Merpati178 Privacy Policy – Our Commitment to Protecting Your Data

This Privacy Policy sets out merpati178's ("Platform", "we", "us") commitment to protecting the privacy and personal data of every user and registered member ("Member", "you") who accesses or uses our platform at merpati178.best.

Merpati178 operates entirely online and offers Sports Betting, online casino, e-sports, cricket, and lottery services for Malaysian players. In providing these services, we need to collect and process certain personal data. This policy explains exactly what we collect, why we need it, how we use it, and the rights you have over that data.

We are committed to upholding internationally recognised data protection principles, including purpose-limited and minimal data collection, secure storage, and full respect for individuals' rights over their data. This Policy applies to all your interactions with Merpati178, whether through the website, mobile app or any other communication channel we operate.

Merpati178 collects your personal data through several channels — during registration, while you use the platform, during financial transactions, and through communications with our support team. Below is a breakdown of the data we collect and the purposes it serves:

We do not collect sensitive categories of data such as medical information, political views, religious beliefs, or sexual orientation. Biometric data is also not collected as part of our standard identity verification process.

All data you provide when contacting the Merpati178 support team — whether via live chat or email — is also retained to enable us to deliver better and more consistent service to you in the future.

The personal data we collect is used solely for legitimate purposes directly related to the services you use. Below is a detailed breakdown of how your data is used:

• Account management: Opening, verifying, and managing your merpati178 account, including the KYC process and age verification.
• Transaction processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, CIMB Clicks or FPX, as well as handling your winnings withdrawals.
• Service provision: Enables you to access and use all features on the Merpati178 platform, including Sports Betting, casino, e-sports, and lottery.
• Fraud prevention and security: Detecting and investigating suspicious activity, protecting your account from unauthorised access, and maintaining the integrity of the platform.
• Responsible gambling: Monitoring usage patterns to identify members who may need support relating to their betting habits, and proactively reaching out to them where necessary.
• Service communications: Sending important notifications about your account, transactions, changes to our terms, or security issues you need to be aware of.
• Marketing (with consent): Sending promotional offers, bonuses and updates about new platform features — but only where you have given explicit consent to receive marketing communications.
• Platform improvements: Analysing usage data in aggregate (not at an individual level) to understand how players use the platform and to make meaningful improvements.
• Legal compliance: To fulfil our obligations under applicable laws, including anti-money laundering (AML) requirements and consumer protection regulations.

Merpati178 does not sell, rent, or transfer your personal data to third parties for their marketing purposes. However, there are limited situations where we need to share your data with certain parties in order to operate our services properly:

• Payment processors: Transaction information required for processing is shared with the payment processors handling your deposits and withdrawals (such as FPX, Touch 'n Go and GrabPay gateways). They are bound by their own privacy policies and may not use your data for any other purpose.
• Game providers: For Live Casino games and games operated by third-party providers, only the minimum session information required is shared with those providers. Your full identity is not disclosed to game providers.
• Technical service providers: Companies that support the technical operation of our platform — such as cloud computing and security monitoring services — may have limited access to your data within the bounds of strict service agreements.
• Legal authorities: We will disclose the required data to law enforcement authorities where mandated by a court order, regulatory directive, or applicable law. We will notify you of such disclosures where permitted by law.

All third parties we work with are bound by strict confidentiality and data protection agreements. They may only use shared data for the specific purposes defined in those agreements and are prohibited from using it for any other purpose.

The security of your personal data is a responsibility we take very seriously. Merpati178 implements a range of technical and organisational measures to protect your data from unauthorised access, alteration, disclosure or destruction:

• 256-bit SSL Encryption: All communications between your device and Merpati178's servers are encrypted using 256-bit TLS/SSL protocol — the same standard used by Malaysia's leading banking institutions, including Maybank and CIMB. This means your data cannot be intercepted in transit.
• Internal access controls: Access to members' personal data within our internal systems is strictly limited to personnel who require it to perform their job duties. All access is logged and audited on a regular basis.
• Data encryption at rest: Personal data stored in our databases is additionally encrypted to protect it even in the event of unauthorised physical access to our server infrastructure.
• Regular security audits: merpati178 conducts regular internal security audits and engages qualified external parties for independent security assessments to ensure our systems maintain the highest level of protection at all times.
• 24/7 Monitoring: Merpati178's systems are monitored around the clock to detect any abnormal or suspicious activity that may indicate an unauthorised access attempt.
• Secure password management: Account passwords are never stored in plain text. We use strong hashing methods to keep your password securely protected.

While we take all reasonable steps to protect your data, no security system can guarantee absolute 100% protection. You also play an important role in keeping your account secure — use a strong password, never share your login credentials, and notify us immediately if you suspect any suspicious activity on your account.

