Formal Data Protection

Merah88 Privacy Policy – Our Full Commitment to Protecting Your Personal Data

Your privacy is merah88's priority. This document clearly outlines what data we collect, why it is collected, how it is used and the rights you hold as a member of our platform in Malaysia.

Updated: 1 June 2026  |  Regarding Malaysian players

Merah88's Six Privacy Commitments

How we protect your data security and privacy every day

256-bit SSL Encryption

All data transmitted between your device and merah88's servers is protected by 256-bit SSL encryption — the same security standard used by Malaysian banking institutions. No third party can intercept or read your data in transit.

No Sale of Data to Third Parties

Merah88 never sells, rents, or trades member personal information to any third party for marketing purposes. Your data is not our product — it is a trust we safeguard.

Full Control in Your Hands

As a merah88 member, you have the right to access, correct, transfer or request deletion of your personal data at any time. Submit your request to our support team and we will respond within 7 working days.

Secure Data Storage

Merah88 member personal data is stored on servers protected by multi-layered firewalls, strict access controls and continuous security monitoring. Staff with access to personal data are limited in number and bound by confidentiality agreements.

Limited Retention Period

Merah88 retains your personal data only for as long as necessary for the purpose it was originally collected, or as required under Malaysian law. Once the data is no longer needed, it is securely disposed of.

Data Breach Notification

In the event of any security incident involving your personal data, Merah88 is committed to notifying you within 72 hours of becoming aware of the incident, in line with data protection best practices.

1Introduction & Scope of This Policy


This Privacy Policy ("Policy") is published by merah88 ("we", "platform") and applies to all users of the merah88.ws website and related applications ("Services"). This Policy describes our practices regarding the collection, use, storage and disclosure of your personal information.

Merah88 understands that your trust in us depends not only on the quality of our games and services, but also on how we handle what matters most — your personal information. We take this responsibility seriously and have put in place a range of technical and organisational measures to keep your data safe with Merah88.

By using the merah88 platform, you consent to the collection and use of information as described in this Policy. If you do not agree with the terms of this Privacy Policy, please discontinue use of our Services.

Scope of Application

This Privacy Policy applies to all registered Merah88 members in Malaysia, covering all activities on the platform including football betting, live casino, slots, jackpot and e-sports.

2Types of Personal Data We Collect


2.1 Data You Provide Directly

When you register a merah88 account, you provide us with the following information:

  • Personal identification information: full name, date of birth, Malaysian MyKad number or passport number.
  • Contact information: Malaysian phone number, email address and residential address.
  • Account information: username and encrypted password.
  • Financial information: E-wallet account numbers (Touch 'n Go, GrabPay, Boost, ShopeePay), DuitNow account numbers, or FPX details for payment processing.

2.2 Automatically Collected Data

When you use the Merah88 platform, our systems automatically record the following technical information:

  • Device information: device type, operating system, phone model and app version.
  • Network information: IP address, internet connection type, and internet service provider (ISP) name.
  • Usage data: pages visited, session duration, games played, bets placed and login frequency.
  • Cookie and tracking technology data: refer to Section 6 for more details.

2.3 Data from Third-Party Sources

In certain circumstances, Merah88 may receive information about you from trusted third parties, such as identity verification (KYC) service providers and payment processors used to validate your transactions. Such data collection is limited strictly to what is necessary.

Data Type Collected? Primary Purpose Shared?
Name & IC YesKYC & securityNo
Phone Number YesVerification & 2FANo
Payment Information YesTransaction processingProcessor only
IP Address YesSecurity & fraud detectionNo
Betting History YesResponsible gamingNo
Location DataPreferencesRegion verificationNo

3Purpose of Personal Data Use


Merah88 uses the personal data collected for the following legitimate and specific purposes:

  • Account management: creating and managing your Merah88 member account, including processing deposits and withdrawals via Touch 'n Go, GrabPay, DuitNow, and other local payment methods.
  • Identity verification (KYC): Verifying that you are who you claim to be, in compliance with anti-money laundering (AML) legal requirements.
  • Service delivery: enabling you to access all Merah88 games and services, including league football, live casino, slots and e-sports.
  • Platform security: detecting and preventing fraud, account misuse and other unlawful activities on merah88.
  • Responsible gaming: monitoring gameplay patterns to identify potential gambling problems and offer appropriate support.
  • Service communications: sending important notices regarding your account, transactions, policy updates and security information.
  • Marketing (with consent): sending you Merah88 promotional communications that you have agreed to receive. You may withdraw this consent at any time.
  • Platform improvements: Analysing aggregated usage data (without personal identifiers) to improve the overall Merah88 user experience.
Data Minimisation Principle

Merah88 only collects data that is strictly necessary for the stated purposes. We do not collect data in excess of what is needed and regularly review the necessity of each type of data we retain.

4Data Sharing & Disclosure


Merah88 does not sell, rent, or trade your personal data to third parties for their marketing purposes. However, in the following limited circumstances, we may share your data with trusted parties:

4.1 Service Providers

We work with carefully selected third-party service providers to help us operate the Merah88 platform, including payment processors (for handling Touch 'n Go, GrabPay, DuitNow, FPX and other deposit methods), KYC providers, and technical infrastructure services. These providers are only permitted to use your data for the specific purposes we assign to them and are bound by strict confidentiality agreements.

