Updated: 1 January 2026  ·  Version 2.4

MAS4D Privacy Policy – How We Protect Your Personal Data in Malaysia

Your privacy is more than a legal obligation to MAS4D — it is a genuine commitment. This document explains clearly and transparently how we collect, store, use and protect your personal information when you use the MAS4D casino, lottery and Sports Betting platform.

Malaysia PDPA 2010 Compliant
🛡️
SSL 256
Bank-Grade Encryption
No sale of data to third parties
Malaysia PDPA 2010 Compliant
Data encrypted in transit & at rest
Periodic third-party security audits

MAS4D's Privacy Commitment to Players

Six data protection principles we uphold every day, without exception

256-bit SSL Encryption

All data transmitted between your device and MAS4D servers is encrypted to 256-bit SSL standards — the same standard used by Malaysia's leading banks, including Maybank and CIMB.

No Selling of Personal Data

MAS4D does not sell, rent or disclose your personal data to any third party for marketing purposes. Your data belongs to you — we are merely its custodian.

Complete Data Control

You have the right to access, amend, transfer, or request deletion of your personal data at any time by contacting the MAS4D privacy team.

Malaysia PDPA 2010 Compliant

The MAS4D Privacy Policy is fully compliant with Malaysia's Personal Data Protection Act 2010 (PDPA) — the data protection legislation governing the use of personal information in Malaysia.

Secure Data Storage

Your data is stored on secure servers with strict access controls. Only authorised MAS4D staff may access user data, and every access is recorded in an audit log.

Data Breach Notification

In the event of a data breach affecting your information, MAS4D is committed to notifying you within 72 hours and taking immediate remedial action.

1Introduction and Scope of This Privacy Policy

Welcome to the MAS4D Privacy Policy page. This document transparently explains how MAS4D ("we", "platform") collects, processes, stores and protects your personal data ("you", "user", "player") when you use our online casino platform, 4D lottery, live baccarat, blackjack, Sports Betting and all other MAS4D-related services.

This MAS4D Privacy Policy has been drafted in full compliance with Personal Data Protection Act 2010 (PDPA) Malaysia — the primary legislation governing how organisations in Malaysia collect and use individuals' personal data. We take this responsibility seriously.

By registering an account or using any MAS4D service, you confirm that you have read, understood and accepted the terms of this Privacy Policy. If you do not agree, please discontinue use of the platform immediately and contact us to close your account.

Note: This Privacy Policy is presented in Bahasa Melayu. It takes effect from the date 1 January 2026. Please check this page from time to time for the latest updates.

2Types of Personal Data We Collect

2.1 Data You Provide Directly

When you register or use the MAS4D platform, you provide us with certain personal information required to operate your account and services:

Data CategoryExample InformationPrimary Purpose
IdentityFull name, MyKad number, date of birthIdentity verification (KYC), age restriction
ContactMalaysian phone number, email addressCommunications, OTP, notifications
Log InUsername, password (encrypted)Account security
FinanceBank account, e-wallet name (TnG/GrabPay)Deposit & withdrawal processing
VerificationMyKad copy, bank statementKYC & fraud prevention

2.2 Automatically Collected Data

When you use the MAS4D platform, our systems automatically record certain technical information to ensure security and the best possible experience:

  • Your device's IP address at the time of login and transactions
  • Web browser type, operating system, and device model
  • Gaming activity history — game type, session duration, total wager amount
  • Deposit and withdrawal records, including payment methods (DuitNow, Touch 'n Go, GrabPay, Boost, ShopeePay, FPX)
  • Session logs — login time, logout time, session duration
  • Approximate location based on IP address (country/state only, not precise location)

2.3 Cookie Data and Tracking Technologies

The MAS4D platform uses cookies and similar technologies to enhance your experience. Please refer to Section 6 for more information on managing cookies.

3How MAS4D Uses Your Data

MAS4D uses your personal data only for legitimate, stated purposes. We will not use your data for any other purpose without obtaining your consent beforehand:

  • Account Management: Creating, verifying, and maintaining your player account on MAS4D
  • Payment Processing: Processing deposits via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, or FPX, and managing withdrawals to your registered Malaysian bank account
  • Service Delivery: Enabling you to play slots, live baccarat, blackjack, 4D lottery, Keno, and place bets on the Malaysia Super League or EPL
  • Identity Verification (KYC): To comply with legal requirements relating to anti-money laundering and age verification (18+)
  • Security & Fraud Prevention: Detecting and preventing unauthorised access, fraud, and platform abuse
  • Customer Support: Responding to enquiries, resolving complaints and providing technical support
  • Service Communications: Sending important notifications such as deposit confirmations, lottery results and security alerts
  • Responsible Gaming: Monitoring gameplay patterns to identify players who may need assistance and providing appropriate limit-setting tools
  • Platform Improvements: Analysing usage data at an aggregate level (non-personally identifiable) to improve MAS4D's performance and user experience
Our Promise: MAS4D will not use your data for third-party marketing, will not build sellable advertising profiles, and will not use your gaming data for any purpose outside of MAS4D services.