Merpati178 uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device when you visit our website. The following are the types of cookies we use:

• Essential Cookies (Required): Required for core platform functions such as login, session management, and security. Without these cookies, the platform will not function properly. These cookies cannot be disabled.
• Functional Cookies (Optional): Saving your preferences such as language, odds format, and display settings to provide a more personalised experience on your next visit.
• Analytics Cookies (Optional): Helps us understand how visitors interact with the platform — most visited pages, time spent, and navigation paths. This data is used in aggregate for platform improvements, not to identify individuals.
• Security Cookies: Helps us identify suspicious activity, such as login attempts from unusual locations or usage patterns that may indicate potential fraud.

You can manage your cookie preferences through your web browser settings. However, disabling certain cookies may affect the functionality of the merpati178 platform. To opt out of non-essential cookies, adjust the settings in your browser such as Chrome, Firefox, or Safari.

As a merpati178 member, you have certain rights regarding your personal data, which we fully respect. These rights may be exercised at any time by contacting our support team:

• Right of Access: You may request a copy of all personal data we hold about you. This request will be processed within 30 business days.
• Right to Rectification: If the personal data we hold about you is inaccurate or incomplete, you may request a correction. Basic information such as your phone number can be updated directly through your account settings.
• Right to Erasure ("Right to be Forgotten"): In certain circumstances, you may request that we delete your personal data. However, this right may be limited where we have a legal obligation to retain that data (such as financial transaction records for the minimum period required by law).
• Right to Restrict Processing: You may request that we restrict the processing of your data under certain circumstances, such as while you are disputing the accuracy of the data we hold.
• Right to Data Portability: You may request your personal data in a machine-readable format for the purpose of transferring it to another platform or service.
• Right to Object: You may object to the processing of your data for direct marketing purposes at any time. This objection will be actioned immediately.

To exercise any of the rights above, please submit a written request to support@merpati178.best with the subject line "PERSONAL DATA RIGHTS REQUEST". We will verify your identity before processing the request and will respond within 30 days.

Merpati178 does not retain your personal data for longer than necessary. Data retention periods are as follows:

• Active account data: Retained for the duration your account is active and for a reasonable period after closure to allow for the resolution of any outstanding claims.
• Financial transaction records: Retained for a minimum period of seven (7) years from the date of transaction, in accordance with legal requirements relating to financial records and anti-money laundering in Malaysia.
• Support communication logs: Retained for three (3) years to allow for historical reference and the resolution of any disputes that may arise.
• Analytics cookie data: Generally retained for no more than two (2) years from the date of collection.
• Identity verification documents (KYC): Retained for the duration of the active account and up to five (5) years after account closure, in accordance with compliance requirements.

Once the retention period expires, data will be securely deleted using methods that ensure it cannot be recovered. Where data must be retained longer for specific legal reasons, the extended retention period will be communicated to you when relevant.

The Merpati178 platform may contain links or integrations with third-party services in certain contexts. When you access third-party services through our platform, their privacy policy applies — not this Merpati178 Privacy Policy.

Examples of third-party services that may interact with the Merpati178 platform include payment gateways such as FPX, Touch 'n Go and GrabPay. Each of these payment providers has its own privacy policy governing how they handle transaction data.

Merpati178 is not responsible for the privacy practices or content of third-party websites or services. We encourage you to read the privacy policy of any third-party service you use, particularly those involved in processing your financial transactions.

Merpati178 is a platform intended solely for individuals aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. If you believe we may have collected data from someone under 18, please contact us immediately at support@merpati178.best and we will take appropriate action to delete the data and close the account in question.

All members who register are required to confirm that they are aged 18 and above. Merpati178 may request age verification at any time and reserves the right to close an account and withhold any balance if it is established that the user is below the minimum age requirement.

Merpati178 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the technologies we use. Any changes will take effect upon publication of the updated version on our website.

When we make material changes to this Privacy Policy — particularly changes that affect your rights or how we use your data — we will:

• Updating the "Last Updated" date shown at the top of this page.
• Sending a notice to all registered members via email or in-platform notification.
• In the case of very significant changes, we may request your renewed consent before you continue using our services.

We encourage you to review this Privacy Policy periodically. Your continued use of the Merpati178 platform after any changes are published will be considered acceptance of those changes.

If you have any questions, concerns, or complaints about how merpati178 handles your personal data, we welcome you to reach out through the following channels:

• Privacy email: support@merpati178.best – Please use the subject line "DATA PRIVACY INQUIRY" to ensure your query is handled by the right team. Responses within 3 to 5 business days.
• Live Chat: Available 24/7 via the merpati178 platform for general privacy-related enquiries. Response time is under 90 seconds.

We are committed to handling every privacy-related inquiry and complaint seriously and providing a meaningful response. If you are not satisfied with our response, you have the right to escalate your complaint to the relevant data protection authority in Malaysia.

Merpati178 values the trust you place in us by using this platform and sharing your personal information. We are committed to always handling it with full respect, transparency, and accountability.