merah44 Privacy Policy

1. Who We Are

merah44 ("merah44," "we," "us," "our") is the operator of the online casino and sportsbook platform accessible at merah44.one. merah44 operates under an international gaming authority licence. This Privacy Policy applies to all personal data processed by merah44 in connection with your use of the merah44 platform, whether you are a registered player or a visitor browsing without an account.

For the purposes of applicable data protection legislation, merah44 is the data controller in respect of the personal data it collects and processes as described in this Policy. Questions about this Policy or your data may be directed to our support team at [email protected].

2. Personal Data We Collect

merah44 collects the following categories of personal data from players and platform visitors:

• Identity Data: Full name, date of birth, nationality, and government-issued identification document details (such as MyKad or passport number) collected as part of the KYC process.
• Contact Data: Email address, mobile phone number, and residential address.
• Account Data: Username, encrypted password, account registration date, account status, and login activity records.
• Financial Data: Payment method details (e.g., Touch n Go eWallet account reference, Boost account reference, Maybank account number, CIMB account number, or Public Bank account number), deposit and withdrawal history, and transaction records. merah44 does not store full card numbers or payment credentials beyond what is required for transaction processing.
• Transaction Data: Betting and gaming history, wager amounts, game outcomes, promotional bonus activity, and withdrawal requests.
• Technical Data: IP address, browser type and version, device identifiers, operating system, time zone, and session activity logs.
• Usage Data: Pages visited on the merah44 platform, features accessed, time spent on games, and navigation paths.
• Communications Data: The content of support chat transcripts, emails sent to merah44, and feedback submissions.

3. How We Collect Your Data

merah44 collects personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, placing bets, contacting support, or updating account preferences.
• Automated technologies: Technical and usage data collected automatically when you access the merah44 platform, including through cookies, server logs, and session tracking technologies.
• Third parties: Identity verification data obtained from KYC service providers; payment data obtained from payment processing partners in connection with your deposit and withdrawal transactions; fraud and risk intelligence data from anti-fraud service providers.

4. Legal Basis for Processing

merah44 processes your personal data on the following legal bases:

• Contractual necessity: Processing necessary to perform the contract between you and merah44 — including account management, payment processing, and the provision of gaming and betting services.
• Legal obligation: Processing required to comply with merah44's obligations under its international gaming licence, including KYC verification, anti-money laundering checks, and regulatory reporting.
• Legitimate interests: Processing necessary for merah44's legitimate interests in operating a secure, fair, and commercially viable platform — including fraud detection, responsible gaming monitoring, platform improvement, and customer support.
• Consent: Processing of personal data for direct marketing communications, where you have provided explicit consent. Consent may be withdrawn at any time without affecting the lawfulness of processing prior to withdrawal.

5. How We Use Your Personal Data

merah44 uses the personal data it collects for the following purposes:

• To register and manage your merah44 account, including verifying your identity and age as part of the KYC process.
• To process deposits, execute withdrawal requests, and maintain accurate financial records for your account.
• To provide access to casino games, live dealer tables, slot machines, and sportsbook markets on the merah44 platform.
• To detect, investigate, and prevent fraudulent activity, collusion, money laundering, and other prohibited conduct on the platform.
• To monitor gaming activity for responsible gaming indicators, and to implement player protection measures including deposit limits, self-exclusion, and cool-off periods where applicable.
• To respond to your support queries and resolve account-related issues.
• To send you account-related notifications, including transaction confirmations, security alerts, and regulatory communications.
• To send you promotional communications and personalised offers where you have opted in to receive such communications.
• To comply with reporting obligations to merah44's gaming licence authority and any other applicable regulatory requirements.
• To improve the merah44 platform through analysis of aggregated usage data and player behaviour patterns.

6. Sharing Your Personal Data

merah44 does not sell, rent, or trade your personal data to third parties. merah44 may share your personal data with the following categories of recipient, strictly to the extent necessary for the stated purpose:

• KYC and identity verification providers: To verify your identity and age as required under merah44's licensing obligations.
• Payment processing partners: Including Touch n Go eWallet, Boost, and relevant Malaysian banks, to facilitate deposits and withdrawals.
• Anti-fraud and risk management providers: To detect and prevent fraudulent activity and protect the integrity of the merah44 platform.
• Gaming software and platform providers: To operate casino games and sportsbook markets on the merah44 platform.
• Regulatory and licensing authorities: Where disclosure is required by merah44's international gaming licence or applicable law.
• Law enforcement and government agencies: Where disclosure is required by a valid legal process or court order.

