mea444 Privacy Policy
— Your Data, Handled Responsibly

1. Introduction

mea444 ("mea444", "we", "us", "our") is committed to protecting the privacy and personal data of all individuals who interact with the mea444 platform at https://mea444.org and through the mea444 mobile application. This Privacy Policy describes our practices regarding the collection, use, storage, disclosure, and protection of your personal data.

This Policy applies to all members, registered users, and visitors to the mea444 platform, regardless of the device or channel through which they access our services. By registering an account with mea444 or continuing to use the mea444 platform, you acknowledge that you have read this Privacy Policy and consent to the data practices described herein.

This Privacy Policy should be read alongside mea444's Terms & Conditions and Responsible Gaming Policy.

2. Data Controller

For the purposes of applicable data protection legislation, mea444 is the data controller responsible for your personal data collected and processed in connection with the mea444 platform. mea444 operates under international gaming authority licensing, which imposes specific obligations regarding the collection, retention, and protection of player data.

If you have any questions regarding data controller responsibilities or wish to exercise your data subject rights, please contact the mea444 Data Protection team via the contact details set out in Section 15 of this Policy.

3. Personal Data We Collect

mea444 collects personal data from you in the following categories, depending on your interaction with the platform:

3.1 Account Registration Data

• Malaysian mobile phone number (used as primary account identifier)
• Password (stored in hashed, encrypted form only — never in plain text)
• Referral code (where provided at registration)

3.2 Identity Verification (KYC) Data

• Full legal name as appearing on identity documents
• Date of birth (to verify 21+ age requirement)
• Malaysian Identity Card (MyKad) number and document image — front and back
• Passport number and photo page image (where passport is used for KYC)
• Selfie photograph for liveness verification where required
• Source of funds documentation for high-value accounts

3.3 Financial Transaction Data

• Deposit and withdrawal transaction records, including amounts, timestamps, and payment method identifiers
• Payment method details (e.g., last four digits of bank account, registered e-wallet identifier) — full payment credentials are processed by PCI-DSS compliant payment processors and are not stored by mea444
• Bonus claim history and wagering activity records

3.4 Gaming Activity Data

• Gameplay history across all mea444 product verticals — live casino, slots, sportsbook, and 4D lottery
• Bet amounts, game selections, win/loss records, and session timestamps
• Responsible gaming tool usage (deposit limits set, self-exclusion history)

3.5 Technical & Device Data

• IP address and geolocation data (country/region level)
• Device type, operating system, and browser information
• Platform interaction logs, including login history, page views, and feature usage
• Cookie identifiers and session tokens (see Section 7)

3.6 Customer Support Data

• Records of communications with the mea444 support team, including live chat transcripts, emails, and support ticket content
• Complaint records and dispute resolution documentation

4. How We Use Your Personal Data

mea444 uses your personal data for the following purposes:

Purpose	Data Used
Account creation and management	Registration data, KYC data
Age and identity verification (KYC compliance)	KYC data, device data
Payment processing and fraud prevention	Financial transaction data, device data
Provision of gaming, betting, and lottery services	Gaming activity data, account data
Responsible gaming monitoring and intervention	Gaming activity, financial data, KYC data
Customer support and complaint handling	Support data, account data
Security monitoring and fraud detection	Technical data, transaction data
Regulatory reporting and licence compliance	All categories as required by law
Platform improvement and analytics	Technical data, gaming activity data (anonymised where possible)
Marketing communications (with consent)	Contact data, preferences

5. Legal Basis for Processing

mea444 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and mea444 — i.e., to provide gaming, betting, and account services as described in the Terms & Conditions.
• Legal Obligation: Processing required to comply with mea444's obligations under international gaming authority licensing requirements, including KYC verification, age checks, transaction record keeping, and responsible gaming monitoring.
• Legitimate Interests: Processing for fraud prevention, platform security, abuse detection, and service analytics where such interests do not override your fundamental privacy rights.
• Consent: Processing for marketing communications, where you have provided explicit opt-in consent. You may withdraw consent at any time through your account settings or by contacting support.

6. Data Sharing & Disclosure

mea444 does not sell your personal data. We may share your data with the following categories of third parties strictly for the purposes described in this Policy:

• Payment Service Providers: Malaysian payment processors handling Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and USDT transactions. These providers are bound by PCI-DSS compliance obligations and contractual data protection requirements.
• KYC & Identity Verification Providers: Third-party identity verification services used to authenticate member identity and age documents in compliance with gaming authority KYC requirements.
• Game Software Providers: Licensed game studios (e.g., Evolution Gaming, Pragmatic Play) receive necessary gaming session data to facilitate gameplay. These providers operate under their own regulatory frameworks.
• Fraud Detection & Security Services: Specialist fraud detection platforms that analyse transaction and behavioural patterns to protect members and the platform.
• Regulatory Authorities: mea444 is required to disclose member data to relevant regulatory and licensing authorities upon lawful request, including in relation to anti-money laundering (AML) investigations.
• Legal & Professional Advisers: Lawyers, auditors, and compliance consultants engaged by mea444, subject to professional confidentiality obligations.

