Official Data Protection Document

Merah888 Privacy Policy – Member Personal Data Protection

Your privacy is merah888's top priority. This policy clearly explains how we collect, use, store, and protect your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) — so you can play with complete peace of mind.

Last updated: January 2026
SSL 256-bit Data Encryption
PDPA 2010 Full Compliance
0 Sale of Data to Third Parties
24/7 Security Monitoring
Quick Summary: merah888 uses your data solely for platform operations and never sells your personal information to third parties for commercial purposes.

We Comply With

  • Malaysia PDPA 2010
  • ISO 27001 Standard
  • 256-bit SSL Encryption
  • Regular Security Audits

1 Introduction and Scope of Privacy Policy

Merah888 ("we", "Platform") respects the privacy of every member and user of our platform. This Privacy Policy explains in detail how we collect, store, use, and protect your personal data when you use the merah888.win website or the merah888 mobile app.

This document is drawn up in accordance with the provisions of Malaysia's Personal Data Protection Act 2010 (PDPA) and forms part of the platform usage agreement between you as a member and merah888 as the data controller. By registering for or using the merah888 platform, you acknowledge that you have read and fully understood this privacy policy.

This policy applies to all information collected through the website, mobile app, email communications, customer support services, and all other digital touchpoints associated with merah888.

merah888's Commitment: We have never and will never sell, rent, or transfer your personal data to third parties for commercial marketing purposes without your explicit consent.

2 Personal Data We Collect

Merah888 only collects data that is strictly necessary to provide a safe and seamless platform experience. The following are the types of data we collect:

2.1 Data You Provide Directly

  • Full name as stated on your Malaysian identity card (MyKad)
  • Date of birth and identification card number
  • Email address and mobile number
  • Bank account details (bank name, account number) for deposit and withdrawal purposes
  • Identity verification documents (KYC) such as a copy of your MyKad or bank statement
  • Residential address

2.2 Automatically Collected Data

  • IP address and device information (device type, operating system, browser version)
  • Access log data (login time, pages visited, session duration)
  • Geolocation information at the country/state level only
  • Cookie data and permitted tracking technologies
  • Transaction records and game history within the platform

2.3 Communication Data

  • Conversation records with the customer support team via Live Chat
  • Emails and messages you send to merah888
  • Feedback and complaints submitted
Data Categories Example Information Primary Purpose
Identity Data Name, MyKad, date of birth KYC verification, fraud prevention
Contact Data Email, phone number Account communications, notifications
Financial Data Bank account number, transaction records Deposit and withdrawal processing
Technical Data IP address, device type Account security, fraud detection
Usage Data Game history, login records Platform improvements, responsible gaming

3 Personal Data Usage Purposes

Merah888 uses your personal data solely for legitimate, stated purposes. We will not use your data for any other purpose without obtaining your consent first.

3.1 Platform Operations

  • Create and manage your member account
  • Process deposits and withdrawals securely
  • Provide access to all platform games and services
  • Send important notifications related to your account, transactions, and promotions

3.2 Security & Compliance

  • Carry out identity verification (KYC) in accordance with legal requirements
  • Detect and prevent fraud, money laundering, and other illegal activities
  • Comply with legal obligations and regulations in force in Malaysia
  • Maintain transaction records for audit and accountability purposes

3.3 Service Improvement

  • Analyse usage patterns to improve the user experience
  • Personalise promotional offers and bonuses relevant to your gaming profile
  • Conduct internal research for new product development purposes

3.4 Responsible Gaming

Your usage data is also analysed by merah888's systems to detect early signs of problem gambling, such as sudden increases in deposit amounts or unusually long gaming sessions. This analysis is solely to protect your well-being as a member.

