merah88 Official Data Protection Document

Privacy Policy merah88 – Malaysia Personal Data Protection

Merah88 takes your privacy seriously. This document sets out in detail how we collect, use, store, and protect your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Updated: 1 July 2026
Malay (ms-MY)
PDPA 2010 Compliant
256-bit SSL Enabled
Your Data Is Protected
merah88 adheres to international data protection standards
PDPA 2010 Compliant
Data Stored Securely
256-bit SSL Encryption
Full Right of Access
Review & update your data at any time
No Data Sales
Your data is never sold to third parties
Right to Erasure
Request data deletion at any time

01Introduction & Scope of merah88's Privacy Policy

Welcome to the Privacy Policy page merah88. This document is intended to ensure that you, as a user of our platform, fully understand how your personal data is handled. For merah88, privacy is not merely a legal obligation — it is a core value we uphold in every aspect of our operations.

This Privacy Policy applies to all personal information collected by merah88 through our website at merah88.bet, mobile app, email communications, customer support, and any other service channels we offer to users in Malaysia.

This document has been prepared in accordance with the requirements of the Personal Data Protection Act 2010 (PDPA) Malaysia. By using the merah88 platform, you give your informed consent to the collection and processing of your personal data as described in this Privacy Policy.

Important Note: This Privacy Policy should be read together with the merah88 Terms & Conditions. In the event of any conflict between the two documents on matters of privacy, this Privacy Policy shall prevail.

02What Personal Data Does merah88 Collect?

Merah88 collects various categories of personal data depending on the nature of your interactions with our platform. Below is a detailed breakdown of the data we collect:

Data CategoryType of InformationCollection MethodStatus
Identity Full name, date of birth, MyKad number Registration form, KYC Mandatory
Contact Malaysian phone number, email address Registration, customer support Mandatory
Financial Bank account details, transaction history in MYR Deposits/withdrawals, financial KYC Mandatory
Technical IP address, device type, web browser, OS Automatically during use Automatic
Behavioural Betting history, games played, preferences Activity on the merah88 platform Automatic
Communications Live Chat records, support emails, feedback Interactions with our team Preferences

Merah88 does not collect sensitive data such as health information, biometric data, or criminal records unless required by law or for legitimate identity verification purposes in line with anti-money laundering (AML) compliance requirements.

03How Does merah88 Use Your Data?

Every piece of data we collect has a clear and legitimate purpose. merah88 uses your personal data for the following:

  1. Account Management: Creating, verifying, and managing your merah88 account, including the KYC (Know Your Customer) process required for compliance with Malaysian law
  2. Service Delivery: Enables you to use all features on the merah88 platform, including Malaysia Super League and EPL Sports Betting, Live Casino, slots, lottery, and e-sports
  3. Payment Processing: Processing deposits via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, Maybank2u, or CIMB Clicks, as well as securely withdrawing your winnings in MYR
  4. Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, or any misuse of the merah88 platform
  5. Personalise Your Experience: Personalising merah88 content, game recommendations, and promotions based on your preferences and playing behaviour
  6. Service Communications: Sending important notifications regarding your account, transactions, betting results, and merah88 policy updates
  7. Legal Compliance: Fulfilling legal obligations under applicable Malaysian law

Your Choices: For direct marketing and promotional communications, you may opt out at any time via the unsubscribe link in any email or by contacting the merah88 support team.

04Sharing Data with Third Parties

Merah88 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. However, we may share your data with the following parties in limited and controlled circumstances:

  • Licensed Payment Providers: Authorised Malaysian local payment processors such as DuitNow, Touch 'n Go, GrabPay, Boost, ShopeePay, and FPX operators to securely process your financial transactions
  • Gaming Technology Providers: Gaming software providers that supply slots, live casino, and other gaming platforms — all bound by strict data protection agreements
  • Identity Verification Services: Licensed KYC and AML providers who assist us in verifying member identities in accordance with Malaysian legal requirements
  • Legal Authority: Malaysian government agencies, law enforcement, or courts where required by law or a valid court order
  • Professional Advisors: Lawyers, accountants, and consultants bound by strict professional confidentiality obligations

merah88 Guarantee: All third parties with whom we share data are required to uphold data protection standards equivalent to or higher than those of merah88. They may only use your data for purposes we have specified — not for their own marketing.

05Data Security & Technical Protection

Merah88 continually invests in the most up-to-date cybersecurity infrastructure to ensure your personal data remains protected at all times. The technical security measures we have implemented include:

  • 256-bit SSL/TLS Encryption for all data transmitted between your device and merah88's servers
  • Encryption of data at rest — sensitive data such as financial information and passwords is stored in encrypted form using high-grade encryption algorithms
  • Two-factor authentication (2FA) available on all merah88 accounts as an additional layer of protection
  • 24/7 threat monitoring by merah88's experienced cybersecurity team
  • Regular security audits by independent third parties to identify and address any system vulnerabilities
  • Strict access controls — only merah88 staff who require access to specific data to carry out their duties will be granted permission
  • Incident response plan to respond swiftly in the event of any data breach

In the event of any security incident involving your personal data, merah88 is committed to notifying you within 72 hours once the incident has been confirmed, in line with industry best practices for data protection.

