Privacy Policy — Mekdi88

This Privacy Policy ("Policy") is issued by Mekdi88 ("Company", "we", "us", "our"), the operator of the online gaming and sports betting platform accessible at mekdi88.cam and its associated subdomains and mobile interfaces. This Policy governs the collection, use, storage, disclosure, and protection of personal data submitted by or collected from registered Players ("you", "your", "User") and visitors to the mekdi88 platform.

Mekdi88 is committed to handling all personal data with the utmost care, transparency, and in accordance with applicable data protection legislation. By registering an account on the mekdi88 platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

This Policy should be read alongside our Terms and Conditions, which govern the overall relationship between mekdi88 and its registered Players. Where this Policy and the Terms and Conditions conflict on matters relating to data processing, this Policy shall prevail.

For the purposes of applicable data protection law, Mekdi88 acts as the Data Controller in respect of personal data collected directly from Players through the mekdi88.cam platform. As Data Controller, mekdi88 determines the purposes and means by which personal data is processed and is responsible for ensuring that all processing activities comply with applicable legal requirements.

In certain circumstances — for example, where mekdi88 engages third-party game providers, payment processors, or fraud prevention services — those third parties may act as independent Data Controllers or as Data Processors operating on mekdi88's behalf under appropriate data processing agreements. Details of such arrangements are addressed in Section 7 of this Policy.

For all data-related enquiries, requests, or complaints, you may contact our dedicated privacy team at: [email protected] — subject line: "Privacy Request".

For the purposes of this Privacy Policy, the following terms shall carry the meanings assigned to them below:

Mekdi88 collects personal data through several channels: directly from you during account registration and ongoing use; automatically through platform technology as you interact with our services; and from verified third-party sources where permitted by law, such as identity verification bureaus and payment processors.

4.1 Data Provided Directly by You

• Identity Data: Full legal name, date of birth, nationality, and government-issued identification number (e.g., Malaysian National Identity Card / MyKad number, passport number).
• Contact Data: Email address, mobile phone number, and any correspondence you send to our support team.
• Financial Data: Payment method details (e.g., DuitNow account reference, Touch 'n Go eWallet number, Maybank, CIMB, or Public Bank account identifier), transaction history, deposit amounts, and withdrawal requests — all denominated in MYR.
• KYC Documentation: Copies of government-issued photo identification and proof of payment method submitted to satisfy our identity verification obligations.
• Account Preferences: Communication preferences, self-imposed responsible gambling limits, and language settings.

4.2 Data Collected Automatically

• Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and referring URL.
• Usage Data: Pages visited, game sessions initiated, bet history, sports markets accessed, session duration, login timestamps, and platform navigation patterns.
• Cookie Data: Session identifiers, authentication tokens, and functional preference cookies. See Section 10 for full details on cookie usage.

Mekdi88 processes personal data strictly for defined and legitimate purposes. We do not process data in ways that are incompatible with the purpose for which it was originally collected. The primary purposes for which mekdi88 processes your data are set out in the table below:

Mekdi88 processes personal data only where a lawful basis exists under applicable data protection law. The legal bases upon which mekdi88 relies for each category of processing are as follows:

• Contractual Necessity: Processing required to perform the contract between mekdi88 and the Player (i.e., the Terms and Conditions) — including account management, payment processing, and game provision.
• Legal Obligation: Processing required to comply with applicable regulatory requirements, including KYC/AML obligations, age verification, and record-keeping mandates.
• Legitimate Interests: Processing carried out in the legitimate interests of mekdi88, such as fraud prevention, platform security, and aggregated analytics — where those interests are not overridden by the rights of the Data Subject.
• Consent: Processing for marketing communications, optional cookies, and any purpose not covered by the above bases — only where you have provided clear, freely given, and withdrawable consent.

Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing. To withdraw consent, contact our support team at [email protected].

Mekdi88 does not sell, rent, or trade your personal data to any third party for commercial purposes. We may, however, share your personal data with the following categories of recipients where necessary and in accordance with this Policy:

• Payment Service Providers: Malaysian payment processors including operators of DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and cryptocurrency settlement services — to facilitate deposits and withdrawals in MYR.
• Game Content Providers: Licensed game studios and live casino streaming providers whose games are hosted on the mekdi88 platform. These providers may receive session-level technical data necessary to operate the games.
• KYC & Identity Verification Partners: Third-party identity verification bureaux used to confirm Player identity and age (21+) in compliance with regulatory requirements.
• Fraud Prevention & Security Services: Third-party providers that assist mekdi88 in detecting prohibited activities, unusual transaction patterns, and platform security threats.
• Regulatory and Law Enforcement Authorities: Where mekdi88 is legally compelled to disclose personal data by court order, regulatory directive, or applicable law. Mekdi88 will notify affected Players of such disclosures where permitted to do so by law.

