Introduction
meme4d ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of all individuals who access or use our website at https://meme4d.lat and all associated services (collectively, "the Platform"). This Privacy Policy sets out in clear terms how we collect, use, store, share, and protect your personal data, and what choices and rights you have in relation to it.
This Policy applies to all Users of the meme4d Platform, including registered account holders, visitors who browse without registering, and individuals who contact us through support channels. By accessing the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.
meme4d serves players across Malaysia, including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam. We handle all personal data with care, transparency, and in accordance with applicable data protection laws. We process payment data across Malaysian financial channels, including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank, and Hong Leong Connect, and we treat all such financial information as sensitive personal data.
This Privacy Policy should be read alongside our Terms & Conditions, which govern your use of the Platform. Together, these documents form the core legal framework of your relationship with meme4d.
Definitions
For the purposes of this Privacy Policy, the following terms carry the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or could reasonably be used to identify a living individual, directly or indirectly — including name, email address, phone number, IP address, device identifiers, and financial account details. |
| "Processing" | Any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure, and destruction. |
| "Controller" | The entity that determines the purposes and means of processing personal data — for the purposes of this Policy, meme4d. |
| "Processor" | A third party that processes personal data on behalf of the Controller, such as payment service providers or cloud infrastructure suppliers. |
| "User" / "You" | Any person who accesses the meme4d Platform, whether registered or unregistered. |
| "Sensitive Data" | A subset of personal data carrying heightened protection requirements, including financial account data, identity document numbers, and, in certain contexts, transaction history. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of a User's agreement to the processing of their personal data for a defined purpose. |
Personal Data We Collect
meme4d collects personal data across several categories, depending on the nature of your interaction with the Platform. The categories of data we collect are as follows:
3.1 Registration & Account Data
- Full name
- Date of birth (used for mandatory 21+ age verification)
- Email address
- Mobile phone number
- Username and hashed password
- Preferred language and currency settings (MYR)
3.2 Identity Verification (KYC) Data
- Government-issued identification (e.g., MyKad, passport)
- Proof of address documentation
- Selfie or liveness check images submitted during verification
- Source of funds declarations, where requested
3.3 Financial & Transaction Data
- Deposit and withdrawal transaction records (amounts, dates, payment method)
- Payment method identifiers (e-wallet account references, bank account numbers — stored in masked/tokenised format)
- Cryptocurrency wallet addresses, where applicable
- Wagering history, game results, and account balance movements
3.4 Technical & Usage Data
- IP address and approximate geolocation derived from IP
- Device type, operating system, and browser information
- Session duration, page views, and clickstream data
- Login timestamps and session activity logs
- Cookie identifiers and tracking pixel data (see Section 9)
3.5 Communications Data
- Content and metadata of live chat sessions with our support team
- Email correspondence with meme4d
- Records of any complaints, disputes, or formal requests submitted
How We Collect Your Data
meme4d collects personal data through the following primary channels:
- Directly from you: When you register an Account, complete KYC verification, make a deposit or withdrawal, contact our support team, or otherwise interact with the Platform.
- Automatically: Through cookies, session tracking, log files, and similar technologies as you navigate the Platform (see Section 9 for full details).
- From payment processors: Transaction confirmation data received from Malaysian payment processors including DuitNow, FPX operators, Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go, Boost, and GrabPay, as part of processing your financial transactions.
- From identity verification services: Third-party KYC and anti-fraud providers may return verification outcomes and risk scores to us as part of the onboarding process.
- From other Users (limited): Where a referral programme is active, the referring User may provide us with a referred individual's email address or username, subject to applicable consent requirements.
