MerdekaWin Privacy Policy – Personal Data Protection Malaysian Players

MerdekaWin is an online entertainment platform offering Sports Betting, Live Casino, baccarat, blackjack, table games, e-sports, and a wide range of other entertainment services to Malaysian players. In providing these services, MerdekaWin needs to collect and process certain personal data from our players.

We take this responsibility very seriously. This Privacy Policy is designed to comply with Malaysia's Personal Data Protection Act 2010 (PDPA 2010) and international data protection best practices. We are committed to ensuring every MerdekaWin player has a clear understanding of how their information is handled.

This Privacy Policy applies to all personal data collected through the merdekawin.online website, the MerdekaWin mobile app (where applicable), email communications between players and the MerdekaWin team, and interactions via our customer support channels. It does not cover third-party websites or services you may access through links on the MerdekaWin platform.

If you have any questions about how we handle your personal data, the MerdekaWin support team is available via live chat or email at support@merdekawin.online at any time.

MerdekaWin collects various types of personal data depending on how you interact with our platform. Below is a detailed breakdown of the data categories we collect:

All data we collect is directly relevant to the operation of the MerdekaWin platform. We do not collect sensitive information such as health data, political views, or religious beliefs unless directly relevant to responsible gaming purposes and you have given your consent.

MerdekaWin collects players' personal data through a variety of channels and methods. It is important that you understand each of these channels so you can make informed decisions about your use of our platform:

• Account Registration: When you register a MerdekaWin account for the first time, you directly provide basic identity and contact details such as your name, email address, and Malaysian phone number.
• KYC (Know Your Customer) Process: To comply with anti-money laundering requirements, MerdekaWin may request supporting documents such as a MyKad photo, bank statement, or proof of residential address when you make your first withdrawal or exceed certain thresholds.
• Financial Transactions: Details of every deposit and withdrawal — including the method used (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, CIMB Clicks), amount, timestamp, and transaction status — are recorded automatically.
• Gaming Activity: Every bet you place at MerdekaWin — whether at a live baccarat or blackjack table, Sports Betting on the Malaysia Super League or EPL, e-sports like Mobile Legends, or any other game — is recorded for account management and responsible gambling purposes.
• Cookies & Similar Technologies: When you browse the MerdekaWin platform, cookies and similar tracking technologies automatically collect technical data about your device, browser, and usage patterns.
• Customer Support Communications: When you contact the MerdekaWin support team via live chat or email, the content of those conversations may be retained for quality control and complaint resolution purposes.

MerdekaWin uses collected personal data solely for legitimate and necessary purposes. The following are the primary purposes for which MerdekaWin uses your data:

• Account Operations & Verification: Verifying player identity, managing accounts, processing logins, and maintaining the security of your MerdekaWin account at all times.
• Financial Transaction Processing: Processes deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, and handles withdrawals to your Malaysian e-wallet or bank account quickly and securely.
• Legal Compliance: Fulfils anti-money laundering (AML) obligations, KYC requirements, and other legal duties related to MerdekaWin platform operations under applicable Malaysian law.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, bot usage, multi-accounting, and other security threats that could compromise the integrity of the MerdekaWin platform and the safety of other players.
• Responsible Gaming: Monitoring gameplay patterns to identify players who may need responsible gaming support, and ensuring that deposit limits, time limits, and self-exclusion tools function effectively to protect MerdekaWin players.
• Service Improvement: Analysing platform usage patterns in aggregate (not individual data) to improve the player experience, enhance the interface, and develop new features relevant to Malaysian players.
• Service Communications: Sending important notifications related to your account, transactions, terms amendments, security alerts, and promotional information you have agreed to receive.
• Customer Support: Using account information and transaction history to resolve MerdekaWin player enquiries and complaints accurately and efficiently.

MerdekaWin does not sell, rent, or disclose player personal data to third parties for marketing or commercial purposes. However, in the course of operating the platform, MerdekaWin may share data with the following categories of third parties under limited and specific circumstances:

• Game Providers: Live casino and game providers such as Evolution, Pragmatic Play, Ezugi, and SA Gaming receive only the minimum technical data required to deliver gaming services on the MerdekaWin platform. These providers are bound by strict confidentiality agreements.
• Payment Processors: To process deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, MerdekaWin is required to share the necessary transaction details with the relevant payment processors. Only the minimum information needed to complete each transaction is shared.
• Legal Authorities: MerdekaWin will disclose player data to government authorities, law enforcement agencies, or regulatory bodies where required by applicable law, court order, or to fulfil AML reporting obligations.
• Technical Service Providers: Third parties providing server hosting, cybersecurity, data analytics, and technical support services to MerdekaWin may access data to the limited extent required to carry out their functions, under strict controls imposed by MerdekaWin.

In all of the above cases, MerdekaWin ensures that third parties have adequate data protection agreements in place and that they use the data only for the specified purposes. We do not permit third parties to use MerdekaWin player data for their own purposes.

MerdekaWin consistently invests in security infrastructure to ensure player personal data is protected to the highest standard. The technical and organisational security measures we implement include:

• 256-bit SSL/TLS Encryption: All communications between your browser or app and MerdekaWin's servers are encrypted using 256-bit SSL/TLS — the same encryption standard used by leading Malaysian banks such as Maybank and CIMB. This ensures your data cannot be intercepted in transit.
• Encrypted Data Storage: Sensitive data stored on MerdekaWin servers — including identity information and financial data — is kept in encrypted form. Player passwords are never stored in plain text and cannot be accessed by anyone.
• Layered Access Controls: Access to MerdekaWin player personal data is restricted to staff who require it to perform their duties — based on a strict need-to-know principle. All access is logged and monitored.
• 24/7 Security Monitoring: MerdekaWin's security monitoring system operates around the clock to detect and respond to any suspicious activity, intrusion attempts, or anomalies in data access patterns.
• Regular Security Testing: MerdekaWin conducts regular penetration testing and security audits by independent experts to identify and address any system vulnerabilities before they can be exploited.
• Incident Management: In the rare event of a data breach that may affect players, MerdekaWin has a clear incident response procedure to promptly notify affected players and take the necessary remedial action.

