This Privacy Policy was last updated on 1 January 2026. Continued use of MerdekaWin constitutes your full acceptance of this policy.
🔒 PLAYER DATA PROTECTION

MerdekaWin Privacy Policy – Our Commitment to Protecting Malaysian Players' Personal Data

At MerdekaWin, your privacy is not merely a legal obligation — it is a core value we take seriously every day. This document transparently explains how we collect, use, store and protect your personal information as a member of our platform.

🔐
SSL Encryption
256-bit
🚫
No Data Sales
Secure
🇲🇾
Malaysia PDPA
Full Compliance
📅
Last Updated
Jan 2026

MerdekaWin's Six Core Privacy Commitments

Before reading the full policy, here is the essence of our data protection commitment to every MerdekaWin member in Malaysia.

256-bit SSL Encryption at All Times

Every piece of data transmitted between your device and MerdekaWin's servers is protected by 256-bit SSL encryption — the same standard used by leading financial institutions worldwide. Your login credentials, deposit details, and personal data cannot be intercepted by any third party.

Your Data Is Not Sold to Third Parties

MerdekaWin has never sold, rented or traded members' personal information to any third party for marketing or commercial purposes, and never will. Your information belongs to you — we use it only to manage your account and improve your gaming experience.

Compliance with the Personal Data Protection Act

MerdekaWin's data collection and processing operations comply with Malaysia's Personal Data Protection Act 2010 (PDPA). We collect only what is genuinely necessary, store it securely, and delete it when it is no longer needed, in accordance with established guidelines.

Full Control in Your Hands

As a MerdekaWin member, you have the right to access, correct, download, and delete your personal data at any time. You may also withdraw consent for certain data processing without affecting your ability to continue using the platform's core features.

Secure & Limited Data Storage

Your personal data is stored on servers protected by strict access controls, industry-grade firewalls, and continuous 24/7 monitoring. Only staff who genuinely need access to carry out their duties are permitted to view member data — and all access is logged for audit purposes.

Prompt Data Breach Notification

In the event of any security incident involving MerdekaWin member data — however unlikely — we are committed to notifying affected members within 72 hours and taking immediate remedial action. Transparency in critical situations is an obligation we take seriously.

Important Notice

This Privacy Policy describes MerdekaWin's privacy practices in relation to personal information we collect from members of our platform in Malaysia. By registering for or using the MerdekaWin platform, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of the platform and contact us to request data deletion at support@merdekawin.click.

📋
Section 1

Introduction & Scope of Privacy Policy

This Privacy Policy ("Policy") is published by MerdekaWin ("we", "Platform") and applies to all individuals who access or use our services via the merdekawin.click website or related applications. This Policy explains in detail how we handle your personal information in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international privacy standards.

MerdekaWin is a digital entertainment platform offering online casino services and Sports Betting covering football, badminton, e-sports, and more — all built specifically for Malaysian players. In operating this platform, we need to collect and process certain personal information to allow you to register an account, make deposits via Touch 'n Go, GrabPay, DuitNow, or FPX, enjoy our games, and receive effective customer support.

MerdekaWin's Core Privacy Principles: We only collect data that is genuinely necessary. We store it securely. We do not use it for purposes you would not expect. And we give you meaningful control over your own data.

📂
Section 2

Types of Personal Data We Collect

MerdekaWin collects various categories of personal information depending on how you interact with our platform. Below is a detailed breakdown of each category:

Data Category Examples of Information Collection Point
Identity Information Full name, date of birth, MyKad/passport number During registration & KYC
Contact Information Email address, Malaysian phone number, residential address At registration
Financial Data E-wallet account numbers, deposit & withdrawal records in MYR During a transaction
Usage Data Game records, betting history, active hours While playing
Technical Data IP address, device type, browser, operating system Automatically upon access
Communication Data Live chat transcripts, support emails, feedback When contacting support

Sensitive Information: MerdekaWin does not collect sensitive data such as your medical information, sexual orientation, political views, or religious beliefs. Any financial data collected is strictly for transaction processing and anti-money laundering (AML) compliance purposes.

⚙️
Section 3

How We Use Your Personal Data

MerdekaWin uses the personal data collected for the following purposes, all of which are directly related to delivering a quality platform experience to you as a player in Malaysia:

  • Account Management: Registering, verifying, and maintaining your MerdekaWin account, including the KYC and identity verification process.
  • Transaction Processing: Processing deposits via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as withdrawals to your account in MYR.
  • Service Provision: Gives you access to all games and features on the MerdekaWin platform, including slots, Live Casino, badminton betting, and football.
  • Customer Support: Handling enquiries, resolving complaints, and providing technical assistance via Live Chat, email, and WhatsApp in Bahasa Malaysia.
  • Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, and violations of the platform's Terms & Conditions.
  • Experience Personalisation: Personalising game recommendations, promotions and content based on your preferences and gaming history — solely to enhance your experience, not to be sold to third parties.
  • Legal Compliance: To fulfil the legal and regulatory obligations applicable to the operation of the MerdekaWin platform.
  • Platform Improvement: Analysing usage patterns in aggregate (not at the individual level) to improve the platform's design, performance and features.

