OFFICIAL PRIVACY POLICY

Merah888 Privacy Policy — Personal Data Protection for Malaysian Players

Merah888 treats your privacy as an absolute priority. This document explains in detail how we collect, use, protect, and manage your personal data whenever you use our platform.

Updated: January 2026 256-Bit SSL Encryption PDPA Compliance

Important Note: This Privacy Policy applies to all users of the merah888 platform, including website visitors, registered members, and anyone using our services. By using the merah888 platform, you agree to the privacy practices described here.

1

Introduction and merah888 Privacy Commitment

At merah888, we understand that player trust is not something that comes on its own — it must be demonstrated through concrete action. One of the most important ways we show this trust is through how we handle your personal information with full responsibility and transparency.

This Privacy Policy was drafted in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best standards in data protection. We do not treat privacy as a mere legal checkbox — to us, it is part of our commitment to building long-term, trust-based relationships with every merah888 user.

This policy clearly explains what types of information we collect, why we need it, how we protect it, and what your rights are as an individual regarding that data. We encourage you to read this document carefully and contact us if any section is unclear or raises questions.

merah888's Privacy Promise: We will never sell your personal data to third parties for marketing purposes. Your data is used solely for the purposes explicitly stated in this Privacy Policy and nothing beyond that.

2

Types of Personal Data We Collect

Merah888 only collects data that is strictly necessary to provide you with a quality, secure, and responsible service. The following are the categories of data we may collect:

Data Category Example Information Primary Purpose
Identity Data Full name, identification card number, date of birth KYC verification, legal compliance
Contact Data Email address, phone number, mailing address Account communications, important notices
Financial Data Bank account number, bank name, transaction history Deposit and withdrawal processing
Technical Data IP address, device type, web browser, OS Account security, fraud detection
Usage Data Game history, session duration, pages visited Service improvement, personalised recommendations
Location Data Country, state (based on IP) Regional compliance, login security

All data collection is performed directly from you during the registration process, platform usage or interactions with our support team. merah888 does not purchase or obtain your personal data from third-party sources without your knowledge.

3

How We Use Your Personal Data

Every piece of information we collect has a clear and legitimate purpose. merah888 uses your personal data solely for the following purposes:

  • Account management: Creating, verifying and managing your user account, including the KYC process required to comply with anti-money laundering laws.
  • Transaction processing: Securely and accurately processing deposits, withdrawals and all financial transactions on the merah888 platform.
  • Platform security: Detecting and preventing fraud, hacking, multiple account usage and any suspicious activity that could compromise the security of the platform and other users.
  • Service communications: Sending important notices related to your account, terms updates, security alerts and relevant operational information.
  • Customer support: Resolving enquiries, complaints and technical issues that you report to our support team.
  • Service improvement: Analysing aggregated usage patterns to improve user experience, platform performance and various game features.
  • Legal compliance: Fulfilling legal and regulatory obligations imposed by the relevant authorities, including financial reporting requirements.
  • Marketing communications: With your consent, to send information about promotions, bonuses and special offers relevant to your interests. You may opt out of these communications at any time.

Data Minimisation Principle: merah888 only uses data that is strictly necessary for the stated purposes. We do not process data beyond what is required and always prioritize a privacy-first approach in every operational decision.

4

Data Storage and Security Measures

Merah888 continuously invests in the latest security infrastructure to ensure your personal data is protected to the highest standard. The following are the security measures we implement:

  • Data-in-transit encryption: All data transmitted between your device and merah888 servers is protected with 256-bit SSL/TLS encryption — the same standard used by leading banking institutions.
  • Stored data encryption: Sensitive data such as financial information and identification documents are stored in encrypted form on our servers using industry-standard encryption algorithms.
  • Strict access control: Only authorised staff with a legitimate business need may access user personal data, and all access is logged and monitored.
  • 24/7 security monitoring: Our automated monitoring system operates around the clock to detect any unauthorized access attempts or suspicious activity.
  • Secure backups: Data is regularly backed up to a secure, separate location to ensure service continuity and protection against data loss.

Data Retention Period: merah888 retains your personal data for as long as necessary to fulfil the purpose of collection and applicable legal obligations. Financial transaction data is typically retained for a minimum of seven (7) years in accordance with financial legal requirements. After this period, data will be securely deleted or anonymized.

Highest Security Standards: merah888's server infrastructure is hosted in Tier III-rated data centres equipped with physical protection, power redundancy and advanced cooling systems to ensure optimal data availability and security.

5

Data Sharing with Third Parties

Merah888 will never sell, rent, or trade your personal data to third parties for their own purposes. However, there are limited circumstances in which we need to share your data with certain parties in order to deliver our services:

  • Payment processors: Required transaction information is shared with trusted payment service providers to process your deposits and withdrawals. All our payment processors are bound by strict data protection agreements.
  • Technical service providers: Third-party companies that help us operate the platform, such as cloud infrastructure providers, may have limited access to data strictly necessary to perform their functions.
  • Legal authorities: We will disclose your personal data to government authorities or law enforcement when lawfully required by law or a valid court order.
  • KYC verification: Your identity information may be shared with authorised third-party identity verification service providers for KYC and age verification purposes.

