Privacy Policy mesinkuda – Member Personal Data Protection

1 Our Introduction & Commitment

Mesinkuda understands that privacy is more than a word — it is the trust you place in us every time you use this platform. We take that trust seriously, which is why every decision relating to the handling of personal data is made with care and full consideration.

This Privacy Policy is drafted in accordance with applicable data protection legislation in Malaysia, including the Personal Data Protection Act 2010 (PDPA). mesinkuda not only complies with these legal requirements as an obligation, but we believe that robust data protection is the foundation of a healthy relationship between a platform and its members.

As an online betting platform serving users in Malaysia, we recognise that the data you share with us — from personal information to transaction records — is sensitive and must be handled with full responsibility. Every layer of our system is designed with data security as a priority, not an afterthought.

2 Personal Data We Collect

Mesinkuda only collects data that is genuinely necessary to provide a safe, efficient, and legally compliant service. The following are the categories of data we collect:

We do not collect data beyond what is required to operate the platform. Should new categories of data need to be collected in the future, we will update this Privacy Policy and notify members in advance.

3 How We Use Your Data

The data we collect is used exclusively for the following purposes. We do not use your data for any other purpose without first obtaining your consent:

• Account Management: Creating and maintaining your member account, processing registration, and verifying identity through the legally required KYC process.
• Payment Processing: Processing deposits and withdrawals securely through supported payment channels including DuitNow, FPX, Touch 'n Go eWallet, Boost, and GrabPay.
• Platform Security: Detecting and preventing fraud, money laundering, unauthorized access, and any activity that violates the platform's terms of use.
• Legal Compliance: Fulfilling applicable legal and regulatory obligations, including reporting suspicious transactions to the relevant authorities when required.
• Service Improvement: Analyzing usage patterns in aggregate — not at the individual level — to improve the interface, platform speed, and overall user experience.
• Communications: Sending account-related notifications, security updates, promotional information (if you have opted in), and responses to support inquiries.
• Responsible Gaming: Monitoring gaming patterns to identify signs of problem gambling and providing appropriate assistance when needed.

4 Data Sharing & Disclosure

Mesinkuda does not sell, rent, or trade member personal data. Your data will only be shared in very limited situations and under strict controls:

• Payment Service Providers: Transaction information is shared with trusted payment processors solely to facilitate smooth deposits and withdrawals. All such providers are bound by strict confidentiality agreements.
• Game Providers: Minimum technical data required to operate the games is shared with licensed game software providers that have been reviewed and approved by mesinkuda.
• Legal Authorities: When required by law or a valid court order, mesinkuda will disclose the necessary data to the relevant authorities. We will notify you of such disclosures unless prohibited by law.
• Technical Service Providers: IT infrastructure, cloud services, and cybersecurity providers that help us operate the platform may have limited access to data within the scope of their services only.
• Business Transfers: In the event of any merger, acquisition, or asset transfer, member data may be transferred as part of the business assets, subject to equivalent or stronger privacy protections.

All third parties with whom we share data are required to meet data protection standards at least equivalent to our own. mesinkuda conducts regular audits of all third-party providers to ensure ongoing compliance.

5 Security & Data Protection

Your data security is more than a promise — it is the infrastructure we build and maintain every day. mesinkuda implements multiple layers of technical and organizational security to protect your data:

• 256-bit SSL Encryption: All communications between your browser and mesinkuda's servers are protected with 256-bit SSL encryption — the same standard used by leading banks in Malaysia.
• Password Security: Member passwords are never stored in plain text. All passwords go through a strong hashing algorithm before being saved.
• Two-Factor Authentication (2FA): mesinkuda offers two-factor authentication for all member accounts as a recommended additional layer of security.
• 24/7 Monitoring: Our security monitoring system operates around the clock to detect and respond to any threats or suspicious activity promptly.
• Data Segregation: Member personal data is stored separately from the company's operational and financial data, with strict access controls based on the need-to-know principle.
• Periodic Security Audits: mesinkuda's security systems undergo regular independent audits by certified cybersecurity experts to identify and address any vulnerabilities.

