Mudah4d Privacy Policy – Malaysian User Data Protection

Mudah4d ("we", "platform", "company") operates the mudah4d.run website and the mudah4d mobile application for Android and iOS. As an online betting platform operating in Malaysia, we are bound by the Personal Data Protection Act 2010 (Malaysia PDPA) in all matters involving the collection, processing and storage of users' personal data.

This Privacy Policy ("Policy") describes:

• The types of personal information mudah4d collects from you as a platform user.
• The purposes and legal basis for the collection and processing of that data.
• The parties with whom your information may be shared, and under what circumstances.
• The security measures mudah4d has in place to protect your data.
• Your rights as a data subject under Malaysia's PDPA and how to exercise them.

This policy applies to all mudah4d users regardless of whether you access the platform via a desktop web browser, Android or iOS smartphone, or any other interface that mudah4d may provide in the future.

Mudah4d collects your personal data through several means — directly when you register or use the platform, automatically through tracking technologies, and in certain cases from legitimate third-party sources. Below is a table of the types of data collected:

Mudah4d does not collect sensitive data such as medical information, political views, or religious beliefs. Biometric data is also not collected except in very limited circumstances requiring advanced identity verification, and only with your explicit consent.

Mudah4d uses your personal data for the following purposes, all of which have a valid legal basis under Malaysia's PDPA:

• Account Management: To create, verify and manage your mudah4d account, including the registration process, login and OTP verification via your Malaysian phone number.
• Transaction Processing: To process deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow or FPX, and to process withdrawals to your digital wallet or Malaysian bank account.
• Service Provision: To provide access to all mudah4d games and services, including slots, Live Casino, Sports Betting (Malaysia Super League, EPL, badminton, IPL cricket), table games and jackpots.
• Security & Fraud Prevention: To detect and prevent fraud, money laundering, multiple account use, and any activity that violates mudah4d's Terms & Conditions.
• Legal Compliance: To fulfil mudah4d's legal obligations, including identity verification requirements, financial reporting and compliance with directions from lawful authorities.
• Customer Support: To respond to enquiries, handle complaints, and provide technical assistance via live chat, WhatsApp, or email in Bahasa Melayu.
• Responsible Gaming: To monitor usage patterns in order to detect signs of problem gambling and to ensure that self-exclusion tools are functioning correctly.
• Marketing Communications: To send you information about mudah4d's latest promotions, bonuses, and offers — only where you have given your consent to receive marketing communications. You may withdraw this consent at any time.
• Platform Improvements: To analyse aggregated usage patterns for the purpose of improving user experience, platform performance, and new features on mudah4d.

Mudah4d will not use your personal data for any purpose other than those stated above without first obtaining fresh consent from you. If we plan to use your data for a new purpose not covered by this Policy, we will inform you and obtain the appropriate consent.

Mudah4d does not sell users' personal data to any party. However, in the course of operating the platform, there are situations where data must be shared with certain parties. Below is a full list of those parties and the reasons for sharing:

• Payment Processors: Payment gateways integrating Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX receive the transaction information necessary to process your deposits and withdrawals. This data is the minimum required to complete each transaction.
• Game Providers: Game software companies that supply slots, Live Casino and table games to mudah4d may receive your unique account number (not your full name or any other personal information) for game processing and jackpot settlement purposes.
• Identity Verification Services: In cases requiring KYC verification, an approved third-party identity verification service provider may process a copy of your documents. These providers are bound by strict confidentiality agreements with mudah4d.
• Legal Authorities: mudah4d will disclose user data to Malaysian authorities (police, courts, Companies Commission of Malaysia, Bank Negara Malaysia) when lawfully required by a court order or applicable legislation.
• Technical Support Services: IT infrastructure and cloud service providers used by mudah4d to operate the platform. All such providers are bound by data processing agreements that comply with strict data protection standards.

Mudah4d does not share user data with marketing companies, data brokers or any party without a legitimate operational need. Should mudah4d's business structure change — for example through an acquisition or merger — users will be notified in advance and their rights under this Policy will be preserved.

User data security is mudah4d's highest priority. We implement multiple layers of technical and organisational protection to keep your data safe from unauthorised access, disclosure, alteration, or destruction.