Legal Basis for Processing: All personal data processing by MerdekaWin is based on one of the following grounds — your explicitly given consent, contractual necessity to provide services to you, legal obligations binding on us, or our legitimate interests in operating the platform safely and responsibly.

🤝
Section 4

Sharing Data with Third Parties

MerdekaWin does not sell, rent, or disclose your personal information to third parties for their own marketing purposes. However, in operating this platform, we may need to share certain data with a limited number of third parties in the following circumstances:

  • Service Providers: Companies that help us operate the platform — such as payment service providers (Touch 'n Go, GrabPay, FPX), licensed game providers, cloud infrastructure providers, and cybersecurity services. All such providers are bound by strict data protection agreements and may only use your data for purposes we direct.
  • Regulatory Authority: We may be required to disclose information to relevant authorities when mandated by Malaysian law, including in financial investigations and anti-money laundering cases.
  • Legal Rights Protection: Where necessary to protect MerdekaWin's legal rights, limit liability, or respond to valid legal proceedings.

Written Guarantee: Every third party that receives personal data of MerdekaWin members is required to sign a data processing agreement obligating them to protect that information to a standard equal to or exceeding our own data protection standards. We do not share data with any entity that cannot provide adequate security guarantees.

🛡️
Section 5

Data Security Measures

MerdekaWin continually invests in robust security infrastructure to ensure your personal data is protected against both external and internal threats. The security measures we have in place include:

  • Data Encryption in Transit: All communications between your device and MerdekaWin's servers are encrypted with TLS 1.3 and 256-bit SSL certificates — your data cannot be read in transit.
  • Encryption of Stored Data: Sensitive information such as passwords, identification numbers, and payment details is stored in encrypted form using industry-standard encryption algorithms.
  • Strict Access Controls: Only MerdekaWin staff who require access to carry out their duties are permitted to view member data. All access is logged and monitored automatically.
  • Two-Factor Authentication (2FA): Available to all member accounts as an additional layer of protection beyond your password.
  • 24/7 Security Monitoring: Our security team continuously monitors our systems to detect and respond to any suspicious activity.
  • Regular Penetration Testing: We conduct regular security assessments by independent third-party experts to identify and address any vulnerabilities before they can be exploited.

Shared Responsibility: While MerdekaWin takes all reasonable steps to protect your data, account security also depends on your own actions. Please use a strong and unique password, enable 2FA, and never share your login credentials with anyone — including anyone claiming to be a MerdekaWin representative.

🍪
Section 6

Use of Cookies & Tracking Technologies

MerdekaWin uses cookies and similar tracking technologies to enhance your experience on our platform. Below is an explanation of the types of cookies we use and their purposes:

  • Essential Cookies: Required for core platform functions such as login sessions, form security, and language preferences. These cookies cannot be disabled without affecting your ability to use the platform.
  • Performance Cookies: Collects anonymised information about how you use the platform — pages visited, time spent, errors encountered. This data is used to improve MerdekaWin's performance and design.
  • Functional Cookies: Saves your preferences such as font size, display settings, and preferred language so you do not need to reconfigure them each time.
  • Session Cookies: Session cookies that are automatically deleted when you close your browser. Used to maintain your login session status while navigating the platform.

You can manage cookie settings through your browser. However, disabling essential cookies may affect your ability to log in or use certain features of the MerdekaWin platform. We do not use third-party cookies for targeted advertising.

⚖️
Section 7

Your Rights Regarding Personal Data

As a data subject under Malaysia's PDPA and the international privacy standards we adhere to, you have the following rights regarding your personal data at MerdekaWin:

  • Right of Access: You may request a copy of all personal data we hold about you at any time.
  • Right to Rectification: If any of your data is inaccurate or out of date, you have the right to request its prompt correction.
  • Right to Erasure: Under certain circumstances, you may request that we delete your personal data ("right to be forgotten"), subject to our legal retention obligations.
  • Right to Restrict Processing: You may ask us to restrict how we process your data in certain circumstances, such as when you are disputing the accuracy of the data.
  • Right to Data Portability: You may request that we provide your personal data in a structured, machine-readable format for transfer to another service provider.
  • Right to Object: You may object to the processing of your personal data for specific purposes, including direct marketing.
  • Right to Withdraw Consent: You may withdraw consent previously given for data processing at any time, without affecting the validity of any processing that took place prior to the withdrawal.

