Privacy Policy – Personal Data Protection for merah slot Members in Malaysia

Merah slot ("we", "us", "platform") respects the privacy of every individual who uses our platform. This Privacy Policy explains in detail how we handle your personal data when you register, log in, play, or interact with any part of the merah slot platform.

This document is drafted in accordance with Personal Data Protection Act 2010 (PDPA) Malaysia and international data protection best practices. By using the merah slot platform, you acknowledge that you have read, understood, and agreed to this Privacy Policy.

If at any point you disagree with this policy, please stop using the platform and contact us to process your account closure request.

Merah slot collects various categories of personal data depending on how you interact with our platform. Below is a summary of the types of data that may be collected:

Identity Data Identity

• Full name as per identity card or passport
• Date of birth and gender
• Identity card number (MyKad) or passport
• Nationality and state of residence

Contact Data Identity

• Active email address
• Malaysian mobile phone number
• Residential address (for specific verification purposes)

Financial Data Finance

• Bank account details (bank name, account number) for withdrawal purposes
• Registered name and digital wallet number (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow)
• Deposit and withdrawal transaction history in MYR
• Betting limits and win/loss records

Technical Data Technical

• IP address and device information (device type, operating system, web browser)
• Access log data and session duration
• Cookie data and similar tracking technologies
• Approximate location information based on IP address

Behavioural Data Behavioural

• Game records for slots, blackjack, roulette, poker, and live casino
• Football and other sports betting history
• Game preferences and in-platform activity
• Feedback and complaints submitted to the support team

Merah slot collects your personal data through the following methods:

Merah slot uses your personal data only for the following legitimate and stated purposes:

• Account Management: Creating, verifying, and managing your merah slot account, and ensuring login security.
• Legal Compliance (KYC/AML): Verifying your identity to fulfil Anti-Money Laundering (AML) and Counter Financing of Terrorism (CFT) legal requirements.
• Transaction Processing: Processes deposits and withdrawals in MYR via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, FPX, Maybank2u and CIMB Clicks.
• Service Provision: Enabling you to play slots, Blackjack, roulette, poker, Live Casino, and place football and Sports Betting wagers on the merah slot platform.
• Security & Fraud Prevention: Detecting and preventing suspicious activity, account fraud, money laundering, and system misuse.
• Customer Support: Responding to enquiries, resolving complaints, and helping you get the most out of merah slot.
• Platform Improvement: Analysing usage patterns to improve game quality, interface, and the overall merah slot experience.
• Marketing Communications: Sending bonus offers, promotions, and the latest merah slot updates — subject to your consent, which may be withdrawn at any time.
• Responsible Gaming: Monitoring betting patterns to identify signs of problem gambling and offering appropriate support.

Merah slot will not use your personal data for any other purpose without first obtaining your consent.

Merah slot does not sell, rent, or trade your personal data to any third party for marketing purposes. Your data is only shared in the following limited circumstances:

• Service Providers: Payment processing companies (for MYR transactions via DuitNow, Touch 'n Go, GrabPay, etc.), game software providers (Pragmatic Play, PG Soft, etc.), and cloud infrastructure providers bound by strict confidentiality agreements.
• Legal Requirements: When required by Malaysian law, court order, or directive from a competent authority.
• Security Safeguards: With fraud prevention agencies and regulatory bodies for AML/CFT compliance purposes.
• Group Sharing: With companies within the merah slot group involved in providing services to you, subject to the same privacy policy.

All third parties with whom we share data are bound by data protection agreements that require them to handle your information to the same security standard we uphold.

Merah slot implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS Encryption for all data transmitted between your device and merah slot servers.
• Static data encryption (at-rest) for all personal and financial records stored in our database.
• Multi-Tiered Access Control — only merah slot staff who require access for specific job functions are authorised to view sensitive data.
• Two-Factor Authentication (2FA) for all administrative access to merah slot systems.
• 24/7 Security Monitoring by our cybersecurity team to detect and respond to threats in real time.
• Regular Security Audits by independent third parties to identify and address vulnerabilities.

While we make every effort to safeguard your data, no storage or transmission system can be guaranteed 100% secure. In the event of a serious data breach, we will notify affected members and the relevant authorities within the timeframe required by law.

