Privacy Policy

Contents

1. Introduction
2. Data Controller
3. Data We Collect
4. How We Collect Data
5. Legal Basis for Processing
6. How We Use Your Data
7. Sharing Your Data
8. Cookies & Tracking
9. Data Retention
10. Data Security
11. International Transfers
12. Your Rights
13. Children's Privacy
14. Third-Party Links
15. Amendments
16. Contact & Complaints

Your privacy matters to merah888. We take the protection of your personal data seriously. This Policy applies to all personal data we process in connection with your use of the merah888 platform at merah888.co. Please read it carefully alongside our Terms & Conditions.

🔒

256-bit SSL Encryption

All data transmitted between your device and the merah888 platform is encrypted using 256-bit SSL technology — the same standard used by major Malaysian financial institutions.

🚫

No Data Sales

merah888 does not sell, rent, or trade your personal data to third-party marketers. Your information is used solely to operate and improve the merah888 platform and services.

👤

Your Rights Respected

You have the right to access, correct, delete, and port your personal data. merah888 will respond to all valid data subject requests within 30 days of receipt.

📋

KYC Compliance

We collect identity documents as required by our international gaming authority licence. KYC data is held securely and used solely for verification and regulatory compliance purposes.

🍪

Transparent Cookie Use

merah888 uses cookies to keep your session active, personalise your experience, and analyse platform performance. You can manage cookie preferences in your browser settings.

📞

Direct Privacy Support

Questions about your data? Contact the merah888 support team via 24/7 Live Chat or email. We are committed to resolving all privacy queries promptly and transparently.

1 Introduction

1.1 merah888 ("merah888", "we", "us", "our") operates the online casino and sports betting platform accessible at merah888.co. We are committed to protecting the privacy and personal data of all users ("you", "Player", "User") who access or interact with our platform.

1.2 This Privacy Policy ("Policy") describes the types of personal data we collect, the purposes for which we collect and process that data, the parties with whom we may share it, the measures we take to protect it, and the rights you have in relation to your personal data.

1.3 By registering an account with merah888 or continuing to use our platform, you acknowledge that you have read and understood this Policy. This Policy forms part of, and should be read together with, the merah888 Terms & Conditions.

2 Data Controller

2.1 merah888 is the data controller in respect of personal data collected through the merah888 platform. As data controller, merah888 determines the purposes and means by which your personal data is processed.

2.2 merah888 operates under an international gaming authority licence and processes personal data in accordance with the data protection requirements imposed by that licensing framework, as well as applicable data protection principles of transparency, data minimisation, purpose limitation, and security.

3 Data We Collect

merah888 collects the following categories of personal data:

Category	Examples	Purpose
Identity Data	Full legal name, date of birth, nationality, government-issued ID number	Account registration, KYC verification, age verification
Contact Data	Email address, Malaysian mobile number, residential address	Account communication, security alerts, support
Financial Data	Bank account details, e-wallet identifiers (Touch n Go, Boost), transaction history	Payment processing, fraud prevention, withdrawal verification
Gaming Data	Game history, bet records, win/loss records, session duration, wagering activity	Platform operation, responsible gaming monitoring, dispute resolution
Technical Data	IP address, device type, browser type, operating system, session logs	Security monitoring, fraud detection, platform optimisation
KYC Documents	Passport, MyKad, utility bills, selfie verification	Regulatory compliance, identity verification, withdrawal processing
Communications Data	Live chat transcripts, support emails, feedback submissions	Customer support, quality assurance, dispute resolution

4 How We Collect Data

merah888 collects your personal data through the following means:

Direct provision: Data you provide when registering an account, completing KYC, making deposits or withdrawals, contacting support, or participating in promotions;
Automated collection: Technical and usage data collected automatically through cookies, log files, and similar tracking technologies when you browse or use the merah888 platform;
Third-party sources: Identity and fraud-check data received from KYC verification service providers, payment processors, and fraud prevention partners where you have consented or where we have a legitimate interest;
Publicly available sources: Information sourced from publicly available registers or databases for the purpose of verifying information you have provided.

5 Legal Basis for Processing

merah888 processes your personal data on the following legal bases:

Contractual necessity: Processing required to perform our contractual obligations to you, including operating your account, processing payments, and providing gaming services;
Legal obligation: Processing required to comply with applicable laws and regulatory obligations, including KYC requirements under our international gaming authority licence, anti-money laundering obligations, and tax reporting;
Legitimate interests: Processing carried out in pursuit of our legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, where such interests are not overridden by your rights and interests;
Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6 How We Use Your Data

merah888 uses your personal data for the following purposes:

To create, manage, and maintain your merah888 account;
To process deposits, withdrawals, and other financial transactions in Malaysian Ringgit (MYR);
To verify your identity and age (21+) in accordance with our KYC obligations;
To detect, investigate, and prevent fraud, money laundering, and prohibited conduct;
To monitor gaming activity for responsible gaming purposes and to administer responsible gaming tools;
To communicate with you regarding your account, transactions, security alerts, and support queries;
To send promotional communications where you have opted in to receive such communications;
To comply with our legal and regulatory obligations under our international gaming authority licence;
To improve and optimise the merah888 platform through analysis of aggregated usage data;
To resolve disputes and enforce our Terms & Conditions.

