Privacy Policy

Merah44 Privacy Policy – Malaysia User Data Protection

Merah44 is committed to protecting the privacy and personal data of every user on our platform. This policy clearly explains how we collect, use, store and protect your information.

Last Updated: 1 January 2026 256-bit SSL Encryption Malaysia PDPA Compliance

Our Commitment Your Privacy Matters

Six core pillars that shape merah44's approach to protecting every user's data and privacy.

Banking-Grade Encryption

All data transmitted between your device and merah44 servers is protected with 256-bit SSL encryption — the same standard used by leading banking institutions in Malaysia.

No Data Sales

Merah44 does not sell, rent or transfer your personal data to third parties for marketing purposes without your consent. Your data is used solely for legitimate platform operations.

Secure Data Storage

All user data is stored on servers protected by strict access controls, multi-layered firewalls, and round-the-clock real-time threat monitoring systems.

Data Controls in Your Hands

You have the right to access, correct, transfer, or request deletion of your personal data at any time. merah44 makes this easy through 24/7 customer support.

Cookie Usage Transparency

Merah44 uses cookies solely to improve the user experience and for internal analytics purposes. You can manage your cookie settings through your browser settings at any time.

Legal Compliance

Merah44's privacy policy is drafted in compliance with Malaysia's Personal Data Protection Act (PDPA) 2010 and internationally recognised data protection standards.

Important Note: This Privacy Policy describes merah44's data collection and processing practices. By using the merah44 platform, you agree to the terms of this Privacy Policy. Please read it carefully and contact us if you have any questions.

1Introduction and Scope of This Policy

Merah44 ("we", "Platform" or "merah44") values the privacy of every individual who uses our platform. This Privacy Policy explains how we collect, use, store, disclose and protect your personal information when you access or use the merah44 website, mobile app and all related services.

This policy applies to all merah44 platform users regardless of how you access the platform — whether via web browser, Android app, iOS app, or any other access method provided by merah44.

By registering an account, logging in, or continuing to use the merah44 platform, you confirm that you have read and understood this Privacy Policy and agree to how we process your personal data as described herein.

Legal Basis: merah44 processes your personal data on the basis of contractual necessity (to provide the services you request), legal obligations (PDPA compliance and related regulations), the platform's legitimate interests (security and fraud prevention), and your consent for marketing communications you have opted to receive.

2Types of Personal Data We Collect

Merah44 only collects data that is genuinely necessary to deliver our services safely and effectively. The following are the main categories of data we collect:

2.1 Data You Provide Directly

Data Categories Example Information Purpose of Collection
Identity Information Full name, date of birth, identification card number Identity verification (KYC), legal compliance
Contact Information Phone number, email address Account communications, transaction notifications
Financial Information Bank account number, bank name, eWallet details Processing of deposits and withdrawals
Verification Documents Copies of identification card, passport, driving licence KYC process, fraud prevention
Account Information Username, password (hashed), account preferences Login verification, account security

2.2 Automatically Collected Data

When you use the merah44 platform, we automatically collect certain technical information to ensure the platform operates smoothly and securely:

  • Device Data — Device type, operating system, device model, unique device identifier;
  • Network Data — IP address, internet connection type, general network location;
  • Usage Data — Pages visited, session duration, games played, in-platform transaction history;
  • Browser Data — Browser type, language settings, time zone.

2.3 Data from Third Parties

In certain circumstances, merah44 may receive data about you from trusted third parties, including identity verification service providers, payment providers, and anti-fraud partners. This data is used solely to verify your identity and protect the security of your account.

3How We Use Your Personal Data

Merah44 uses your personal data solely for lawful and necessary purposes. We do not process your data for purposes unrelated to platform operations without your prior consent.

3.1 Primary Purposes of Data Use

  • Account Management — Create, verify and manage your user account on the merah44 platform;
  • Transaction Processing — Process deposits, withdrawals and any financial transactions you carry out on the platform;
  • Identity Verification — Carry out the KYC process required for anti-money laundering regulatory compliance;
  • Platform Security — Detect and prevent fraud, unauthorised access, bonus abuse and other unlawful activity;
  • Customer Support — Respond to enquiries, resolve complaints and provide technical assistance;
  • Platform Improvements — Analyse usage patterns to improve overall platform performance, interface and user experience;
  • Operational Communications — Send important notifications regarding your account, transactions and security updates.

3.2 Marketing and Promotions

With your consent, merah44 may use your contact information to inform you about promotions, bonus offers, and the latest platform news. You may withdraw this consent at any time by contacting our support team or through your account settings. Withdrawing consent will not affect your eligibility to use the platform.

Data Minimisation Principle: merah44 only collects data that is strictly necessary for the stated purposes. We do not collect excessive data and regularly reassess our data collection needs to ensure we retain only what is required.

4Data Sharing and Disclosure

Merah44 does not sell or rent your personal data to any third party. However, there are limited situations where we need to share your data with certain parties to keep the platform operating properly and to comply with the law:

4.1 Service Providers

Merah44 works with trusted third-party service providers to support platform operations, including:

  • Payment Providers — DuitNow, FPX, Touch 'n Go eWallet, ShopeePay, GrabPay and Boost to process financial transactions;
  • Identity Verification Providers — Accredited third-party KYC services to verify user identity;
  • Cloud Service Providers — Secure server infrastructure for data storage and processing;
  • Game Providers — Game companies that provide gaming content on the platform, with only the minimum data necessary.