Merah slot uses cookies and similar tracking technologies to enhance your experience on our platform. The types of cookies we use are:

• Essential Cookies: Required for core platform operations — login, session security, and language preferences. Cannot be disabled.
• Performance Cookies: Collecting anonymised information about how you use the platform to help us improve our services.
• Functional Cookies: Remembering your preferences such as favourite games and display settings to enhance your overall experience.
• Marketing Cookies: Used to display merah slot promotions and offers relevant to your interests — with your consent only.

You can manage your cookie preferences through your web browser settings. Please note that disabling certain cookies may affect the functionality of some parts of the merah slot platform.

Under Malaysia's PDPA and merah slot's policy, you have the following rights regarding your personal data:

• Right of Access: You have the right to request a copy of the personal data we hold about you. Requests will be processed within 21 business days.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete data. You may also update most information directly in your merah slot account settings.
• Right to Erasure: Under certain circumstances, you have the right to request deletion of your data. Please note that some data may need to be retained for legal or operational reasons.
• Right to Object: You may object to the processing of your data for direct marketing purposes at any time by sending us an email.
• Right to Restriction: You have the right to request that we restrict the processing of your data in certain circumstances, such as while a dispute is being resolved.
• Right to Data Portability: You may request your data in a machine-readable format (such as CSV) for transfer to another service provider.
• Right to Withdraw Consent: You may withdraw consent for any consent-based processing at any time — including unsubscribing from merah slot marketing communications.

To exercise any of these rights, please contact us by email at privacy@merahslot.app or via the live chat function on the platform. We will verify your identity before processing any request.

The merah slot platform is inappropriate and strictly prohibited for use by individuals under 18 years of age. We do not knowingly collect personal data from children or minors.

If we discover that personal data belonging to a person under the age of 18 has been collected without our knowledge, we will promptly delete that data and close the account in question.

If you are a parent or guardian and have reason to believe that a child under your care has registered with merah slot, please contact us immediately at support@merahslot.app so we can take the appropriate action.

In certain situations, your personal data may be processed or stored on servers located outside Malaysia — for example, for data backup purposes or by international cloud service providers we engage.

When such transfers occur, merah slot ensures that:

• The transfer destination maintains a level of data protection equivalent to or higher than Malaysia's PDPA.
• Legally binding data processing agreements have been signed with all third-party providers.
• Data transfers are carried out only for legitimate operational purposes and limited to the minimum data necessary.

The merah slot platform may contain links to external websites in certain contexts. When you click on such links and leave the merah slot platform, we are not responsible for the privacy practices or content of those websites.

We recommend reading the privacy policy of every website you visit before providing any personal information. This merah slot Privacy Policy applies solely to your experience within our platform.

Merah slot retains your personal data for as long as necessary to fulfil the purposes outlined in this policy, or as required by Malaysian laws and regulations. General data retention guidelines are as follows:

• Active Account Data: For the entire duration that your merah slot account remains active.
• Financial Transaction Data: Minimum 7 years after the transaction — in line with Malaysian legal requirements relating to financial records and AML.
• KYC Record: Minimum 5 years after the business relationship ends — as required by law.
• Support Communication Logs: Up to 3 years after the last interaction.
• Marketing Data: Until you withdraw your consent or your account is closed.

Once the retention period expires, your data will be securely deleted or anonymised so that it can no longer be linked back to you personally.

Merah slot reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or technological developments.

When material changes occur, we will:

• Updating the "Last Updated" date at the top of this page.
• Displaying a prominent update notice on the merah slot homepage.
• Sends email notifications to all active members for significant changes.

Continued use of the merah slot platform after any changes take effect will be considered acceptance of the updated policy. We encourage you to review this page periodically to stay informed about how we protect your privacy.

For any enquiries, requests, or complaints regarding this Privacy Policy or the handling of your personal data by merah slot, please reach us through the following channels:

• Privacy Email: privacy@merahslot.app
• Support Email: support@merahslot.app
• Live Chat: Available 24/7 within the merah slot platform

We are committed to responding to all privacy-related enquiries within 14 working days from the date of receipt. For more complex requests such as data access or deletion, processing may take up to 21 business days.