01 Definitions and Scope
In this Privacy Policy, “personal data” means information that identifies a person or can reasonably be linked to an identifiable person. “Processing” includes collecting, recording, organising, using, analysing, storing, sharing, correcting, restricting, and deleting personal data. “Player”, “you”, and “your” refer to a visitor or account holder, while “platform”, “we”, “us”, and “our” refer to merah44 and the services operated under the merah44 brand.
This policy covers data collected directly from you, generated through your use of merah44, or received from permitted payment, verification, security, game, and service providers. It does not change any rights or obligations that cannot lawfully be excluded.
02 Information We Collect
The information collected by merah44 depends on how you use the platform. Categories may include:
- Registration data: full name, username, date of birth, residential address, email address, mobile number, nationality, and preferred language.
- Verification data: Malaysian identity card or passport details, proof of address, photographs, selfie verification, and information required to confirm age and identity.
- Payment data: deposit and withdrawal records, bank or e-wallet provider, partial account identifiers, transaction references, currency, amount, and payment ownership evidence.
- Gameplay data: wagers, selections, odds, casino rounds, wins, losses, bonuses, limits, session times, and responsible gambling activity.
- Technical data: IP address, browser, operating system, device type, device identifiers, login time, approximate location, referring page, and security events.
- Communications: live chat messages, complaints, support requests, survey responses, call records where notice is given, and correspondence sent to merah44.
Merah44 asks users to provide information that is accurate and current. Supplying false or misleading data may prevent account verification, delay a withdrawal, or require account restrictions under the Terms & Conditions.
03 How We Collect Information
Merah44 collects information when you enter details into an account interface, submit verification material, complete a payment, place an EPL or Liga Super Malaysia wager, play a casino game, claim a promotion, change a limit, or speak with support. Information is also generated automatically when a device communicates with the platform.
Permitted third parties may provide information to merah44. These parties can include Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, payment processors, identity-verification providers, game studios, fraud-prevention services, and technical hosting providers. Merah44 receives only the data reasonably needed for the relevant service, security check, or transaction.
04 Purposes of Data Processing
Merah44 processes personal data where necessary to provide requested services, comply with obligations, protect legitimate interests, or act on valid consent. Specific purposes include:
- Creating, administering, authenticating, and securing a merah44 account.
- Confirming that a player is aged 21 or above and eligible to use the services.
- Processing deposits, withdrawals, refunds, promotional credits, and transaction investigations.
- Settling casino rounds and sports wagers accurately and maintaining account balances.
- Detecting fraud, collusion, payment abuse, unauthorised access, bots, and technical exploitation.
- Providing customer support and resolving account, payment, or gameplay complaints.
- Administering deposit limits, cooling-off periods, self-exclusion, and other responsible gambling controls.
- Improving platform performance, mobile compatibility, navigation, and service reliability.
- Meeting lawful record-keeping, security, financial-crime prevention, and dispute obligations.
Merah44 does not sell personal data as a commercial list. Information is not used for an unrelated purpose without an appropriate legal basis, notice, or consent where required.
05 Identity and Age Verification
Merah44 is intended only for eligible players aged 21 and above. Identity information may therefore be checked against documents, account data, payment records, and information held by approved verification providers. The purpose is to prevent underage gambling, identity misuse, duplicate accounts, and fraudulent withdrawals.
Verification documents are reviewed only for legitimate account, security, payment, and compliance purposes. Merah44 may request additional evidence if submitted information is unclear, inconsistent, expired, or insufficient. Account functions may remain restricted while a reasonable review is completed.
Users should upload documents only through the process specified by merah44. Identity documents should not be sent through open social media, public messaging channels, or to an unverified person claiming to represent support.
06 Payments and Financial Information
Merah44 processes transaction data to facilitate deposits and withdrawals in MYR and supported digital assets. Depending on the selected method, a transaction may involve Malaysian banks, e-wallets, payment gateways, blockchain services, or financial verification providers.
Merah44 generally receives transaction references and limited account information rather than complete banking credentials. Payment providers process certain details under their own operational and security requirements. Merah44 may retain records showing the method, amount, time, status, ownership result, and reason for any rejection or reversal.
Financial records may be reviewed to confirm that a Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, DuitNow, or FPX account belongs to the registered player. This supports payment security and helps prevent a third party’s funds from being used without permission.
07 Cookies and Similar Technologies
Merah44 may use cookies, local storage, session identifiers, pixels, and similar technologies to remember essential preferences, maintain secure login sessions, measure website performance, prevent fraud, and understand how pages are used. Some technologies are necessary for account authentication, navigation, language settings, and transaction security.
Analytics information may show aggregated patterns such as device type, page response time, navigation route, and general usage frequency. Merah44 uses these patterns to identify errors and improve the experience for mobile and desktop users. Where optional cookies require consent, available controls will be presented before they are activated.
Browser settings may allow users to delete or block cookies. Disabling essential storage can prevent login, account verification, payment processing, or other platform functions from working correctly.
08 Sharing and Disclosure
Merah44 may share limited personal data with service providers that perform necessary functions on our behalf. These may include identity-verification services, payment processors, banks, e-wallets, game providers, cloud infrastructure services, security specialists, analytics providers, customer support systems, and professional advisers.