Data Processing & Use
meme4d processes your personal data for the following defined purposes. We do not use your data in any manner inconsistent with these stated purposes:
| Purpose | Data Used |
|---|---|
| Account creation and management | Registration data, contact details, login credentials |
| Age and identity verification (KYC) | Date of birth, government ID, proof of address, selfie data |
| Processing deposits and withdrawals | Financial data, payment method identifiers, transaction records |
| Anti-fraud and security monitoring | IP address, device data, session logs, transaction patterns |
| Customer support delivery | Account data, communications history, transaction records |
| Responsible gambling management | Wagering history, deposit frequency, self-exclusion status |
| Legal and regulatory compliance | KYC data, transaction records, AML (anti-money laundering) data |
| Platform improvement and analytics | Technical/usage data, anonymised behavioural data |
| Marketing communications (with consent) | Email address, contact preferences, promotion interaction data |
Legal Basis for Processing
meme4d processes your personal data on the following legal bases, as applicable to each processing activity:
- Contractual necessity: Processing required to fulfil our obligations under our Terms & Conditions, including account management, payment processing, and KYC verification.
- Legal obligation: Processing required to comply with applicable laws, including anti-money laundering (AML) obligations, age verification requirements, and regulatory reporting duties.
- Legitimate interests: Processing necessary for our legitimate business interests, including fraud prevention, platform security, IT system maintenance, and anonymised analytics — provided such interests are not overridden by your fundamental rights.
- Consent: Processing for which you have provided specific, informed consent — principally marketing communications. You may withdraw consent at any time by contacting us at [email protected] or updating your account communication preferences.
Data Sharing & Third Parties
meme4d does not sell, rent, or trade your personal data. We share personal data only in the following limited circumstances, and only to the extent strictly necessary for the stated purpose:
7.1 Service Providers (Processors)
We engage carefully selected third-party service providers who process personal data on our behalf and under our instruction. These include:
- Payment processors and Malaysian financial institutions (for deposit and withdrawal processing)
- KYC and identity verification service providers
- Cloud infrastructure and data hosting providers
- Customer support platform providers (live chat infrastructure)
- Anti-fraud and risk management system providers
- Game software suppliers (game session data only, for game operation)
All third-party processors are required to process data only in accordance with our instructions, to implement appropriate technical and organisational security measures, and to maintain strict confidentiality.
7.2 Legal & Regulatory Disclosure
We may disclose personal data to competent regulatory authorities, law enforcement agencies, or courts where we are legally required or compelled to do so — for example, in response to a court order, a regulatory investigation, or anti-money laundering reporting obligations.
7.3 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of all or part of our business, personal data held by meme4d may be transferred to the acquiring entity as part of the transaction, subject to equivalent data protection commitments being assumed by the acquirer.
meme4d does not share your personal data with third parties for their own marketing, advertising, or research purposes under any circumstances.
Data Retention
meme4d retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. Our general retention approach is as follows:
| Data Category | Retention Period |
|---|---|
| Account registration data | Duration of active account, plus 5 years following account closure |
| KYC / identity verification documents | 5 years from the date of verification, or longer if required by AML regulations |
| Transaction and financial records | 7 years from the date of each transaction, as required by financial record-keeping obligations |
| Support communications | 3 years from the date of the last communication |
| Technical / log data | 90 days for operational logs; up to 12 months for security and fraud investigation logs |
| Marketing consent records | Until consent is withdrawn, plus 3 years as an audit trail |
Upon expiry of the applicable retention period, personal data is securely and permanently deleted or, where deletion is not technically feasible, anonymised such that it can no longer be associated with any individual.
Cookies & Tracking Technologies
meme4d uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file stored on your device by your browser when you visit a website. We use the following categories of cookies:
- Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies and security tokens. These cannot be disabled without affecting core functionality.
- Functional Cookies: Enable personalisation features such as remembered language preferences, session state, and game history. These improve your experience but are not strictly required.
- Analytics Cookies: Help us understand how Users interact with the Platform by collecting aggregated, anonymised usage data. This informs product improvements and feature development.
- Security Cookies: Used for fraud detection, bot prevention, and account protection — for example, to detect unusual login patterns or repeated failed authentication attempts.
You may manage your cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect the functionality and security of your experience on the Platform. meme4d does not use third-party advertising cookies or behavioural retargeting cookies.