7 Sharing Your Data

7.1 merah888 does not sell, rent, or trade your personal data to third parties for marketing purposes.

7.2 We may share your personal data with the following categories of recipients where necessary:

Payment processors: Touch n Go, Boost, Maybank, CIMB, Public Bank, and other authorised payment service providers, for the purpose of processing deposits and withdrawals;
KYC and identity verification providers: Third-party identity verification and document authentication services engaged to fulfil our regulatory KYC obligations;
Fraud prevention and security providers: Services that help us detect, prevent, and investigate fraudulent activity and security incidents;
Gaming platform providers: Software providers whose games and services are integrated into the merah888 platform, to the extent necessary for service delivery;
Regulatory and law enforcement authorities: Where required or permitted by applicable law, by court order, or by our licensing authority;
Professional advisers: Lawyers, auditors, and accountants engaged in the course of merah888's business operations, subject to professional confidentiality obligations.

7.3 All third parties with whom merah888 shares personal data are required to process that data only for the specified purpose and in accordance with applicable data protection obligations.

8 Cookies & Tracking Technologies

8.1 merah888 uses cookies and similar tracking technologies to operate and improve the platform. The main categories of cookies we use are:

Essential cookies: Required for the platform to function. These include session cookies that maintain your login state and security tokens. These cannot be disabled without affecting platform functionality.
Analytics cookies: Used to collect aggregated information about how players use the merah888 platform, allowing us to improve functionality and content. Data is anonymised where technically feasible.
Preference cookies: Store your settings and preferences, such as language selection and responsible gaming tool configurations, so you do not need to re-enter them on subsequent visits.
Marketing cookies: Used only where you have provided explicit consent, to deliver relevant promotional information. You may withdraw consent for marketing cookies at any time.

8.2 You can manage cookie settings through your browser's privacy controls. Disabling essential cookies may impair or prevent access to the merah888 platform.

9 Data Retention

9.1 merah888 retains your personal data for as long as necessary to fulfil the purposes described in this Policy, including for the duration of your active account and for a period thereafter as required by our regulatory obligations and licensing conditions.

9.2 Account and transaction records, including KYC documents and gaming history, are retained for a minimum of five (5) years following account closure, in compliance with anti-money laundering and international gaming authority record-keeping requirements.

9.3 Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data disposal procedures.

10 Data Security

10.1 merah888 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

256-bit SSL/TLS encryption for all data transmitted between your device and our platform;
Encrypted storage of sensitive personal data, including KYC documents and financial information;
Password hashing using industry-standard algorithms — we do not store your password in plain text;
Multi-factor authentication options for player accounts;
Automated intrusion detection and security monitoring systems;
Restricted access controls — personal data is accessible only to merah888 personnel with a legitimate business need.

10.2 Notwithstanding these measures, no internet transmission or electronic storage is completely secure. If you become aware of any actual or suspected security breach affecting your merah888 account, please notify us immediately via Live Chat or at [email protected].

11 International Data Transfers

11.1 merah888 operates internationally and your personal data may be processed in countries outside Malaysia, including the jurisdiction of our international gaming authority licence and the locations of our third-party service providers.

11.2 Where personal data is transferred outside your country of residence, merah888 takes steps to ensure that appropriate safeguards are in place to protect that data in accordance with applicable data protection standards, including contractual protections with receiving parties.

12 Your Rights

Subject to applicable law, you have the following rights in relation to your personal data held by merah888:

Right of access: To request confirmation of whether merah888 holds personal data about you, and to receive a copy of that data;
Right to rectification: To request correction of inaccurate or incomplete personal data;
Right to erasure: To request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our overriding legal and regulatory retention obligations;
Right to restriction: To request that we restrict processing of your data in certain circumstances;
Right to data portability: To receive a copy of personal data you have provided to us in a structured, machine-readable format;
Right to object: To object to processing of your data based on legitimate interests or for direct marketing purposes;
Right to withdraw consent: Where processing is based on consent, to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact merah888 via the 24/7 Live Chat or by email. We will respond to valid requests within thirty (30) days. We may require verification of your identity before processing a request.

13 Children's Privacy

          ⚠ 21+ Only: The merah888 platform is strictly for individuals aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from an underage individual, we will take immediate steps to delete that data and close the associated account.
        

If you believe that we have inadvertently collected personal data from a person under 21, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

14 Third-Party Links

14.1 The merah888 platform may contain references to third-party services, such as payment providers. merah888 is not responsible for the privacy practices of third-party websites or services, and this Policy does not apply to any personal data you provide directly to those third parties.

14.2 We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of the merah888 platform.

15 Amendments to This Policy

15.1 merah888 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or regulatory requirements. The date of the most recent revision is displayed at the top of this Policy.

15.2 Material changes to this Policy will be communicated to registered players via the platform notification system or registered email address prior to the change taking effect. Continued use of the merah888 platform following publication of an amended Policy constitutes acceptance of the revised terms.

16 Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or the manner in which merah888 processes your personal data, please contact our support team:

merah888 Privacy Support
Email: [email protected]
Live Chat: Available 24 hours a day, 7 days a week via the merah888 platform.

If you are not satisfied with our response to a privacy complaint, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction or with the supervisory body of our licensing authority.