Privacy Policy

This Privacy Policy (the "Policy") is issued by mejawd (referred to herein as "mejawd", "the Company", "we", "us", or "our") and applies to all personal data processed in connection with your use of the mejawd online casino and sports betting platform, accessible at https://mejawd.cam (the "Platform").

mejawd respects the privacy of every individual who interacts with the Platform, including registered players, prospective users, and visitors. This Policy describes our data collection practices, the legal bases upon which we process personal data, how we share and protect that data, and the rights you hold as a data subject.

By registering an account on the Platform, making a deposit, placing a wager, or otherwise using our services, you acknowledge that you have read and understood this Policy. If you do not agree with any aspect of this Policy, you should not use the Platform and should request closure of your account if one exists.

For the purposes of this Policy, the following terms carry the meanings assigned below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, email address, IP address, location data, and financial account details.
• "Data Subject" means any natural person whose Personal Data is processed by mejawd — primarily, registered players on the Platform.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this context, mejawd.
• "Data Processor" means a third party that processes Personal Data on behalf of mejawd under a contractual data processing agreement (for example, our KYC verification provider or payment processor).
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transmission, deletion, or any combination thereof.
• "Consent" means a freely given, specific, informed, and unambiguous indication of agreement by the Data Subject to the processing of their Personal Data for a stated purpose.
• "KYC" means Know Your Customer — the identity verification procedure required prior to withdrawal processing.

The Data Controller responsible for the processing of personal data on the Platform is mejawd, operated under international online gaming licensing from an established offshore jurisdiction. mejawd acts as the primary Data Controller for all personal data collected through the Platform.

Where mejawd engages third-party service providers who process personal data on its behalf (such as payment processors, identity verification services, or fraud detection providers), those parties act as Data Processors and are contractually bound to process personal data only in accordance with mejawd's documented instructions and this Privacy Policy.

For all data protection enquiries, requests to exercise data subject rights, or privacy-related complaints, please contact our Data Protection team using the details provided in Section 15 of this Policy.

mejawd collects and processes the following categories of personal data in the course of providing the Platform and its associated services:

mejawd collects personal data through the following channels and mechanisms:

• Account Registration: Data provided directly by you when completing the registration form, including name, email address, date of birth, and contact details.
• Identity Verification (KYC): Documents and photographs submitted by you in fulfilment of our KYC obligations, including government-issued identification such as a MyKad or passport.
• Deposits and Withdrawals: Financial data transmitted through our payment processing partners when you deposit or withdraw funds using methods such as FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, or bank transfer.
• Platform Usage: Technical and behavioural data collected automatically as you use the Platform, including through session tracking, log files, and analytics tools.
• Cookies and Similar Technologies: Data collected via cookies, web beacons, and similar tracking technologies as described in Section 11 of this Policy.
• Customer Support Interactions: Data contained in live chat conversations, email correspondence, and support tickets.
• Third-Party Sources: Where permitted by law, mejawd may supplement your profile with data from fraud detection databases, identity verification services, or publicly available sources to fulfil its anti-money laundering and responsible gambling obligations.

mejawd processes personal data only where a lawful basis for doing so exists. The primary lawful bases relied upon are as follows:

• Contract Performance: Processing necessary to fulfil our contractual obligations to you as a registered player — including account administration, transaction processing, withdrawal fulfilment, and customer support.
• Legal Obligation: Processing required to comply with applicable legal requirements, including anti-money laundering obligations, age verification duties, licensing conditions, and fraud prevention.
• Legitimate Interests: Processing necessary for mejawd's legitimate business interests, including Platform security, fraud detection, responsible gambling monitoring, business analytics, and service improvement — provided such interests are not overridden by your privacy rights.
• Consent: Processing for optional purposes, such as direct marketing communications, for which we will seek your explicit opt-in consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

The personal data we collect is used for the following purposes:

