mba4d Privacy Policy

1. Introduction

1.1  mba4d ("we", "us", "our") operates the online betting and gaming platform accessible at mba4d.pro. In providing that platform to members in Indonesia and internationally, we necessarily collect, process, and store certain personal data. This Privacy Policy sets out our practices in respect of that data in a transparent, complete, and legally compliant manner.

1.2  mba4d takes data protection seriously. We collect only the data we genuinely need to operate the platform safely and effectively, we keep it only for as long as is necessary, we protect it with industry-standard technical and organisational measures, and we do not sell it to third-party marketers. These are not aspirational statements — they are operational commitments reflected in the specific practices described throughout this Policy.

1.3  By creating an account on mba4d.pro, or by continuing to use the platform after the Effective Date of this Policy, you confirm that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. Consent may be withdrawn in certain circumstances as described in Section 11 (Your Rights).

1.4  If you have questions about any aspect of this Policy, please contact us using the details provided in Section 14 before continuing to use the platform.

2. Definitions

The following terms carry the meanings assigned below throughout this Privacy Policy:

Term	Meaning
"Personal Data"	Any information that identifies or could reasonably be used to identify a living individual — including name, mobile number, email address, IP address, device identifier, financial account details, and betting history.
"Processing"	Any operation performed on personal data, including collection, storage, use, disclosure, transfer, erasure, and any other form of handling.
"Member"	Any individual who has registered an account on the mba4d platform.
"Platform"	The mba4d website at mba4d.pro, including all pages, features, and services available to registered members.
"Third Party"	Any entity other than mba4d and the member, including payment processors, game studios, fraud-prevention providers, and regulatory bodies.
"KYC"	Know Your Customer — the identity and age verification procedures that mba4d may require members to complete, including submission of government-issued identity documents.
"Cookies"	Small text files placed on the member's device by the Platform for session management, analytics, and personalisation purposes.

3. Personal Data We Collect

3.1  mba4d collects personal data in three broad categories: data provided directly by the member; data generated automatically through use of the Platform; and data received from third parties in the course of operating the Platform.

3.1 Data Provided Directly by You

When you register an account, make a deposit or withdrawal, contact support, or interact with any mba4d feature, you may provide the following data:

• Registration data: full legal name, date of birth, Indonesian mobile phone number (+62 format), and chosen username.
• KYC verification data: scanned or photographed copy of a government-issued identity document (Indonesian KTP or passport), selfie photograph for liveness verification, and proof of residential address where required.
• Payment data: Indonesian bank account details (account holder name, bank name, account number) for BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OCBC NISP, or Bank Permata; e-wallet account identifiers for OVO, DANA, GoPay, ShopeePay, or LinkAja. mba4d does not store full card numbers or CVV codes.
• Communication data: content of messages sent to mba4d via live chat, email, or any other support channel; feedback and survey responses.
• Preference data: language preferences, promotional opt-in choices, and responsible gaming settings such as deposit limits and session time reminders.

3.2 Data Collected Automatically

When you access the Platform, the following data is collected automatically by mba4d's infrastructure:

• Technical data: IP address, device type and model, operating system and version, browser type and version, screen resolution, and mobile network operator.
• Session data: login timestamps, session duration, pages visited, features accessed, and logout timestamps in WIB (Western Indonesia Time, UTC+7).
• Betting and gaming data: all bets placed, games played, wager amounts in IDR, outcomes, bonus usage, and tournament participation records. This data constitutes a permanent account transaction record.
• Cookie and tracking data: session cookies for authentication, analytics cookies for aggregate traffic analysis, and preference cookies for interface personalisation. Full cookie details are in Section 8.

3.3 Data Received from Third Parties

• Payment verification data: transaction confirmation and status data returned by BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja, and other payment processors following deposit or withdrawal transactions.
• Fraud and risk data: aggregated risk signals from fraud-prevention partners used to assess whether account activity is consistent with genuine recreational betting patterns.
• KYC verification data: identity verification results from third-party KYC processing providers where mba4d uses an automated identity verification service.

4. How We Collect Your Data

4.1  mba4d collects personal data through the following channels and mechanisms:

• Account registration form: data entered at the time of account creation.
• KYC document submission: documents uploaded directly through the secure document submission interface in the account dashboard.
• Deposit and withdrawal requests: payment account details submitted when initiating financial transactions.
• Platform activity: automatically logged data generated as a by-product of normal platform use, including bets placed, games launched, and login events.
• Customer support interactions: live chat transcripts, email correspondence, and any data provided by a member in the course of seeking support.
• Cookies and similar technologies: data collected via the browser-level technologies described in Section 8.
• Third-party integrations: data returned by payment processors, game studios, and fraud-prevention providers in the course of transaction processing and risk assessment.

5. How We Use Your Personal Data

5.1  mba4d processes personal data for the following purposes. For each purpose, the corresponding legal basis is identified in Section 6.

