Privacy and data protection

Merdeka365 Privacy Policy

This Privacy Policy explains how Merdeka365 collects, uses, stores, shares, and protects personal information when Malaysian players access our casino, sports betting, payment, and account services.

Effective date: 1 January 2026.
This Merdeka365 Privacy Policy applies to information processed through merdeka365.cam. Please read it together with the Merdeka365 Terms & Conditions.

Section 01

Introduction

Merdeka365 respects the privacy of every player and recognises that personal information requires careful, lawful handling. This policy describes the privacy practices that apply when you browse Merdeka365, create an account, verify your identity, deposit MYR, place a wager, request a withdrawal, communicate with support, or use responsible gambling controls.

By using Merdeka365, you acknowledge that information may be processed as described below. Where consent is legally required, Merdeka365 will request it separately and provide a genuine choice. This policy does not remove any rights available to you under applicable data protection law.

Section 02

Scope and Definitions

This policy applies to registered members, visitors, prospective members, and individuals who contact Merdeka365. “Personal data” means information that identifies you directly or can reasonably be linked to you. “Processing” includes collecting, recording, organising, using, transferring, securing, retaining, and deleting that information.

“Services” includes the Merdeka365 website, account tools, casino games, live casino, slots, sports betting markets such as Liga Super Malaysia and the EPL, promotions, payment facilities, support, and security functions. Aggregated information that cannot reasonably identify a person is not treated as personal data.

Section 03

Personal Data We Collect

Merdeka365 may collect the following categories of personal information:

  • Identity details: full name, date of birth, nationality, MyKad or passport information, photograph, and verification status.
  • Contact details: residential address, email address, mobile number, and communication preferences.
  • Account details: username, encrypted password, account status, login history, selected limits, self-exclusion status, and support records.
  • Financial details: deposit and withdrawal history, transaction references, masked bank or e-wallet details, source-of-funds records, and currency information.
  • Gaming activity: games accessed, wagers, wins, losses, bonus use, sports selections, session duration, and responsible gambling indicators.
  • Technical details: IP address, device type, browser, operating system, approximate location, security events, cookie identifiers, and diagnostic logs.

Merdeka365 receives data directly from you, automatically from your device, and from payment, identity verification, fraud prevention, and game service providers. Please provide accurate information and update your Merdeka365 account when details change.

Section 04

How Merdeka365 Uses Personal Data

Merdeka365 processes personal data for clearly defined operational, security, and compliance purposes. These include:

  • Creating, administering, securing, and closing Merdeka365 accounts;
  • Confirming that players are aged 21 or above and completing identity checks;
  • Processing deposits and withdrawals through Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, and supported alternatives;
  • Providing casino, slots, live football, sports betting, lottery, and promotional services;
  • Detecting fraud, account misuse, collusion, money laundering, payment abuse, and cyber threats;
  • Applying deposit limits, cooling-off periods, self-exclusion, and other responsible gambling controls;
  • Answering questions, resolving complaints, and maintaining customer support records;
  • Analysing service performance and improving the usability, reliability, and security of Merdeka365.

Where automated systems flag suspicious transactions or risky play, trained personnel may review the available information before Merdeka365 takes a significant account action.

Section 06

Payments, KYC, and Financial Checks

Merdeka365 must confirm identity, age, payment ownership, and transaction legitimacy. During KYC, Merdeka365 may request a government-issued identity document, proof of address, a payment ownership record, or evidence concerning source of funds. Only information reasonably necessary for verification and compliance should be provided.

Payment partners process information needed to complete MYR deposits, refunds, and withdrawals. Merdeka365 generally stores transaction references and masked payment details rather than complete banking credentials. Processing times may vary where a transaction requires enhanced security review.

Section 07

When Information May Be Shared

Merdeka365 does not sell personal information. Merdeka365 may disclose limited data to vetted service providers that support hosting, identity verification, payments, game delivery, security monitoring, analytics, customer support, and professional advice. Each provider is expected to use information only for authorised purposes and maintain suitable safeguards.

Information may also be disclosed where required by law, a valid regulatory request, court process, licence condition, fraud investigation, or sports integrity inquiry. If the Merdeka365 business is reorganised, relevant records may transfer subject to confidentiality and lawful processing requirements.

Some providers may operate outside Malaysia. Where information is transferred internationally, Merdeka365 uses contractual, organisational, and technical measures intended to provide an appropriate level of protection.

