Privacy Policy — mom4d

For the purposes of this Privacy Policy, the following terms shall carry the meanings defined below:

• "Personal Data" means any information relating to an identified or identifiable natural person — directly or indirectly — including but not limited to name, identification number, location data, online identifier, or factors specific to the physical, economic, cultural, or social identity of that person.
• "Processing" means any operation performed on Personal Data, whether automated or manual, including collection, recording, storage, alteration, retrieval, disclosure, transmission, restriction, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data. For all purposes under this Policy, the Data Controller is mom4d International Ltd.
• "Data Processor" means any third party that processes Personal Data on behalf of the Data Controller under contractual obligation and documented instruction.
• "User," "you," or "your" means any individual who accesses or uses the mom4d platform at mom4d.lat.
• "Platform" means the website accessible at mom4d.lat and all associated mobile-optimized interfaces operated by mom4d International Ltd.
• "Cookies" means small text files stored on your device by your web browser at the request of the Platform for the purpose of session management, preference storage, and analytics.
• "KYC" means Know Your Customer — the regulatory identity and age verification process mandated for licensed online gaming operators.

The Data Controller responsible for your Personal Data collected through the mom4d platform is:

mom4d International Ltd. is the sole entity responsible for determining how and why your Personal Data is processed in connection with your use of the Platform and the betting, casino, and gaming services offered thereon. Any third-party processors engaged by the Company act solely under documented instruction and are contractually bound to maintain standards of data protection consistent with this Policy.

mom4d collects Personal Data across several categories. The specific data points collected depend on the nature of your interaction with the Platform:

Personal Data is collected through the following mechanisms:

• Direct Provision: Data you actively provide by completing the registration form, submitting KYC documents, contacting customer support, or updating your Account profile settings.
• Automated Collection: Technical and Usage Data collected automatically through server logs, cookies, pixel tags, and browser-based tracking technologies whenever you access the Platform. See Section 10 (Cookies & Tracking) for full details.
• Payment Processors: Confirmation data returned by payment gateways (BCA Virtual Account, BRI, BNI, Mandiri, GoPay, OVO, DANA, ShopeePay, LinkAja) confirming the status of deposit and withdrawal transactions.
• Identity Verification Providers: Results and risk-scoring data returned by our contracted KYC identity verification service providers following submission of identity documents.
• Anti-Fraud and AML Screening: Data returned by third-party anti-money laundering (AML) screening tools when your identity or transaction profile is cross-referenced against watchlists, sanctions lists, and politically exposed persons (PEP) databases.
• Third-Party Analytics: Aggregated behavioural analytics data from web analytics platforms that we use to improve Platform performance and user experience. This data is anonymized before it reaches our analytics dashboard and cannot be used to re-identify individual users.

mom4d processes your Personal Data for the following specific and documented purposes:

• Account Management: To create, maintain, administer, and secure your Account on the Platform, including authenticating your identity at each login session.
• Service Delivery: To provide the sports betting, live casino, slot, togel (Indonesia's traditional numbers lottery), Domino QQ, and Live Blackjack services you have registered to access.
• Age and Identity Verification (KYC): To comply with our obligations under applicable gaming regulations by verifying that all registered users are at least 21 years of age and are who they claim to be before processing any withdrawal request.
• Payment Processing: To process deposits and withdrawals in Indonesian Rupiah (IDR / Rp) through supported local payment channels, to reconcile transaction records, and to detect and prevent payment fraud.
• Regulatory Compliance and AML: To meet anti-money laundering (AML) and counter-terrorism financing (CTF) obligations, including ongoing transaction monitoring and reporting to competent authorities where legally required.
• Responsible Gaming: To monitor account activity for indicators of problem gambling, to enforce self-imposed deposit limits and self-exclusion requests, and to intervene proactively where account patterns suggest a player may need support. See our Responsible Gaming page for details.
• Customer Support: To respond to your inquiries, resolve disputes, and process complaints submitted via live chat or email at [email protected].
• Platform Security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, bonus abuse, multi-accounting, and other conduct that violates our Terms & Conditions.
• Platform Improvement: To analyze aggregated usage patterns and technical performance data for the purpose of improving the Platform's features, reliability, and user experience.
• Direct Marketing: To send you promotional communications about bonuses, new games, and seasonal offers (e.g., Idul Fitri promotions, Independence Day offers) where you have consented to receive such communications. You may withdraw this consent at any time via your Account settings.