How to Exercise Your Rights: To exercise any of the above rights, contact the MerdekaWin Data Protection Officer team by email at support@merdekawin.click by clearly stating your request. We will process it within 30 working days and confirm completion via email.

👶
Section 8

Children's Data Protection

MerdekaWin is a digital entertainment platform designed exclusively for adults aged 18 years and above. We do not knowingly collect or process personal data from individuals under the age of 18.

All prospective members are required to confirm they are 18 years of age or older at the point of registration. Our KYC process, which requires identity documentation, also serves as an additional layer of age verification.

If We Discover Data Belonging to a Minor: If MerdekaWin discovers that personal data of a minor has been collected without consent, we will delete that data immediately, close the account in question, and take appropriate action. Parents or guardians who find that their child has registered with MerdekaWin should contact us right away at support@merdekawin.click.

🌐
Section 9

Cross-Border Data Transfers

In operating the MerdekaWin platform, your personal data may be stored or processed on servers located outside Malaysia — for example, within cloud infrastructure used by our technical service providers. Any such data transfer only takes place where we are satisfied that the level of data protection at the destination is equivalent to Malaysia's PDPA standards.

The safeguards we apply to cross-border data transfers include:

  • Using data processing agreements that set out minimum protection standards the data recipient must meet.
  • Working only with service providers based in countries or regions with recognised data protection legislation.
  • Implementing additional protective mechanisms such as end-to-end encryption for highly sensitive data.
🗓️
Section 10

Data Retention Period

MerdekaWin retains your personal data only for as long as it is needed for the purpose it was collected, or as required by law. Below are the retention period guidelines for key data categories:

  • Active Account Data: Retained for as long as your account remains active on MerdekaWin.
  • Financial Transaction Data: Retained for a minimum of 7 years in compliance with Malaysian financial legislation and anti-money laundering requirements.
  • KYC Records: Retained for a minimum of 5 years after account closure.
  • Security & Audit Logs: Retained for 2 years for investigation purposes if required.
  • Support Communication Data: Retained for 1 year after the issue is resolved.
  • Marketing Data (if you have consented): Retained until you withdraw consent or request deletion.

After Account Closure: When an account is closed, data that is no longer required for legal purposes will be deleted or anonymised within 90 days. Data that must be retained for legal compliance will be held in a separate system with more restricted access.

🔄
Section 11

Amendments to This Privacy Policy

MerdekaWin reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, the technologies we use, legal requirements, or other operational reasons. The "Last Updated" date at the top of this page indicates when the Policy was last reviewed.

For material amendments — that is, changes that significantly affect how we use your data or your rights — we will provide clear notice via:

  • An email to the address registered to your account, at least 14 days before the changes take effect.
  • In-platform notifications on MerdekaWin while you are logged in.
  • A prominent banner or notice on our website's main page.

Continued use of the MerdekaWin platform after the effective date of any amendment constitutes acceptance of the updated Privacy Policy. If you disagree with the changes, you have the right to close your account and request data deletion in accordance with the procedures set out in Section 7.

📬
Section 12

Contact Our Data Protection Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, you may contact MerdekaWin's Data Protection Officer through the following channels:

  • Email: support@merdekawin.click (please include "Data Privacy Enquiry" in the email subject line)
  • Live Chat: Available 24/7 within the MerdekaWin platform
  • Response Time: We will acknowledge receipt within 3 working days and resolve your enquiry within 30 working days

Complaints to the Authority: If you are not satisfied with MerdekaWin's response to your privacy enquiry or complaint, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia or the relevant regulatory authority. That said, we encourage you to contact us first so we can resolve any issues as quickly and effectively as possible.

Your Rights as a MerdekaWin Member

Under Malaysia's PDPA and our privacy commitments, you have full control over the personal data you share with us.

👁️
Right of Access

Request a complete copy of all personal data we hold about you at any time. Processed within 30 working days.

✏️
Right to Rectification

Correct any inaccurate information in your MerdekaWin account profile via account settings or customer support.

🗑️
Right to Erasure

Request deletion of your personal data, subject to legal retention obligations relating to financial records.

📤
Right to Portability

Receive your data in a structured, machine-readable format for transfer to another platform of your choice.

🚫
Right to Object

Object to the processing of your data for direct marketing or analytics purposes — your request will be acted on without question.

⏸️
Right to Restrict

How we handle your data during a dispute or review — data will not be deleted but its use will be temporarily restricted.

