Privacy Policy

This Privacy Policy ("Policy") is published by mekdi88a ("mekdi88a", "We", "Us", "Our"), the operator of the online betting and live casino platform accessible atmekdi88a.cam. This Policy sets out the basis on which personal data collected from users ("You", "User", "Player") or provided by users to mekdi88a will be processed by us in connection with the Platform and any associated services.

mekdi88a operates as Malaysia's premier English-language online betting platform, serving players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, Bangsar, and throughout Malaysia. In the course of providing our services — which include sports betting on Liga Super Malaysia, EPL, UFC, and other markets; live casino; slots; and related financial transactions in MYR — we necessarily collect and process certain personal information about our registered players and website visitors.

We take our data protection obligations seriously. We collect only the minimum personal data necessary for the specified purposes, store it securely, and do not sell it to third parties. This Policy is intended to be clear, honest, and complete — not a document buried in technical language that obscures what actually happens with your information.

For the purposes of this Privacy Policy, the following terms carry the meanings defined below:

• "Personal Data" means any information relating to an identified or identifiable natural person — that is, information that directly or indirectly identifies you, such as your name, email address, device identifiers, or account credentials.
• "Processing" means any operation performed on Personal Data, including collection, recording, organisation, structuring, storage, adaptation, retrieval, consultation, use, disclosure, transmission, dissemination, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of Processing Personal Data. For the purposes of this Policy, mekdi88a acts as the Data Controller in relation to Personal Data collected through the Platform.
• "Data Processor" means any third-party entity that processes Personal Data on behalf of and under the instructions of mekdi88a, including payment processors, identity verification providers, and cloud infrastructure partners.
• "KYC Data" means identity verification documentation submitted by a User in fulfilment of Know Your Customer requirements, including government-issued identity documents, proof of address, and source-of-funds documentation.
• "Sensitive Personal Data" means Personal Data that warants additional protection by reason of its nature, including financial information, identity document details, and any data that could expose a User to risk of harm if disclosed without consent.
• "Platform" means the mekdi88a website, mobile-optimised web interface, and all associated digital services operated at mekdi88a.cam.
• "Cookies" means small text files placed on a User's device by the Platform for session management, analytics, and user experience personalisation purposes.

mekdi88a collects Personal Data across several categories. The specific data collected depends on the nature of your interaction with the Platform — visitors who do not register an account will have only a limited set of data processed, whereas registered and active players will have a more comprehensive data profile maintained.

mekdi88a does not intentionally collect special category data (such as racial or ethnic origin, health data, religious beliefs, or biometric identifiers) except where identity documents submitted during KYC incidentally contain such information, in which case such data is used solely for identity verification and not processed for any other purpose.

Personal Data is collected through multiple channels in the course of your interaction with mekdi88a:

4.1 Directly From You

• During account registration, when you provide your name, date of birth, email address, and other required profile information.
• When you submit KYC documentation to complete identity verification prior to making a withdrawal.
• When you initiate a deposit or withdrawal transaction via any supported payment method, including Touch'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, or cryptocurrency.
• When you contact our customer support team via live chat or email, and the content of that communication is recorded for quality assurance and dispute resolution purposes.
• When you voluntarily participate in surveys, promotions, or feedback mechanisms offered on the Platform.

4.2 Automatically Through Platform Technology

• Through cookies, web beacons, and similar tracking technologies that are placed on your device when you access the Platform. See Section 11 (Cookies & Tracking) for more detail.
• Through server logs that automatically record IP addresses, access timestamps, requested URLs, browser type, and referal source for every HTTP request made to the Platform.
• Through Platform analytics systems that track your navigation behaviour, session duration, game activity, and feature engagement to improve the user experience.