Purpose	Description
Account management	Creating, maintaining, and securing member accounts; authenticating logins; managing account settings and responsible gaming preferences.
Platform services	Processing bets and game sessions; settling outcomes; awarding bonuses and tournament prizes; recording all transactions in the member's account history.
Payment processing	Processing IDR deposits and withdrawals via Indonesian bank transfer and e-wallet channels; verifying that payment accounts match the member's registered identity.
Identity and age verification (KYC)	Confirming that members are at least 21 years of age; verifying that the name on the member's account matches their identity document; complying with anti-money-laundering requirements.
Fraud prevention and security	Detecting, investigating, and preventing fraudulent activity, multi-accounting, bonus abuse, money laundering, and other prohibited conduct as defined in the Terms & Conditions.
Responsible gaming	Monitoring betting patterns for indicators of problem gambling; administering deposit limits, session controls, and self-exclusion as requested by the member or triggered by mba4d's responsible gaming monitoring systems.
Customer support	Responding to member enquiries, complaints, and dispute escalations via live chat, email, and any other support channel.
Legal and regulatory compliance	Maintaining records required by our licensing jurisdiction; responding to lawful requests from regulatory or law-enforcement authorities; enforcing our Terms & Conditions.
Platform analytics	Analysing aggregate, anonymised usage data to improve platform performance, game selection, payment flows, and the overall member experience.
Marketing communications	Sending promotional messages — including bonus offers, tournament invitations, and seasonal promotions relevant to Indonesian cultural events — to members who have opted in to receive them. Members may opt out at any time.

5.2  mba4d will not use your personal data for any purpose not listed above without first obtaining your explicit consent, except where required by law.

6. Legal Basis for Processing

6.1  mba4d processes personal data on the following legal grounds:

• Contract performance: Processing necessary to create your account, execute bets and transactions, and provide the services you have requested by registering with mba4d.
• Legal obligation: Processing required for KYC compliance, anti-money-laundering record-keeping, and responding to lawful requests from regulatory or law-enforcement bodies.
• Legitimate interests: Processing for fraud detection and prevention, platform security, abuse monitoring, and aggregate analytics — where our legitimate interests in operating a secure and compliant platform do not override your rights and freedoms.
• Consent: Processing for marketing communications. Consent may be withdrawn at any time by contacting mba4d support or by updating your communication preferences in the account dashboard.

7. Data Sharing and Disclosure

7.1  mba4d does not sell, rent, or trade your personal data to third parties for marketing purposes under any circumstances. Data is shared with third parties only in the limited circumstances described below.

7.1 Service Providers

mba4d shares member data with carefully selected third-party service providers who process data on our behalf under contractual data-processing agreements. These include:

• Payment processors: BCA, BRI, BNI, Mandiri, and other Indonesian banking partners; OVO, DANA, GoPay, ShopeePay, and LinkAja for e-wallet transactions. Data shared is limited to what is required to process the specific transaction.
• Game studios: Pragmatic Play, Evolution Gaming, PG Soft, Habanero, NetEnt, Microgaming, Spribe, and other licensed studios that host game logic. These providers receive a session token and may receive anonymous gameplay data for game integrity purposes, but they do not receive your full identity or payment data.
• KYC verification providers: Where mba4d uses a third-party automated KYC service, identity document images and selfie photographs are transmitted securely to that provider for verification processing and are not retained by the provider beyond the verification session.
• Fraud prevention providers: Anonymised or pseudonymised risk signals may be shared with fraud-prevention partners to support cross-platform detection of multi-accounting and financial crime.
• Customer support technology: Live chat platform providers who host the mba4d support interface. Chat transcripts are stored within the mba4d support system and are not used by the provider for any independent purpose.

7.2 Legal and Regulatory Disclosure

mba4d may disclose personal data to governmental, regulatory, or law-enforcement authorities where required to do so by applicable law, court order, or regulatory direction. In such cases, mba4d will disclose only the minimum data required to satisfy the legal obligation and will notify the affected member of the disclosure where legally permitted to do so.

7.3 Business Transfers

In the event that mba4d undergoes a merger, acquisition, restructuring, or asset sale, member personal data may form part of the transferred assets. In such an event, members will be notified via the Platform and the acquiring entity will be required to honour this Privacy Policy or provide members with adequate notice of any changes before implementing them.

8. Cookies and Tracking Technologies

8.1  The mba4d Platform uses cookies and similar browser-based technologies. Below is a summary of the cookies in use and their purposes:

Cookie Type	Purpose	Retention
Essential / Session Cookies	Maintain your login session, preserve account security state, and enable core platform functionality. Cannot be disabled without breaking the platform.	Deleted on browser close or after 24 hours of inactivity
Analytics Cookies	Collect aggregate, anonymised data about page visits, feature usage, and session duration to help mba4d improve platform performance. No individual member is identified in analytics reports.	Up to 12 months
Preference Cookies	Store interface preferences such as language setting and lobby view. Improve the member experience by remembering choices between sessions.	Up to 90 days

8.2  Most browsers provide controls to manage, block, or delete cookies. Blocking essential cookies will prevent the Platform from functioning correctly. Analytics and preference cookies can be blocked without affecting core functionality. Refer to your browser's help documentation for instructions on cookie management.