4.2 Legal Requirements

Merah88 may be required to disclose your personal data to the relevant authorities where mandated by Malaysian law, a court order, or to meet regulatory requirements. Such disclosures are made only upon receipt of valid legal confirmation.

4.3 Legitimate Interests Protection

In cases of suspected fraud, money laundering or other serious security threats, merah88 may share relevant information with the appropriate authorities to protect the legitimate interests of the platform and our other members.

Our Guarantee

In all data-sharing situations described above, merah88 discloses only the minimum information necessary and always ensures that the receiving party maintains data protection standards equivalent to our own.

5Security & Data Protection


Merah88 implements a range of technical and organisational measures to protect your personal data against unauthorised access, loss, alteration or disclosure:

  • Data encryption in transit: SSL/TLS 256-bit encryption for all communications between your browser/app and Merah88 servers.
  • Data encryption at rest: sensitive data such as payment information is stored in encrypted form using AES-256 standards.
  • Access controls: the principle of least privilege — staff may only access the data necessary to perform their specific duties.
  • Two-factor authentication (2FA): available to all Merah88 member accounts as an additional security layer.
  • Continuous monitoring: An intrusion detection system (IDS) monitors platform traffic 24/7 to identify suspicious activity.
  • Regular security audits: the merah88 platform undergoes regular security assessments and penetration testing conducted by independent experts.
  • Staff training: All Merah88 staff who handle personal data undergo regular data protection training.

While Merah88 takes all reasonable steps to protect your data, no security system can be guaranteed 100% foolproof. You also play an important role — never share your password and ensure your devices are always updated with the latest security patches.

6Cookie & Tracking Technology Policy


Merah88 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

6.1 Types of Cookies We Use

The cookie preference display above is for illustrative purposes. To manage your actual cookie preferences, use your browser settings or contact the merah88 support team.

6.2 How to Manage Cookies

You can control or delete cookies through your internet browser settings. Please note that disabling essential cookies may affect the functionality of the merah88 platform — for example, you may be required to log in again each time you visit.

7Your Rights Regarding Personal Data


As a registered Merah88 member in Malaysia, you have the following rights regarding your personal data. To exercise any of these rights, please contact our support team via email or live chat.

Right of Access

Request a copy of all personal data we hold about you in a readily readable format.

Right to Rectification

Request corrections to any inaccurate or incomplete data in your merah88 account.

Right to Erasure

Request the deletion of your personal data, subject to any applicable legal retention requirements.

Right to Restriction of Processing

Request that we restrict how we process your data under certain circumstances.

Right to Data Portability

Request your data in a machine-readable format (JSON/CSV) for transfer to another service.

Right to Object to Marketing

Withdraw your marketing consent at any time via the "unsubscribe" link in our emails.

Response Time

Merah88 is committed to responding to all data rights requests within 7 working days. In complex cases, this period may be extended by up to 30 days with notice to you.

8Child Data Protection


Merah88 Services are intended solely for individuals aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

Strict Age Limit

Should we discover that we have unknowingly collected personal data from an individual under the age of 18, we will promptly delete that data and close the associated account. If you believe a minor has registered on our platform, please contact us immediately.

9Links to External Websites


The Merah88 platform may contain links to third-party websites or services in certain contexts (such as payment providers). Merah88 is not responsible for the privacy practices of those external sites and has no control over how they collect or use your data.

We encourage you to read the privacy policy of any third-party website you visit via links on the merah88 platform. Your security on external websites is beyond our control.

10Amendments to the Privacy Policy


Merah88 reserves the right to amend this Privacy Policy from time to time to reflect changes in our business practices, legal requirements, or technological developments. The "Updated" date at the top of this page indicates when the latest amendment was made.

For significant amendments that affect how we use your personal data, we will notify you via an on-platform notice or an email to your registered address at least 14 days before the changes take effect. Continued use of the Merah88 platform after the effective date constitutes your acceptance of the amended Policy.

11Contact Us About Privacy


If you have any questions, concerns or complaints regarding how Merah88 handles your personal data, or wish to exercise any of the rights set out in Section 7, please contact our privacy team:

  • Email: privacy@merah88.ws
  • Live Chat: Available 24/7 on the Merah88 platform
  • Response time: 7 working days for all privacy enquiries

We take every privacy complaint seriously and will investigate and provide a thorough response within the stipulated timeframe. Your satisfaction and trust in merah88 matter greatly to us.

Acceptance of This Policy

By continuing to use the Merah88 platform, you confirm that you have read and understood this Privacy Policy. This latest version takes effect from 1 June 2026.

Your Data Is Safe — Join Merah88 Today

Join over 500,000 Malaysian members who trust merah88 for data security and the best gaming experience. Register for free today.

256-bit SSL No data sales 18 years and above 24/7 Support

Related privacy documents:

Bahasa Melayu