Mekar88 Privacy Policy – Data Security for Malaysian Members

Mekar88 ("we", "Platform") values the privacy of every member who uses our online casino platform at mekar88.my. This Privacy Policy explains in detail how we collect, use, disclose, store and protect your personal data in accordance with the Personal Data Protection Act 2010 (PDPA) Malaysia.

This Privacy Policy applies to all information you provide to Mekar88 during the account registration process, use of platform services, financial transactions, communications with our customer support team, and any other interactions with our platform. It also covers information collected automatically when you browse our website.

We reserve the right to update this Privacy Policy from time to time to reflect changes in our practices or new legal requirements. Any significant changes will be communicated to members via their registered email or a notice displayed on our website. The latest update date will always be shown at the top of this document.

Mekar88 collects various types of personal data to enable us to deliver a secure, responsible, and high-quality service. Below is a summary of the data we collect:

• Mekar88 only collects personal data that is strictly necessary for the stated purposes. We do not collect excessive or irrelevant information.
• For identity verification (KYC) purposes, we may request supporting document copies such as your MyKad or bank statement, particularly for withdrawals exceeding RM5,000.
• We do not knowingly collect data from anyone under 18 years of age. Should we discover that a minor's information has been collected, it will be deleted immediately.

Personal data collected by Mekar88 is used solely for legitimate, stated purposes. We do not use your data for any other purpose without your prior consent.

• Account Management: To create, verify and maintain your member account on the Mekar88 platform, including secure login and password management.
• Transaction Processing: To process deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay or FPX, and to securely manage withdrawals to your bank account or digital wallet.
• Identity Verification (KYC): To verify that all members meet eligibility requirements, including the minimum age of 18, in line with Mekar88's responsible gaming policy.
• Customer Support: To provide effective assistance when you contact our support team via email or live chat regarding your account, slots, Live Casino, Sports Betting, badminton betting or any other service.
• Security & Fraud Prevention: To detect and prevent fraudulent activity, money laundering, multi-account abuse, and any other misuse of the platform.
• Legal Compliance: To fulfil our legal obligations under PDPA 2010 and applicable financial reporting requirements in Malaysia.
• Service Improvement: To analyse usage patterns, improve the gaming experience, and develop better new features for our members.
• Marketing Communications: To send promotional information, bonus offers and the latest updates — only where you have consented to receive such communications.

Mekar88 does not sell or rent your personal data to any third party. However, in the following limited circumstances, we may share your information:

• Payment Processor: Recognised payment service providers such as FPX, DuitNow, and Malaysian digital wallet providers that help us process financial transactions. All processors are bound by strict confidentiality agreements.
• Game Providers: Live casino, slots, and Sports Betting software providers that supply gaming content on the Mekar88 platform. Data shared is limited strictly to what is necessary for game operations.
• Malaysian Authorities: Where required by Malaysian law, court order, or a relevant regulatory authority. In such cases, Mekar88 will comply with the legal requirement while protecting your rights to the fullest extent permitted by law.
• Analytics Services: Internal analytics tools that help us understand platform usage patterns. Data used for this purpose is in aggregate form and contains no information that could personally identify any individual.

The security of your personal data is Mekar88's highest priority. We continuously invest in the latest security technologies and procedures to ensure your data remains protected at all times.

• All data transmitted between your device and Mekar88's servers is protected with 256-bit SSL/TLS encryption — the same technology used by Malaysia's leading banking institutions such as Maybank and CIMB.
• Data stored in our databases is encrypted using the AES-256 algorithm. Member passwords are never stored in plain text — they are saved as cryptographic hashes that cannot be decoded.
• Access to systems storing members' personal data is strictly limited to authorised personnel, and all access is recorded in comprehensive audit logs.
• The mekar88 platform undergoes regular penetration testing and security audits conducted by independent third parties to identify and address any vulnerabilities.
• We have clear incident response procedures in place. In the unlikely event of a data breach, Mekar88 will notify affected members and the relevant authorities within the timeframe stipulated under PDPA.

Mekar88 uses cookies and similar tracking technologies to enhance your experience on our platform. Below are the types of cookies we use:

• Essential Cookies: Required for core platform operations such as login, session management, and security. These cookies cannot be disabled as they are critical to platform functionality.
• Preference Cookies: Saves your preferences such as language, display theme, and game settings so you don't have to reconfigure them each time you log in.
• Analytics Cookies: Help us understand how members use the platform — the most frequently visited pages, time spent and navigation patterns. This information is used to improve the overall user experience.
• Security Cookies: Helps us detect suspicious activity, guard against cyberattacks, and protect member accounts from unauthorised access.

As a data subject under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data held by Mekar88:

To exercise any of the above rights, please contact the Mekar88 Data Protection Officer at privacy@mekar88.my. We will respond to your request within 21 business days as required under PDPA 2010.

Mekar88 retains your personal data only for as long as necessary for the purposes it was collected, or as required to comply with our legal obligations.

• Active member account data is retained for as long as the account remains active. Following account closure, core data is kept for 7 years for legal compliance and financial audit purposes.
• Financial transaction records, including deposit and withdrawal history via Touch 'n Go, DuitNow, or FPX, are retained for a minimum of 7 years in accordance with Malaysian financial regulations.
• Customer support communication logs are retained for 3 years for reference and service improvement purposes.
• De-identified analytics data may be retained for longer periods for research and platform improvement purposes.

Mekar88 is firmly committed to protecting children and vulnerable individuals. Our platform is not intended for anyone under the age of 18.

• We do not knowingly collect personal data from individuals under the age of 18. Should we discover such data in our systems, it will be deleted immediately.
• If you are a parent or guardian and discover that your child has registered a Mekar88 account, please contact us immediately at privacy@mekar88.my for prompt action.
• Mekar88 applies strict age verification measures during registration to prevent underage individuals from accessing our gambling platform.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how Mekar88 handles your personal data, please contact us through the following channels:

• Privacy Email: privacy@mekar88.my — for specific enquiries regarding personal data, access requests, or data deletion.
• General Support Email: support@mekar88.my — for general enquiries relating to your account and platform services.
• We will acknowledge receipt of any complaint within 3 business days and aim to resolve the issue within 21 business days.
• If you are unsatisfied with our response, you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection (JPDP), which operates under the Ministry of Communications and Digital.