4Data Sharing with Third Parties

MAS4D does not sell, rent, or disclose your personal data to third parties for marketing purposes. This is our absolute commitment. However, there are limited situations where we may need to share your data with specific parties in order to operate our services:

4.1 Payment Service Providers

To process deposits and withdrawals, MAS4D shares the necessary information with approved Malaysian payment service providers — including DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay and FPX banks (Maybank2u, CIMB Clicks). All providers are bound by strict confidentiality agreements.

4.2 Partner Game Providers

To offer a comprehensive game catalogue, MAS4D partners with third-party game providers. Minimum technical data required to run games (such as session IDs) may be processed by these providers; however, your personally identifiable information is not shared without a legitimate basis.

4.3 Legal Authorities

MAS4D may be required by law to disclose user data to Malaysian government authorities or law enforcement bodies under the following circumstances:

  • Valid court order
  • Criminal investigations including money laundering or fraud
  • Anti-Money Laundering Act (AMLA) compliance requirements
  • Official instructions from authorities with applicable jurisdiction

In such situations, MAS4D will disclose only the minimum data necessary and will notify users where permitted to do so by law.

5MAS4D Data Security Measures

We implement multiple layers of technical and organisational security controls to protect your personal data against unauthorised access, loss, alteration or disclosure:

5.1 Technical Security

  • 256-bit SSL/TLS Encryption for all data in transit between your device and MAS4D servers
  • Encryption of data at rest — sensitive data such as passwords is stored in an irreversible hashed format
  • Multi-layered firewall and intrusion detection/prevention systems (IDS/IPS) operating 24/7
  • Two-Factor Authentication (2FA) available to all MAS4D accounts
  • Penetration testing conducted periodically by independent cybersecurity firms

5.2 Internal Access Controls

  • "Least privilege" principle — staff may only access data necessary for their role
  • All access to user data is recorded in tamper-proof audit logs
  • MAS4D staff undergo background checks before being granted access to internal systems

5.3 Incident Response

MAS4D has a comprehensive cybersecurity incident response plan. In the event of a data breach, we are committed to:

  • Identify and contain incidents within 24 hours
  • Notify affected users within 72 hours
  • Reporting to the relevant authorities as required under PDPA
  • Taking corrective and preventive action to avoid recurrence

6Use of Cookies & Tracking Technologies

6.1 What Are Cookies?

Cookies are small text files stored on your device by your web browser when you visit the MAS4D platform. They help us recognise your device and remember certain preferences to enhance your experience.

6.2 Types of Cookies We Use

Cookie TypePurposeRetention Period
Session Cookies (Required)Maintaining login status and account securityExpires when the browser is closed
Preference CookiesSaves your language preference and display settings30 days
Analytics CookiesUnderstanding how users interact with the platform (aggregated data)90 days
Security CookiesDetecting suspicious activity and preventing fraudSession

6.3 Cookie Management

You can manage cookie settings through your web browser. Please note that blocking mandatory (session) cookies may affect the functionality of the MAS4D platform, including your ability to log in and play. Analytics and preference cookies can be disabled without affecting core functionality.

7Privacy in Payment Processing & KYC

7.1 Payment Information Security

MAS4D does not store sensitive payment details such as full bank account numbers, e-banking passwords or e-wallet PINs directly on our servers. All transactions are processed through secure payment gateways that comply with industry security standards.

Supported payment methods — DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, Maybank2u (FPX), and CIMB Clicks (FPX) — each have their own security and privacy policies that apply when transactions occur on their respective platforms.