4.3 From Third Parties

• From identity verification and fraud prevention service providers that cross-reference the information you provide with external databases as part of the KYC process.
• From payment processors and financial intermediaries (including those operating the Malaysian FPX and DuitNow networks) who may provide transaction status updates and fraud risk indicators.
• From game technology providers who supply platform-level session data related to your activity on their hosted game environments.

mekdi88a processes Personal Data for the following defined purposes. We do not use your data for purposes incompatible with those listed below without first obtaining your explicit consent or being required to do so by law:

• Account Management: Creating, maintaining, and administering your registered account, including authentication, account security, preference management, and VIP tier status tracking.
• Identity Verification (KYC): Verifying your age (21+ requirement), identity, and residential address as required by our international licensing obligations and responsible gambling commitments.
• Transaction Processing: Processing deposits in MYR via supported Malaysian payment methods and cryptocurrencies, and processing withdrawal requests to verified payment instruments.
• Service Provision: Delivering the betting, live casino, slots, and other gaming services you access on the Platform, including personalising your experience based on stated preferences.
• Fraud Prevention & Anti-Money Laundering: Monitoring account activity for indicators of fraud, bonus abuse, multi-accounting, money laundering, or other prohibited conduct as defined in our Terms & Conditions.
• Customer Support: Responding to your enquiries, resolving complaints, and maintaining records of support interactions for quality assurance purposes.
• Responsible Gambling: Monitoring gameplay patterns for indicators of problem gambling behaviour, applying player-requested self-restriction tools, and maintaining records related to self-exclusion requests.
• Legal Compliance: Meeting obligations under applicable international gaming licence conditions, anti-money laundering requirements, and responding to lawful requests from regulatory or law enforcement authorities.
• Marketing Communications: Sending you promotional communications about mekdi88a offers, bonuses, and platform updates — but only where you have not opted out of such communications. You may opt out at any time by contacting support.
• Platform Improvement: Analysing aggregated and anonymised usage data to improve platform performance, game selection, payment integrations, and user experience design.

mekdi88a relies on the following legal bases to justify the processing of your Personal Data, depending on the specific purpose and the applicable data protection framework:

• Contractual Necessity: Processing necessary for the performance of the contract between you and mekdi88a — including account registration, transaction processing, and service delivery — is conducted on the basis that such processing is required to fulfil our obligations to you under the Terms & Conditions.
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC identity verification, anti-money laundering screening, and responses to lawful authority requests, is conducted on the basis of legal obligation.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gambling monitoring, and internal analytics is conducted on the basis of mekdi88a's legitimate interests — specifically the interest in maintaining a secure, fair, and legally compliant platform — where such interests are not overridden by your rights and interests.
• Consent: Processing for direct marketing communications is conducted on the basis of your consent, which you may withdraw at any time without affecting the lawfulness of processing conducted prior to withdrawal.

mekdi88a does not sell, rent, or trade your Personal Data to any third party for their independent commercial use. We share data only as described below, and only to the extent necessary for the specified purpose:

7.1 Service Providers (Data Processors)

We engage third-party Data Processors who act under our instructions and may access Personal Data solely to perform services on our behalf. These include identity verification providers, payment gateway operators (including those operating the Touch 'n Go, DuitNow, FPX, Maybank, and CIMB payment rails), cloud hosting and infrastructure providers, fraud detection services, and customer support platform vendors. All Data Processors are required by contract to maintain appropriate security standards and to process your data only for the purposes for which it was shared.

7.2 Regulatory & Legal Authorities

mekdi88a will disclose Personal Data to competent regulatory authorities, law enforcement agencies, or courts of law where required to do so by applicable law, valid legal process, or where we believe in good faith that such disclosure is necessary to prevent fraud, protect player safety, or cooperate with an investigation into a suspected legal violation.

7.3 Business Transfers

In the event of a merger, acquisition, asset sale, or restructuring of mekdi88a's business, your Personal Data may be transferred to the acquiring entity or successor organisation as part of the transaction. We will endeavour to provide notice of such a transfer and, where required, obtain your consent where the transfer would involve a materially different use of your data than that described in this Policy.