↩️
Withdraw Consent

Withdraw your consent to data processing at any time, with no penalties. Your ability to use the platform's core functions will not be affected.

📣
Right to Complain

Submit a complaint to us or directly to the Personal Data Protection Commissioner of Malaysia if you are not satisfied.

Why Data Privacy Matters to MerdekaWin Players

When you register with MerdekaWin and start playing — whether it's slots, BWF badminton betting, Malaysia Super League football, or Live Casino — you entrust us with some fairly personal information: your name, phone number, and your Touch 'n Go or GrabPay wallet details. That trust is not something we take lightly.

Many players who have used other platforms have experienced situations where their phone number suddenly started receiving calls or messages from companies they never signed up with. This happens when a platform sells or shares customer data with third-party marketing firms. At MerdekaWin, our policy is clear and unwavering: we do not sell your data. Full stop.

One question players often ask is about financial transaction data. When you deposit RM 50 via DuitNow or withdraw your winnings through FPX, we do retain records of those transactions. This is not to monitor your activity — it is an anti-money laundering (AML) legal requirement applicable to all financial and digital entertainment platforms operating responsibly. These records are stored securely, protected by encryption, and accessible only in the course of a legitimate legal investigation.

As for cookies, MerdekaWin uses them primarily to keep your login session running smoothly and to gain a general understanding of how players use our platform — so we can improve it over time. We do not use advertising cookies that track you across other websites or sell your browsing information to advertisers. Your experience on MerdekaWin is yours alone.

Another area we take seriously is data breach notification. While our security systems are designed to prevent any such incident, we understand that no system is 100% foolproof. Should any security incident involving our members' data occur, we are committed to notifying you within 72 hours — not weeks later after the damage is done. Transparency in critical situations is the true test of a platform's commitment to privacy.

In closing, MerdekaWin's Privacy Policy is not merely a legal document written to satisfy regulatory requirements. It reflects our core values — that players who trust MerdekaWin with their time and money deserve to know exactly how their information is used, and deserve to control that information at any time. Any questions regarding your data privacy may be directed to our team via FAQ page or directly via our support email.

Privacy Policy FAQ

The most frequently asked questions about data protection and privacy at MerdekaWin. Our team is available 24/7 to help.

Related Links
Data Privacy Officer
support@merdekawin.click

No. MerdekaWin does not share, sell, or rent member personal information to any advertisers or third-party marketing companies. Your data is used solely to manage your account, process MYR transactions, and improve your platform experience. Any data sharing with technical service providers is limited to what is necessary for them to perform their functions, and all providers are bound by strict data protection agreements.

Send an email to support@merdekawin.click with the subject line "Data Access Request" and include your account number. Our Data Protection Officer team will first verify your identity, then provide a full data report within 30 business days. The report will be sent in a secure format to the registered email address on your account. No fee is charged for your first data access request within any 12-month period.

Financial transaction records — including all deposits via Touch 'n Go, GrabPay, DuitNow, FPX and withdrawals in MYR — are retained for a minimum of 7 years in compliance with Malaysian financial legislation and anti-money laundering (AML) guidelines. This is a legal obligation that cannot be waived even if you close your account. Non-transaction data will be deleted or anonymised within 90 days of account closure.

Yes, you may request the deletion of your personal data at MerdekaWin. However, this right is subject to certain exceptions — in particular, data we are required to retain in order to comply with legal obligations, such as financial transaction records (retained for 7 years) and KYC records (retained for 5 years after account closure). Data not subject to any legal retention obligation will be deleted within 90 days of your request being verified.

In the event of a merger, acquisition or transfer of MerdekaWin's assets, members' personal data may be transferred to the new entity as part of the platform's assets. In such a situation, we are committed to notifying all affected members before any data is transferred, and the new entity will be required to uphold a Privacy Policy equivalent to or stronger than the current one. You will have the option to close your account and request data deletion before the transfer takes place.

Yes, MerdekaWin records your gaming activity — including games played, bets placed and active session times — for several legitimate purposes: ensuring game fairness, detecting potential problem gambling for responsible gaming purposes, resolving disputes should they arise, and personalising recommendations based on your preferences. This data is not shared with third parties for advertising purposes. You can view your full activity history in your MerdekaWin account settings.
🔒 🛡️ 🇲🇾 🎰

Your Data Is Safe at MerdekaWin

Sign up with confidence — MerdekaWin protects your privacy and personal data to the highest security standards. Join over 850,000 Malaysian players who enjoy peace of mind on our platform.

256-bit SSL Secured
No Data Sales
PDPA Compliance
Responsible Gaming
Bahasa Melayu