4 Legal Basis for Data Processing

Every instance of personal data processing carried out by merah888 is grounded in at least one valid legal basis under Malaysia's Personal Data Protection Act 2010 (PDPA):

  • Consent: You give explicit consent during account registration for us to process your data for platform operation purposes.
  • Contract Performance: Data processing is necessary to fulfil our obligations to you as a member, including the processing of deposits and withdrawals.
  • Legitimate Interest: We process certain data for security, fraud prevention, and platform improvement purposes, which represent merah888's legitimate interests.
  • Legal Obligation: Certain data must be retained to fulfil Malaysia's legal reporting and compliance obligations.
Right to Withdraw Consent: You may withdraw your consent at any time. However, doing so may affect our ability to provide platform services to you.

5 Data Sharing with Third Parties

Merah888 does not sell, transfer, or disclose your personal data to third parties for commercial purposes. However, there are limited situations where sharing data with trusted parties is necessary for platform operations:

5.1 Trusted Service Providers

We share only the necessary data with service providers who help us operate the platform, including:

  • Approved payment solutions and banking gateway provider
  • Licensed game providers such as Pragmatic Play, Spadegaming, and others
  • Trusted third-party identity verification (KYC) service provider
  • Cloud computing infrastructure provider compliant with international security standards

All these third-party service providers are bound by strict confidentiality agreements and are only permitted to use your data for purposes mutually agreed upon with merah888.

5.2 Legally Required Disclosures

Merah888 may be required to disclose your data to the relevant authorities if mandated by Malaysian law, a court order, or a valid official investigation. In such situations, we will notify you in advance unless prohibited by law.

Notice: merah888 does not share your data with any marketing companies, advertisers, or third-party data brokers. If you receive an offer claiming to be from merah888 through an unverified channel, please report it to our support team.

6 Data Storage and Security Measures

6.1 Data Retention Period

Merah888 retains your personal data for as long as your account is active or as long as necessary to provide our services. After account closure, your data will be retained for a minimum of seven (7) years to fulfil legal obligations and audit requirements. After that period, your data will be securely deleted or anonymised.

6.2 Technical Security Measures

Merah888 continuously invests in security infrastructure to protect your data:

256-bit SSL Encryption Two-Factor Authentication Data Masking Secure Servers 24/7 Monitoring Regular Backups

All data stored and transmitted through the merah888 platform is protected with 256-bit SSL encryption — the same technology used by major banking institutions worldwide. Our servers are housed in licensed data centres that comply with international security standards and undergo independent security audits regularly.

6.3 Internal Access Controls

Access to member personal data within merah888's internal systems is restricted to staff with a legitimate operational need only. All access is logged and monitored, and all relevant staff undergo regular data protection training.

7 Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have several important rights regarding your personal data held by merah888. We are committed to facilitating the exercise of these rights:

Right of Access

Request a copy of the personal data we hold about you at any time.

Right to Rectification

Request the prompt correction of inaccurate or incomplete data.

Right to Erasure

Request the deletion of your data in certain circumstances permitted by law.

Right to Object

Object to the processing of your data for specific purposes such as direct marketing.

Right to Data Portability

Receive your data in a machine-readable format for portability.

Withdraw Consent

Withdraw consent for data processing at any time.

To exercise any of the above rights, contact the merah888 customer support team via Live Chat or official email. We will process your request within 30 business days in accordance with PDPA requirements. No fees are charged for reasonable requests.

8 Cookies and Tracking Technologies

Merah888 uses cookies and similar tracking technologies to enhance the user experience and ensure platform security. Cookies are small text files stored on your device when you visit our website.

8.1 Types of Cookies Used

  • Essential Cookies: Required for core platform functions such as login sessions and security — cannot be disabled.
  • Performance Cookies: Collect anonymised information about how you use the platform to help us improve our services.
  • Functional Cookies: Save your preferences such as language, currency, and display settings.
  • Analytics Cookies: Help us understand platform traffic and usage patterns in aggregated, anonymised form.

8.2 Cookie Controls

You can control and delete cookies through your browser settings. Please note that disabling essential cookies may affect the functionality of the merah888 platform. For more information on managing cookies, refer to your browser's documentation.

9 Children's Data Protection

The merah888 platform is strictly for users aged 18 and above. We do not knowingly collect or process personal data from minors. Should we detect or be notified that a minor's data has been inadvertently collected, we will take immediate action to delete that data and close the associated account.