06Your Rights under Malaysia's PDPA 2010

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by merah88:

Right of Access

You have the right to request a copy of the personal data we hold about you. merah88 will process your request within 21 business days.

Right to Rectification

You may request correction of any inaccurate or incomplete data. Profile updates can be made directly in your merah88 account settings.

Right to Erasure

You may request the deletion of your personal data when it is no longer required, subject to merah88's legal record-retention obligations.

Right to Restrict Processing

You may request merah88 to stop processing your data for direct marketing purposes at any time, without providing any reason.

Right to Data Portability

You may request a copy of your personal data in a machine-readable format for transfer to another service provider of your choice.

Right to Withdraw Consent

Where data processing is based on your consent, you may withdraw that consent at any time — though doing so may affect your ability to use certain services.

To exercise any of the rights above, please contact the merah88 Data Protection Officer by email at privacy@merah88.bet or via our Live Chat support. All requests will be processed within the timeframe stipulated by PDPA 2010.

07Cookies & Tracking Technologies

The merah88 platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform runs smoothly. The following are the types of cookies we use:

You can manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect the functionality of the merah88 platform. A full cookie management guide is available in our FAQ section.

08Data Retention Period

Merah88 retains your personal data only for as long as necessary to fulfil the original purpose of collection or as required by Malaysian law. The following are general data retention guidelines:

  • Active Account Data: Retained for the duration your account is active and for a minimum period of 7 years after account closure for AML compliance and Malaysian tax law purposes
  • Financial Transaction Records (MYR): Retained for 7 years in accordance with Malaysia's Companies Act requirements and tax laws
  • Support Communication Records: Retained for 3 years after a case is closed, for reference and service improvement purposes
  • Marketing Data (with consent): Retained until you withdraw consent or request deletion
  • Security & Audit Logs: Retained for 2 years for security purposes and incident investigation

Once the required retention period has lapsed, merah88 will securely delete or anonymise your data using industry-recognised methods.

09Cross-Border Data Transfers

In the course of its operations, merah88 may need to store or process your data outside Malaysia in certain circumstances, particularly in relation to the cloud technology infrastructure and international service providers we use.

Whenever your data is transferred outside Malaysia, merah88 ensures adequate protection through one of the following mechanisms:

  • Transfers to countries recognised as having data protection standards equivalent to Malaysia
  • Standard data transfer agreements incorporating comprehensive data protection clauses
  • Approved certifications or codes of conduct that provide adequate data protection assurances

You may request further information about the safeguards we apply to cross-border data transfers by contacting our Data Protection Officer at privacy@merah88.bet.

10Amendments to the Privacy Policy

Merah88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data protection practices, legal requirements, or the services we offer. The "Updated" date at the top of this document will always reflect the latest version.

For material and significant amendments, merah88 will:

  • Displaying clear notices within the merah88 platform at least 14 days before the changes take effect
  • Sending notification emails to all active registered members
  • For significant changes requiring fresh consent, requesting your explicit confirmation

Your continued use of the merah88 platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy.

11Contact merah88's Data Protection Officer

Merah88 has appointed a Data Protection Officer (DPO) responsible for overseeing our compliance with the PDPA 2010 and ensuring your privacy rights are fully respected.

If you have any questions or concerns, or wish to exercise any of your privacy rights, please contact us through the following channels:

Privacy Email
privacy@merah88.bet – Response within 5 business days
merah88 Live Chat
Available 24/7 in Bahasa Malaysia – Instant response
General Email
support@merah88.bet – General enquiries and customer support

You also have the right to lodge a complaint with Department of Personal Data Protection (PDPD) Malaysia if you believe that merah88 has violated your privacy rights under PDPA 2010 after the matter could not be resolved internally.

Why merah88 Takes Your Privacy Seriously

Privacy is more than legal compliance — it is the foundation of trust between merah88 and you

Full PDPA 2010 Compliance

Merah88 is fully compliant with Malaysia's Personal Data Protection Act 2010. We conduct annual compliance audits to ensure our practices remain aligned with the latest legal requirements.

Enterprise-Grade Security Infrastructure

Merah88 servers are protected by multi-layered firewalls, intrusion detection systems (IDS), and military-grade data encryption — making your data more secure than that held by most conventional financial institutions.

Strict Internal Access Controls

Not all merah88 staff have access to your data. The principle of least privilege is strictly enforced — only those who genuinely require access to perform their duties are granted permission.

Rapid Incident Notification

In the event of any security incident involving your data, merah88 is committed to notifying you and the relevant authorities within 72 hours — well ahead of industry standards.

No Sale of Personal Data

Merah88 has never sold, and will never sell, your personal data to advertisers or third-party marketing companies. Your data belongs to you — we use it solely to provide the services you request.

Ongoing Staff Privacy Training

All merah88 staff undergo comprehensive and regular data protection training. At merah88, a culture of privacy is not merely a written policy — it is a value lived by every member of our team.

🔒

Your Data Is Safe. Play with Peace of Mind at merah88.

With enterprise-grade security systems and full PDPA 2010 compliance, you can bet with peace of mind at merah88, knowing your privacy and data security are always our top priority.

Play responsibly. For users aged 21 and above only.

Bahasa Melayu