Privacy Policy

In this Privacy Policy, the following terms carry the meanings assigned to them below unless the context clearly requires otherwise:

meme4 collects Personal Data through several channels: directly from you during registration and account management, automatically through your use of the Platform, and from third parties during identity verification. The categories of data we collect are described below.

2.1 Registration Data

When you create an account on the Platform, we collect:

• Full legal name (as it appears on your national identity card, KTP, or passport)
• Date of birth (to verify you are 21 years of age or older)
• Indonesian mobile phone number
• Active email address
• Preferred username and encrypted password
• Residential address in Indonesia

2.2 KYC and Verification Data

To comply with anti-money-laundering (AML) and fraud prevention obligations, we may collect copies of:

• National identity card (KTP), passport, or Indonesian driving licence (SIM)
• Proof of residential address (utility bill or bank statement issued within the last three months)
• Proof of payment method — screenshots or photographs of your BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, or LinkAja account registered in your own name
• Source-of-funds documentation in high-value cases (payslips, business registration, tax returns)

2.3 Transaction Data

Each time you deposit or withdraw funds, we record the transaction amount (in Indonesian Rupiah, IDR), the payment method used, the transaction timestamp (WIB, UTC+7), and the transaction reference number issued by your bank or e-wallet provider.

2.4 Betting and Gaming Activity

We maintain a complete record of all bets placed on the Platform, including stake amounts, odds accepted, markets selected (e.g., BRI Liga 1 football matches, togel draws, live casino tables), outcomes, and net balance changes. This data is used for dispute resolution, fraud detection, and regulatory reporting.

2.5 Technical and Device Data

When you access the Platform, our servers automatically record:

• IP address and approximate geographic location (city and province level within Indonesia)
• Device type, operating system, and browser version
• Session start/end timestamps and duration
• Pages visited, features accessed, and click-path data
• Referring URL (the address of the website that directed you to the Platform)

2.6 Communications Data

If you contact our support team via email or WhatsApp, we retain records of the conversation, including your contact details and the content of your messages, to assist with ongoing queries and to improve our service quality.

meme4 processes your Personal Data for the following purposes, each of which is tied to a specific legal basis described in Section 4:

meme4 processes your Personal Data under one or more of the following legal bases:

• Contractual Necessity: Processing required to fulfill our obligations under the Terms & Conditions you accepted at registration — including account creation, payment processing, and bet settlement.
• Legitimate Interests: Processing necessary for meme4's legitimate business interests, including fraud prevention, platform security, AML compliance, and service improvement, provided those interests are not overridden by your fundamental privacy rights.
• Legal Obligation: Processing required to comply with applicable laws, regulations, and lawful orders from regulatory or law enforcement authorities in the jurisdictions where meme4 holds its operating licence.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for promotional communications. You may withdraw consent at any time without detriment to your account standing.

meme4 does not sell, rent, or trade your Personal Data. We may share your data with the following categories of third parties strictly on a need-to-know basis and under appropriate data protection agreements:

• Payment Service Providers: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the minimum transaction data necessary to execute and confirm your deposit or withdrawal.
• Identity Verification Partners: Third-party KYC and AML service providers may process copies of your identity documents to perform automated or manual verification checks. These providers are contractually bound to process data solely for verification purposes and to maintain equivalent security standards.
• Game Content Providers: Studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive anonymized session tokens to deliver game content. They do not receive your full personal profile.
• Technology Infrastructure Providers: Cloud hosting, content delivery, and cybersecurity vendors that process data on our behalf under strict data processing agreements.
• Regulatory and Law Enforcement Authorities: Where required by law, court order, or valid regulatory request, meme4 may disclose Personal Data to competent governmental or law enforcement bodies in Indonesia or internationally. We will notify you of such disclosures where legally permitted to do so.
• Corporate Transactions: In the event of a merger, acquisition, or sale of assets, your Personal Data may be transferred to the acquiring entity, subject to equivalent privacy protections. You will be notified of any such transfer in advance.

meme4 uses cookies and similar tracking technologies to operate the Platform, maintain your session, and understand how users interact with our services. The types of cookies we deploy are as follows:

You may configure your browser to refuse cookies or to alert you when cookies are being set. Please note that disabling strictly necessary cookies will prevent you from logging in and using the Platform's core features. Disabling analytics cookies will not affect your ability to bet or manage your account.

meme4 does not use third-party advertising cookies or retargeting pixels that track your browsing behavior across external websites.

meme4 retains Personal Data only for as long as necessary to fulfill the purpose for which it was collected, or as required by applicable law. Our standard retention schedule is as follows:

At the end of the applicable retention period, Personal Data is securely deleted or irreversibly anonymized. Where a legal hold is in place (for example, pending litigation or regulatory inquiry), data may be retained beyond the standard period until the hold is lifted.