All third-party service providers who process personal data on behalf of merah44 are required to do so under contractual data processing agreements that impose obligations consistent with this Privacy Policy.

7. Cookies and Tracking Technologies

merah44 uses cookies and similar tracking technologies on its platform to support core functionality, security, and platform performance. The categories of cookies used by merah44 include:

• Strictly necessary cookies: Required for the platform to function, including session authentication, security token management, and load balancing. These cookies cannot be disabled without affecting platform functionality.
• Performance and analytics cookies: Used to collect aggregated information about how players navigate and use the merah44 platform, enabling merah44 to identify and resolve technical issues and improve the user experience.
• Functional cookies: Used to remember your platform preferences, such as language settings and responsible gaming tool configurations.

merah44 does not use third-party advertising or behavioural targeting cookies. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies may impair your ability to use the merah44 platform.

8. Data Retention

merah44 retains personal data for the following periods:

• Account and identity data: Retained for the duration of your merah44 account plus five (5) years following account closure, to satisfy anti-money laundering and regulatory record-keeping obligations.
• Transaction and betting records: Retained for five (5) years from the date of each transaction, in accordance with merah44's licensing and financial reporting obligations.
• Support communications: Retained for three (3) years from the date of the communication.
• Technical and usage logs: Retained for twelve (12) months on a rolling basis, except where specific logs are required for ongoing fraud investigations or legal proceedings.

Upon expiry of the applicable retention period, merah44 securely destroys personal data using methods appropriate to the storage medium and data sensitivity.

9. International Data Transfers

merah44 operates from outside Malaysia and may process personal data in jurisdictions other than Malaysia. Where personal data is transferred to or processed in jurisdictions that do not provide a level of data protection equivalent to that available under Malaysian law, merah44 implements appropriate safeguards — including contractual data processing agreements — to ensure that your data remains protected to a standard consistent with this Privacy Policy.

10. Your Data Rights

Subject to applicable law and merah44's legal retention obligations, you have the following rights in respect of your personal data held by merah44:

• Right of access: You may request a copy of the personal data merah44 holds about you.
• Right of rectification: You may request correction of inaccurate or incomplete personal data.
• Right of erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to merah44's legal retention obligations.
• Right to restrict processing: You may request that merah44 restricts the processing of your personal data in certain circumstances.
• Right to data portability: You may request that merah44 provides your personal data in a structured, machine-readable format where technically feasible.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact merah44 support. merah44 will respond to all verifiable data rights requests within thirty (30) days. Identity verification may be required before a request can be actioned.

11. Children's Privacy

The merah44 platform is strictly intended for adults aged 21 years and above. merah44 does not knowingly collect or process personal data from persons under the age of 21. If merah44 discovers that it has collected personal data from a person below the minimum age, it will promptly close the associated account and delete all personal data relating to that person. If you believe that a person under 21 may have registered on merah44, please contact our support team immediately.

12. Security Measures

merah44 implements technical and organisational measures designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include TLS encryption for all data transmitted between your device and the merah44 platform; AES-256 encryption for sensitive data stored at rest; strict role-based access controls limiting data access to authorised personnel with a legitimate business need; regular security assessments and penetration testing; and multi-factor authentication for internal administrative systems. While merah44 takes data security seriously, no internet-based platform can guarantee absolute security. Players are encouraged to use strong, unique passwords for their merah44 accounts and to enable two-factor authentication.

13. Changes to This Policy

merah44 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform functionality. Material changes will be communicated to registered players via email to the address on file and/or via a prominent notice on the merah44 platform prior to the effective date of the change. Continued use of the platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms.

14. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the personal data merah44 holds about you, please contact our support team via the 24/7 live chat facility on the platform, or in writing at [email protected]. Please note that this email address is provided for written correspondence only and is not a clickable link.