Privacy Policy merah888

1. Introduction

merah888 ("we", "our platform") operates a website under the domain merah888.one. We are committed to protecting the privacy of every player who registers and uses our services. This Privacy Policy describes our practices for collecting, processing, storing and protecting your personal information.

This policy applies to all users of the merah888 platform, including registered players, website visitors and any party that interacts with our services. We encourage you to read this policy in full so that you understand the rights available to you.

If there are any significant changes to this policy, we will notify you via an on-site notification or through the email address you registered with. Continued use of the merah888 platform after any amendment is considered acceptance of those changes.

2. Information We Collect

merah888 collects personal information from you in several ways, depending on how you use our platform:

Information you provide directly:

• Full name as per MyKad or a valid identity document
• Date of birth (for age verification — registration is only for players aged 21 and above)
• Email address and mobile phone number
• Current residential address
• Account username and password (passwords are stored in encrypted form)
• Payment method information used, including Touch 'n Go eWallet, DuitNow, FPX, Boost, ShopeePay and cryptocurrency
• Identity verification documents such as a copy of MyKad or passport for the KYC process

Information collected automatically:

• IP address and general location information
• Device type, operating system and web browser used
• Access history and activity on the platform, including games played and bets placed
• Cookie data and similar tracking technologies
• Session duration and platform usage patterns

3. How We Use Your Information

Personal information collected is used by merah888 solely for legitimate purposes related to the provision of our services. We do not use your data beyond the scope of the following purposes:

• Creating and managing your player account on the merah888 platform
• Processing financial transactions including deposits and withdrawals securely
• Carrying out age and identity verification checks to meet licensing requirements
• Sending important notifications related to your account, transactions and policy changes
• Providing effective customer support when you contact us
• Preventing, detecting and investigating fraudulent or unauthorised activity
• Complying with legal obligations and international licensing requirements
• Continuously improving the functionality and user experience of our platform
• Sending relevant marketing communications, subject to your preferences

We will not use your personal data for any purpose not stated in this policy without obtaining your consent first, unless required by law.

4. Sharing Information With Third Parties

merah888 respects the confidentiality of your personal information. We do not sell, rent or trade your personal data to any third party for marketing purposes. However, there are certain situations where we need to share your data with trusted parties:

• Payment Processors: Transaction information is shared with the payment service providers we use (such as FPX gateways and e-wallets) to process your deposits and withdrawals securely.
• Technical Service Providers: We work with service providers that help operate our platform, subject to strict confidentiality agreements.
• Regulatory Bodies: We may be required to disclose certain information to regulatory authorities or law enforcement when lawfully directed to do so.
• Fraud Prevention: In cases where there is suspicion of fraudulent activity or money laundering, we reserve the right to report to the relevant authorities.

All third parties we work with are bound by confidentiality obligations and are prohibited from using your data for any purpose other than those permitted.

5. Cookies and Tracking Technologies

merah888 uses cookies and similar tracking technologies to improve your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for basic website operations, including login sessions and account security. These cookies cannot be disabled.
• Performance Cookies: Collect information about how visitors use our website to help us improve its functionality.
• Functional Cookies: Remember your preferences such as language and account settings to provide a more personalised experience.

You can manage cookie settings through your web browser settings. Please note that disabling certain cookies may affect the functionality of some merah888 platform features.

6. Data Security

merah888 implements reasonable technical and organisational measures to protect your personal information from unauthorised access, disclosure, alteration or destruction. The security measures we practise include:

• 256-bit SSL encryption for all data transmissions
• Password storage in an irreversible hash format
• Two-factor authentication (2FA) system for additional account protection
• Continuous security monitoring and periodic penetration testing
• Restricted access to player data — only authorised staff may access sensitive information
• Clear and structured security incident response procedures

While we take all reasonable measures, no security system is entirely perfect. We encourage you to also play your part in keeping your account secure by using a strong password and not sharing it with anyone.

7. Data Retention Period

We retain your personal information for as long as your account is active or as long as necessary to provide services to you. After an account is closed, we may retain some of your data for a period determined by legal and licensing requirements.

Financial data and transaction records are typically retained for the period required by international regulatory bodies for audit and compliance purposes. This data is stored with the same level of security as active account information.

Once the retention period ends, we will delete or anonymise your data in a secure manner so that it cannot be recovered or identified.

8. Cross-Border Data Transfers

As merah888 operates under international licensing, your personal information may be processed on servers located outside Malaysia. In such situations, we ensure that those data transfers are subject to protection equivalent to the required standards.

We only transfer data to countries or entities that have adequate data protection in place, or that are bound by contractual agreements ensuring your data protection remains intact throughout the processing chain.