7. Cookies & Tracking Technologies

The mea444 platform uses cookies and similar tracking technologies to support platform functionality and improve your experience. The categories of cookies we use are:

• Essential Cookies: Required for platform functionality — session authentication, security tokens, and load balancing. These cannot be disabled without impairing platform access.
• Performance Cookies: Collect anonymised data about platform usage patterns to help us improve reliability, page load speeds, and game streaming quality.
• Functional Cookies: Remember your preferences such as language settings, responsible gaming limit configurations, and display preferences.
• Analytics Cookies: Used to understand aggregate member behaviour across the platform. Data is anonymised before analysis where technically feasible.

You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not affect your core ability to use the mea444 platform, though some preference-based features may not function as expected.

8. Data Retention

mea444 retains personal data for the following periods, unless a longer retention period is required by applicable law or regulatory obligation:

• Account & KYC Data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, as required under anti-money laundering regulations applicable to licensed gaming operators.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with gaming authority licensing requirements.
• Gaming Activity Logs: Retained for a minimum of three (3) years, or longer where required for dispute resolution or regulatory investigation purposes.
• Support Communications: Retained for three (3) years from the date of the support interaction, or until the associated account is deleted, whichever is later.
• Marketing Consent Records: Retained until withdrawal of consent plus one (1) year to demonstrate compliance with consent obligations.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with mea444's data deletion procedures.

9. Data Security

mea444 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• TLS 1.3 encryption for all data in transit between your device and the mea444 platform.
• Encryption at rest for sensitive personal data stored in mea444's infrastructure.
• Cryptographic password hashing — passwords are never stored in recoverable plain text.
• Two-factor authentication (2FA) available to all members as an additional account security layer.
• Role-based access controls ensuring that mea444 staff access member data only on a need-to-know basis.
• Regular independent security audits and penetration testing of the mea444 platform infrastructure.
• PCI-DSS compliant payment processing infrastructure.

10. Your Data Rights

Subject to applicable law and the regulatory retention obligations described in Section 8, you have the following rights in relation to your personal data held by mea444:

• Right of Access: You may request a copy of the personal data mea444 holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data where there is no longer a legal basis for its retention. Note that certain data must be retained under gaming authority licensing requirements and cannot be deleted on request.
• Right to Restrict Processing: You may request that mea444 restrict the processing of your data in certain circumstances — for example, while a rectification request is pending.
• Right to Data Portability: You may request your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on mea444's legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact the mea444 support team (see Section 15). mea444 will respond to data subject requests within 30 days of receipt. Where a request cannot be fulfilled due to legal or regulatory obligations, mea444 will provide a written explanation.

11. International Data Transfers

As an internationally licensed gaming operator, mea444 may transfer your personal data to service providers located outside Malaysia. Where such transfers occur, mea444 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under our gaming authority licence, including contractual data protection clauses with all recipient third parties.

Game software providers such as Evolution Gaming and Pragmatic Play operate their own certified data infrastructure across multiple jurisdictions. Data shared with these providers for gameplay purposes is subject to their respective data protection frameworks, which are audited as part of their gaming authority certification requirements.

12. Children and Minors

The mea444 platform is strictly restricted to individuals aged 21 years and above. mea444 does not knowingly collect personal data from individuals under the age of 21. Age verification via KYC identity documents is mandatory for all members before full platform access and withdrawal privileges are granted.

13. Third-Party Services

The mea444 platform integrates with licensed third-party service providers for payment processing, game delivery, KYC verification, and security monitoring. While mea444 contractually requires all third-party partners to maintain appropriate data protection standards, mea444 is not responsible for the independent privacy practices of these providers in contexts outside of their service delivery obligations to mea444.

The mea444 platform does not contain links to external websites. This Privacy Policy applies solely to data collected and processed through the mea444 platform and does not extend to third-party websites or services accessed independently by you.

14. Amendments to This Policy

mea444 reserves the right to amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. Where amendments are material, mea444 will provide notice to registered members through the platform or by email prior to the changes taking effect. The "Last Updated" date at the top of this Policy reflects the most recent revision. Continued use of the mea444 platform following publication of an amended Privacy Policy constitutes your acceptance of the updated Policy.

15. Contact Us

For all data privacy enquiries, data subject rights requests, or concerns regarding mea444's handling of your personal data, please contact the mea444 Data Protection team through the following channels:

• Live Chat: Available 24/7 directly within the mea444 platform. Identify your enquiry as a "Data Privacy Request" when initiating the chat. Average response time under 2 minutes.
• Email: [email protected] — please include "Privacy Policy Enquiry" in the subject line. mea444 aims to respond within 4 hours during normal operating hours and within 30 days for formal data subject rights requests.

For responsible gaming data requests, including self-exclusion history or responsible gaming limit records, please also refer to our Responsible Gaming page.