Each processing activity carried out by mom4d is grounded in one of the following recognized legal bases:

• Contractual Necessity: Processing required to perform the contract between you and mom4d — specifically Account creation, service delivery, and payment processing — is carried out on the basis that it is necessary for the performance of that contract.
• Legal Obligation: Processing carried out to fulfill mandatory legal requirements — including KYC age and identity verification, AML transaction monitoring, and regulatory reporting — is undertaken on the basis of compliance with applicable law.
• Legitimate Interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and aggregated analytics is based on the legitimate interests of mom4d International Ltd. and its users, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for direct marketing communications — including promotional emails about bonuses and new product launches — is based on your freely given, specific, and informed consent obtained at registration or subsequently through your Account settings. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

mom4d shares your Personal Data only with the categories of third parties described below, and only to the extent strictly necessary for the stated purpose:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallet providers (GoPay, OVO, DANA, ShopeePay, LinkAja) receive transaction-level data necessary to execute your deposit and withdrawal requests. These providers operate under their own privacy policies and are regulated by Bank Indonesia (BI) and the Financial Services Authority (OJK).
• KYC and Identity Verification Providers: Your identity document data (KTP, passport) and selfie verification images are shared with contracted identity verification service providers for the sole purpose of completing the KYC process. These providers are contractually prohibited from using your data for any purpose other than verification.
• AML Screening Services: Your name, date of birth, and nationality may be submitted to AML watchlist and PEP screening databases to comply with financial crime prevention obligations.
• Game Software Providers: Game studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft) may receive anonymized session identifiers for the purpose of game-state synchronization and fairness auditing. These providers do not receive your name, contact details, or financial data.
• Legal and Regulatory Authorities: We may disclose your Personal Data to law enforcement agencies, financial intelligence units, or other competent regulatory authorities where required by applicable law, court order, or binding regulatory directive. We will notify you of such disclosures where legally permitted to do so.
• Professional Advisors: Auditors, legal counsel, and compliance consultants engaged by mom4d International Ltd. may access your data on a strictly need-to-know basis under enforceable confidentiality obligations.

mom4d retains your Personal Data for no longer than is necessary to fulfil the purpose for which it was collected, subject to the minimum retention periods required by applicable regulatory obligations. The following retention schedule applies:

Following the expiry of the applicable retention period, Personal Data is securely deleted or anonymized such that it can no longer be associated with any identifiable individual. Anonymized, aggregated data may be retained indefinitely for statistical and analytical purposes.

mom4d implements a layered set of technical and organizational security measures to protect your Personal Data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your browser and the Platform is encrypted using industry-standard TLS 1.3 protocols. The padlock icon displayed in your browser's address bar confirms that your session is secured.
• Encryption at Rest: Sensitive Personal Data stored in our databases — including identity document images, KYC verification results, and financial data — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to Personal Data within mom4d's internal systems is restricted on a strict need-to-know basis. All staff with access to Personal Data undergo background screening and receive mandatory data protection training.
• Two-Factor Authentication (2FA): Internal administrative access to systems containing Personal Data requires multi-factor authentication. Users are strongly encouraged to enable 2FA on their own Accounts via Account settings.
• Penetration Testing: The Platform undergoes regular independent penetration testing and vulnerability assessments to identify and remediate security weaknesses before they can be exploited.
• Incident Response: In the event of a data breach that is likely to result in a risk to the rights and freedoms of affected users, mom4d will notify affected users without undue delay and take all reasonable steps to contain and remediate the breach.

Despite these measures, no internet-based system is completely immune from security risk. You are responsible for maintaining the security of your own Account credentials and for notifying us immediately at [email protected] if you suspect unauthorized access to your Account.

mom4d uses cookies and similar tracking technologies to operate core Platform functionality and to improve your browsing experience. The following categories of cookies are in use:

• Strictly Necessary Cookies: These cookies are required for the Platform to function. They manage your login session, maintain your Account authentication state, and enable core security features such as CSRF protection. These cookies cannot be disabled without breaking the Platform's functionality.
• Performance and Analytics Cookies: These cookies collect anonymized information about how visitors use the Platform — including which pages are visited most frequently, how users navigate between sections, and where errors occur. This data is used exclusively to improve Platform performance and is not linked to any individual user identity.
• Functionality Cookies: These cookies remember your preferences — such as your preferred payment method, language settings, and game lobby filters — so you do not have to reconfigure them on each visit.
• Targeting and Marketing Cookies: These cookies are used, where you have provided consent, to deliver relevant promotional content about mom4d products within the Platform. We do not use third-party advertising networks or serve ads from external platforms.

