How mentol4d Protects Your Account
Our security framework begins at account creation. When you register on mentol4d, we collect your email, phone number, and initial password. We then ask you to verify your email and confirm your phone via one-time code. This dual verification ensures that the account is being set up by someone with access to your actual contact details, not a third party using stolen information.
Next comes Know Your Customer (KYC) verification. You upload a copy of your national identity document (KTP, passport, or driving licence), a proof of address (utility bill, rental agreement, or government letter), and sometimes a selfie holding your ID. Our team reviews these documents against your registered details. If there are discrepancies or documents are unclear, we request resubmission. This process typically completes within one to two business days. Until KYC is approved, your account has limited functionality—you cannot withdraw funds or make large deposits.
Two-Factor Authentication on mentol4d
After KYC approval, we strongly recommend enabling two-factor authentication (2FA) on your account. When 2FA is active, every login requires not only your password but also a time-based code from an authentication app on your phone. Even if someone obtains your password, they cannot access your account without this second factor.
We support authenticator apps such as Google Authenticator or Authy. Once you enable 2FA, back up your recovery codes in a safe location. If you lose access to your phone, recovery codes allow you to regain account access without losing your balance or game history.
Payment Security and Withdrawal Review
When you deposit on mentol4d via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank transfer, your payment is processed through encrypted channels. Your payment credential (bank account number, e-wallet ID, or card details) is not stored on our platform in plain text. Instead, we retain a tokenised reference that our payment processor uses to match future transactions back to your account.
Withdrawals follow a more stringent process. You request a withdrawal, specify the amount and destination (the same payment method you used to deposit, or an approved alternative). Our system flags the withdrawal for review if it exceeds certain thresholds, differs significantly from your typical session patterns, or occurs at unusual times (such as multiple withdrawals within minutes). Our team then reviews the request, verifies your identity, confirms the destination matches your registered account, and processes the transfer.
Security friction—review delays, document requests, verification windows—protects your account far more effectively than frictionless convenience.
Detecting and Responding to Suspicious Activity
We monitor your account for signs of unauthorised access or fraud. Red flags include login attempts from unusual geographic locations (for example, a login from Semarang minutes after a login from Medan), multiple failed password attempts, sudden changes to account contact details, or withdrawal requests to new payment methods. When we detect such patterns, we may freeze the account temporarily, request additional verification, or contact you via phone to confirm the activity.
If you suspect your account has been compromised—such as noticing transactions you did not authorise or login notifications for sessions you did not initiate—contact our support team immediately. Provide details of the suspicious activity and any evidence you have (screenshots of unauthorised transactions, login timestamps, withdrawal destinations). We investigate, reset your password, review game history, and determine whether to reverse any fraudulent transactions. Our response time depends on business hours and the complexity of the investigation, but we prioritise account-takeover cases.
Your Role in Keeping Your Account Secure
While mentol4d maintains robust infrastructure, your personal security practices are equally important. Use a unique, strong password for your mentol4d account—avoid reusing passwords from other websites or services. Passwords should be at least 12 characters and include a mix of letters, numbers, and symbols. Store your password in a password manager (such as Bitwarden or 1Password) rather than writing it down or sharing it.
Enable two-factor authentication and keep your authentication app backed up. Do not share your 2FA codes or recovery codes with anyone, including mentol4d staff (we will never ask for them). Log out of your mentol4d account when you finish a session, especially if you are using a shared or public device. Review your account activity log regularly to spot unauthorised logins or unexpected transactions. If you are playing during peak periods—such as Liga 1 matches or Idul Fitri holidays—do not leave your logged-in session unattended.
Security Practices
- Use unique, strong passwords stored in a manager
- Enable two-factor authentication immediately after account creation
- Review account activity logs weekly
- Log out when finished, especially on shared devices
Avoid These Mistakes
- Never share your password, email, or phone number with anyone claiming to be mentol4d staff
- Do not use public Wi-Fi for account logins or sensitive transactions
- Avoid clicking links in unsolicited emails or text messages claiming to be from mentol4d
- Do not leave your account logged in unattended
Account Recovery and Support
If you lose access to your account—such as forgetting your password or losing access to your phone's authentication app—our support team can help. We verify your identity using information from your KYC documents and account registration. Once verified, we can reset your password or disable 2FA temporarily so you can regain access. Recovery typically takes one to two business days, longer if verification requires additional steps.
Our multilingual support team is available during standard business hours (08:00–23:00 WIB, Monday through Sunday, with extended hours during Idul Fitri, Idul Adha, Imlek, and Nyepi). Contact us via email, live chat on the platform, or phone. Provide your account email or phone number, and explain the issue. We will guide you through the recovery process and confirm your identity before making account changes.