mekdi88 Privacy Policy

mekdi88 ("we", "us", "the Platform") is committed to protecting the privacy and personal data of all Members and visitors to mekdi88.win. This Privacy Policy describes how mekdi88 collects, processes, stores, and discloses personal data in connection with your use of the platform, and sets out the rights you hold in relation to your personal data.

This Policy should be read in conjunction with the mekdi88 Terms & Conditions. By registering a mekdi88 account or otherwise using the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data processing described herein. Members must be at least 21 years of age to hold a mekdi88 account.

mekdi88 acts as the data controller in respect of all personal data collected from Members and platform visitors. As data controller, mekdi88 determines the purposes and means by which personal data is processed. Questions regarding this role or our data processing practices may be directed to our support team via the contact details in Section 13.

Where mekdi88 engages third-party service providers who process personal data on our behalf (e.g., payment processors, fraud detection providers, game suppliers), those providers act as data processors under contractual arrangements that require them to process data only on mekdi88's documented instructions and to maintain appropriate security standards.

mekdi88 collects the following categories of personal data:

mekdi88 does not collect special categories of sensitive personal data (e.g., health data, biometric data, religious beliefs) beyond what is strictly required by applicable anti-money laundering or responsible gaming regulations.

mekdi88 processes personal data for the following purposes:

• Account Registration and Management: To create and maintain your mekdi88 account, verify your identity, and authenticate your login sessions;
• Payment Processing: To process deposits via Touch 'n Go eWallet, Boost, DuitNow, FPX, and other supported Malaysian payment methods, and to execute withdrawals to your registered bank account or e-wallet;
• Gaming Services Delivery: To provide access to Sportsbook, live casino, and slots products; to settle bets; to process game outcomes; and to manage your MYR wallet balance;
• KYC and Regulatory Compliance: To verify your age (minimum 21 years), identity, and payment method ownership in compliance with applicable anti-money laundering (AML) and know-your-customer (KYC) regulations;
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, unauthorised account access, collusion, and other prohibited conduct;
• Responsible Gaming: To monitor wagering patterns that may indicate problem gambling behaviour, to apply self-imposed limits, and to enforce self-exclusion requests;
• Customer Support: To respond to your queries, complaints, and dispute submissions through live chat and email;
• Marketing Communications: To send promotional offers, bonus notifications, and platform updates where you have opted in to receive marketing communications. You may opt out at any time via your account settings;
• Platform Improvement: To analyse aggregated usage data and improve the mekdi88 platform's features, performance, and user experience;
• Legal and Regulatory Obligations: To comply with applicable laws, regulatory requirements, court orders, and licensing authority directives.

mekdi88 processes personal data on the following legal bases:

• Contract Performance: Processing necessary to deliver the gaming services you have registered for and to manage your mekdi88 account;
• Legal Obligation: Processing required to comply with applicable AML regulations, KYC obligations, licensing conditions, and lawful authority requests;
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and analytics — where these interests are not overridden by your data protection rights;
• Consent: Processing for marketing communications, where you have given explicit opt-in consent. Consent may be withdrawn at any time without affecting the legality of prior processing.

6.1 We Do Not Sell Your Data. mekdi88 does not sell, rent, or trade your personal data to any third party for their own marketing purposes.

6.2 Service Providers. mekdi88 shares personal data with trusted third-party processors who assist in delivering our services, including:

• Payment gateway providers (e.g., FPX, Touch 'n Go eWallet infrastructure, Boost payment systems);
• Identity verification and KYC service providers;
• Fraud detection and cybersecurity vendors;
• Cloud infrastructure and hosting providers;
• Game content providers (e.g., live casino studios, slot game suppliers);
• Customer support platform operators.

All third-party processors are subject to contractual data processing agreements requiring compliance with applicable data protection standards.

6.3 Regulatory Authorities. mekdi88 may disclose personal data to gaming licensing authorities, financial intelligence units, law enforcement agencies, and other governmental bodies where required by applicable law or regulatory directive. Such disclosures are made only to the extent necessary to fulfil the legal or regulatory obligation.

