Effective date: 1 January 2026.
This Merdeka365 Privacy Policy applies to information processed through merdeka365.cam. Please read it together with the Merdeka365 Terms & Conditions.
Introduction
Merdeka365 respects the privacy of every player and recognises that personal information requires careful, lawful handling. This policy describes the privacy practices that apply when you browse Merdeka365, create an account, verify your identity, deposit MYR, place a wager, request a withdrawal, communicate with support, or use responsible gambling controls.
By using Merdeka365, you acknowledge that information may be processed as described below. Where consent is legally required, Merdeka365 will request it separately and provide a genuine choice. This policy does not remove any rights available to you under applicable data protection law.
Scope and Definitions
This policy applies to registered members, visitors, prospective members, and individuals who contact Merdeka365. “Personal data” means information that identifies you directly or can reasonably be linked to you. “Processing” includes collecting, recording, organising, using, transferring, securing, retaining, and deleting that information.
“Services” includes the Merdeka365 website, account tools, casino games, live casino, slots, sports betting markets such as Liga Super Malaysia and the EPL, promotions, payment facilities, support, and security functions. Aggregated information that cannot reasonably identify a person is not treated as personal data.
Personal Data We Collect
Merdeka365 may collect the following categories of personal information:
- Identity details: full name, date of birth, nationality, MyKad or passport information, photograph, and verification status.
- Contact details: residential address, email address, mobile number, and communication preferences.
- Account details: username, encrypted password, account status, login history, selected limits, self-exclusion status, and support records.
- Financial details: deposit and withdrawal history, transaction references, masked bank or e-wallet details, source-of-funds records, and currency information.
- Gaming activity: games accessed, wagers, wins, losses, bonus use, sports selections, session duration, and responsible gambling indicators.
- Technical details: IP address, device type, browser, operating system, approximate location, security events, cookie identifiers, and diagnostic logs.
Merdeka365 receives data directly from you, automatically from your device, and from payment, identity verification, fraud prevention, and game service providers. Please provide accurate information and update your Merdeka365 account when details change.
How Merdeka365 Uses Personal Data
Merdeka365 processes personal data for clearly defined operational, security, and compliance purposes. These include:
- Creating, administering, securing, and closing Merdeka365 accounts;
- Confirming that players are aged 21 or above and completing identity checks;
- Processing deposits and withdrawals through Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, and supported alternatives;
- Providing casino, slots, live football, sports betting, lottery, and promotional services;
- Detecting fraud, account misuse, collusion, money laundering, payment abuse, and cyber threats;
- Applying deposit limits, cooling-off periods, self-exclusion, and other responsible gambling controls;
- Answering questions, resolving complaints, and maintaining customer support records;
- Analysing service performance and improving the usability, reliability, and security of Merdeka365.
Where automated systems flag suspicious transactions or risky play, trained personnel may review the available information before Merdeka365 takes a significant account action.
Legal Bases for Processing
Depending on the context, Merdeka365 processes information because it is necessary to perform the agreement with you, comply with legal or regulatory duties, protect legitimate business and security interests, establish or defend legal claims, protect an individual's vital interests, or act on valid consent.
Legitimate interests may include platform security, service improvement, fraud prevention, complaint handling, and carefully controlled direct marketing. Merdeka365 assesses those interests against the rights and expectations of players. You may withdraw consent at any time where consent is the applicable basis, without affecting processing already completed lawfully.
Payments, KYC, and Financial Checks
Merdeka365 must confirm identity, age, payment ownership, and transaction legitimacy. During KYC, Merdeka365 may request a government-issued identity document, proof of address, a payment ownership record, or evidence concerning source of funds. Only information reasonably necessary for verification and compliance should be provided.
Payment partners process information needed to complete MYR deposits, refunds, and withdrawals. Merdeka365 generally stores transaction references and masked payment details rather than complete banking credentials. Processing times may vary where a transaction requires enhanced security review.
