merah88 Privacy Policy

1. Introduction

1.1 merah88 is committed to protecting the privacy and security of its Members. We recognise that personal data is a matter of trust, and we take our obligations as a data controller seriously under applicable privacy legislation and international gaming authority requirements.

1.2 This Policy applies to all personal data processed by merah88 in connection with the provision of its online gaming services, including the Live Casino, Sportsbook, Slots, Jackpot, and associated platform features accessible via merah88.win.

1.3 merah88 operates in compliance with applicable data protection frameworks, including the principles of purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.

2. Personal Data We Collect

2.1 merah88 collects personal data in the following categories:

2.2 merah88 does not collect sensitive personal data — such as racial or ethnic origin, religious beliefs, or health data — except where expressly required by responsible gaming obligations (e.g., self-exclusion records).

3. How We Collect Your Data

3.1 Directly from you: during account registration, KYC submission, deposit and withdrawal requests, support interactions, and promotional entries.

3.2 Automatically: through our platform technology, including server logs, cookies, session tracking, and analytics tools as you navigate and use merah88.win.

3.3 From third parties: identity verification providers, payment processors (including Touch n Go eWallet, Boost, DuitNow, FPX operators), fraud prevention services, and, where permitted, publicly available sources used for KYC screening.

4. Purpose of Processing

4.1 merah88 processes your personal data only for specified, explicit, and legitimate purposes, including:

• Registering and managing your merah88 account;
• Verifying your identity and age in compliance with KYC requirements;
• Processing deposits, withdrawals, and transaction reconciliation;
• Providing and improving merah88 gaming services, including personalised game recommendations;
• Detecting and preventing fraud, money laundering, cheating, and prohibited conduct;
• Administering bonuses, promotions, and loyalty programmes;
• Communicating with you regarding account matters, security alerts, and support queries;
• Complying with legal, regulatory, and licensing obligations;
• Responsible gaming monitoring and enforcement of self-exclusion or deposit limit requests;
• Conducting internal analytics and platform performance optimisation.

5. Legal Basis for Processing

5.1 merah88 processes your personal data on the following legal bases:

• Contractual necessity: processing required to provide the merah88 service to you as a registered Member, including account management, payments, and gaming operations;
• Legal obligation: processing required to comply with KYC, anti-money laundering (AML), and gaming licensing requirements;
• Legitimate interests: fraud prevention, platform security, and service improvement, where such interests are not overridden by your privacy rights;
• Consent: for optional marketing communications, where you have affirmatively opted in. Consent may be withdrawn at any time.

6. Data Sharing & Disclosure

6.1 merah88 does not sell, rent, or trade your personal data to third parties for commercial marketing purposes.

6.2 We may share your personal data with the following categories of third parties strictly for the purposes described in this Policy:

• Payment processors: Touch n Go eWallet, Boost, GrabPay, DuitNow, FPX-participating banks (Maybank, CIMB, Public Bank, etc.), and USDT processing partners — to facilitate deposits and withdrawals;
• KYC and identity verification providers: to verify your identity and age in compliance with licensing requirements;
• Fraud prevention and AML screening services: to detect prohibited activity and comply with anti-money laundering obligations;
• Game providers: game logs and session data may be shared with certified game providers (e.g., Evolution Gaming, Pragmatic Play) for dispute resolution purposes;
• Regulatory and law enforcement authorities: where required by applicable law, court order, or licensing authority mandate.

6.3 All third-party service providers engaged by merah88 are contractually bound to process personal data only in accordance with merah88's instructions and applicable data protection requirements.

7. Cookies & Tracking Technologies

7.1 merah88 uses cookies and similar tracking technologies on merah88.win to enhance platform performance, maintain session authentication, and collect anonymous usage analytics.

7.2 The following types of cookies are used:

• Essential cookies: strictly necessary for platform function, including login session maintenance and security tokens. These cannot be disabled;
• Analytics cookies: used to understand how Members navigate merah88.win, which pages are visited most, and where technical issues arise. Data is aggregated and anonymous;
• Preference cookies: used to remember your language, display, and notification preferences.