Providers are expected to use the information only for the agreed purpose and to apply appropriate confidentiality and security measures. The amount of data disclosed is limited to what is reasonably necessary for the relevant task.
Personal data may also be disclosed where required by a valid legal process, to investigate suspected fraud or criminal conduct, to protect players or platform security, to establish or defend legal claims, or as part of a legitimate business reorganisation. Merah44 will not disclose more information than reasonably required in the circumstances.
09 International Data Processing
Online gaming and payment services may rely on technology or service providers operating outside Malaysia. As a result, personal data may be processed or stored in another jurisdiction. Privacy and data-protection rules in that jurisdiction may differ from those in Malaysia.
Where cross-border processing occurs, merah44 uses reasonable contractual, organisational, and technical safeguards appropriate to the data and service. Access remains limited to authorised functions such as hosting, verification, fraud prevention, game settlement, and support.
10 Data Security
Merah44 applies layered safeguards designed to protect personal information against unauthorised access, alteration, loss, disclosure, and misuse. Measures may include encrypted transmission, access controls, authentication safeguards, monitoring, network protection, restricted administrative permissions, and secure development practices.
No online system can guarantee absolute security. Players also have an important role: use a unique password, secure the registered email and mobile number, review account activity, keep devices updated, and sign out after using a shared device. Merah44 should be notified promptly if suspicious activity is detected.
If a personal data incident creates a material risk, merah44 will investigate, contain the event, preserve relevant evidence, and provide notices where reasonably required by applicable obligations.
11 Data Retention
Merah44 retains personal data for as long as reasonably necessary to operate the account, complete transactions, settle wagers, provide support, maintain security, administer responsible gambling restrictions, resolve disputes, and meet lawful record-keeping requirements.
Retention periods vary according to the type of information and the reason it is held. Transaction and verification records may need to remain available after account closure. Self-exclusion records may also be retained to ensure that a restriction cannot be bypassed by creating another account.
When information is no longer required, merah44 may delete it, anonymise it so that it no longer identifies a player, or securely isolate it until deletion is technically completed.
12 Marketing Preferences
Where permitted and based on an appropriate preference, merah44 may send information about casino games, football markets, promotions, platform updates, or account benefits. Marketing may be tailored using general account activity, preferred products, or promotion history.
Users may change available marketing preferences or ask merah44 support to stop optional promotional communications. A marketing opt-out does not prevent essential messages concerning security, verification, withdrawals, responsible gambling, account changes, or updates to legal terms.
Merah44 does not intentionally direct gambling promotions to anyone known to be under 21 or subject to an active self-exclusion.
13 Responsible Gambling Information
Privacy information may be used to identify indicators of potentially harmful play, including unusual deposit frequency, rapid increases in spending, extended sessions, repeated limit changes, or attempts to bypass an exclusion. Merah44 may use these indicators to provide safety messages, request an account review, apply a restriction, or offer responsible gambling controls.
Deposit limits, cooling-off periods, session controls, and self-exclusion records are treated as confidential account information. They may be shared internally or with authorised service providers only where necessary to operate the relevant safeguard, protect the player, or meet an applicable obligation.
14 User Rights and Requests
Subject to applicable law and reasonable verification, users may request access to personal data held by merah44, correction of inaccurate or incomplete details, information about processing, restriction of certain uses, withdrawal of consent where consent is the basis, or deletion where no overriding reason requires continued retention.
A request may be limited or declined where disclosure would affect another person’s rights, reveal protected security information, undermine fraud prevention, conflict with a legal obligation, or require deletion of records that merah44 must retain. Where appropriate, an explanation will be provided.
Before responding, merah44 may ask for information sufficient to confirm the requester’s identity and account ownership. This protects player data from fraudulent access. Users should provide a clear description of the information or action requested so that the matter can be handled efficiently.
15 Children and Underage Users
Merah44 does not permit gambling by anyone under 21 and does not knowingly create accounts for underage users. If merah44 identifies or reasonably suspects an underage account, access may be suspended immediately while identity and age are investigated.
A parent or guardian who believes that an underage person has submitted information should contact support and provide enough detail for an investigation. Merah44 will take appropriate steps to close an ineligible account and handle the associated information in accordance with security, payment, and record-retention requirements.
16 Changes to This Policy
Merah44 may revise this Privacy Policy to reflect changes in services, security practices, payment channels, technology, legal requirements, or data-processing activities. The updated version will display a new effective date.
Material changes may also be brought to the attention of registered users through an account notice or another suitable communication. Continued use of merah44 after the revised policy takes effect acknowledges the updated privacy practices, subject to any consent requirements that apply.
17 Contact Us
Questions, correction requests, privacy concerns, or complaints about the way merah44 handles personal data may be directed to customer support. The website email is displayed as plain text: [email protected].
Please include your username, a concise description of the request, and enough information to identify the relevant account or transaction. Do not include a password, one-time verification code, complete card number, or cryptocurrency recovery phrase. Merah44 may request secure identity verification before disclosing or changing account information.