Privacy Policy

01 Introduction

mana4d (hereinafter referred to as "we", "us", "our", or "mana4d") operates the online sports betting and live casino platform accessible at https://mana4d.cam. We are the data controller responsible for the personal information collected through our Platform and any related services, communications, and promotional activities.

This Privacy Policy (hereinafter "Policy") sets out in clear and transparent terms how we collect, use, store, share, and protect the personal data of individuals who access or register on the mana4d Platform ("you", "User", "Data Subject"). This Policy applies to all registered Users, visitors, and any individuals whose personal information is processed in connection with mana4d's services.

By accessing the mana4d Platform, creating an Account, or providing us with any personal information, you acknowledge that you have read and understood this Policy and consent to the data processing practices described herein. This Policy should be read together with our Terms & Conditions and our Responsible Gambling Policy.

02 Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings ascribed below:

Term	Meaning
"Personal Data"	Any information relating to an identified or identifiable natural person, including name, email address, phone number, financial data, and device identifiers.
"Processing"	Any operation performed on Personal Data, including collection, storage, use, disclosure, erasure, or any combination thereof.
"Data Controller"	mana4d, as the entity that determines the purposes and means of processing Personal Data collected through the Platform.
"Data Processor"	A third party that processes Personal Data on behalf of mana4d pursuant to a written data processing agreement.
"Cookies"	Small text files placed on a User's device by the Platform for the purposes of session management, analytics, and personalisation.
"KYC Data"	Identity and verification documents submitted by Users as part of the Know Your Customer verification process, including government-issued ID and proof of address.

03 Data We Collect

3.1 Information You Provide Directly

When you register an Account, transact on the Platform, or interact with our support team, we collect the following categories of personal data:

• Registration Data: Full legal name, date of birth, email address, mobile phone number, and chosen username and password.
• Identity Verification (KYC) Data: Copies of government-issued identity documents (Malaysian MyKad, Passport, or Driver's License), proof of residential address (utility bill or bank statement dated within three months), and selfie photographs where required for identity confirmation.
• Payment Data: Bank account details, e-wallet identifiers (Touch 'n Go eWallet, Boost, GrabPay), DuitNow / FPX transaction references, cryptocurrency wallet addresses (USDT TRC20, BTC), and transaction histories. Full card or bank account numbers are not stored by mana4d; such data is handled directly by our licensed payment processors.
• Communications Data: Records of live chat conversations, email correspondence, and any other direct communications with our support team, including content and timestamps.

3.2 Information Collected Automatically

When you access the Platform, we automatically collect certain technical and behavioural data, including:

• IP address, approximate geolocation derived from IP, and device type (mobile, desktop, tablet);
• Browser type, operating system, screen resolution, and language preferences;
• Pages viewed, time spent on each page, click paths, and session duration;
• Wagering and gaming activity, including bet amounts, game selections, deposit and withdrawal patterns;
• Cookie identifiers and similar tracking technologies as described in Section 9 of this Policy.

3.3 Information from Third Parties

We may receive supplementary personal data from third-party payment processors, fraud detection service providers, identity verification bureaus, and sports data feed operators where such data is necessary for the lawful operation of our Platform, including the fulfilment of anti-money laundering and responsible gambling obligations.

04 How We Process Your Data

mana4d processes your personal data for the following purposes:

Purpose	Data Used	Details
Account Management	Registration Data, KYC Data	Creating, verifying, maintaining, and securing your mana4d Account throughout the period of your membership.
Payment Processing	Payment Data, Transaction History	Processing deposits and withdrawals via Malaysian payment channels including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, and cryptocurrency.
Fraud & AML Compliance	All Data Categories	Detecting, preventing, and investigating suspected fraud, money laundering, bonus abuse, and other prohibited conduct in accordance with applicable legal obligations.
Responsible Gambling	Gaming Activity, Account Data	Monitoring gambling behaviour to identify at-risk players, enforcing self-exclusion requests, and administering deposit limit and session management tools.
Customer Support	Communications Data, Account Data	Responding to queries, resolving disputes, processing complaints, and maintaining support interaction records for quality assurance purposes.
Platform Improvement	Technical & Behavioural Data	Analysing aggregated, anonymised usage patterns to improve platform performance, product features, and user experience.
Marketing Communications	Registration Data, Preferences	Sending promotional offers, bonus notifications, and platform updates to Users who have opted in to receive such communications. Users may opt out at any time.