As a data subject, you hold the following rights in respect of the Personal Data meme4 holds about you. To exercise any of these rights, contact us at [email protected] with your account username and a clear description of your request. We will respond within 5 business days.

meme4 implements a layered set of technical and organizational security measures designed to protect your Personal Data against unauthorized access, accidental loss, alteration, or disclosure. These measures include:

• Encryption in Transit: All data transmitted between your device and our servers is encrypted using TLS 1.2 or higher (256-bit SSL).
• Encryption at Rest: Sensitive data fields, including identity document references and financial account identifiers, are encrypted in our databases using AES-256.
• Access Controls: Access to Personal Data is restricted on a strict need-to-know basis. Staff members access only the data required to perform their specific role, and all access is logged and audited.
• Two-Factor Authentication (2FA): Internal systems require 2FA for all staff accessing production databases and administrative tools.
• Intrusion Detection: Automated systems monitor network traffic for anomalous patterns, potential breaches, and DDoS activity on a 24/7 basis.
• Penetration Testing: The Platform undergoes regular third-party security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.

While meme4 employs industry-standard security practices, no system is completely immune to attack. You are responsible for keeping your login credentials confidential and for notifying us immediately at [email protected] if you suspect unauthorized access to your account.

meme4 operates globally, and some of your Personal Data may be transferred to and processed in countries outside Indonesia. This occurs when we use cloud infrastructure providers, KYC verification partners, or game content studios whose servers are located in other jurisdictions.

Wherever Personal Data is transferred outside Indonesia, meme4 takes appropriate steps to ensure that the receiving country or organization provides an adequate level of protection for your data. These steps may include:

• Entering into standard contractual clauses with recipients that impose equivalent data protection obligations
• Relying on the recipient's adherence to recognized international data protection frameworks or certifications
• Conducting transfer impact assessments where required by applicable law

If you would like more information about the specific safeguards applied to international transfers of your Personal Data, please contact us at [email protected].

The Platform is strictly intended for adults aged 21 years and older. meme4 does not knowingly collect Personal Data from individuals under the age of 21. Age verification is a mandatory step in the registration process, and KYC checks are used to confirm age where necessary.

If meme4 discovers that Personal Data has been collected from a person under the age of 21, that account will be closed immediately, all associated funds will be forfeited, and all related Personal Data will be securely deleted as soon as practically possible.

The Platform may contain references to third-party services (such as payment gateways or game studios) in a descriptive context. meme4 does not embed or link to external third-party websites in a manner that would redirect you away from the Platform without your knowledge.

Where integrations with third-party payment providers (BCA, BRI, OVO, DANA, GoPay, etc.) occur, those providers operate under their own privacy policies and terms of service. meme4 is not responsible for the data practices of those providers. We recommend reviewing the privacy policy of any payment provider you use before initiating transactions.

meme4 reserves the right to amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory guidance. The effective date at the top of this page will be updated whenever a revision is made.

For material changes — those that significantly affect how we collect or use your Personal Data — meme4 will provide at least 7 days' advance notice via email to your registered address and/or via a prominent in-platform notification.

Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not accept the revised policy, you must close your account and cease using the Platform before the effective date.

All previous versions of this Privacy Policy are archived and available on request by contacting our support team.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a privacy concern, please reach out to our team using the contact details below. All contact information is provided as plain text — please copy details manually into your preferred communication application.

For formal data subject requests (access, erasure, portability, etc.), please include your registered account username and a clear description of the data right you wish to exercise. meme4 will acknowledge your request within 24 hours (WIB) and provide a substantive response within 5 business days.

We are committed to resolving all privacy concerns fairly and transparently. If you are not satisfied with our response, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.