meme4 Privacy Policy

1 Definitions

The following definitions apply throughout this Privacy Policy:

• "meme4" / "Platform" / "we" / "us" / "our" — the meme4 online gaming platform operated at meme4.bet and all associated services and subdomains.
• "Personal Data" — any information that identifies or can reasonably be used to identify a natural person, including name, email address, phone number, device identifiers, payment details, and behavioral data associated with a registered account.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, deletion, or any combination thereof.
• "Data Controller" — meme4, as the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" — any third party that processes Personal Data on behalf of meme4 under a written data processing agreement.
• "Player" / "you" / "your" — any individual who visits, registers on, or otherwise interacts with the meme4 platform.
• "KYC" — Know Your Customer; the identity verification process required before meme4 processes withdrawals or flags account activity for review.
• "Cookies" — small text files or similar tracking technologies placed on your device by the meme4 platform to support platform functionality, session management, and analytics.

2 Data We Collect

meme4 collects Personal Data through several channels: information you provide directly during registration and account use, information generated automatically as you interact with the platform, and information received from trusted third-party partners where permitted. Specifically, meme4 may collect the following categories of data:

2.1 Registration and Account Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used to verify the mandatory 21+ age requirement).
• Email address and Indonesian mobile telephone number.
• Chosen username and encrypted password credentials.
• Residential address, including city and province within Indonesia.

2.2 Identity Verification (KYC) Data

• Scanned or photographed copies of your Indonesian National Identity Card (Kartu Tanda Penduduk / KTP) or valid passport.
• Selfie or liveness-check images submitted during the KYC verification process.
• Proof of address documentation, if requested to supplement primary ID.
• Proof of payment method ownership (e.g., a screenshot or statement confirming bank account ownership for BCA, BRI, BNI, Mandiri, or other accepted banks).

2.3 Financial and Transaction Data

• Bank account numbers and registered account holder names for bank transfer deposits and withdrawals via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, and Bank Permata.
• E-wallet account identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja transactions.
• Full transaction history, including deposit timestamps, withdrawal requests, amounts in IDR, and processing status.
• Wagering history across all product verticals: sportsbook, live casino, and slots.

2.4 Technical and Device Data

• IP address and approximate geographic location derived from IP lookup.
• Device type, operating system, and browser type and version.
• Session timestamps, page navigation paths, and feature interaction logs.
• Unique device identifiers where applicable (e.g., mobile device ID).

2.5 Communications Data

• Content of live chat, email, and support ticket communications between you and meme4's support team.
• Survey responses, feedback submissions, and promotion opt-in records.

3 How We Use Your Personal Data

meme4 uses the Personal Data it collects for the following specific purposes. Each purpose is tied to a lawful basis described in Section 4.

• Account creation and management: To register your account, maintain accurate account records, and provide you with access to meme4's gaming products and services.
• Identity verification (KYC): To confirm that you meet the 21+ age requirement and to comply with applicable anti-money-laundering (AML) and responsible gaming obligations.
• Payment processing: To execute deposits from and withdrawals to your nominated Indonesian bank account or e-wallet, and to reconcile transaction records in IDR.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, bonus abuse, multi-accounting, unauthorized access, and other prohibited conduct as defined in meme4's Terms & Conditions.
• Responsible gaming compliance: To monitor wagering patterns for indicators of problem gambling, enforce player-requested account restrictions (deposit limits, self-exclusion), and comply with responsible gaming obligations under meme4's licensing conditions.
• Customer support: To respond to your inquiries, resolve disputes, and improve the quality of meme4's support services.
• Marketing and promotions: To send you promotional offers, bonus notifications, and product updates where you have given explicit consent, and to manage your marketing preferences.
• Platform improvement: To analyze aggregate usage patterns, conduct A/B testing, and improve the performance, reliability, and usability of the meme4 platform.
• Legal and regulatory compliance: To fulfill meme4's obligations under applicable gaming licensing conditions, AML regulations, and any lawful request from a competent regulatory or law enforcement authority.

