mekdi88 Privacy Policy

This Privacy Policy ("Policy") describes how mekdi88 ("we", "us", "our") collects, processes, stores, and protects personal data in connection with the operation of the online gaming platform accessible at mekdi88.club ("Platform"). It applies to all registered Players, prospective Players, and visitors to the Platform regardless of location.

By registering an account, accessing the Platform, or interacting with any mekdi88 service, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform and contact our support team to arrange Account closure.

This Policy should be read in conjunction with the mekdi88 Terms & Conditions and Responsible Gaming Policy, both of which are available on the Platform.

The data controller responsible for personal data collected through the mekdi88 Platform is the licensed operating entity behind mekdi88.club, operating under a valid gaming authority licence. For all data-related enquiries, including requests to exercise your data rights, please contact our Data Protection contact at:

• Email: [email protected]
• Subject line: "Data Privacy Request — [Your Account Username]"

mekdi88 is committed to handling all data privacy requests promptly and in accordance with applicable data protection legislation.

mekdi88 collects the following categories of personal data in the course of operating the Platform:

3.1 Registration Data

• Full legal name;
• Date of birth (to verify you are 21 years of age or older);
• Residential address;
• Email address;
• Malaysian mobile phone number.

3.2 Identity Verification (KYC) Data

• Copy of Malaysian MyKad, passport, or equivalent government-issued identity document;
• Proof of residential address (utility bill, bank statement, or equivalent);
• Payment method verification documents (e-wallet screenshots, bank statements).

3.3 Financial Data

• Deposit and withdrawal transaction records in MYR;
• Payment method identifiers (e-wallet account references, bank account numbers for withdrawal processing);
• Betting and gaming activity history.

3.4 Technical and Usage Data

• IP address and approximate geolocation derived from IP;
• Device type, operating system, and browser information;
• Session duration, pages viewed, and navigation path on the Platform;
• Login timestamps and session activity logs.

3.5 Communications Data

• Records of communications with mekdi88 support, including live chat transcripts and email correspondence;
• Feedback and complaint submissions.

mekdi88 uses your personal data for the following purposes:

• Account Administration — creating, maintaining, and managing your mekdi88 Account, including processing login credentials and account security settings;
• Identity Verification and KYC Compliance — verifying that you are aged 21 or above and that your identity meets our regulatory obligations under our gaming licence;
• Payment Processing — facilitating deposits and withdrawals in MYR via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and other supported payment methods;
• Service Delivery — providing access to and operating all Platform products including the Sportsbook, Live Casino, Slots, and Toto 4D;
• Responsible Gaming — monitoring account activity to identify patterns that may indicate problematic gambling behaviour, and administering self-exclusion, deposit limit, and cooling-off requests;
• Fraud Prevention and Security — detecting, investigating, and preventing fraudulent activity, money laundering, account sharing, bonus abuse, and other prohibited conduct;
• Legal and Regulatory Compliance — meeting obligations under mekdi88's gaming licence, anti-money laundering (AML) regulations, and applicable data protection law;
• Customer Support — responding to enquiries, resolving disputes, and processing complaints;
• Platform Improvement — analysing aggregated, anonymised usage data to improve the mekdi88 Platform, resolve technical issues, and enhance user experience;
• Marketing Communications — where you have opted in, sending promotional communications about mekdi88 offers, bonuses, and new features. You may opt out at any time via your Account Settings or by contacting support.

mekdi88 processes personal data on the following legal bases:

• Contract Performance — processing necessary to fulfil our contractual obligations to you as a registered Player, including Account administration, payment processing, and service delivery;
• Legal Obligation — processing required to comply with gaming licence conditions, AML regulations, KYC requirements, and other applicable legal obligations;
• Legitimate Interests — processing for fraud prevention, platform security, responsible gaming monitoring, and aggregated analytics, where these interests are not overridden by your fundamental rights and freedoms;
• Consent — processing for marketing communications, where you have provided express opt-in consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

mekdi88 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in Section 4:

• Payment Processors — licensed payment service providers facilitating deposits and withdrawals, including e-wallet operators and banks. These providers process your payment data under their own privacy policies and applicable financial regulation;
• Game Providers — certified gaming studios and content providers (such as live casino and slot game operators) whose platforms are integrated into mekdi88. These providers may process limited session data necessary to deliver their services;
• Identity Verification Services — third-party KYC and AML screening services engaged to verify player identity and conduct due diligence in compliance with our licence obligations;
• IT and Infrastructure Providers — hosting, cloud infrastructure, and cybersecurity service providers operating under contractual data processing agreements with mekdi88;
• Regulatory and Law Enforcement Authorities — where mekdi88 is legally required to disclose personal data to our gaming licensor, relevant financial intelligence units, or law enforcement agencies pursuant to a lawful request or court order.