All third parties with whom mekdi88 shares personal data are required to process that data in accordance with applicable data protection law and are contractually prohibited from using Player data for any purpose other than the specific purpose for which it was shared.

Mekdi88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The general retention periods applied by mekdi88 are as follows:

At the end of the applicable retention period, personal data is securely destroyed or permanently anonymised in accordance with mekdi88's internal data disposal procedures.

Mekdi88 implements and maintains a comprehensive suite of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the mekdi88 platform is encrypted using industry-standard 256-bit SSL/TLS protocols.
• Credential Security: Account passwords are stored using cryptographic hashing algorithms. Mekdi88 staff do not have access to plain-text passwords under any circumstances.
• Multi-Factor Authentication: Players are encouraged and may be required to enable multi-factor authentication (MFA) on their accounts for enhanced login security.
• Access Controls: Personal data access within mekdi88 is restricted on a strict need-to-know basis. All internal access to Player data is logged and subject to regular audit.
• Regular Security Reviews: Mekdi88 conducts periodic reviews of its security infrastructure, including vulnerability assessments and penetration testing on critical systems.

While mekdi88 takes all reasonable steps to protect your data, no internet-based platform can guarantee absolute security. If you suspect that your account has been compromised, please contact our support team at [email protected] immediately.

Mekdi88 uses cookies and similar tracking technologies on its platform. Cookies are small text files placed on your device when you visit mekdi88.cam. They serve essential operational functions, enhance your platform experience, and support our security and analytics capabilities.

10.1 Types of Cookies Used

• Strictly Necessary Cookies: Essential for platform operation, including session authentication, login state management, and security tokens. These cannot be disabled without preventing basic platform functionality.
• Functional Cookies: Store your account preferences, such as selected language, odds format (decimal/Malay/Hong Kong), and responsible gambling limit settings across sessions.
• Analytical Cookies: Help mekdi88 understand how Players interact with the platform through aggregated, anonymised usage statistics. No individual profiling is conducted using analytical cookies.

Mekdi88 does not use third-party advertising or behavioural targeting cookies. You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will affect your ability to use the mekdi88 platform.

Subject to applicable data protection law, you hold the following rights in respect of your personal data held by mekdi88. These rights may be exercised at any time by contacting our privacy team at [email protected] with subject line "Privacy Request". Mekdi88 will respond to all verified requests within 30 calendar days.

Mekdi88 will not charge a fee for exercising any of the above rights unless requests are manifestly unfounded or excessive. Where mekdi88 is unable to fulfil a request, you will be provided with a written explanation within the 30-day response window.

The mekdi88 platform is strictly for adults aged 21 years and above only. Mekdi88 does not knowingly collect personal data from individuals under the age of 21. All account registrations require confirmation of age, and accounts are subject to KYC age verification before withdrawals are processed.

If mekdi88 becomes aware that personal data has been collected from a person under the age of 21, all associated data will be deleted without delay, the account will be permanently suspended, and any deposited funds will be returned to the originating payment method following identity verification of the account holder.

Parents and guardians who have reason to believe that a minor has registered an account on the mekdi88 platform are encouraged to contact our support team immediately at [email protected].

In the course of providing our services to Malaysian players, mekdi88 may transfer personal data to third parties (including game providers, payment processors, and technology infrastructure partners) whose operations are based outside Malaysia. Where such transfers occur, mekdi88 ensures that appropriate safeguards are in place to protect the security and confidentiality of personal data in transit.

Safeguards applied to international data transfers include: contractual data processing agreements incorporating standard data protection clauses; transfer only to jurisdictions with equivalent or higher data protection standards; and technical security measures applied to all cross-border data flows.

Mekdi88 reserves the right to update or revise this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our data processing activities, or the features of the mekdi88 platform. Where material changes are made to this Policy, mekdi88 will provide notice via a platform notification or email to your registered account address, with a minimum of seven (7) days' advance notice before the revised Policy takes effect.

The "Last Reviewed" date at the top of this page will be updated whenever the Policy is revised. Continued use of the mekdi88 platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you must discontinue use of the platform and contact support to close your account.

For any questions, requests, or complaints relating to this Privacy Policy or the processing of your personal data by mekdi88, please contact our privacy team through the following channels:

• Email: [email protected] — subject line: "Privacy Request". Responses within 30 calendar days.
• Live Chat: Available 24/7 directly on the mekdi88 platform — agents are available in English, Bahasa Melayu, and Mandarin.
• Response Times: Standard data subject requests are acknowledged within 5 business days and resolved within 30 calendar days. Complex requests may take up to 90 days, with prior notification provided.

If you are dissatisfied with mekdi88's response to a privacy complaint, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction. Mekdi88 will cooperate fully with any regulatory investigation relating to data protection compliance.