6 Cookies & Tracking Technologies

Mesinkuda uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

• Essential Cookies: Required for core platform functions such as login session management and security settings. These cookies cannot be disabled without affecting platform functionality.
• Functional Cookies: Saving your preferences such as language, display settings, and game choices to deliver a more personalized experience on your next visit.
• Analytics Cookies: Helping us understand how members use the platform so we can improve its design and performance. Data collected is aggregated and does not directly identify individuals.
• Security Cookies: Used to detect and prevent unauthorised access, cyber attacks, and fraudulent activity on the platform.

You can manage or block cookies through your web browser settings at any time. Note that blocking essential cookies may affect the functionality of certain parts of the mesinkuda platform. For analytics and functional cookies, you may opt out without affecting your core experience.

7 Your Rights as a Data Subject

Under the Personal Data Protection Act 2010 and best privacy practices, you have the following rights regarding your personal data held by mesinkuda:

8 Data Retention Period

Mesinkuda retains your personal data only for as long as necessary to fulfill the purposes stated in this Privacy Policy, or as required by law. The applicable retention periods are as follows:

• Active Account Data: Retained for as long as your account is active and for a reasonable period after account closure for dispute or investigation purposes.
• Financial Transaction Records: Retained for a minimum of 7 years in line with applicable anti-money laundering (AML) and tax legal requirements in Malaysia.
• KYC (Identity Verification) Data: Retained for a minimum of 5 years after the business relationship ends, in line with regulatory compliance requirements.
• Security & Access Logs: Retained for 12 months for fraud detection and security incident investigation purposes.
• Support Communication Data: Retained for 24 months to enable our team to provide better service and resolve any recurring issues.
• Cookie Data: Cookie validity periods vary by type; session cookies expire when the browser is closed, while persistent cookies have a set expiry period and can be deleted by you at any time.

When data is no longer needed and there is no legal requirement to retain it, mesinkuda will securely delete or anonymise it to prevent recovery.

9 Child & Youth Protection

The mesinkuda Platform is exclusively for users aged 18 and above only. We do not intentionally collect or process personal data of individuals under the age of 18.

Mesinkuda enforces a strict age verification process during registration, including valid identity document checks, to ensure that only eligible adult users can access the platform. Should we discover that data from a minor has been collected unintentionally, we will promptly take action to delete the relevant data and close the account in question.

10 Privacy Policy Amendments

Mesinkuda reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, technologies used, legal requirements, or other operational factors.

When we make material changes to this Privacy Policy, we will notify you via:

• In-platform notifications while you are logged in
• Email to the address registered with your account
• A clear notice on the main page of our website

The latest version of this Privacy Policy is always available on this page, with the last updated date displayed at the top of the document. Continued use of the mesinkuda platform after a change notice has been issued will be considered as your acceptance of the updated terms.

If you disagree with any changes, you have the right to stop using the platform and close your account before the changes take effect.

11 Contact Our Privacy Officer

Mesinkuda has appointed a Data Protection Officer (DPO) to oversee all matters relating to privacy compliance and the protection of members' personal data. If you have any questions, concerns, or complaints regarding how we handle your personal data, you may contact us through the following channels:

• Privacy Email: [email protected] – for specific enquiries related to privacy and data protection
• General Support Email: [email protected] – for general enquiries including account and technical issues
• Live Chat: Available 24/7 via the platform for immediate assistance
• WhatsApp Business: Reach our team directly for a quick response

We are committed to responding to all privacy-related inquiries within 21 business days of receipt. For more complex complaints requiring in-depth investigation, we will keep you informed of the progress and expected resolution timeline.

If you are not satisfied with our response, you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection or any other relevant authority with jurisdiction over the matter.