You may control your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in or using core Platform features. Your cookie preferences can also be updated via the Cookie Preferences panel accessible from the Platform's footer.

As a user of the mom4d platform, you have the following rights with respect to your Personal Data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request." We will respond within 30 calendar days of receiving a verifiable request.

• Right of Access: You have the right to request a copy of the Personal Data we hold about you, including a description of the categories of data, the purposes for which it is processed, and the third parties with whom it has been shared.
• Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
• Right to Erasure ("Right to Be Forgotten"): You may request the deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent and no other legal basis applies, or where the data has been unlawfully processed. Note that this right is subject to overriding legal retention obligations — for example, KYC and transaction records that we are legally required to retain for five years cannot be erased on request.
• Right to Restriction of Processing: You may request that we restrict the processing of your Personal Data in certain circumstances — for example, while you contest the accuracy of the data, or where you have objected to processing based on legitimate interests and we are assessing that objection.
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract, you have the right to receive the Personal Data you have provided to us in a structured, commonly used, machine-readable format, and to transmit that data to another controller.
• Right to Object: You have the right to object to processing of your Personal Data carried out on the basis of legitimate interests, including profiling. You also have an absolute right to object to direct marketing communications at any time, with immediate effect.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time via your Account settings. Withdrawal does not affect the lawfulness of any processing carried out prior to withdrawal.

The mom4d platform is strictly for adults aged 21 and over. We do not knowingly collect Personal Data from individuals under the age of 21. Age verification is a mandatory component of the KYC process, and no withdrawal will be processed until age has been confirmed against a valid Indonesian government-issued identity document.

If we become aware that Personal Data has been collected from a person under 21 years of age, we will immediately close the associated Account, return any deposited funds to the verified payment method, and permanently delete all Personal Data associated with that Account from our systems, except where retention is required by applicable law.

If you believe that a person under 21 has registered an Account on the Platform, please notify us immediately at [email protected]. We take all reports of underage access seriously and will investigate and act on them as a matter of priority. 21+ only. Play responsibly.

As an internationally operated platform serving Indonesian users, some processing activities may involve the transfer of your Personal Data to servers or service providers located outside of Indonesia. Where such transfers occur, mom4d ensures that appropriate safeguards are in place to maintain a level of data protection equivalent to that provided under this Policy, including:

• Standard Contractual Clauses (SCCs) incorporated into Data Processing Agreements with all third-party processors located in jurisdictions without an adequacy determination.
• Binding Corporate Rules where applicable within the mom4d corporate group.
• Transfer to jurisdictions recognized as providing an adequate level of data protection by the relevant competent authority.

By registering an Account and using the Platform, you acknowledge and consent to the transfer of your Personal Data to the extent described in this section, subject to the safeguards detailed above.

mom4d International Ltd. reserves the right to amend this Privacy Policy at any time. Material changes — those that substantively affect your rights, the categories of data we collect, our data sharing practices, or the purposes for which we process your data — will be communicated to you by email notification to your registered address at least 14 days before the amended Policy takes effect.

Minor changes, including corrections of typographical errors, clarifications that do not alter your substantive rights, and updates necessitated by changes in applicable law, may be made without prior notice and will take effect immediately upon publication on the Platform.

The "Last Updated" date displayed at the top of this Policy reflects the most recent revision. We encourage you to review this Policy periodically to stay informed about how we protect your Personal Data. Your continued use of the Platform following any amendment constitutes your acceptance of the revised Policy. If you do not accept the revised terms, please contact [email protected] to arrange account closure before the effective date of the change.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which mom4d processes your Personal Data, please contact our Data Protection team through the following channels:

• Email: [email protected] — monitored 24 hours a day, 7 days a week by Indonesian-speaking support agents. For data protection matters, include "Privacy Request" or "Data Rights Request" in your subject line to ensure your message is routed to the correct team.
• Live Chat: Available within the Platform after logging in to your Account. Average first-response time is under 90 seconds during peak WIB (UTC+7) hours.

We are committed to resolving all privacy concerns promptly and transparently. If you are not satisfied with our response to your privacy concern, you may escalate your complaint to the relevant data protection supervisory authority in the jurisdiction in which mom4d International Ltd. is incorporated.

For self-exclusion requests, responsible gaming support, or Account closure due to problem gambling, please visit our dedicated Responsible Gaming page or contact support directly. All responsible gaming requests are treated as priority matters and processed with the utmost discretion.