Privacy Policy mae4 — How We Protect the Personal Data of Malaysian Members

This Privacy Policy ("Policy") is published by mae4 and applies to all users of the mae4 platform accessed via the domain mae4.click, including the website, mobile app, and all related services. When we use the word "you" in this document, we are referring to you as a user or member of the mae4 platform.

As an online casino platform serving Malaysians, mae4 processes various types of personal data in the course of its daily operations — from basic registration details to financial transaction records. We understand that this information is sensitive, and we treat it as a trust you place in us every time you use our platform.

This Policy is written to give you complete clarity on our privacy practices — not to obscure things behind lengthy, hard-to-parse sentences. If you have read this Policy and something is still unclear, the mae4 support team is always available to provide further explanation in Bahasa Malaysia.

Mae4 collects your personal data through three main channels: information you provide directly when registering or using the platform, information collected automatically while you use the platform, and information received from approved third parties such as payment providers.

Below are the categories of data we collect and the purposes for which they are collected:

Every piece of data we collect has a clear purpose and will not be used beyond the purposes stated below. Mae4 operates on a "limited purpose" principle — meaning data collected for one purpose will not be used for another unrelated purpose.

• Account Management: Processing registrations, verifying identities, managing logins, and keeping your account secure — including detecting unauthorised access attempts.
• Transaction Processing: Processing deposits via Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, and FPX; handling withdrawals to your registered bank account or eWallet; and maintaining transaction records.
• Service Provision: Gives you access to all games and features on the mae4 platform, including Live Casino, slots, lottery, and table games.
• Customer Support: Responding to enquiries, resolving complaints, and providing technical assistance in Bahasa Malaysia.
• Platform Security: Detecting and preventing fraud, account abuse, money laundering, and other activities that violate mae4's Terms & Conditions.
• Legal Compliance: Meeting Malaysian legal requirements relating to digital financial and gaming platforms, including mandatory record-keeping obligations.
• Platform Improvement: Analysing usage patterns in aggregate (not at an individual level) to improve the interface, identify technical issues, and enhance the overall user experience.
• Marketing Communications: Sending information about promotions, new bonuses, and platform updates — only if you have given consent to receive such communications and have not since withdrawn that consent.

Mae4 does not share members' personal data with third parties for their own business purposes. However, there are certain situations where we may need to share your data with specific parties in order to deliver platform services to you:

• Payment Providers: Required transaction data is shared with approved payment providers such as Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, Maybank2u, and CIMB Clicks solely for the purpose of processing your deposits and withdrawals. These providers are bound by strict confidentiality agreements with mae4.
• Game Providers: Minimum account information is shared with game providers such as Evolution Gaming and Pragmatic Play Live to grant you access to their live casino tables and games within the mae4 platform. No financial information is shared with game providers.
• Government Authorities: Mae4 may be required to disclose certain data if compelled by a valid court order, law enforcement investigation, or applicable Malaysian legal requirement. We will notify you of any such disclosure unless prohibited from doing so by law.
• Technical Service Providers: Server infrastructure providers and cybersecurity service providers that help us operate the mae4 platform may process your data as part of the services they deliver to us. All such providers are subject to data processing agreements that require them to protect your data to our standards.

All third parties with whom we share data are required to: meet data security standards no lower than those of mae4, use the data only for the specified purposes, and not disclose it to any other party without written authorisation from mae4.

Mae4 invests seriously in security infrastructure to ensure our members' personal data is protected from all threats. Our approach to data security is multi-layered and comprehensive:

• Encryption in Transit: All data transmitted between your device and mae4's servers is encrypted using TLS 1.3 protocol with a 256-bit SSL certificate. This means that even if someone were to intercept your data packets, they would be unable to read them.
• Encryption at Rest: Sensitive data, including identity information and payment details, is stored in encrypted format within mae4's databases. No mae4 staff member has access to this information in plain text.
• Strict Access Controls: Access to member data within mae4's internal systems is restricted to staff with a legitimate business need and is subject to regular audits. All internal access is logged and monitored.
• Threat Detection System: Mae4 employs a real-time security monitoring system that detects unusual access patterns, suspicious login attempts, and activity indicative of a potential security breach. Any detected threat triggers an automatic response.
• Regular Security Audits: Mae4's security infrastructure undergoes regular independent audits by third parties specialising in digital financial platform security, to identify and address any vulnerabilities before they can be exploited.
• Two-Factor Authentication (2FA): Mae4 provides a 2FA option for all member accounts as an additional layer of protection. We strongly encourage all members to enable this feature in their account settings.

