Privacy Policy

Introduction

This Privacy Policy ("Policy") describes how Merdeka777 ("we", "us", "our", "the Platform") collects, processes, stores, discloses, and protects the personal data of users ("you", "User", "Player") who register for an account, access, or otherwise interact with the Merdeka777 online gaming platform atmerdeka777.cam.

Merdeka777 is committed to protecting the privacy and personal data of all users. This Policy has been drafted in accordance with internationally recognised data protection principles, including those underpinning the General Data Protection Regulation (GDPR) framework and Malaysia's Personal Data Protection Act 2010 (PDPA), to the extent applicable to the Platform's operations.

This Policy should be read together with our Terms & Conditions and our Responsible Gambling Policy, both of which are incorporated into this Policy by reference.

Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings assigned to them below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial information, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" — Merdeka777, which determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" — a third party that processes Personal Data on behalf of Merdeka777 under a written data processing agreement.
• "KYC Data" — identity verification documents and supporting materials submitted by Users as part of the Know Your Customer verification process.
• "Sensitive Personal Data" — a subset of Personal Data warranting heightened protection, including financial account details and government-issued identification numbers.
• "Cookies" — small text files placed on a User's device by the Platform for purposes of session management, security, and analytics.
• "Third Party" — any entity other than Merdeka777 and the User, including payment processors, technology providers, and regulatory authorities.

Personal Data We Collect

Merdeka777 collects the following categories of Personal Data from Users:

3.1 Registration Data

Information provided at the time of Account creation, including full legal name, date of birth, email address, mobile phone number, and residential address (including city — for example, Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, or Shah Alam).

3.2 Identity Verification (KYC) Data

Documents submitted to verify your identity and age, including scanned copies or photographs of government-issued photo identification (Malaysian MyKad, Driver's Licence, or Passport), proof of residential address, and selfie photographs as required by our KYC process.

3.3 Financial Data

Payment method details necessary to process deposits and withdrawals, including registered e-wallet identifiers (Touch 'n Go eWallet, Boost, GrabPay), bank account details linked to DuitNow or FPX transactions (Maybank, CIMB, Public Bank, Hong Leong Bank), and cryptocurrency wallet addresses where applicable. We do not store full payment card numbers or bank account passwords on our systems.

3.4 Transaction Data

Records of all financial transactions conducted through your Account, including deposit amounts, withdrawal requests, bet history, game activity, bonus usage, and account balance movements. Transaction records are retained as required for regulatory compliance and dispute resolution.

3.5 Technical and Device Data

Data collected automatically when you access the Platform, including IP address, device type and operating system, browser type and version, session duration, pages visited, referring URLs, and unique device identifiers.

3.6 Communications Data

Records of communications between you and Merdeka777 customer support, including live chat transcripts (in English, Bahasa Melayu, or Mandarin), email correspondence, and any feedback or complaint submissions.

3.7 Responsible Gambling Data

Information related to your use of responsible gambling tools, including deposit limit settings, self-exclusion requests, cool-off periods, and session time reminder preferences. This data is processed to fulfil our responsible gaming obligations and is treated with heightened confidentiality.

How We Collect Personal Data

Merdeka777 collects Personal Data through the following means:

• Directly from you — when you register an Account, complete KYC verification, make a deposit or withdrawal, contact customer support, or update your Account profile.
• Automatically — when you access and interact with the Platform, through server logs, browser session data, and cookie tracking technologies described in Section 10 of this Policy.
• From third-party service providers — including identity verification agencies, fraud detection services, and payment processors, who may provide us with additional data to verify your identity or assess transaction risk.
• From public sources — including sanctions lists, politically exposed persons (PEP) databases, and adverse media screening services, for the purpose of anti-money laundering compliance.

Purpose of Data Processing

Merdeka777 processes your Personal Data for the following specific purposes:

Legal Basis for Processing

Merdeka777 relies on the following legal bases for processing your Personal Data:

• Contractual necessity — Processing is necessary to perform our obligations under the agreement established when you create an Account and use our services, including processing transactions and providing customer support.
• Legal obligation — Processing is required to comply with applicable legal and regulatory requirements, including anti-money laundering laws, KYC obligations, and responsible gambling regulations under our operating licence.
• Legitimate interests — Processing is necessary for the legitimate interests of Merdeka777 in preventing fraud, ensuring platform security, conducting analytics to improve our services, and enforcing our Terms & Conditions — provided those interests do not override your fundamental privacy rights.
• Consent — Where we rely on your consent — for example, for sending promotional communications — you may withdraw consent at any time by contacting customer support or updating your communication preferences within your Account settings. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal.

Data Sharing & Disclosure

7.1 Service Providers

Merdeka777 shares Personal Data with carefully selected third-party service providers who assist in operating the Platform. All such providers are engaged under data processing agreements that restrict their use of your data to the specific services they provide on our behalf. These providers include:

• Payment processing partners — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, and cryptocurrency processing partners;
• Identity verification and KYC service providers;
• Fraud detection and anti-money laundering screening providers;
• Cloud infrastructure and data hosting providers;
• Customer support platform providers;
• Platform analytics and performance monitoring providers.

7.2 Regulatory and Legal Disclosures

Merdeka777 may disclose Personal Data to regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, court order, or regulatory instruction — for example, in connection with AML investigations, fraud inquiries, or licensing compliance reviews. We will, where legally permissible, endeavour to notify affected Users of any such mandatory disclosure.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of Merdeka777's assets, Personal Data held by the Platform may be transferred to the acquiring entity as part of the transaction. Users will be notified of any such transfer and the associated data processing implications prior to any change in the Data Controller taking effect.