8.3  mba4d does not use cross-site tracking technologies or behavioural advertising networks. We do not participate in any advertising data exchange.

9. Data Security

9.1  mba4d implements the following technical and organisational security measures to protect member personal data:

• 256-bit SSL/TLS encryption applied to all data transmitted between the member's browser or device and the mba4d Platform. All data in transit is encrypted and cannot be read by any third party intercepting the connection.
• Encrypted data at rest: sensitive data fields including payment account numbers and identity document images are encrypted at the database level using AES-256 encryption.
• Password hashing: member passwords are stored exclusively as one-way cryptographic hashes. mba4d staff cannot read or recover a member's password in plain text under any circumstances.
• Access controls: access to production systems and member data is restricted on a strict need-to-know basis. Staff access is logged, reviewed, and subject to revocation on any change in role or employment status.
• OTP authentication: login attempts from unrecognised devices trigger SMS OTP verification to the member's registered Indonesian mobile number before access is granted.
• Penetration testing and security audits: mba4d commissions periodic independent security assessments of its platform infrastructure and data handling processes.

9.2  Despite these measures, no security system is entirely impenetrable. mba4d commits to notifying affected members and taking prompt remedial action in the event of any data breach that poses a material risk to member privacy.

9.3  Members are reminded that platform security is a shared responsibility. You are responsible for maintaining the confidentiality of your own login credentials, using a strong and unique password, and logging out of the Platform on shared devices. See the account security provisions in the Terms & Conditions for full details.

10. Data Retention

10.1  mba4d retains personal data only for as long as is necessary for the purpose for which it was collected, subject to any longer retention period required by law or legitimate interest. The principal retention periods are:

• Active account data (including registration data, KYC documents, and payment account details): retained for the duration of the account and for a minimum of five years after account closure, to satisfy financial record-keeping requirements under applicable anti-money-laundering regulations.
• Transaction records (bet history, deposit and withdrawal records, bonus history): retained for a minimum of five years after each transaction to support dispute resolution and regulatory compliance.
• Customer support records: chat transcripts and email correspondence retained for three years from the date of the interaction.
• KYC documents (identity document images and verification results): retained for a minimum of five years after account closure.
• Session and analytics data: aggregated session logs retained for up to two years; anonymised analytics data may be retained indefinitely as it contains no personal identifiers.
• Self-exclusion records: records of self-exclusion requests are retained permanently to prevent re-registration during an active exclusion period, even if the member's account is otherwise closed.

10.2  On expiry of the applicable retention period, personal data will be securely deleted or anonymised. Where anonymisation is applied, the resulting data no longer constitutes personal data and may be retained indefinitely for statistical and analytical purposes.

11. Your Data Rights

11.1  As a member whose personal data is processed by mba4d, you have the following rights. To exercise any of these rights, contact mba4d using the details in Section 14.

11.2  mba4d will respond to all valid data rights requests within 30 calendar days. In complex cases, this may be extended by a further 30 days with notice to the member. mba4d reserves the right to verify the identity of the requesting member before processing any data rights request.

11.3  If you believe mba4d has processed your personal data in violation of applicable data protection principles and have not received a satisfactory response to a complaint submitted directly to us, you may have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.

12. Minors and Age Restriction

12.1  If you are a parent or guardian and believe that a person under the age of 21 in your care has registered an account on mba4d, please contact us immediately using the details in Section 14. We will investigate and take appropriate action within 2 business days (WIB) of receiving the report.

12.2  mba4d uses date-of-birth verification at registration and KYC age verification to enforce the 21+ requirement. We do not use automated profiling to infer the age of visitors who have not yet registered — age verification is performed at the registration stage and, where required, at the KYC stage.

13. Changes to This Privacy Policy

13.1  mba4d may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable law, or operational changes to the Platform. The Effective Date at the top of the page will be updated with each revision.

13.2  For material changes — changes that significantly affect how we use your personal data or your rights — mba4d will provide notice via the Platform and, where practicable, via SMS to your registered Indonesian mobile number, at least 14 days before the changes take effect.

13.3  Continued use of the Platform after the effective date of any revised Privacy Policy constitutes acceptance of the revised terms. If you do not accept the revised Policy, you may close your account in accordance with the procedure in the Terms & Conditions.

13.4  The current version of this Privacy Policy is always available at mba4d.pro/privacy-policy. Previous versions are available on request.

14. Contact Us

14.1  For any questions, concerns, or requests relating to this Privacy Policy or to the personal data mba4d holds about you, please use the following contact channels:

14.2  mba4d is committed to resolving all data protection queries promptly and transparently. If you submit a data rights request via email or live chat, you will be asked to verify your identity before the request is processed, to ensure we do not disclose or delete data belonging to one member in response to a request from another.