05 Legal Basis for Processing

mana4d processes personal data on the following legal grounds:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions that you accept upon registration, including Account management and payment processing.
• Legal Obligation: Processing necessary to comply with applicable anti-money laundering legislation, know-your-customer requirements, and other regulatory obligations imposed on gaming operators.
• Legitimate Interests: Processing undertaken to protect mana4d's legitimate business interests, including fraud prevention, security monitoring, and platform improvement, where such interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, informed, and specific consent — particularly in the context of optional marketing communications and non-essential cookies. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

06 Data Sharing & Disclosure

mana4d does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share personal data only in the following limited and controlled circumstances:

• Payment Processors: Licensed payment service providers processing transactions on behalf of mana4d, including operators of Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and cryptocurrency payment gateways. These processors are bound by data processing agreements and are not permitted to use your data for any purpose beyond the specific transaction.
• Identity Verification Providers: Third-party KYC verification services engaged to validate identity documents in compliance with anti-money laundering requirements.
• Fraud Prevention Services: Specialist providers engaged to detect and prevent fraudulent activity, multi-accounting, and financial crime on the Platform.
• Technology Infrastructure: Cloud hosting, data storage, and platform infrastructure providers operating under strict confidentiality and security obligations.
• Legal and Regulatory Authorities: Competent regulatory, law enforcement, and judicial authorities where disclosure is required by applicable law, court order, or regulatory directive. mana4d will notify affected Users of such disclosures to the extent permitted by law.
• Business Transfers: In the event of a merger, acquisition, or sale of all or a material portion of mana4d's business, personal data may be transferred to the acquiring entity, subject to equivalent data protection commitments.

07 Data Retention

mana4d retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law. Our general retention schedule is as follows:

• Active Account Data: Retained throughout the period your Account remains active and for a period of five (5) years following Account closure, in accordance with applicable anti-money laundering record-keeping obligations.
• Transaction Records: Financial transaction records retained for a minimum of seven (7) years in compliance with applicable financial record-keeping requirements.
• KYC Documents: Identity verification documents retained for five (5) years following the cessation of the business relationship, unless a longer period is required by law.
• Support Communications: Live chat and email records retained for a period of three (3) years from the date of each interaction.
• Marketing Consent Records: Records of marketing consent and opt-out requests retained for the duration of the relationship and three (3) years thereafter to demonstrate compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with industry-standard data destruction protocols.

08 Data Security

mana4d implements a comprehensive suite of technical and organisational security measures designed to protect personal data against unauthorised access, alteration, disclosure, or destruction. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption across all Platform pages, API endpoints, and payment transaction flows;
• Encryption of sensitive data at rest, including KYC documents and payment credentials, using industry-standard cryptographic algorithms;
• Role-based access controls restricting internal access to personal data to authorised personnel with a documented business need;
• Regular third-party penetration testing and security audits of Platform infrastructure;
• Multi-factor authentication requirements for administrative access to data systems;
• Incident response procedures providing for User notification of any confirmed personal data breach within a reasonable timeframe.

09 Cookies & Tracking Technologies

The mana4d Platform uses cookies and similar tracking technologies to deliver a functional, secure, and personalised user experience. The following categories of cookies are deployed:

Cookie Type	Purpose	Required?
Strictly Necessary	Session management, authentication, security tokens, load balancing. Essential for the Platform to function.	Yes — cannot be disabled
Functional	Remembering user preferences such as language, odds format, and display settings between sessions.	Optional
Analytics	Aggregated, anonymised data on page visits, click paths, and session duration to improve platform performance.	Optional
Responsible Gambling	Tracking session duration to support the delivery of time-limit notifications and responsible gambling prompts.	Yes — player protection

You may manage non-essential cookie preferences through your browser settings. Please note that disabling certain cookies may impair some Platform functionality. mana4d does not use cookies to serve third-party advertising or to track Users across unrelated websites.

10 Your Data Rights

Subject to applicable law and verification of your identity, you have the following rights in respect of your personal data held by mana4d. Requests may be submitted to [email protected] and will be acknowledged within 5 business days and fulfilled within 30 days, or such shorter period as required by law.

• Right of Access: You may request a copy of the personal data we hold about you, together with information about how it is processed.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data held about you.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations.
• Right to Restriction: You may request that we restrict the processing of your data in specified circumstances, such as while an accuracy dispute is being resolved.
• Right to Portability: You may request a copy of your personal data in a structured, machine-readable format for transfer to another data controller.
• Right to Object: You may object to processing based on legitimate interests or direct marketing purposes. Objections to marketing will be actioned immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

11 Children's Privacy

The mana4d Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect personal data from any person below the age of 21. If we become aware that personal data has been collected from an underage individual, that Account will be immediately suspended and the relevant data deleted, and any deposited funds returned to the source payment method following applicable verification procedures.

If you have reason to believe that a person under the age of 21 has registered on the Platform, please contact us immediately at [email protected].

12 International Data Transfers

The mana4d Platform primarily serves Malaysian users, and we endeavour to store and process personal data within appropriate jurisdictions. Where data is transferred to or processed by service providers or infrastructure located outside Malaysia, we ensure that such transfers are subject to appropriate safeguards, including contractual data protection clauses equivalent in effect to applicable Malaysian data protection standards.

Any international transfers of KYC documents, financial records, or other sensitive personal data are encrypted in transit and subject to the security standards described in Section 8 of this Policy.

13 Amendments to This Policy

mana4d reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform functionality. Where material amendments are made, we will provide advance notice via email to your registered address or via a prominent in-Platform notification.

Continued use of the Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. The version displaying the most recent "Last Updated" date at the top of this page is the current operative version. Previous versions are available upon request.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or your personal data rights, please contact the mana4d data protection team through the following channels:

We aim to acknowledge all privacy-related queries within 5 business days and to resolve substantive data rights requests within 30 days of receiving sufficient information to process your request.