Security Measures
meme4d implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:
- 256-bit SSL/TLS encryption for all data transmitted between your browser and our servers
- Encryption of sensitive data at rest, including KYC documents and payment method identifiers
- Multi-factor authentication options for account access
- Role-based access controls limiting internal access to personal data on a strict need-to-know basis
- Regular security audits and penetration testing of the Platform infrastructure
- Segregation of player funds from operational accounts, reducing exposure in the event of a security incident
- Automated anomaly detection for unusual account activity patterns, including login attempts from new devices or locations
- Incident response procedures to manage and report data breaches in accordance with applicable legal requirements
No security system is entirely infallible. While we implement best-practice measures, you are responsible for maintaining the confidentiality of your own login credentials. Do not share your username or password with anyone.
Your Rights as a Data Subject
Subject to applicable data protection law and our legitimate operational requirements, you have the following rights in relation to your personal data held by meme4d:
Right of Access
Request a copy of the personal data we hold about you, along with information on how it is being processed.
Right to Rectification
Request correction of inaccurate or incomplete personal data held in your Account or our records.
Right to Erasure
Request deletion of your personal data where retention is no longer justified, subject to our legal retention obligations.
Right to Restriction
Request that we restrict processing of your data in certain circumstances, such as while a dispute is being resolved.
Right to Portability
Request a copy of your personal data in a structured, machine-readable format for transfer to another service provider.
Right to Object
Object to processing based on legitimate interests, including direct marketing. You may withdraw marketing consent at any time.
To exercise any of these rights, please contact our Data Protection team at [email protected] (please note: this is a plain text contact — not a clickable link). We will respond to all valid requests within 30 calendar days. In complex cases, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reason for it.
We may require you to verify your identity before we can fulfil a data subject request, to prevent unauthorised access to another person's data.
Minors & Age Policy
meme4d strictly prohibits use of its Platform by individuals under the age of 21. We do not knowingly collect or process personal data from persons under 21. If you believe that a person under the age of 21 has provided us with personal data or has registered an Account, please notify us immediately at [email protected] (plain text — not a clickable link).
Upon receiving credible notification that a minor's data has been collected, we will promptly close the associated Account, delete the personal data concerned (to the extent permitted by law), and take appropriate steps to prevent recurrence.
21+ Only: By using the meme4d Platform, you confirm that you are at least 21 years of age. Misrepresentation of age is a serious breach of our Terms & Conditions and may result in permanent Account closure.
International Data Transfers
In operating the meme4d Platform, your personal data may be transferred to and processed in countries outside Malaysia, for example where our cloud infrastructure providers or third-party processors maintain data centres. Where such transfers occur, we implement appropriate safeguards to ensure that your personal data receives a level of protection consistent with this Privacy Policy and applicable law.
These safeguards may include standard contractual clauses, data processing agreements with binding obligations on the receiving entity, or reliance on adequacy decisions by competent regulatory authorities, where applicable.
Amendments to This Policy
meme4d reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or operational requirements. When we make material changes, we will publish the updated Policy on this page with a revised "Last Updated" date and, where appropriate, provide notification to registered Users via email or a prominent Platform notice.
We encourage you to review this Privacy Policy periodically. Your continued use of the Platform following the publication of a revised Policy constitutes your acceptance of the updated terms.
Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or meme4d's handling of your personal data, please reach out to us through the following channels. We are committed to addressing all privacy-related enquiries promptly and thoroughly.
- Email: [email protected] (plain text — not a clickable link)
- Live Chat: Available 24 hours a day, 7 days a week via the meme4d Platform
- Headquarters: Kuala Lumpur, Malaysia
- Operating Hours: 24 hours, 7 days a week
For formal data subject requests (access, rectification, erasure, portability, objection, or restriction), please submit your request in writing via email with the subject line "Data Subject Request — [Your Name]" and include sufficient information to allow us to identify your Account and process your request securely.