Technical security measures implemented by mudah4d:

• Data Encryption in Transit: All communications between your device and mudah4d's servers are secured with TLS 1.3 using AES-256 encryption. Our SSL certificates are automatically renewed and continuously monitored.
• Data Encryption at Rest: Sensitive personal data and financial information stored in mudah4d's databases are encrypted using AES-256 encryption at rest.
• Access Controls: Access to user data within mudah4d's internal systems operates on a least-privilege principle — staff may only access the data necessary to carry out their responsibilities. All access is logged and audited.
• Two-Factor Authentication: mudah4d's internal systems containing user data are protected with two-factor authentication (2FA) for all staff.
• Continuous Monitoring: An intrusion detection system (IDS) monitors network traffic 24/7 for any suspicious activity. Automated alerts are sent to the security team for immediate action.
• Security Audits: mudah4d conducts regular internal security audits and engages third-party penetration testers at least once a year.

Data Retention Period: mudah4d retains user data for as long as the account remains active, and for the period required after account closure to fulfil legal obligations:

• Financial transaction data: 7 years (Malaysian legal requirement)
• Gaming activity records: 5 years
• Customer support communication logs: 3 years
• Technical data (access logs): 90 days
• Marketing data (if consent is withdrawn): Deleted within 30 days

Mudah4d uses cookies and similar tracking technologies to enhance your experience on the platform. Below are the types of cookies used and their purposes:

• Essential Cookies: Required for core platform functionality — including maintaining your login session, saving language preferences, and processing transactions securely. These cookies cannot be disabled as they are essential to platform operation. No personally identifiable information is shared through these cookies.
• Performance Cookies: Collects information on how you use mudah4d — pages visited, time spent and any errors encountered. This data is used in aggregate form to improve platform performance and is not used to identify you personally.
• Functional Cookies: Saving your preferences such as display settings, favourite game selections, and frequently used payment methods to speed up your deposit process. This enables a more personalised experience without you having to reconfigure your settings each time you log in.
• Analytics Cookies: Helping mudah4d understand overall platform usage patterns. Analytics data is processed in aggregate and anonymised form — we cannot identify individual users from analytics data.

You can manage your cookie settings through your web browser at any time. However, disabling essential cookies will affect mudah4d platform functionality, including the ability to log in and make transactions. For the mudah4d mobile app, you can manage tracking permissions through your smartphone's privacy settings.

As a mudah4d user based in Malaysia, you have the following rights under the Personal Data Protection Act 2010 (PDPA Malaysia). mudah4d is committed to respecting and facilitating the exercise of these rights:

Mudah4d is an online betting platform strictly restricted to individuals aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18.

As part of the registration process, we require age verification through a valid Malaysian phone number and, in certain cases, through identity documents. Should mudah4d determine that personal data has been collected from a minor, we will:

• Closing the account in question immediately.
• Deleting all personal data collected from that individual.
• Cancels any related financial transactions and returns the funds to the original payment method.

If you are a parent or guardian and believe that your child under the age of 18 has registered a mudah4d account, please contact us immediately at support@mudah4d.run with the relevant account details. We will take immediate action to close the account and remediate the data.

In the course of operating the platform, mudah4d users' personal data may be processed or stored on servers located outside Malaysia. This includes cloud infrastructure servers used to maintain high platform reliability and performance.

When personal data is transferred outside Malaysia, mudah4d ensures that:

• The recipient country or territory provides a level of data protection comparable to Malaysia's PDPA, or
• Appropriate contractual agreements — including standard data protection clauses — have been put in place with data processors in that country to ensure adequate protection, or
• The transfer is necessary for the performance of a contract between you and mudah4d (for example, to process international payment transactions).

Mudah4d does not transfer users' personal data to countries or territories without adequate data privacy protections unless appropriate additional safeguards are in place. A list of countries where data may be processed is available upon request — email support@mudah4d.run with the subject "Data Transfer Enquiry".

Mudah4d reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or new service features. Amendments will be communicated to users through:

• A prominent notice on the mudah4d.run homepage prior to the amendment taking effect.
• Email to the registered email address on your account.
• Push notifications via the mobile app (if notifications are enabled).

For material amendments that affect how we use your data or your rights, we will provide at least 30 days before the amendments take effect. Continued use of the mudah4d platform after the effective date of any amendment will be considered acceptance of the revised terms.

If you do not agree with any amendments made to this Privacy Policy, you have the right to close your account and request deletion of your personal data (subject to legally mandated retention periods) before the amendment takes effect. To do so, please contact the mudah4d support team at support@mudah4d.run.