4 Legal Basis for Processing

meme4 processes your Personal Data on the following legal bases:

• Contractual necessity: Processing required to fulfill meme4's obligations under the account agreement with you, including account registration, payment processing, and delivery of gaming services.
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC/AML verification requirements and responsible gaming obligations under meme4's international gaming license.
• Legitimate interests: Processing carried out for meme4's legitimate business interests — such as fraud prevention, platform security, and service improvement — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for marketing communications and optional data uses, where meme4 has obtained your explicit, freely given, and informed consent. You may withdraw consent at any time by contacting meme4 support or updating your account communication preferences.

5 Data Sharing and Disclosure

meme4 does not sell, rent, or trade your Personal Data to third parties for their own commercial purposes. meme4 may share your data with the following categories of third party solely to the extent necessary to operate the platform and meet legal obligations:

5.1 Service Providers and Data Processors

meme4 engages vetted third-party service providers who process data on meme4's behalf under written contracts that impose data protection obligations at least as stringent as those described in this policy. These include:

• KYC / identity verification partners: To validate the authenticity of identification documents submitted during account verification.
• Payment processors and banking partners: To facilitate deposits and withdrawals via BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OVO, DANA, GoPay, ShopeePay, LinkAja, and other supported payment channels.
• Game content providers: Studios such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive session tokens and anonymized player identifiers necessary to deliver live and RNG game content. These providers do not receive your full identity data.
• Cloud infrastructure and cybersecurity providers: Hosting, storage, DDoS protection, and intrusion detection services used to maintain the security and availability of the meme4 platform.
• Customer support platform providers: Live chat and ticketing software used by meme4's support agents to communicate with players.

5.2 Legal and Regulatory Disclosure

meme4 may disclose your Personal Data to law enforcement agencies, regulators, courts, or other government authorities where required to do so by applicable law, court order, or lawful regulatory request. meme4 will notify affected players of any such disclosure to the extent permitted by law.

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of meme4's assets, your Personal Data may be transferred to the acquiring entity as part of that transaction. meme4 will provide notice of any such transfer and the acquiring entity will be required to honor this Privacy Policy.

6 Cookies and Tracking Technologies

meme4 uses cookies and similar technologies (including local storage and session storage) on meme4.bet. These technologies serve the following strictly defined purposes:

• Essential cookies: Required for the platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancing cookies. The platform cannot operate without these cookies and they cannot be disabled.
• Functional cookies: Used to remember your preferences, such as preferred language settings and display options, so that you do not need to re-enter them on each visit.
• Analytics cookies: Used to collect aggregate, anonymized data on how players navigate and interact with the meme4 platform. This data is used exclusively to improve platform design and performance. meme4 does not use third-party analytics platforms that build individual behavioral profiles.
• Security cookies: Used to detect and prevent fraudulent sessions, unauthorized access attempts, and bot activity.

meme4 does not use third-party advertising cookies, retargeting pixels, or any tracking technology that follows you across websites outside meme4.bet. You may manage cookie preferences through your browser settings; however, disabling essential cookies will impair or prevent your ability to log in and use the platform.

7 Data Retention

meme4 retains your Personal Data only for as long as is necessary to fulfill the purposes for which it was collected, subject to the following retention periods:

• Active account data: Retained for the duration of your account relationship with meme4, plus a minimum of five (5) years following account closure, to satisfy AML record-keeping obligations and respond to any post-closure regulatory inquiries.
• KYC documentation: Retained for a minimum of five (5) years from the date of verification, in accordance with applicable anti-money-laundering regulations.
• Transaction and wagering records: Retained for a minimum of five (5) years from the date of each transaction, for financial audit and regulatory compliance purposes.
• Customer support communications: Retained for three (3) years from the date of the final communication in a given support thread, unless the communication relates to an unresolved dispute, in which case it is retained until the dispute is fully resolved.
• Marketing preference records: Retained for as long as your account is active, and for one (1) year following account closure or withdrawal of consent, whichever occurs first.
• Technical logs: Retained for twelve (12) months on a rolling basis for security monitoring and fraud investigation purposes.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or irreversibly anonymized in accordance with meme4's internal data lifecycle procedures.

