Mekar99 Privacy Policy – Data Protection for Malaysian Members

This Privacy Policy ("Policy") is published by mekar99 ("Platform", "we", "us") and applies to all individuals ("Members", "you") who register, access, or use any service on the mekar99.online platform. This Policy explains how mekar99 collects, uses, stores, protects, and, in limited circumstances, shares your personal data.

Mekar99 understands that your trust in us depends largely on how we handle your personal information. This platform is built for Malaysian users – and we understand how important privacy is in the context of digital service usage in this country. From day one of mekar99's development, user privacy has always been one of the core priorities in every system design decision we make.

This policy is updated periodically to reflect changes in our practices or applicable legal requirements. The date of the most recent update is shown at the top of this page. We encourage you to check back from time to time.

Mekar99 collects several categories of personal data depending on how you interact with our platform. Below are the main categories of data we collect:

• Identity Data: Full name, date of birth, MyKad or passport number, gender, and nationality — collected for identity verification and compliance with KYC (Know Your Customer) requirements;
• Contact Data: An active Malaysian mobile number, email address, and postal address where applicable — used for account communications, transaction notifications, and mekar99 customer support;
• Financial Data: Deposit and withdrawal records, payment methods used (e.g. Touch 'n Go eWallet, GrabPay, DuitNow, FPX), transaction amounts, and the financial history of your mekar99 account;
• Game Activity Data: Gaming history, betting records across slots, baccarat, blackjack, Malaysian sports, e-sports and other games, game preferences, and usage patterns on the mekar99 platform;
• Technical Data: IP address, device type and version, web browser type and version, operating system, access time logs, session cookie data, and other technical information automatically collected while you use mekar99;
• Communication Data: Records of correspondence between you and the mekar99 support team, feedback you have provided, and any complaints or enquiries submitted to us.

Mekar99 collects your personal data through several channels:

• Directly from You: When you complete the mekar99 registration form, fill in your profile information, contact customer support, or submit identity verification documents;
• Automatically: When you use the mekar99 platform, our systems automatically record technical data such as your IP address, device information, session logs and your navigation patterns within the platform;
• Via Financial Transactions: Information submitted during the deposit process via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, Maybank2u, or CIMB Clicks — processed through certified third-party payment gateways;
• Via Cookies & Tracking Technologies: mekar99 uses session cookies, preference cookies, and analytics cookies to enhance platform functionality and performance. Further details are provided in the Cookie Policy section below;
• From Authorised Third Parties: In certain cases, mekar99 may receive information from third-party identity verification service providers that we engage to fulfil KYC requirements and anti-fraud compliance obligations.

Mekar99 uses members' personal data only for legitimate and necessary purposes. The primary purposes for which data is used are as follows:

• Account Operations: Creating and managing your mekar99 account, processing deposits and withdrawals through Malaysian payment methods, and ensuring the platform runs smoothly for you;
• Identity Verification & KYC: Meeting legal compliance obligations relating to customer identity verification, anti-money laundering (AML) and the prevention of financing of illegal activities;
• Security & Anti-Fraud: Detecting, investigating and preventing suspicious activity, fraud, multiple account usage and any attempts to manipulate the mekar99 platform;
• Customer Support: Processing enquiries, complaints, and assistance requests submitted to the mekar99 support team in Bahasa Malaysia;
• Platform Improvement: Analysing usage patterns in aggregate (without identifying individuals) to improve the design, functionality, and overall experience of the mekar99 platform;
• Service Communications: Sending important account-related notifications such as transaction confirmations, security alerts, and mekar99 policy updates;
• Marketing Communications: With your consent, sending information about mekar99 promotions, bonuses and offers that may be of interest to you – you may withdraw this consent at any time.

Mekar99 does not sell, rent or trade members' personal data to any third party for marketing or other commercial purposes. Your data is shared only under very limited circumstances and for legitimate operational purposes:

• Contracted Service Providers: Certified payment gateway providers that process Touch 'n Go eWallet, GrabPay, DuitNow, and FPX transactions; cloud computing service providers that securely store mekar99 platform data; and gaming software suppliers that power the slots, live baccarat, and other games on our platform — all bound by strict data protection agreements;
• Legal Authorities: When required by Malaysian law or by direction from a relevant authority such as a court, law enforcement agency, or regulatory body — mekar99 will disclose only the data required and strictly within the scope specified in that directive;
• Fraud Prevention & AML: In very limited circumstances, to share information with parties involved in investigations into fraud, money laundering, or other unlawful activities connected to the use of the mekar99 platform;
• With Your Consent: In situations not covered above, mekar99 will only share your data after obtaining your explicit consent.

Mekar99 takes comprehensive security measures to protect members' personal data against unauthorised access, disclosure, alteration, or destruction. The technical and organisational safeguards we have in place include:

• Data Encryption in Transit: All communication between your device and mekar99's servers is encrypted using TLS 1.3 protocol with a 256-bit SSL certificate — meaning any data you send or receive cannot be read by anyone attempting to intercept your network traffic;
• Stored Data Encryption: Sensitive data stored in mekar99's databases — including passwords (stored as one-way hashes, never in plain text) and financial information — is encrypted using industry-recognised algorithms;
• Internal Access Controls: Only mekar99 staff who require access to specific data in order to carry out their job responsibilities are granted that access — based on the principle of least privilege;
• Continuous Monitoring: mekar99 systems are monitored 24/7 to detect any unauthorised access attempts, traffic anomalies, or potential security threats;
• Regular Security Audits: mekar99 conducts regular security audits and penetration testing to identify and address potential vulnerabilities in its systems.

