with the mba4d platform only. It does not apply to third-party websites, payment processors, or game studios that operate under their own privacy frameworks, even where links or integrations exist on the platform.
The following terms carry the meanings assigned below wherever they appear in this Policy:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or could reasonably be used to identify a natural person, directly or indirectly — including name, email address, IP address, device identifiers, and payment account details. |
| "Processing" | Any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction. |
| "Data Controller" | mba4d, the entity that determines the purposes and means of processing your Personal Data. |
| "Data Processor" | A third party that processes Personal Data on behalf of mba4d under a binding data processing agreement (e.g., KYC verification providers, payment processors). |
| "Consent" | A freely given, specific, informed, and unambiguous indication of your agreement to the processing of your Personal Data for a stated purpose. |
| "KYC" | Know Your Customer — the identity verification process that includes collection of government-issued identification documents and supporting materials. |
| "Sensitive Data" | A subset of Personal Data warranting heightened protection, including identification document images, financial account details, and any data revealing identity or financial circumstances. |
mba4d collects Personal Data through several channels and in several categories, as described below. We collect only the data that is necessary for the purposes specified in this Policy.
2.1 Registration Data
When you create an account, we collect your legal full name, date of birth, residential address in Indonesia, email address, and chosen account credentials. This information is required to open and maintain your account.
2.2 KYC & Identity Verification Data
To comply with our anti-money-laundering obligations and age verification requirements, we collect copies of your Indonesian National Identity Card (KTP Nasional), proof of residential address (such as a utility bill or bank statement), and selfie photographs taken during the verification process. This data is treated as Sensitive Data and is subject to the highest level of protection we apply.
2.3 Financial & Transaction Data
We collect records of all deposits, withdrawals, wagers, and bonus transactions processed through your account, including the payment channel used (e.g., BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay), transaction amounts in Indonesian Rupiah (IDR), timestamps, and reference numbers. We do not store full bank account or e-wallet login credentials on our servers.
2.4 Technical & Usage Data
When you access the platform, we automatically collect technical data including your IP address, browser type and version, operating system, device type, session timestamps, pages visited, bet history, and interaction logs. This data helps us maintain platform security, detect fraud, and improve the user experience.
2.5 Communications Data
If you contact our support team by email or live chat, we retain records of those communications, including the content of messages, timestamps, and any attachments. This record is maintained for quality assurance, dispute resolution, and training purposes.
2.6 Responsible Gaming Data
Where you voluntarily activate responsible gaming tools — such as deposit limits, session timers, or self-exclusion — we record the settings you apply and the dates on which they were activated or modified. This data is used exclusively to enforce your chosen restrictions and cannot be used for marketing purposes.
mba4d uses your Personal Data only for the purposes for which it was collected and for compatible purposes that are consistent with those original purposes. The primary uses are as follows:
- Account management: Creating, maintaining, and administering your account; verifying your identity and age; processing login and session activity.
- Transaction processing: Processing deposits and withdrawals via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja, and other supported payment channels; maintaining accurate transaction records.
- Platform operation: Delivering sports betting markets, live casino games, and slot content; maintaining real-time odds feeds; resolving bet disputes.
- Regulatory compliance: Fulfilling anti-money-laundering (AML) obligations; conducting KYC verification; responding to lawful requests from regulatory authorities; maintaining records required by our international gaming license.
- Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, unauthorized access, and abuse of the platform or its promotional offers.
- Responsible gaming: Enforcing deposit limits, loss limits, session timers, and self-exclusion settings; monitoring usage patterns for indicators of problem gambling; contacting players when welfare concerns arise.
- Customer support: Responding to enquiries, complaints, and dispute requests; maintaining records of support interactions.
- Platform improvement: Analyzing aggregated usage data to improve platform design, performance, and betting market offerings. This analysis uses anonymized or pseudonymized data wherever possible.
- Communications: Sending transactional notifications (deposit confirmations, withdrawal updates, security alerts) and, where you have given explicit consent, promotional communications about relevant offers and features.