8 Data Security

meme4 implements a comprehensive set of technical and organizational security measures to protect your Personal Data against unauthorized access, accidental loss, destruction, or alteration. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data in transit between your device and meme4's servers.
• AES-256 encryption for sensitive data at rest, including KYC documents and payment details.
• Role-based access controls ensuring that only authorized meme4 personnel with a legitimate operational need can access Personal Data.
• Multi-factor authentication requirements for all meme4 internal systems that store or process player data.
• Regular independent penetration testing and vulnerability assessments of the meme4 platform and supporting infrastructure.
• Continuous real-time monitoring for anomalous access patterns, intrusion attempts, and data exfiltration indicators.
• Formal data breach response procedures, including a commitment to notify affected players without undue delay in the event of a breach that poses a material risk to their rights and interests.

9 International Data Transfers

meme4 is operated internationally. As a result, your Personal Data may be transferred to and stored on servers located outside Indonesia. Where such transfers occur, meme4 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that provided under this Privacy Policy. These safeguards include contractual data protection clauses with all receiving parties and, where applicable, transfers only to jurisdictions that provide an adequate level of data protection as recognized by relevant international standards.

In particular, meme4's primary data processing infrastructure uses cloud hosting providers operating under internationally recognized security certifications (including ISO 27001). All data processing agreements with third-party service providers in other jurisdictions include binding data protection obligations consistent with the standards described in this policy.

10 Your Data Rights

As a meme4 player, you hold the following rights in relation to your Personal Data. To exercise any of these rights, contact meme4's support team at [email protected]. meme4 will respond to all valid requests within thirty (30) days.

Please note that certain rights are subject to legal limitations. For example, meme4 cannot delete transaction records that it is legally required to retain for AML compliance purposes. Where meme4 cannot fulfill a request in full, it will explain the reason and the portion of the request that it is able to fulfill.

11 Children's Privacy

meme4 is strictly an adults-only platform. Individuals under the age of 21 are prohibited from registering, depositing, or wagering on meme4.bet under any circumstances. meme4 does not knowingly collect Personal Data from anyone under the age of 21. If meme4 becomes aware that Personal Data has been submitted by or on behalf of a person under 21, that data will be deleted immediately and the associated account will be permanently closed.

If you are a parent or guardian and believe that a minor in your care has created a meme4 account, please contact meme4 support immediately at [email protected] so that the account can be investigated and closed without delay.

12 Third-Party Links

The meme4 platform may, from time to time, contain references to third-party content such as sports data feeds or game studio information. meme4 does not operate any external websites and does not include hyperlinks to third-party websites within the player-facing platform. In the event that any such reference is present, meme4 accepts no responsibility for the privacy practices of third-party operators and encourages you to review the privacy policy of any external site you choose to visit independently.

13 Changes to This Privacy Policy

meme4 reserves the right to update or replace this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or platform operations. Where changes are material, meme4 will provide at least seven (7) days' advance notice by email to your registered address and/or by prominent notice on the meme4 platform before the updated policy takes effect.

Your continued use of the meme4 platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. We recommend reviewing this page periodically to stay informed of how meme4 protects your data. The "Last updated" date at the top of this page reflects the most recent revision.

14 Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your Personal Data, please contact meme4 through the following channels:

• Email: [email protected] — please include "Privacy Request" in the subject line for faster routing to our data protection team.
• Live Chat: Available 24/7 via the chat widget on meme4.bet, staffed by native Indonesian-speaking agents around the clock.
• Response Commitment: meme4 acknowledges all privacy-related written inquiries within 24 hours (WIB) and provides a substantive response within 30 calendar days.

meme4 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and applicable data protection law. The DPO can be reached via the email address above with the subject line "Attention: Data Protection Officer".

meme4's support team includes native Indonesian-speaking agents available 24/7, including during national public holidays such as Idul Fitri, Ramadhan, Nyepi, and Indonesian Independence Day (17 August). All formal data subject requests must be submitted in writing and will be acknowledged with a reference number within 24 hours of receipt.