Section 08

Cookies and Similar Technologies

Merdeka365 may use essential cookies to maintain sessions, remember security settings, balance traffic, and prevent unauthorised access. Functional cookies can remember language, display, or account preferences. Analytics technologies help Merdeka365 understand page performance and improve navigation.

You can control non-essential cookies through available consent controls or browser settings. Blocking essential cookies may prevent account login, payment verification, or other core features from operating correctly. Cookie records are retained only for their stated purpose and applicable period.

Section 09

Data Security

Merdeka365 applies layered safeguards designed to protect information against accidental loss, unauthorised access, misuse, alteration, and disclosure. Measures may include encryption in transit, access controls, credential hashing, network monitoring, audit logs, staff confidentiality duties, vulnerability management, and incident response procedures.

No internet service can guarantee absolute security. Players should use a unique password, secure their mobile device, sign out on shared devices, and notify Merdeka365 promptly if suspicious activity appears. If a qualifying data breach occurs, Merdeka365 will investigate and provide notifications where required.

Section 10

Data Retention

Merdeka365 retains personal data only for as long as needed for the purpose collected, account administration, dispute resolution, fraud prevention, responsible gambling controls, legal claims, and regulatory or financial record-keeping. Different records may therefore have different retention periods.

Closing an account does not always permit immediate deletion. KYC, payment, exclusion, complaint, and security records may need to remain restricted for a legally required period. When retention is no longer justified, Merdeka365 deletes, anonymises, or securely isolates the relevant information.

Section 11

Your Privacy Rights

Subject to applicable law and verification of identity, you may request access to personal data, correction of inaccurate information, deletion where no lawful retention ground remains, restriction of certain processing, or a portable copy of eligible information. You may also object to qualifying processing and request human review of a significant automated decision.

Merdeka365 may ask for reasonable identity confirmation before acting on a request. This helps prevent disclosure to an unauthorised person. Merdeka365 will respond within the period required by applicable law and explain any lawful limitation that applies.

Section 12

Marketing Preferences

With an appropriate lawful basis, Merdeka365 may send information about bonuses, casino releases, live football markets, or other platform updates. You may change your preferences or opt out through your account settings or by contacting support. Operational messages concerning security, payments, policy changes, or responsible gambling are not promotional and may still be delivered.

Merdeka365 does not intentionally direct gambling promotions to self-excluded players or anyone known to be under 21. Suppression information may be retained to honour an opt-out or exclusion request.

Section 13

Age Restriction and Vulnerable Players

Merdeka365 services are available only to individuals aged 21 and above. Merdeka365 does not knowingly permit minors to register, deposit, or gamble. Age verification may occur during registration, KYC, withdrawal, or a compliance review.

If Merdeka365 learns that a minor supplied personal data or accessed an account, the account may be suspended while the matter is investigated. Parents or guardians who reasonably believe a minor has interacted with the platform should contact support using the details below.

Section 14

Changes to This Privacy Policy

Merdeka365 may update this policy to reflect changes in services, technology, legal obligations, or regulatory expectations. The revised version will show a new effective date. Where a change materially affects player rights or how information is used, Merdeka365 will provide an appropriate notice through the platform or registered contact details.

Section 15

Contact Us

Questions about this Privacy Policy, a Merdeka365 account, or a privacy rights request may be sent to our privacy and support team. To protect your account, please do not include unnecessary identity documents in an initial enquiry.

Email: [email protected]
Support availability: Live chat is available 24 hours a day, seven days a week.

Please describe the nature of your request and provide the username associated with your Merdeka365 account where relevant. Additional verification may be required before account information is disclosed or amended.

Privacy commitments

How Merdeka365 Protects Player Information

These practical commitments support safer account management for players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and throughout Malaysia.

Layered Security

Merdeka365 combines encryption, restricted access, monitoring, and account verification to reduce privacy and security risks.

Purpose-Limited KYC

Identity documents are requested for age checks, payment protection, fraud controls, and relevant compliance obligations.

Protected MYR Payments

Transaction data supports secure processing through familiar Malaysian banks, e-wallets, DuitNow, and FPX services.

Meaningful Choices

Players can manage marketing preferences and may exercise eligible access, correction, restriction, and deletion rights.

Return to Merdeka365

Continue with Clear Privacy Information

Visit the Merdeka365 homepage to continue exploring the platform. Casino-style gambling is for players aged 21 and above only. Set sensible limits and play responsibly.

Visit Homepage