Malaysia's Personal Data Protection Act 2010 (PDPA) grants you certain rights regarding your personal data held by mae4. We respect and facilitate the exercise of all these rights:

• Right of Access: You have the right to request a copy of the personal data we hold about you. Mae4 will provide this in a readable format within 14 working days of receiving your request.
• Right to Rectification: If any personal data we hold about you is inaccurate or outdated, you have the right to request a correction. Mae4 will update your records within seven working days.
• Right to Withdraw Consent: For data we process based on your consent (such as marketing communications), you have the right to withdraw that consent at any time. Withdrawal will not affect any processing carried out prior to that point.
• Right to Object to Processing: You have the right to object to the processing of your data for specific purposes, including direct marketing. Your objection will be enforced within 48 hours.
• Right to Erasure: Under certain circumstances, you have the right to request the deletion of your personal data — known as the "right to be forgotten." Mae4 will honour such requests subject to our obligation to retain certain records as required under applicable Malaysian law.
• Right to Data Portability: You have the right to receive your personal data in a structured, machine-readable format for transfer to another service provider should you wish to do so.

To exercise any of the rights above, contact the mae4 privacy team at support@mae4.click with the subject line "Data Privacy Rights Request" and specify the right you wish to exercise along with your account number. Mae4 may require identity verification before processing your request to ensure data security.

The mae4 platform uses cookies and similar technologies to enhance your experience and ensure the platform functions correctly. The following outlines the types of cookies we use:

• Essential Cookies: These cookies are required for the mae4 platform to function properly — including login session cookies, language preference cookies, and security cookies. They cannot be disabled without affecting the platform's core functionality.
• Performance Cookies: Used to collect aggregated information on how the platform is used — which pages are visited most frequently, how long sessions typically last, and where technical errors occur. This data helps us improve the platform.
• Functional Cookies: Saving your preferences — such as your chosen betting limits, table display settings, and language selection — so you don't have to reconfigure them each time you log in to mae4.

Mae4 does not use third-party cookies for advertising or cross-site tracking purposes. All cookies we use are strictly for the operation and improvement of our platform. You can manage cookie settings through your browser, but please note that disabling essential cookies may affect the functionality of the mae4 platform.

Mae4 retains your personal data only for as long as necessary to fulfil the purposes stated in this Policy or as required by applicable Malaysian law. The following outlines our data retention periods:

• Active Account Data: Retained for the duration of your active account on the mae4 platform.
• Transaction Record Data: Deposit, withdrawal, and betting records are retained for a minimum of seven years in accordance with Malaysian financial and taxation law.
• Support Communication Data: Live chat session logs and emails with the mae4 support team are retained for two years for service quality and dispute resolution purposes.
• Live Casino Session Recordings: Live casino session recordings are retained for 90 days for dispute resolution purposes. After this period, recordings are automatically deleted unless required for an ongoing investigation.
• Technical Log Data: System access and security logs are retained for 12 months for fraud detection and security incident investigation purposes.

Once the retention period expires, mae4 will securely and irreversibly delete or anonymise the data. All data deletion processes undergo internal review to confirm proper procedure and ensure no residual data remains in backup systems.

The mae4 platform is a service restricted to individuals aged 21 and above. Mae4 does not knowingly collect any personal data from individuals below this age limit. Should we discover that data has been collected from someone under the age of 21, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian who believes a minor in your care has accessed the mae4 platform without authorisation, please contact us immediately at support@mae4.click. Mae4 will work fully with you to resolve the situation promptly, including the removal of any related data.

In the course of its operations, mae4 may process your personal data on servers located outside Malaysia — particularly in connection with cloud infrastructure services and certain international game providers. Where such transfers occur, mae4 ensures adequate protections are in place by:

• Only uses servers and providers in countries with data protection standards equivalent to or exceeding Malaysia's.
• Binding all overseas data recipients with data processing agreements that require compliance with privacy standards consistent with PDPA 2010.
• Ensuring that your rights under PDPA 2010 remain enforceable even when your data is processed outside Malaysia.

Mae4 does not transfer data to countries with weak data protection standards or no structured privacy legal framework. You may request a list of countries where your data may be processed by contacting support@mae4.click.

While mae4 invests heavily in data security, no system can guarantee 100% security in every scenario. In the unlikely event of a data breach that may affect members' personal data, mae4 has a clear incident response procedure in place:

• Mae4 will identify and contain any breach in the shortest possible time once an incident is detected.
• An immediate assessment will be carried out to determine the scope of data potentially affected and the risks involved.
• Members whose data may have been affected will be notified within 72 hours of mae4 becoming aware of the breach, via the email address registered to their account.
• The notice will outline the type of data involved, the likely impact, the steps mae4 has taken and is taking, and the actions you can take to protect yourself.
• Mae4 will report such incidents to the relevant authorities in Malaysia in accordance with applicable legal requirements.

Mae4 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, Malaysian legal requirements, or how our platform operates. All changes will be communicated to members via:

• An email will be sent to the address registered with your mae4 account at least 14 days before any material changes take effect.
• A prominent notice on the mae4 platform homepage and on this Privacy Policy page throughout the notice period.
• Update the "Effective Date" and version number at the top of this document.

Your continued use of the mae4 platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you have the right to close your account and request deletion of your data in accordance with the procedure set out in Section 6 above.

For any questions or concerns regarding this Privacy Policy or mae4's data handling practices, please contact us at support@mae4.click. Our privacy team operates in Bahasa Malaysia and will respond within 24 business hours.