6.4 Business Transfers. In the event of a merger, acquisition, or sale of all or part of mekdi88's business, personal data held by mekdi88 may be transferred to the successor entity. Members will be notified of any such transfer in advance where practically possible.

mekdi88 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small data files stored on your device when you access mekdi88.win.

The following types of cookies may be used:

• Strictly Necessary Cookies: Required for the platform to function correctly, including maintaining your login session and shopping cart state. These cannot be disabled;
• Performance Cookies: Collect aggregated, anonymous data on how Members use the mekdi88 platform to help us improve page performance and navigation;
• Functional Cookies: Remember your preferences such as language settings, display options, and previously selected game categories;
• Analytics Cookies: Used with analytics tools to understand traffic patterns, session durations, and popular content sections across mekdi88.win.

You may configure your browser to reject cookies; however, doing so may impair the functionality of your mekdi88 account, including the ability to maintain a logged-in session.

mekdi88 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to the following retention guidelines:

• Active Account Data: Retained for the duration of your mekdi88 membership;
• Transaction Records: Retained for a minimum of five (5) years following account closure to comply with anti-money laundering regulatory requirements;
• KYC Documentation: Retained for a minimum of five (5) years following account closure or the date of the last transaction, whichever is later;
• Support Communications: Retained for a minimum of two (2) years following the closure of each support interaction;
• Marketing Data: Retained until you withdraw consent for marketing communications or for three (3) years from the date of last engagement, whichever is earlier.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to any individual.

mekdi88 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, and disclosure. Key security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and mekdi88 servers;
• Encrypted storage of sensitive personal and financial data at rest;
• Role-based access controls limiting internal access to personal data on a need-to-know basis;
• Continuous security monitoring and intrusion detection systems;
• Regular third-party penetration testing and security audits;
• Two-factor authentication (2FA) available to all mekdi88 Members for account login protection.

While mekdi88 takes all reasonable steps to protect personal data, no internet transmission or electronic storage system is entirely infallible. In the event of a data breach that is likely to result in a risk to Member rights, mekdi88 will notify affected Members and relevant regulatory authorities in accordance with applicable law.

Subject to applicable law and mekdi88's regulatory obligations, Members hold the following data protection rights:

• Right of Access: You may request a copy of the personal data mekdi88 holds about you;
• Right to Rectification: You may request correction of inaccurate or incomplete personal data held in your mekdi88 account;
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations;
• Right to Restrict Processing: You may request that mekdi88 restrict processing of your personal data in certain circumstances, such as where you contest the accuracy of the data;
• Right to Data Portability: You may request a machine-readable copy of personal data you have provided to mekdi88 where processing is based on consent or contract;
• Right to Object: You may object to processing based on legitimate interests, including profiling for marketing purposes;
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact the mekdi88 support team via live chat or at [email protected]. Requests will be responded to within 30 calendar days. mekdi88 may require identity verification before fulfilling a data subject request.

The mekdi88 platform is strictly intended for adults aged 21 years and older. mekdi88 does not knowingly collect personal data from individuals under the age of 21. If mekdi88 becomes aware that personal data has been collected from a person below the minimum age, the associated account will be suspended immediately and the personal data will be deleted in accordance with our data retention policies. Parents or guardians who believe that a minor has created a mekdi88 account should contact our support team immediately.

mekdi88 reserves the right to update this Privacy Policy from time to time to reflect changes in applicable law, regulatory requirements, or our data processing practices. Material updates will be communicated to Members via the registered email address and/or a platform notification prior to the changes taking effect. The date of the most recent revision is indicated at the top of this page. Continued use of the mekdi88 platform following the effective date of any updated Privacy Policy constitutes acceptance of the revised terms.

For any queries, requests, or complaints relating to this Privacy Policy or mekdi88's handling of your personal data, please contact our support team through the following channels:

• Live Chat: Available 24/7 on the mekdi88 platform — average response time under 5 minutes;
• Email: [email protected] (plain text — not a clickable link)

If you are not satisfied with mekdi88's response to a privacy complaint, you may have the right to lodge a complaint with the applicable data protection or gaming regulatory authority under your jurisdiction.