Parents & Guardians: If you believe your child has registered an account on merah888, please contact our support team immediately so we can take the appropriate action.

10 Privacy Policy Amendments

Merah888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our privacy practices, the latest legal requirements, or changes in platform operations. Any material amendments will be communicated to all active members via their registered email at least 14 days before the amendment takes effect.

The latest version of the Privacy Policy will always be available on this page with a clear update date. Continued use of the merah888 platform after any amendments take effect will be considered acceptance of the revised privacy terms. You are encouraged to review this page periodically.

11 How to Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, our team is ready to assist:

  • Live Chat: Available 24 hours a day, 7 days a week via the chat icon on the merah888 platform
  • Email: [email protected] (replied within 1–2 business days)
  • FAQ: Visit page FAQ us for an immediate response

For formal complaints relating to data protection that cannot be resolved through merah888's internal channels, you have the right to submit a complaint to Malaysia's Department of Personal Data Protection (JPDP).

We're Here to Help: The merah888 support team communicates in both English and Bahasa Melayu and is always ready to professionally and respectfully address any queries regarding your data privacy.

Why Is Your Data Safe with merah888?

Six layers of data protection to keep your privacy secured at all times.

Bank-Level Encryption

All data transmitted between your device and merah888's servers is protected with 256-bit SSL encryption — the same security technology used by leading banks in Malaysia. No one can intercept your data in transit.

Full Malaysia PDPA Compliance

Merah888 operates in compliance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. Our privacy policy is reviewed periodically by legal experts to ensure full compliance with all applicable regulations.

Secure and Trusted KYC

The merah888 identity verification (KYC) process is conducted through a trusted system with encrypted document storage. Your MyKad copy and supporting documents are kept in a secure environment that cannot be accessed by staff without specific authorisation.

No Data Sales to Advertisers

Merah888 has never and will never sell, rent, or share your personal data with marketing companies, advertisers, or third-party data brokers. Your data belongs to you — it is not our business commodity.

Data Control in Your Hands

You have full control over your personal data at merah888. Request access, correction, or deletion at any time through our customer support. All requests are processed within 30 business days at no charge.

Regular Security Audits

The merah888 security system undergoes regular independent audits by third-party cybersecurity experts. Any vulnerabilities identified are addressed promptly to ensure your data is always held in the most secure environment possible.

Merah888 Privacy FAQ

Answers to the most frequently asked questions by our members.

Absolutely not. merah888 has never sold, rented, or transferred your personal data to any third party for commercial purposes. Your data is only shared with a limited set of operational service providers bound by strict confidentiality agreements, or when required by Malaysian law.

You may request a copy of your personal data by contacting the merah888 customer support team via Live Chat or email at [email protected]. Include your full name and registered email in the request. We will process it within 30 business days in accordance with Malaysia's PDPA, at no charge.

After account closure, merah888 retains your personal data for a minimum of seven (7) years to fulfil legal obligations and audit requirements in Malaysia. After that period, all data will be permanently and securely deleted or anonymised.

Yes, your bank account information is stored with 256-bit SSL encryption and is used solely for deposit and withdrawal processing. merah888 does not store your PIN, banking passwords, or any other sensitive banking credentials. Access to your financial data is restricted to authorised staff only, and every access is automatically logged.

You have the right to request data deletion in certain circumstances permitted under Malaysia's PDPA. However, some data must be retained for a prescribed period to fulfil legal obligations, even after account closure. Contact our support team to discuss your data deletion request further.

Contact the merah888 support team via Live Chat immediately. We will freeze your account right away while conducting an internal security investigation. You are also advised to change your password and enable two-factor authentication (2FA) for added protection. Our security team operates 24/7 to handle incidents like this.
🔐

Join merah888 — A Platform That Respects Your Privacy

Over 500,000 members have trusted merah888 as their digital entertainment platform of choice. Register today and enjoy a safe, fair, and privacy-respecting experience with us.

Bahasa Melayu