You may withdraw consent to marketing communications at any time by contacting our support team. Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to the withdrawal, nor does it affect our ability to send transactional notifications that are necessary for your account operation.
Each category of Personal Data processing carried out by mba4d rests on one of the following lawful bases:
- Contractual necessity: Processing required to perform the contract between you and mba4d — including account registration, transaction processing, and bet settlement. Without this processing, we cannot provide the platform services.
- Legal obligation: Processing required to comply with applicable law — including KYC/AML identity verification, age verification, regulatory reporting, and data retention mandated by our international gaming license.
- Legitimate interests: Processing carried out to further mba4d's legitimate business interests where those interests are not overridden by your rights — including fraud detection, platform security, internal analytics, and responsible gaming monitoring.
- Consent: Processing based on your freely given, specific consent — including marketing communications and the use of non-essential cookies. Where consent is the basis, you have the right to withdraw it at any time.
mba4d uses cookies and similar tracking technologies (including local storage and session tokens) to operate the platform, maintain your session, remember your preferences, and — where you have consented — to analyze usage patterns and improve the platform experience.
Most browsers allow you to view, manage, and delete cookies through their settings menus. Instructions vary by browser; consult your browser's help documentation for details. Note that deleting essential cookies will require you to log in again and may affect platform functionality.
mba4d does not sell, rent, or trade your Personal Data to any third party. We share data only in the circumstances described below, and only to the extent necessary for the specific purpose stated:
6.1 Payment Processors
To process deposits and withdrawals, we share necessary transaction data with our payment processing partners supporting BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja, and other accepted channels. These processors operate under binding data processing agreements and are permitted to use your data only for payment processing purposes.
6.2 KYC & Identity Verification Providers
Identity documents submitted for KYC verification are processed by certified third-party verification services engaged by mba4d. These providers receive only the specific documents required for verification and are contractually prohibited from retaining or using that data beyond the verification purpose.
6.3 Game Studio Partners
When you participate in games supplied by third-party studios (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Pocket Games Soft, and others), minimal technical session data is shared with those studios to facilitate gameplay and resolve game-round disputes. No identity documents or financial account details are shared with game studios.
6.4 Regulatory & Law Enforcement Authorities
mba4d will disclose Personal Data to regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law, court order, or the terms of our international gaming license. We will, where permitted by law, notify affected players of such disclosures.
6.5 Corporate Transactions
In the event of a merger, acquisition, restructuring, or sale of all or substantially all of mba4d's business assets, Personal Data held by mba4d may be transferred to the acquiring entity. Affected players will be notified in advance, and any successor entity will be bound by the terms of this Policy with respect to data collected prior to the transaction.
mba4d implements a layered security architecture to protect Personal Data against unauthorized access, alteration, disclosure, or destruction. Our technical and organizational security measures include:
- 256-bit SSL/TLS encryption on all data in transit between your device and mba4d's servers.
- Encryption at rest for all Sensitive Data stored in our databases, including KYC documents and financial records.
- Role-based access controls (RBAC) limiting internal access to Personal Data to authorized personnel with a documented business need.
- Two-factor authentication (2FA) enforced on all internal administrative systems that access player data.
- Regular penetration testing and third-party security audits of the platform infrastructure.
- Intrusion detection systems (IDS) and real-time monitoring of platform traffic for anomalous patterns consistent with unauthorized access attempts.
- Data minimization — we collect and retain only the minimum data necessary for each specified purpose.
No online platform can guarantee absolute security. While mba4d takes all reasonable steps to protect your data, you remain responsible for maintaining the security of your account login credentials. If you suspect unauthorized access to your account, contact our support team immediately.
mba4d retains Personal Data for as long as necessary to fulfil the purposes outlined in this Policy, or as required by applicable law and our international gaming license obligations. The following retention periods apply as a general guide:
- Account data and transaction records: Retained for a minimum of 5 years from the date of account closure, in accordance with anti-money-laundering record-keeping requirements.
- KYC documents: Retained for a minimum of 5 years following the completion of the verification process or account closure, whichever is later.