All third-party service providers are required to comply with strict data protection standards and may only use your data for the purposes specified in their service agreements with merah44.

4.2 Disclosure to Authorities

Merah44 will disclose your personal data to the relevant authorities when required by law, court order or a lawful law enforcement directive. This includes investigations related to money laundering, fraud or other financial crimes.

Contractual Guarantee: Every third-party service provider that receives merah44 user data is required to sign a legally binding data processing agreement, ensuring your data is protected to the same standards we apply ourselves.

5Data Storage and Security

5.1 Data Retention Period

Merah44 retains your personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by law. In general:

  • Active account data is retained for as long as your account remains active on the platform;
  • Financial transaction data is retained for a minimum of 7 years for financial regulatory compliance;
  • Security log data is retained for 2 years for audit and investigation purposes;
  • Once an account is closed, your personal data will be deleted within 90 days, unless there is a legal obligation to retain it for a longer period.

5.2 Technical Security Measures

Merah44 implements a range of technical and organisational security measures to protect your data from unauthorised access, loss, destruction or accidental disclosure:

  • Data encryption in transit (SSL/TLS 256-bit) and at rest;
  • Strict role-based access control — only authorised staff may access user data;
  • Real-time system security monitoring and automated threat alerts;
  • Periodic security audits conducted by independent cybersecurity experts;
  • Two-factor authentication (2FA) is available for all user accounts.

5.3 Data Breach Response

In the event of a data security breach affecting your personal information, merah44 will notify you and the relevant authorities within the timeframe required by law. We will take immediate steps to contain the breach and prevent further harm.

6Cookies and Tracking Technologies

Merah44 uses cookies and similar tracking technologies to enhance your experience on the platform and to understand how users interact with our services.

6.1 Types of Cookies Used

  • Essential Cookies — Required for core platform functions such as login session authentication and security. These cookies cannot be disabled;
  • Performance Cookies — Gather information about how you use the platform to help us identify and resolve technical issues;
  • Functional Cookies — Store your preferences such as language, currency and display settings to personalise your experience;
  • Analytics Cookies — Help us understand aggregated usage patterns to improve platform design and content.

6.2 Cookie Management

You can control and manage cookies through your browser settings. Note that disabling essential cookies may affect platform functionality. Most modern browsers allow you to view, delete, and block cookies from specific websites via the settings menu.

7Your Rights as a User

Under Malaysia's Personal Data Protection Act (PDPA) and merah44's policy, you have the following rights regarding your personal data:

1
Right of Access

You have the right to request a copy of the personal data we hold about you. We will provide this information within a reasonable timeframe.

2
Right to Rectification

If your personal data is inaccurate or incomplete, you have the right to request a correction. You may also update your profile information through your account settings.

3
Right to Erasure

In certain circumstances, you have the right to request deletion of your personal data, subject to our legal obligations to retain certain records.

4
Right to Restriction

You have the right to request that we restrict the processing of your personal data under certain circumstances as defined by law.

5
Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format for transfer to another service provider.

6
Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes. We will fully honour such objections.

How to Submit a Request: To exercise any of the rights above, contact the merah44 support team via live chat on the platform or app. We will process your request within 30 business days. For complex cases, this period may be extended with prior notice to you.

8Children's Data Protection

The merah44 platform is strictly for users aged 18 and above. We do not knowingly collect or process personal data of individuals under the age of 18. Should we become aware that a child's data has been collected without our knowledge, we will take immediate steps to delete that data and close the relevant account.

If you are a parent or guardian and believe your child has registered an account with merah44 without permission, please contact us immediately so we can take the appropriate action.

9Cross-Border Data Transfers

In the course of its operations, merah44 may transfer your personal data to servers or service providers located outside Malaysia. Any such transfer is only carried out where adequate safeguards are in place to ensure your data remains secure and protected to a standard equivalent to or higher than Malaysia's PDPA.

The safeguards we apply to international data transfers include legally binding data processing agreements, internationally recognised standard contractual clauses, and verification that the transfer destination maintains adequate data protection laws.

10Amendments to This Privacy Policy

Merah44 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements or platform improvements. The latest update date is always displayed at the top of this page.

For material amendments — meaning significant changes that affect how we process your data — merah44 will notify you via in-platform notifications or email before the changes take effect. Continued use of the platform after the effective date of any amendment constitutes your acceptance of the updated policy.

11Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how merah44 handles your personal data, please contact us through the following channels:

  • Live Chat — Available 24/7 directly on the merah44 platform or mobile app;
  • Privacy Email — Send your enquiry to the merah44 support email address (displayed on the platform);
  • FAQ — Visit the FAQ us for answers to frequently asked questions about privacy.

The merah44 privacy team will endeavour to respond to all enquiries within 3 business days. For more complex requests such as data access or deletion, the processing period is up to 30 business days.

Your Trust Is Our Priority: merah44 is always committed to being transparent about how we manage your personal data. We believe your trust is the foundation of our long-term relationship with you and our platform. Thank you for trusting merah44.

Join merah44 with Full Confidence

Your personal data is protected with the latest encryption technology. Register a merah44 account today and enjoy a safe, fair, and trusted gaming experience alongside over 500,000 Malaysian players.

256-bit SSL Encryption PDPA Compliance 24/7 Privacy Support
Bahasa Melayu