7.1 In connection with the operation of a global online gaming platform, personal data processed by mekdi88 may be transferred to and stored in countries outside of Malaysia, including the jurisdiction in which mekdi88 holds its gaming licence and the locations of our third-party service providers.

7.2 Where personal data is transferred outside Malaysia, mekdi88 takes reasonable steps to ensure that an adequate level of protection is maintained, including by implementing appropriate contractual safeguards with receiving parties and selecting service providers that maintain recognised data protection certifications.

8.1 mekdi88 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, accounting, and reporting obligations under our gaming licence.

8.2 For active Accounts, personal data is retained for the duration of the Account relationship and for a minimum period of five (5) years following Account closure, in accordance with standard AML record-keeping requirements applicable to licensed gaming operators.

8.3 KYC documentation is retained for a minimum of five (5) years from the date of last transaction, unless a longer retention period is required by applicable regulation.

8.4 Marketing communication preferences and opt-out records are retained indefinitely to ensure compliance with your communication preferences, even after Account closure.

8.5 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data deletion procedures.

9.1 mekdi88 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files placed on your device when you access the mekdi88 website.

9.2 The categories of cookies used by mekdi88 include:

• Strictly Necessary Cookies — essential for Platform operation, including maintaining your login session, remembering your language and currency preferences, and enabling security features. These cannot be disabled without materially affecting Platform functionality;
• Analytics Cookies — anonymised data on page views, session duration, and navigation paths, used to improve Platform performance and content. mekdi88 uses first-party analytics and does not share raw analytics data with advertising networks;
• Functional Cookies — remembering your preferences (such as your last-visited game category or preferred payment method) to personalise your experience.

9.3 You may manage your cookie preferences through your browser settings. Disabling strictly necessary cookies may prevent certain Platform features from functioning correctly. mekdi88 does not use cookies for third-party advertising or cross-site tracking.

Subject to applicable data protection law and any overriding legal obligations (including gaming licence retention requirements), you have the following rights in respect of your personal data held by mekdi88:

• Right of Access — to request a copy of the personal data mekdi88 holds about you;
• Right of Rectification — to request correction of inaccurate or incomplete personal data;
• Right to Erasure — to request deletion of your personal data, subject to applicable retention obligations;
• Right to Restriction — to request that processing of your data be restricted in certain circumstances;
• Right to Data Portability — to receive a copy of your data in a structured, machine-readable format;
• Right to Object — to object to processing based on legitimate interests, including marketing communications;
• Right to Withdraw Consent — where processing is based on consent, to withdraw that consent at any time without affecting prior lawful processing.

To exercise any of the above rights, contact mekdi88 at [email protected] with the subject line "Data Privacy Request". We will respond within 30 calendar days of receiving a verifiable request.

If you are a parent or guardian and believe that a minor has provided personal data to mekdi88, please contact us immediately at [email protected] so that we can take the appropriate steps.

12.1 mekdi88 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction, including:

• TLS/HTTPS encryption across all Platform connections;
• Industry-standard one-way password hashing — mekdi88 staff cannot read your account password;
• Two-factor authentication (2FA) available for all Accounts;
• Segregated storage of KYC documents and financial records;
• Role-based access controls limiting internal data access to authorised personnel only;
• Regular security assessments and vulnerability testing of the Platform.

12.2 Notwithstanding these measures, no transmission over the internet or electronic storage system is completely secure. mekdi88 cannot guarantee absolute security but will notify affected Players and relevant authorities promptly in the event of a data breach that presents a risk to your rights and freedoms, in accordance with applicable notification obligations.

13.1 mekdi88 reserves the right to amend this Privacy Policy at any time. The effective date of the current version is displayed at the top of this page. Material changes that affect how your personal data is processed will be communicated to registered Players via email to the address on record or via a prominent notice on the Platform prior to the changes taking effect.

13.2 Your continued use of the mekdi88 Platform following notification of any amendment constitutes acceptance of the revised Policy. If you do not accept the revised Policy, you should cease using the Platform and contact support to arrange Account closure and data deletion (subject to applicable retention obligations).

For all privacy-related enquiries, data rights requests, or to raise a concern about how your personal data is handled by mekdi88, please contact:

• Email: [email protected]
• Subject line: "Data Privacy Request — [Your Account Username or Email]"
• Live Chat: available 24/7 via the mekdi88 Platform

mekdi88 will acknowledge receipt of all data privacy requests within 2 business days and respond substantively within 30 calendar days. Where a request is complex or involves a large volume of data, we will notify you and may extend this period by up to an additional 60 days, with explanation.