When Information May Be Shared
Merdeka365 does not sell personal information. Merdeka365 may disclose limited data to vetted service providers that support hosting, identity verification, payments, game delivery, security monitoring, analytics, customer support, and professional advice. Each provider is expected to use information only for authorised purposes and maintain suitable safeguards.
Information may also be disclosed where required by law, a valid regulatory request, court process, licence condition, fraud investigation, or sports integrity inquiry. If the Merdeka365 business is reorganised, relevant records may transfer subject to confidentiality and lawful processing requirements.
Some providers may operate outside Malaysia. Where information is transferred internationally, Merdeka365 uses contractual, organisational, and technical measures intended to provide an appropriate level of protection.
Cookies and Similar Technologies
Merdeka365 may use essential cookies to maintain sessions, remember security settings, balance traffic, and prevent unauthorised access. Functional cookies can remember language, display, or account preferences. Analytics technologies help Merdeka365 understand page performance and improve navigation.
You can control non-essential cookies through available consent controls or browser settings. Blocking essential cookies may prevent account login, payment verification, or other core features from operating correctly. Cookie records are retained only for their stated purpose and applicable period.
Data Security
Merdeka365 applies layered safeguards designed to protect information against accidental loss, unauthorised access, misuse, alteration, and disclosure. Measures may include encryption in transit, access controls, credential hashing, network monitoring, audit logs, staff confidentiality duties, vulnerability management, and incident response procedures.
No internet service can guarantee absolute security. Players should use a unique password, secure their mobile device, sign out on shared devices, and notify Merdeka365 promptly if suspicious activity appears. If a qualifying data breach occurs, Merdeka365 will investigate and provide notifications where required.
Data Retention
Merdeka365 retains personal data only for as long as needed for the purpose collected, account administration, dispute resolution, fraud prevention, responsible gambling controls, legal claims, and regulatory or financial record-keeping. Different records may therefore have different retention periods.
Closing an account does not always permit immediate deletion. KYC, payment, exclusion, complaint, and security records may need to remain restricted for a legally required period. When retention is no longer justified, Merdeka365 deletes, anonymises, or securely isolates the relevant information.
Your Privacy Rights
Subject to applicable law and verification of identity, you may request access to personal data, correction of inaccurate information, deletion where no lawful retention ground remains, restriction of certain processing, or a portable copy of eligible information. You may also object to qualifying processing and request human review of a significant automated decision.
Merdeka365 may ask for reasonable identity confirmation before acting on a request. This helps prevent disclosure to an unauthorised person. Merdeka365 will respond within the period required by applicable law and explain any lawful limitation that applies.
Marketing Preferences
With an appropriate lawful basis, Merdeka365 may send information about bonuses, casino releases, live football markets, or other platform updates. You may change your preferences or opt out through your account settings or by contacting support. Operational messages concerning security, payments, policy changes, or responsible gambling are not promotional and may still be delivered.
Merdeka365 does not intentionally direct gambling promotions to self-excluded players or anyone known to be under 21. Suppression information may be retained to honour an opt-out or exclusion request.
Age Restriction and Vulnerable Players
Merdeka365 services are available only to individuals aged 21 and above. Merdeka365 does not knowingly permit minors to register, deposit, or gamble. Age verification may occur during registration, KYC, withdrawal, or a compliance review.
If Merdeka365 learns that a minor supplied personal data or accessed an account, the account may be suspended while the matter is investigated. Parents or guardians who reasonably believe a minor has interacted with the platform should contact support using the details below.
Changes to This Privacy Policy
Merdeka365 may update this policy to reflect changes in services, technology, legal obligations, or regulatory expectations. The revised version will show a new effective date. Where a change materially affects player rights or how information is used, Merdeka365 will provide an appropriate notice through the platform or registered contact details.
Contact Us
Questions about this Privacy Policy, a Merdeka365 account, or a privacy rights request may be sent to our privacy and support team. To protect your account, please do not include unnecessary identity documents in an initial enquiry.
Email: [email protected]
Support availability: Live chat is available 24 hours a day, seven days a week.
Please describe the nature of your request and provide the username associated with your Merdeka365 account where relevant. Additional verification may be required before account information is disclosed or amended.