MerdekaWin Privacy Policy – Our Commitment to Protecting the Personal Data of Malaysian Players

Personal Data We Collect

MerdekaWin collects the information necessary to provide you with our Sports Betting and Live Casino platform services. We only gather data that is relevant and required — nothing beyond that. The types of data we collect fall into several key categories:

• Basic registration data is collected when you first open a MerdekaWin account.
• Additional identity verification data (such as a copy of your MyKad) may be required before certain withdrawal requests are processed, in line with industry compliance standards.
• Financial data relating to Malaysian local payment methods is collected solely for the purpose of processing transactions securely in Malaysian Ringgit.
• Platform usage data is automatically collected through our logging systems to help detect suspicious activity and protect your account.

How MerdekaWin Uses Your Data

Every piece of data we collect has a clear purpose. MerdekaWin uses your information for the following purposes and nothing beyond that:

• Account Operations – To create and manage your MerdekaWin account, including secure login, two-factor authentication, and profile management.
• Transaction Processing – To process deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, Maybank2u, CIMB Clicks, or FPX, as well as withdrawals of your winnings in MYR.
• Security & Fraud Prevention – To detect and prevent fraudulent activity, multi-account usage, system manipulation, and any other security threats to our platform and members.
• Customer Support – To enable our support team to assist you effectively when you reach out via live chat or email at support@merdekawin.biz.
• Account-Related Communications – To send you important account notifications such as deposit confirmations, processed withdrawals, or relevant changes to our terms.
• Marketing (with your consent) – To send you information about MerdekaWin promotions, bonuses, and special offers that may be of interest to you. You can unsubscribe from marketing communications at any time.
• Legal Compliance – To meet our anti-money laundering (AML) compliance obligations and any other applicable legal requirements.
• Platform Improvements – To analyse usage patterns on an aggregate (not individual) basis in order to improve user experience, platform performance, and sports betting coverage including football, badminton, and e-sports.

Data Sharing with Third Parties

MerdekaWin does not sell or disclose your personal data to third parties for their own commercial purposes. However, there are limited situations where your data may need to be shared with certain parties in order for us to deliver our services to you:

• Payment Service Providers – Parties that process your financial transactions, including Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, and the FPX network. They receive only the information required to process each transaction and are bound by their own privacy policies.
• Technology Providers – Companies that provide the technical infrastructure for the MerdekaWin platform, including cloud services, cybersecurity, and identity verification. All such providers are bound by strict confidentiality agreements.
• Legal Authorities – In circumstances where MerdekaWin is required by law or court order to disclose certain information to enforcement agencies or the relevant authorities.
• Fraud Prevention – Where there are serious indications of fraud, money laundering, or criminal activity, MerdekaWin reserves the right to share relevant information with the appropriate authorities.

In all instances of data sharing, MerdekaWin ensures that only the minimum information necessary for the relevant purpose is shared. We do not permit third parties to use your data for their own purposes outside the scope of our service agreements.

Data Security at MerdekaWin

MerdekaWin invests seriously in security infrastructure to protect your personal and financial data. Our technical and organisational security measures include:

• 256-bit SSL Encryption – All data transmitted between your browser and MerdekaWin's servers is encrypted using the latest TLS protocols. This covers login credentials, payment information, and any other sensitive data.
• Secure Password Storage – Your account password is never stored in plain text. We use strong hashing algorithms with salting techniques to keep your password secure even in unforeseen scenarios.
• Two-Factor Authentication (2FA) – MerdekaWin offers 2FA as an option for all accounts. We strongly encourage all members to enable this feature as an added layer of security.
• Continuous Monitoring – Our systems are monitored around the clock to detect any unusual activity or unauthorised access attempts.
• Financial Data Segregation – Member funds are held in accounts separate from the company's operating capital, ensuring they remain available and protected at all times.
• Restricted Data Access – Only MerdekaWin staff who require access to specific data in order to carry out their duties are permitted to do so, and all access is logged for audit purposes.
• Regular Security Audits – We conduct regular security reviews to identify and address any potential vulnerabilities in our systems.

Your Rights as a Data Subject

As a MerdekaWin player, you have certain rights regarding your personal data. MerdekaWin fully respects these rights and provides straightforward ways for you to exercise them:

To exercise any of the rights above, please contact us at support@merdekawin.biz stating the right you wish to exercise and your account details. MerdekaWin will respond within 14 business days and does not charge any fee for reasonable requests.

Cookies & Tracking Technologies

MerdekaWin uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small files stored in your browser when you visit our website.

• Essential Cookies – Required for core platform functions such as login session verification and security. These cookies cannot be disabled as the platform will not function properly without them.
• Functional Cookies – Allows the platform to remember your preferences, such as your language setting, odds format, and favourite sports categories. This makes for a smoother experience every time you log in.
• Analytics Cookies – Helps us understand, in aggregate, how Malaysian players interact with the platform — which pages are visited most, which features are used most frequently, and where users encounter difficulties. This data is used to improve our platform.
• Marketing Cookies – Used to ensure that the promotions and bonus offers displayed to you are relevant to your interests. You can choose to disable marketing cookies without affecting the core functionality of the platform.

You can manage your cookie preferences through your web browser settings. However, disabling essential cookies may prevent certain platform features from functioning correctly.

Data Retention & Deletion

MerdekaWin does not retain your data indefinitely. We adhere to the principle of data minimisation and set reasonable retention periods based on operational and legal requirements:

• Active Account Data – Retained for as long as your account remains active on MerdekaWin to support continuity of service.
• Financial & Transaction Data – Transaction records in MYR are retained for a minimum of 5 years from the date of the transaction, in accordance with applicable legal and tax compliance requirements.
• Identity Verification Data (KYC) – Retained for a minimum of 5 years from the date of account closure or the last transaction date, in accordance with applicable anti-money laundering requirements.
• Security Log Data – Security activity logs are retained for 12 months for incident detection and audit purposes.
• Communication Data – Customer support communication records are retained for 2 years for reference and service improvement purposes.
• Marketing Data – Retained for as long as you have not withdrawn your consent to receive marketing communications.

Once the designated retention period has passed, your data will be securely deleted or anonymised so that it can no longer be linked back to your identity.

Contact Us About Privacy

If you have any questions, concerns, or requests regarding MerdekaWin's Privacy Policy or the way we handle your personal data, please reach out to us through the following channels:

• Privacy Email: support@merdekawin.biz — please mark your email subject as "Data Privacy Enquiry" to ensure it is directed to the right team.
• Live Chat: Available 24/7 directly within the MerdekaWin platform for general enquiries related to your privacy and account.
• Response Time: MerdekaWin is committed to responding to all privacy-related enquiries within 14 business days. For urgent account security matters, we typically respond within a few hours.

MerdekaWin reserves the right to update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. You will be notified of any significant amendments via email or an in-platform notification. The latest version of this Privacy Policy is always available on this page.