7.2 KYC Process and Document Protection

Identity verification documents (MyKad, bank statements) submitted during the KYC process are stored in a separate secure system with highly restricted access. These documents are:

  • Encrypted at rest and in transit
  • Accessible only to authorised MAS4D compliance personnel
  • Not used for any purpose other than identity verification and legal compliance
  • Retained for the period required by law, then securely deleted

8Your Rights Under Malaysia's PDPA

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data held by MAS4D:

👁️
Right of Access

Request a copy of the personal data we hold about you

✏️
Right to Rectification

Correct inaccurate or outdated information in our records

🗑️
Right to Erasure

Request deletion of your data when there is no longer a legitimate reason to retain it

🚫
Right to Object

Object to the processing of your data for specific purposes you do not consent to

📦
Right to Portability

Receive your data in a portable format that can be used by other services

⏸️
Right to Restriction

Restriction of data processing in certain situations while a dispute is being resolved

To exercise any of the rights above, contact the MAS4D privacy team by email at privacy@mas4d.biz or via live chat within the platform. We will process your request within 21 business days as required under the PDPA.

Exceptions: Some deletion requests may not be fully fulfilled where the data is required to meet legal obligations (for example, financial transaction records required under Malaysian financial institution legislation).

9Data Retention and Deletion

MAS4D does not retain your personal data longer than necessary for its processing purpose or to fulfil legal obligations. Our data retention schedule is as follows:

Data TypeRetention PeriodReason
Active account dataFor as long as the account remains activeService management
Financial transaction records7 years after the transactionTax & AML legal requirements
KYC Documents5 years after account closurePDPA & AMLA Compliance
Security logs2 yearsSecurity incident investigation
Game history3 yearsResponsible gaming & audits
Customer support records3 yearsReference and improvement

Once the retention period expires, data will be securely deleted using industry-standard data disposal procedures. Deleted data cannot be recovered.

10Third-Party Services & Links

The MAS4D platform may include integrations with third-party services for specific purposes. This Privacy Policy applies solely to the MAS4D platform. When you interact with third-party services (for example, during payment processing via Touch 'n Go eWallet or GrabPay), the respective third party's privacy policy will govern that portion of the interaction.

MAS4D is not responsible for the privacy practices of third parties. We encourage you to read the privacy policy of each third-party service you use alongside the MAS4D platform.

10.1 Analytics Providers

MAS4D uses third-party analytics tools to understand platform usage patterns at an aggregate level. Data shared with these providers is statistical in nature, contains no personally identifiable information, and cannot be linked back to your identity.

11Children's Privacy and Protection of Young Persons

The MAS4D platform is for individuals aged 18 and above only. We do not knowingly collect personal data from individuals under the age of 18. If we discover that personal data of a person under 18 has been collected without our knowledge, we will:

  • Promptly delete such data from our systems
  • Close any associated accounts
  • Reporting incidents to the relevant authorities where required

Parents or guardians who suspect their child has registered with MAS4D without authorisation are urged to contact us immediately at support@mas4d.biz.

12Amendments to This Privacy Policy

MAS4D reserves the right to update or amend this Privacy Policy at any time to reflect changes in our privacy practices, new legal requirements, or platform improvements. We are committed to being transparent about any such changes:

  • Material changes will be communicated via in-platform notifications or your registered email at least 14 days before taking effect
  • The "Updated" date at the top of this document will be revised to reflect the latest changes
  • Previous versions of the Privacy Policy are available on request by emailing our privacy team
  • Continued use of the MAS4D platform after any changes take effect will be considered acceptance of the updated policy

We encourage you to review this Privacy Policy page periodically to stay informed on how MAS4D protects your information.

13How to Reach the MAS4D Privacy Team

If you have any questions, concerns or complaints regarding this Privacy Policy or how MAS4D handles your personal data, our dedicated privacy team is ready to assist:

ChannelDetailsResponse Time
Live ChatAvailable on the MAS4D platform, 24/7Under 2 minutes
Privacy EmailPrivacy@mas4d.biz24–48 business hours
Support EmailSupport@mas4d.biz24 business hours

For data rights requests (access, rectification, deletion) under the PDPA, please use the email privacy@mas4d.biz with the subject line "PDPA Data Rights Request" and state the type of request along with your MyKad number for identity verification. We will process your request within 21 business days.

Effective Date: This Privacy Policy is effective from 1 January 2026. This supersedes all previous versions of the MAS4D Privacy Policy.
🛡️

Your Data Is Safe. Play with Peace of Mind at MAS4D.

Your privacy is fully protected by 256-bit SSL encryption, PDPA compliance and our unwavering commitment. Register for free today and enjoy casino games, 4D lottery and Sports Betting with complete peace of mind.

256-bit SSL
PDPA Compliant
No Data Selling
Full Control

18+ only  ·  Secure SSL  ·  Responsible Gaming

Bahasa Melayu