- Responsible gaming records: Retained for the duration of any active self-exclusion period plus 5 years thereafter, to prevent re-registration during exclusion windows.
- Communications records: Support interaction records are retained for 3 years from the date of the communication.
- Technical and usage logs: Server and access logs are retained for 12 months for security and fraud investigation purposes, then deleted or anonymized.
- Marketing consent records: Consent records and opt-out requests are retained indefinitely to demonstrate compliance with consent obligations.
Upon expiry of applicable retention periods, Personal Data is securely deleted or anonymized so that it can no longer be attributed to any individual.
As a Player whose Personal Data is processed by mba4d, you hold the following rights with respect to that data. These rights may be subject to certain limitations where overriding legal obligations apply (for example, data we are legally required to retain cannot be erased on request during the mandatory retention period).
Right of Access
Request a copy of the Personal Data mba4d holds about you and information on how it is processed.
Right of Rectification
Request correction of inaccurate or incomplete Personal Data held in your account profile.
Right of Erasure
Request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected and no legal obligation requires its retention.
Right to Restrict Processing
Request that mba4d restricts the use of your Personal Data in specific circumstances, such as while a rectification request is being assessed.
Right to Data Portability
Request a copy of Personal Data you have provided to mba4d in a structured, machine-readable format, where technically feasible.
Right to Object
Object to processing carried out on the basis of legitimate interests, including profiling for marketing purposes.
To exercise any of the above rights, contact our support team at [email protected] (plain text — not a clickable link). We will acknowledge your request within 72 hours and respond in full within 30 calendar days. Where a request is complex or voluminous, we may extend this period by a further 30 days and will notify you accordingly.
mba4d operates internationally, and some of our service partners — including KYC verification providers, game studios, and payment processors — are located outside Indonesia. When your Personal Data is transferred to, or processed in, a country outside Indonesia, mba4d takes steps to ensure that appropriate safeguards are in place to protect your data to a standard equivalent to that applied within Indonesia.
These safeguards may include contractual clauses in data processing agreements with service partners, requiring those partners to process your data only for specified purposes and to apply security standards consistent with those described in this Policy.
If you have questions about the safeguards applied to any specific international transfer of your data, please contact our support team as described in Section 13.
mba4d's services are strictly for individuals aged 21 years and above. We do not knowingly collect Personal Data from anyone under the age of 21, and we do not permit individuals under 21 to register an account or use the platform in any capacity.
Age verification is a mandatory step in our KYC process, and we apply additional monitoring to identify accounts where usage patterns suggest the holder may be under the minimum age. Where an account is identified as potentially belonging to a minor, it will be suspended immediately pending investigation, and any funds held will be returned to the verified source of deposit.
If you believe a person under 21 has registered an account on mba4d using false age information, please notify us immediately at [email protected] (plain text). We take underage gambling extremely seriously and will act on all reports promptly.
mba4d may revise this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When we make material changes, we will update the "Last updated" date at the top of this page and, where the changes are significant, notify registered Players via the email address associated with their account.
Continued use of the mba4d platform after the revised Policy has been posted constitutes your acceptance of the updated terms. If you disagree with any revision, you must cease using the platform and contact us to close your account in accordance with the account termination provisions in our Terms & Conditions.
We encourage all Players to review this Policy periodically to stay informed about how mba4d protects and uses their personal information.
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by mba4d, please contact us using the details below:
mba4d — Data Protection Enquiries
Email: [email protected]
Hours: 24/7 — available across WIB, WITA, and WIT time zones
The email address above is displayed as plain text and is not a clickable link. Please copy it into your email client to send your enquiry.
For responsible gaming support, self-exclusion requests, or concerns about your account's gambling activity, please visit our Responsible Gaming page. For questions about account rules, wagering, and platform policies, please review our Terms & Conditions or visit our FAQ.
Questions About Your Data or Your Account?
Our FAQ covers the most common questions about how mba4d operates. You can also review our Terms & Conditions or visit our Responsible Gaming page for more information.