Data Retention

Merdeka777 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following indicative retention periods apply:

• Active Account Data — retained for the duration of the Account relationship plus a minimum of five (5) years following Account closure, in compliance with AML record-keeping requirements.
• KYC Documents — retained for a minimum of five (5) years from the date of the last transaction or Account closure, whichever is later.
• Transaction Records — retained for a minimum of five (5) years in accordance with financial record-keeping obligations.
• Customer Support Communications — retained for three (3) years from the date of the communication, or longer where required for ongoing dispute resolution.
• Technical and Device Data — retained for up to twelve (12) months for security and analytics purposes.
• Responsible Gambling Records — retained for the lifetime of the Account and for five (5) years following closure, to prevent re-registration by self-excluded users.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with Merdeka777's data disposal procedures.

Data Security

Merdeka777 implements a range of technical and organisational security measures designed to protect Personal Data against unauthorised access, disclosure, alteration, or destruction. These measures include, but are not limited to:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the Platform;
• Encryption of Personal Data at rest using industry-standard cryptographic protocols;
• Access controls restricting Personal Data access to authorised personnel on a need-to-know basis;
• Multi-factor authentication for administrative access to data systems;
• Regular penetration testing and vulnerability assessments conducted by independent security specialists;
• Secure disposal procedures for Personal Data that has reached the end of its retention period.

Notwithstanding the above, no method of electronic transmission or storage is fully secure. In the event of a data breach that poses a risk to your rights and freedoms, Merdeka777 will notify affected Users and the relevant regulatory authority in accordance with applicable breach notification obligations.

Cookies & Tracking Technologies

Merdeka777 uses cookies and similar tracking technologies to enable essential Platform functionality, maintain session security, and gather aggregated analytics data that helps us improve the user experience. The following categories of cookies are used:

Merdeka777 does not deploy third-party advertising or behavioural targeting cookies. We do not use your browsing activity across the web to build advertising profiles or share such data with advertising networks.

Most browsers allow you to control cookie settings through their preferences or settings menu. Disabling strictly necessary cookies will prevent you from logging in to your Account and using core Platform features.

Your Data Rights

Subject to applicable law and the limitations described in this Policy, you have the following rights in relation to your Personal Data held by Merdeka777. To exercise any of these rights, please contact our customer support team via live chat (available 24/7) or by email at [email protected]. We will respond to all verifiable requests within thirty (30) days.

Please note that certain rights may be limited where processing is required to comply with a legal obligation, to prevent fraud, or to fulfil contractual obligations to you. Merdeka777 will explain any applicable limitations at the time of responding to your request.

Children's Privacy

Merdeka777 is strictly an adult platform. Our services are not directed at, and we do not knowingly collect Personal Data from, individuals under the age of 21. Our Terms & Conditions impose a minimum age requirement of 21 years, and our KYC process is specifically designed to detect and prevent underage registration.

In the event that Merdeka777 discovers or is informed that Personal Data has been collected from an individual under the age of 21, we will immediately suspend the associated Account, delete all collected Personal Data of that minor to the extent not required to be retained for regulatory reporting purposes, and refund any deposited funds to the original payment method.

International Data Transfers

Merdeka777 operates an internationally licensed online gaming platform. As a result, Personal Data may be transferred to, stored in, or processed in jurisdictions outside Malaysia — including the jurisdiction(s) in which our servers, hosting infrastructure, or third-party service providers are located.

Where Personal Data is transferred outside the jurisdiction in which it was collected, Merdeka777 takes reasonable steps to ensure that such transfers are subject to appropriate safeguards, including contractual data protection clauses, to ensure that your Personal Data receives a standard of protection consistent with the principles outlined in this Policy.

Malaysian users should note that Malaysia's Personal Data Protection Act 2010 (PDPA) applies to the processing of personal data in commercial transactions within Malaysia. Merdeka777 endeavours to comply with PDPA principles in respect of all personal data relating to Malaysian users, notwithstanding the international nature of the Platform's operations.

Updates to This Privacy Policy

Merdeka777 reserves the right to update or amend this Privacy Policy at any time. Where amendments are material — for example, where they significantly expand the categories of Personal Data collected or introduce new sharing arrangements — Merdeka777 will provide reasonable prior notice via email notification to registered Users or via a prominent notice on the Platform.

The most current version of this Privacy Policy will always be accessible on this page. The "Last Updated" date at the top of this document reflects the date of the most recent revision. Continued use of the Platform following the effective date of any updated Policy constitutes your acceptance of the revised terms.

We encourage all Users to review this Policy periodically to remain informed of any changes in how we handle your Personal Data.

Contact Us

For any questions, concerns, or requests relating to this Privacy Policy, your Personal Data, or your data rights, please contact the Merdeka777 Data & Privacy team through the following channels:

• Live Chat: Available 24/7 on the Platform in English, Bahasa Melayu, and Mandarin. This is the fastest way to reach us — average response time is under 5 minutes.
• Email: [email protected] — please include "Privacy Request" in the subject line. We aim to acknowledge all privacy-related email enquiries within 72 hours and to provide a substantive response within 30 days.

We serve players across Malaysia — from Kuala Lumpur and Bangsar to Penang, Johor Bahru, Petaling Jaya, and Shah Alam — and our support team is equipped to handle privacy requests in all three of our supported languages. If you are unsatisfied with our response to a privacy complaint, you retain the right to escalate the matter to the relevant data protection supervisory authority.