• Account Management: Creating, maintaining, and managing your player account, including authentication, balance management, and account settings.
• Transaction Processing: Processing deposits and withdrawals via your chosen Malaysian payment methods (DuitNow, FPX, Touch 'n Go eWallet, Boost, Maybank, CIMB, Public Bank, and others).
• Identity Verification: Conducting KYC checks to verify your identity prior to processing withdrawals, as required by our licensing and anti-money laundering compliance obligations.
• Fraud & Security: Detecting, investigating, and preventing fraudulent activity, unauthorised account access, money laundering, and other prohibited conduct on the Platform.
• Responsible Gambling: Monitoring account behaviour to identify indicators of problem gambling; providing self-exclusion, deposit limit, and cooling-off tools; and contacting players where welfare concerns arise.
• Customer Support: Responding to enquiries, processing complaints, and resolving disputes via live chat, email, or other support channels.
• Legal Compliance: Complying with applicable laws, regulations, licensing conditions, and court orders, including retaining records as required by law.
• Platform Improvement: Analysing anonymised and aggregated usage data to understand how players interact with the Platform and to improve product features, game offerings, and user experience.
• Marketing (with consent): Sending promotional emails, bonus notifications, and personalised offers to players who have opted in to marketing communications. You may opt out at any time.

mejawd does not sell your personal data to third parties. We may share personal data with third parties only in the following limited circumstances:

• Payment Processors: To facilitate deposits and withdrawals, your financial data is transmitted to regulated payment processing partners. These processors are bound by PCI-DSS standards and contractual data protection obligations.
• Identity Verification Providers: During KYC, identity document data may be shared with accredited verification service providers for authentication and fraud screening purposes.
• Fraud Detection & AML Services: We may share necessary data with specialised fraud detection and anti-money laundering screening services to protect the integrity of the Platform.
• Game Software Providers: Certain game providers may receive limited technical data (such as session identifiers) necessary to deliver their game content on the Platform. No unnecessary personal data is shared with game studios.
• Legal & Regulatory Authorities: We may be required by law, court order, licensing authority, or other competent authority to disclose personal data. We will notify affected players where legally permitted to do so prior to any such disclosure.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, player personal data may be transferred to the successor entity, subject to equivalent data protection undertakings.

Subject to applicable law and any overriding legal obligations, you have the following rights in relation to your personal data held by mejawd. To exercise any of these rights, please contact our Data Protection team as described in Section 15.

• Right of Access: You may request confirmation of whether mejawd holds personal data about you and, if so, a copy of that data together with information on how it is being processed.
• Right to Rectification: You may request the correction of any inaccurate or incomplete personal data we hold about you. For basic account details, you may update these directly through your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where processing is unlawful. Note that certain data may need to be retained by mejawd to comply with legal obligations (such as anti-money laundering record-keeping requirements) even after your account is closed.
• Right to Restriction of Processing: You may request that mejawd restrict the processing of your personal data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to Data Portability: Where processing is based on consent or contract and carried out by automated means, you may request receipt of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object at any time to the processing of your personal data for direct marketing purposes. You may also object to processing based on legitimate interests, though mejawd may continue such processing where there are compelling legitimate grounds.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred prior to withdrawal.
• Right to Lodge a Complaint: If you believe that your data protection rights have been infringed, you may lodge a complaint with our Data Protection team. You also have the right to escalate complaints to the relevant supervisory authority in your jurisdiction.