7.4 With Your Consent

mekdi88a may share Personal Data with additional third parties where you have provided explicit, informed consent to such sharing. You may withdraw this consent at any time by contacting our support team.

As an internationally operated platform, mekdi88a may process or store your Personal Data in jurisdictions outside Malaysia. This may occur in the context of our use of cloud infrastructure providers, game technology partners, or identity verification services whose servers are located in regions including but not limited to Europe, Southeast Asia, or other jurisdictions where our licensing authority or technical partners operate.

Where Personal Data is transferred outside Malaysia to countries that may not provide the same level of data protection as Malaysia's domestic framework, mekdi88a takes steps to ensure that such transfers are subject to appropriate contractual safeguards — including standard contractual clauses requiring the recipient to maintain data security standards materially equivalent to those required under this Policy.

By registering an account with mekdi88a, you acknowledge and consent to the transfer of your Personal Data to jurisdictions outside Malaysia for the purposes described in this Policy, subject to the safeguards described above.

mekdi88a retains Personal Data for no longer than is necessary to fulfil the purposes for which it was collected, or as required by applicable legal or regulatory obligations. The following general retention periods apply:

• Active Account Data: Retained for the full duration of your registered account, plus minimum period of five (5) years following account closure to satisfy anti-money laundering record-keeping requirements.
• KYC Documentation: Retained for a minimum of five (5) years from the date of submission, in accordance with standard regulatory requirements applicable under our international licensing framework.
• Transaction Records: Deposit, withdrawal, and wagering records are retained for a minimum of five (5) years from the date of each transaction.
• Support Correspondence: Live chat transcripts and email correspondence are retained for a period of three (3) years from the date of the relevant interaction.
• Self-Exclusion Records: Records relating to self-exclusion requests are retained indefinitely to prevent a re-registered account from being activated before the exclusion period has legitimately expired.
• Technical & Usage Data: Server logs and session analytics are retained for up to twelve (12) months, after which they are anonymised or deleted.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised such that it can no longer be linked to you as an individual.

mekdi88a implements a layered set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• Encryption in Transit: All data transmitted between your device and the mekdi88a Platform is encrypted using industry-standard TLS 1.2 /1.3 protocols (256-bit SSL). This includes login sessions, financial transactions, and KYC document uploads.
• Encryption at Rest: Sensitive data fields stored in mekdi88a's databases — including passwords (stored as salted hashes), financial information, and identity document data — are encrypted at rest using AES-256 or equivalent standards.
• Access Controls: Access to Personal Data within mekdi88a's internal systems is restricted to authorised personnel on a strict need-to-know basis, governed by role-based access controls and multi-factor authentication requirements.
• Two-Factor Authentication: Players are strongly encouraged to enable two-factor authentication (2FA) on their accounts. mekdi88a supports TOTP-based 2FA as an additional layer of account security.
• Penetration Testing & Audits: mekdi88a engages third-party security specialists to conduct periodic penetration tests and security audits of the Platform's infrastructure and data handling practices.
• Data Breach Response: In the event of a confirmed personal data breach that is likely to result in a risk to your rights, mekdi88a will notify affected users without undue delay and will implement remediation measures as quickly as practicable.

mekdi88a uses cookies and similar tracking technologies on the Platform for purposes including session management, performance monitoring, fraud detection, and user experience personalisation. By continuing to use the Platform after being informed of this Policy, you consent to the use of cookies as described below.

11.1 Types of Cookies Used

• Strictly Necessary Cookies: Required for the Platform to function correctly. These include session cookies that maintain your login state, security tokens, and cookies that support the correct operation of the deposit and withdrawal interfaces. These cookies cannot be disabled without impairing Platform functionality.
• Performance & Analytics Cookies: Used to collect aggregated, anonymised data about how visitors interact with the Platform — pages visited, session duration, navigation paths, and error reports. This data is used exclusively to improve Platform performance and user experience.
• Functional Cookies: Used to remember your preferences, such as language settings, display preferences, and previously visited game categories, to provide a more personalised experience on subsequent visits.
• Fraud Detection Cookies: Short-lived cookies and device fingerprinting signals used by our fraud prevention systems to identify anomalous account behaviour, multiple account creation attempts, and unusual payment patterns.