While no security system can guarantee absolute 100% protection, MerdekaWin is committed to maintaining the highest reasonably practicable security standards in the industry. You can also help secure your account by using a strong, unique password and enabling two-factor authentication (2FA) in your MerdekaWin account settings.

The merdekawin platform uses cookies and similar tracking technologies to enhance your experience and ensure the platform runs smoothly. Understanding how cookies work helps you know exactly what happens when you browse merdekawin.online.

What are cookies? Cookies are small text files stored on your device by your web browser when you visit a website. They help the site remember information about your visit — such as your preferred language, login status, and other preferences.

MerdekaWin uses the following types of cookies:

• Essential Cookies: These cookies are required for the MerdekaWin platform to function properly — including the login session cookie that keeps you signed in during your gaming session. Without these cookies, the platform cannot operate.
• Preference Cookies: These cookies remember your preferences — such as display language, game display settings, and MerdekaWin interface options — so you don't have to reconfigure them every time you log in.
• Analytics Cookies: These cookies help MerdekaWin understand how players use the platform — which pages are visited most frequently, time spent in each section, and common navigation paths. This data is used in aggregate and anonymised form solely for platform improvement purposes.
• Security Cookies: These cookies help MerdekaWin detect and prevent fraudulent activity by identifying suspicious or unusual access patterns.

You can manage or delete cookies through your web browser settings. Please note, however, that disabling or blocking essential cookies may affect the functionality of the MerdekaWin platform and your gaming experience.

MerdekaWin does not retain your personal data for longer than is necessary for the purpose it was collected, or to fulfil applicable legal obligations. Our data retention policy is as follows:

• Active Account Data: While your MerdekaWin account remains active, we retain all relevant data to ensure continuity of service and a seamless experience.
• Data After Account Closure: After account closure, MerdekaWin retains your basic records (name, email, transaction history) for a minimum period of 7 years to meet Malaysia's AML and tax legal requirements. This is a statutory obligation that cannot be reduced upon individual request.
• Technical Log Data: Technical logs such as access records and activity logs are retained for 90 days for security and incident investigation purposes, after which they are automatically deleted.
• Customer Support Data: Customer support conversation records are retained for 2 years for quality control and recurring complaint resolution purposes, after which they are archived or deleted.

When data is no longer needed and there is no legal obligation to retain it, MerdekaWin will securely delete or anonymise it using industry-recognised deletion methods to ensure it cannot be recovered.

Under Malaysia's Personal Data Protection Act 2010 and MerdekaWin's internal policies, you have the following rights regarding your personal data that we hold. To exercise any of these rights, please contact the MerdekaWin support team:

The MerdekaWin platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

If you are a parent or guardian and discover that your underage child has provided personal data to MerdekaWin without your consent, please contact us immediately at support@merdekawin.online. Upon receiving and verifying such a report, MerdekaWin will promptly delete the relevant data and close the account.

MerdekaWin enforces age verification during the registration process and may request additional proof of age during withdrawals to ensure the platform is only used by eligible adults.

In operating the MerdekaWin platform, your personal data may be processed or stored outside Malaysia by the technical service providers or international game providers we work with.

When MerdekaWin player data is transferred outside Malaysia, we ensure adequate safeguards are in place, including:

• Ensuring that data recipients in other countries are subject to data protection standards equivalent to or higher than those required in Malaysia
• Binding international data recipients to comprehensive data processing agreements that require them to meet the data protection standards set by MerdekaWin
• Only the minimum data necessary for the stated service purpose is transferred

International game providers such as Evolution, Pragmatic Play, and Ezugi operate under recognised international licences and maintain their own data protection policies that meet international standards. Our data relationship with these providers is governed by agreements that ensure MerdekaWin player data is protected at every stage.

MerdekaWin reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or relevant technological developments.

When material amendments are made to this Privacy Policy, we will notify MerdekaWin players via:

• Notification emails sent to the email address registered to your account
• In-platform notifications on MerdekaWin when you log in
• Update of the "Updated" date at the top of this page

For non-material amendments (such as spelling corrections or clarifications), we may update this page without a separate notification. It is good practice to review MerdekaWin's Privacy Policy page periodically, especially before making large transactions or changes to your account.

Continued use of the MerdekaWin platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with the changes, you may close your MerdekaWin account before the amendment takes effect.

If you have any questions, concerns, or complaints about how MerdekaWin handles your personal data, or if you wish to exercise any of the rights set out in Section 9 above, please reach out to us through the following channels:

• Live Chat: Available 24/7 within the MerdekaWin platform — the fastest way to get an immediate response
• Privacy Email: support@merdekawin.online — for written enquiries relating to privacy and personal data requests

For formal requests relating to data rights (access, correction, deletion), please send an email with the subject line "Personal Data Rights Request", including your full name, the email address registered with MerdekaWin, and the details of your request. We will respond within 30 business days of receiving your request.

If you are not satisfied with how MerdekaWin has handled your privacy request after contacting us, you have the right to lodge a complaint with the relevant Malaysian Personal Data Protection Department under the Personal Data Protection Act 2010.