7.3 You may control non-essential cookies through your browser settings. Disabling certain cookies may affect platform functionality, particularly session management and personalisation features.

8. Data Retention

8.1 merah88 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and licensing obligations.

8.2 Account and transaction records are retained for a minimum of five (5) years following account closure in compliance with AML and gaming licensing requirements. This retention period may be extended where required by law or active regulatory inquiry.

8.3 Support communications are retained for a period of two (2) years, unless they form part of an ongoing dispute or regulatory matter.

8.4 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents recovery or identification.

9. Data Security

9.1 merah88 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data in transit between your device and merah88.win;
• Encryption at rest for sensitive personal and financial data stored on merah88 servers;
• Role-based access controls ensuring personal data is accessible only to authorised personnel with a legitimate need;
• Regular security audits, penetration testing, and vulnerability assessments;
• Two-factor authentication (2FA) options available to all merah88 Members for account protection.

9.2 In the event of a personal data breach that poses a risk to Member rights and freedoms, merah88 will take prompt remedial action and notify affected Members and relevant authorities in accordance with applicable notification obligations.

10. Your Data Rights

10.1 Subject to applicable law and regulatory constraints, merah88 Members hold the following rights in respect of their personal data:

• Right of access: you may request a copy of the personal data merah88 holds about you;
• Right to rectification: you may request correction of inaccurate or incomplete personal data;
• Right to erasure: you may request deletion of your personal data where retention is no longer necessary, subject to legal and regulatory retention obligations;
• Right to restriction: you may request that merah88 limit the processing of your data in certain circumstances;
• Right to data portability: you may request a machine-readable copy of personal data you have provided to merah88;
• Right to object: you may object to processing based on legitimate interests or for direct marketing purposes;
• Right to withdraw consent: where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

10.2 To exercise any of the above rights, contact the merah88 support team via live chat with the subject "Data Rights Request." merah88 will respond within 30 days. Identity verification may be required before processing your request.

11. Children's Privacy

11.1 If you believe a person under the age of 21 has registered on merah88, please notify our support team immediately via live chat so that appropriate action can be taken.

12. Marketing Communications

12.1 With your consent, merah88 may send you promotional communications regarding new games, special offers, jackpot events, and sportsbook promotions via email or in-platform notifications.

12.2 You may withdraw consent for marketing communications at any time by updating your notification preferences within your merah88 account settings or by contacting support. Withdrawal of marketing consent does not affect essential service communications such as account security alerts, transaction confirmations, or KYC notices.

12.3 merah88 does not engage in SMS marketing without explicit prior consent and does not share Member contact details with third-party marketers.

13. International Data Transfers

13.1 In connection with the provision of merah88 services, your personal data may be transferred to and processed in jurisdictions outside Malaysia where merah88's service providers or data infrastructure are located.

13.2 Where such transfers occur, merah88 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this Policy, including contractual data processing agreements with all relevant third parties.

14. Changes to This Privacy Policy

14.1 merah88 reserves the right to update or amend this Privacy Policy at any time. Material changes will be notified to Members via email or a prominent notice on the merah88 platform at least seven (7) days before the changes take effect.

14.2 The "Last Updated" date at the top of this Policy reflects the most recent revision. Your continued use of merah88 following the effective date of any revision constitutes acceptance of the updated Policy.

15. Contact & Data Enquiries

15.1 For any questions, concerns, or requests relating to this Privacy Policy or the personal data merah88 holds about you, please contact the merah88 support team:

• Live Chat: Available 24/7 via merah88.win — fastest response method
• Email: [email protected] (plain text — not a clickable link)
• WhatsApp: Plain text enquiries via WhatsApp Support

15.2 merah88 aims to respond to all data enquiries within 30 days. Complex requests may require additional time, in which case we will notify you of the expected response timeline.