All third parties that receive merah888 user data are bound by strict confidentiality and data protection agreements. They are prohibited from using such data for any purpose other than the specific services they provide to merah888.

6

Cookies, Tracking Technologies and Your Choices

The merah888 platform uses cookies and similar tracking technologies to enhance your experience, maintain session security and understand how users interact with our platform. Below are the types of cookies we use:

  • Essential cookies: Required for core platform operations such as login session management and security. These cookies cannot be disabled without affecting the platform's basic functionality.
  • Performance cookies: Collecting information on how you use the platform to help us improve performance and user experience. All data is collected anonymously.
  • Functional cookies: Storing your preferences such as language, display settings and login information to make repeat use more convenient.
  • Analytics cookies: Helping us understand overall traffic patterns and platform usage for continuous improvement purposes.

You can manage or disable cookies through your web browser settings. However, please note that disabling certain cookies may affect the functionality and user experience of the merah888 platform.

7

Your Rights Regarding Personal Data

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and the data protection principles we adhere to, you have the following rights regarding your personal data we hold:

Right of Access

You have the right to request a copy of the personal data we hold about you at any time.

Right to Rectification

You may request the correction of inaccurate or incomplete data in our records.

Right to Erasure

You may request the deletion of your personal data, subject to our legal obligations.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time.

Right to Portability

You may request your data in a machine-readable format for transfer to another platform.

Right to Restriction of Processing

You may request that we restrict the processing of your data under certain circumstances permitted by law.

To exercise any of the above rights, please contact our privacy team via email or live chat. We will process your request within 30 business days from the date of receipt.

8

Child Data Protection

Merah888 is an adult entertainment platform designed exclusively for individuals aged 18 and above. We take the protection of minors extremely seriously and maintain a strict policy in this regard.

  • Merah888 does not intentionally collect, store, or process any personal data from individuals under the age of 18.
  • Our registration process is designed to identify and prevent registration by minors, including through age checks and KYC procedures.
  • Should we find that data from underage individuals has been inadvertently collected, we will promptly delete such data and close the associated account.
  • Parents or guardians who suspect their child has used the merah888 platform should contact us immediately so that prompt action can be taken.
9

Amendments to This Privacy Policy

Merah888 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or improvements in how we protect your privacy. When we make significant changes, we will:

  • Sending a notice to your registered email address at least seven (7) days before the changes take effect.
  • Displaying a clear notice on the merah888 platform homepage to inform users of policy updates.
  • Updating the "Last Updated" date at the top of this document to reflect the date of the latest amendment.

Your continued use of the merah888 platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. If you disagree with the changes made, you have the right to close your account by contacting our support team.

10

Contact Us Regarding Privacy

If you have any questions, concerns or requests regarding this Privacy Policy or how we manage your personal data, the merah888 privacy team is ready to assist you. We are committed to providing accurate and helpful responses within a reasonable timeframe.

For enquiries regarding your personal data rights or complaints related to data processing, you may also contact the Department of Personal Data Protection Malaysia, the regulatory body for PDPA matters in Malaysia.

Response Time: merah888 is committed to responding to all privacy-related enquiries within 3 business days and processing formal data rights requests within 30 business days from the date a complete request is received.

Why Your Privacy Is Safe with merah888

Six core pillars of personal data protection on the merah888 platform

256-Bit SSL Encryption

Every piece of data transmitted through the merah888 platform is protected with 256-bit SSL encryption — the same security standard used by leading banks in Malaysia. None of your information travels in unencrypted form.

International-Grade KYC

The merah888 identity verification process complies with international KYC standards. Your documents are processed securely, encrypted and accessed only by authorised personnel solely for verification purposes.

Malaysia PDPA Compliance

Merah888 fully complies with the Personal Data Protection Act 2010 (PDPA) of Malaysia. We continually update our privacy practices to ensure ongoing compliance with applicable local legislation.

No Data Sales

Merah888 has never and will never sell your personal data to advertisers, data brokers, or any third party for their marketing purposes. Your data belongs to you — we are merely its custodian.

Minimum Staff Access

Our principle of least privilege ensures that only staff with a legitimate business need may access user data. Every access is logged, monitored and periodically audited by our internal security team.

Full Control in Your Hands

You have full control over your data. Request access, correct errors, delete data or restrict processing — all by contacting our responsive and friendly privacy team.

Your Data is Safe, Your Gaming is Fun

With industry-grade privacy protection, you can focus on what matters most — enjoying the best games on merah888 with complete peace of mind. Join over 500,000 Malaysian players who game with confidence alongside us.

Bahasa Melayu