We aim to respond to all data subject rights requests within 30 calendar days of receipt. Where a request is complex or high in volume, we may extend this period by a further 60 days, provided we notify you of the extension within the initial 30-day window.

mejawd retains personal data for no longer than is necessary to fulfil the purposes set out in this Policy, unless a longer retention period is required or permitted by applicable law. The following general retention principles apply:

• Active Account Data: Personal data associated with an active player account is retained for the duration of the account relationship and for a defined period thereafter.
• Transaction Records: Financial transaction records, including deposits, withdrawals, and bet history, may be retained for a period required by applicable anti-money laundering legislation — typically five (5) years from the date of the transaction.
• KYC Documents: Identity verification documents submitted during the KYC process are retained for the period required by licensing and AML obligations following account closure.
• Communication Records: Support chat transcripts, email correspondence, and complaint records are retained for a period sufficient to resolve disputes and meet any applicable legal requirements.
• Marketing Data: Where consent to marketing has been withdrawn, we will suppress your contact details from marketing communications within a reasonable period, though core account records may be retained for other lawful purposes.

Upon expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised in accordance with our data destruction procedures.

mejawd uses cookies and similar tracking technologies (such as web beacons and session storage) to operate the Platform, enhance your user experience, and collect analytics data. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Required for the Platform to function. These include session cookies that maintain your login state and security tokens. These cannot be disabled without impairing Platform functionality.
• Functional Cookies: Remember your preferences (such as language settings, preferred payment method, and responsible gambling settings) across sessions.
• Analytics Cookies: Collect anonymised or pseudonymised data about how players navigate the Platform — including pages visited, games accessed, and session duration — to help us improve the Platform. This data is not used to identify individual players directly.
• Security Cookies: Support fraud detection and account security functions, including detection of unusual login patterns or geolocation anomalies.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies may prevent some parts of the Platform from functioning correctly. Where applicable law requires consent for analytics cookies, we will seek that consent via an on-Platform cookie consent mechanism.

The mejawd Platform is strictly intended for adults aged 21 years and above. mejawd does not knowingly collect personal data from individuals under the age of 21. Our registration process includes age verification steps designed to prevent access by minors.

If mejawd becomes aware that personal data of a person under 21 has been collected, we will immediately suspend the associated account, delete or anonymise the personal data concerned, and report the matter through appropriate internal processes.

If you are a parent or guardian and believe that your child has registered an account on the Platform, please contact us immediately using the details in Section 15 so that appropriate action can be taken without delay.

mejawd implements comprehensive technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Key measures include:

• Encryption: All personal data is encrypted at rest using AES-256 encryption. All data in transit between your device and our servers is protected using TLS 1.3 or higher.
• Access Controls: Access to personal data is restricted on a strictly need-to-know basis. All internal access is logged and subject to regular audits.
• Payment Security: Payment card data is handled by PCI-DSS Level 1 compliant payment processors. Raw card numbers are never stored on mejawd's servers.
• Intrusion Detection: Our infrastructure is protected by multi-layer firewalls, intrusion detection systems, and continuous security monitoring.
• Incident Response: We maintain a documented data breach response procedure. In the event of a breach that poses a risk to affected players, we will notify impacted individuals and any relevant supervisory authority within the timeframes required by applicable law.
• Staff Training: All mejawd personnel who handle personal data receive regular data protection and security awareness training.

While we implement robust security measures, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately if you suspect unauthorised access to your account.

14.1 mejawd reserves the right to update or amend this Privacy Policy at any time. Material changes — including changes to the purposes for which we process your data, new categories of data collection, or changes to your rights — will be communicated to registered players via the email address on file or through an in-Platform notification, at least 14 days before taking effect.

14.2 Non-material changes, such as typographical corrections or clarifications that do not alter the substance of the Policy, may be made without prior notice but will be reflected in the "Last Updated" date displayed at the top of this page.

14.3 Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with the amended Policy, you should cease using the Platform and may request account closure in accordance with our Terms & Conditions.

For all privacy-related enquiries, requests to exercise your data subject rights, or complaints about how mejawd handles your personal data, please contact our Data Protection team through the following channels. We are committed to responding promptly and constructively to all privacy concerns.

When submitting a data subject rights request by email, please include your registered username and a brief description of your request. Identity verification will be required before any data is disclosed, modified, or deleted to protect your privacy and prevent unauthorised access.