While mekar99 takes all reasonable steps to protect your data, no system can guarantee absolute 100% security. You also play an important role by keeping your mekar99 account login credentials secure and using a strong password.

Mekar99 retains members' personal data only for as long as necessary for the purposes set out in this Privacy Policy, or for as long as required by applicable law.

General retention periods applicable to key data categories:

• Active Account Data: Retained for as long as your mekar99 account is active and for a minimum of 5 years after account closure to meet legal obligations and audit requirements;
• Financial & Transaction Records: Retained for a minimum of 7 years in accordance with applicable Malaysian financial regulatory requirements;
• Security & Technical Logs: Retained for between 6 months and 2 years depending on the type of log and system security requirements;
• Support Communication Data: Customer support conversation records are retained for 2 years from the date of the last communication;
• Marketing Data: Retained until you withdraw your marketing consent or close your mekar99 account.

Once the retention period has expired and there is no legal requirement to continue storing the data, mekar99 will securely delete or anonymise it using industry-recognised methods.

Cookies are small text files stored on your device when you visit the mekar99 platform. We use cookies to ensure the platform operates correctly and to enhance your experience as a user.

Types of cookies used by mekar99:

• Essential Cookies (Required): Required for core mekar99 platform functionality such as login verification, session authentication and security. These cookies cannot be disabled without affecting platform functionality;
• Preference Cookies: Saving your preferences such as language settings and display format so you do not need to reconfigure them each time you visit mekar99;
• Analytics Cookies: Used to collect aggregated platform usage statistics – helping mekar99 understand how users interact with the platform for improvement purposes. This data does not identify you individually;
• Security Cookies: Helping mekar99 detect and prevent suspicious activity such as unauthorised login attempts or cyberattacks.

As a mekar99 member, you have the following rights regarding the personal data we hold about you:

• Right to Access: You have the right to request a copy of the personal data that mekar99 holds about you;
• Right to Rectification: If you find that your data is inaccurate or incomplete, you have the right to request a correction without undue delay;
• Right to Erasure: Under certain circumstances, you have the right to request that mekar99 delete your personal data — subject to our legal obligations to retain certain information;
• Right to Restrict Processing: You may request that mekar99 restrict how we process your data under certain circumstances as defined by law;
• Right to Data Portability: You have the right to receive the data you have provided to mekar99 in a machine-readable format that can be transferred to another party;
• Right to Object: You may object to the processing of your data for direct marketing purposes at any time;
• Right to Withdraw Consent: Where data processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing that took place prior to the withdrawal.

To exercise any of the rights above, please contact mekar99 at support@mekar99.online with a clear description of your request. mekar99 will process your request within 30 days of receipt and may require identity verification before proceeding with any data-related request.

The mekar99 platform is strictly limited to individuals aged 21 and above. mekar99 does not knowingly collect or process personal data belonging to individuals under the age of 21.

If you believe that someone under the age of 21 has registered a mekar99 account, please contact us immediately at support@mekar99.online. mekar99 will take prompt action, including closing the account in question and deleting all associated data.

In the course of operating the mekar99 platform, members' personal data may in certain circumstances be processed or stored on servers located outside Malaysia. This includes cloud computing servers and infrastructure belonging to mekar99's service providers, which may operate across various locations.

When data is transferred outside Malaysia, mekar99 ensures equivalent protection through:

• Legally binding data processing agreements with all service providers;
• A thorough assessment of each provider's privacy and security practices before any data is transferred;
• Contractual terms requiring suppliers to comply with data protection standards equivalent to or exceeding those set out in this mekar99 Privacy Policy;
• Ongoing monitoring of third-party providers' compliance with their data protection obligations.

Mekar99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, the technologies we use, or applicable legal requirements. Members will be notified of any material amendments through:

• Email to the address registered with your mekar99 account;
• Notifications displayed upon logging in to the mekar99 platform;
• Updates to the Privacy Policy page on the mekar99 website with a clearly indicated update date.

Continued use of the mekar99 platform after the effective date of any amendments constitutes acceptance of the revised policy. If you do not agree with the changes, you have the right to close your mekar99 account before they take effect.

For any questions, concerns, or requests relating to this Privacy Policy or how mekar99 handles your personal data, please reach us through the following channels:

• Privacy Email: support@mekar99.online – please mark the email subject as "PRIVACY REQUEST – [Your mekar99 Account Number]";
• Live Chat: Directly within the mekar99 platform — available 24 hours a day, 7 days a week, in Bahasa Melayu and English;
• Response Time: Privacy-related requests will be processed within 30 calendar days of receipt.

Mekar99 is committed to handling all privacy enquiries and requests seriously and within a reasonable timeframe. If you are not satisfied with mekar99's response to your privacy request, you have the right to lodge a complaint with the relevant data protection regulatory authority.