11.2 Managing Cookies

Most web browsers allow you to view, manage, delete, and block cookies through browser settings. Please note that blocking strictly necessary cookies will prevent the Platform from functioning correctly. For instructions on managing cookies in your specific browser, refer to your browser's help documentation. Please also be aware that clearing cookies will log you out of your mekdi88a session and may affect saved preferences.

Subject to applicable data protection law and certain exceptions, you have the following rights in relation to your Personal Data held by mekdi88a. To exercise any of these rights, please contact our support team via live chat or email at the address provided in Section 15.

• Right of Access: You have the right to request confirmation of whether mekdi88a holds Personal Data about you, and if so, to receive a copy of that data together with information about how it is being processed. This is known as a Subject Access Request (SAR) and will be responded to within 30 days of receipt.
• Right to Rectification: You have the right to request correction of any Personal Data that is inaccurate or incomplete. You may update many data fields directly through your Account settings; for data fields that cannot be self-edited, you may submit a correction request to our support team.
• Right to Erasure: You have the right to request deletion of your Personal Data in certain circumstances — for example, where the data is no longer necessary for the purposes for which it was collected. Please note that this right is subject to important exceptions, including our legal obligation to retain certain data (such as KYC records and transaction logs) for a minimum period of five years.
• Right to Restrict Processing: You have the right to request that mekdi88a restrict the processing of your Personal Data in certain circumstances, such as where you contest the accuracy of the data or object to its use for a specific purpose, pending resolution of the dispute.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and carried out by automated means, you have the right to receive a copy of your Personal Data in a structured, machine-readable format, and to request that it be transmitted directly to another controller where technically feasible.
• Right to Object: You have the right to object to the processing of your Personal Data where that processing is based on our legitimate interests, including the use of your data for direct marketing purposes. Objections to direct marketing will be honoured immediately upon receipt.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal.

mekdi88a aims to respond to all valid data rights requests within thirty (30) days of receipt. In cases of complexity or volume, this period may be extended by a further sixty (60) days, with notice provided to you. We do not charge a fee for exercising these rights unless a request is manifestly unfounded or excessive.

The mekdi88a Platform is strictly intended for adults aged 21 (twenty-one) years and above. We do not knowingly collect Personal Data from, or provide gambling services to, any person under the age of 21. The21+ age restriction is enforced through mandatory KYC identity verification, which includes document-based confirmation of the account holder's date of birth.

If mekdi88a becomes aware or has reason to believe that Personal Data has been collected from a person under the age of 21, we will immediately suspend the associated Account, void any gameplay or transactions conducted through that Account in accordance with applicable law, and permanently delete the minor's Personal Data except where retention is required by law for regulatory or enforcement purposes.

If you are a parent or legal guardian and believe that your child has registered an account on the mekdi88a Platform, please contact our support team immediately via live chat or email so that we can investigate and take appropriate action without delay.

mekdi88a reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or operational developments in the Platform. The "Last Updated" date at the top of this page will be revised each time this Policy is materially amended.

Where amendments are material — meaning they significantly affect how we use your Personal Data or the rights available to you — mekdi88a will endeavour to provide advance notice through a prominently displayed notification on the Platform and, where practicable, by direct communication to registered Account holders via the email address on file.

Your continued use of the Platform following publication of an amended Privacy Policy constitutes your acknowledgement of the changes. We encourage you to review this Policy periodically, particularly when you receive a notification of an update. If you do not agree to any material changes, please discontinue your use of the Platform and contact our support team to initiate Account closure.

For any queries, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by mekdi88a, please contact our Data Protection team using the channels below. All contact details are provided as plain text and are not clickable links in accordance with our platform security policy.