Privacy Policy

01

Introduction

This Privacy Policy ("Policy") issued by Mesinkuda ("we", "us", "our") and applies to all personal data collected from individuals ("you", "PlayerUser") who access or use the mesinkuda online gaming platform at https://mesinkuda.cam, including all associated services, features, and communications.

At mesinkuda, we recognise that privacy is a fundamental expectation for any player entrusting us with their personal information. This Policy is designed to give you a clear and honest account of what data we collect, why we collect it, how we use it, who we share it with, and what rights you have in relation to it.

This Policy should be read in conjunction with our Terms & Conditions, which govern your overall use of the mesinkuda platform. By registering an account or using any part of the mesinkuda platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.

Malaysian players: While mesinkuda is not regulated by any Malaysian government authority, we adopt internationally recognised data protection standards in the management of all player personal data. We do not share player data with Malaysian government agencies unless compelled to do so by valid legal process under the jurisdiction governing our international licensing.

02

Definitions

The following definitions apply throughout this Privacy Policy:

"Personal Data" means any information that identifies, or could reasonably be used to identify, a specific natural person, either directly or in combination with other available data.
"Processing" means any operation performed on personal data, including collection, storage, retrieval, use, disclosure, erasure, or any other form of handling.
"Data Controller" means the entity that determines the purposes and means of processing personal data — in this context, mesinkuda.
"Data Processor" means a third party that processes personal data on behalf of the Data Controller under binding instructions — for example, payment processors and KYC service providers engaged by mesinkuda.
"KYC" (Know Your Customer) means the identity and age verification process required of Players under applicable international gaming compliance standards.
"Cookie" means a small data file placed on your device by the mesinkuda website for the purposes of session management, analytics, or preference storage.
"Sensitive Data" means a subset of personal data warranting heightened protection — including identity document details, financial account information, and any data related to responsible gambling designations.

03

Data We Collect

Mesinkuda collects the following categories of personal data from Players and platform visitors:

3.1 Registration & Account Data

Full legal name
Date of birth (for age verification purposes)
Residential address, including city and postcode
Email address
Malaysian mobile phone number
Chosen username and encrypted password
Security questions and answers (where applicable)

3.2 KYC & Identity Verification Data

Copy of Malaysian MyKad (front and back) or valid passport (photo page)
Proof of address document (utility bill or bank statement)
Selfie or liveness check photograph (where required for enhanced verification)
Payment method ownership documentation (where applicable)

3.3 Financial & Transaction Data

Deposit and withdrawal transaction records including amounts, dates, and payment methods
Masked payment method identifiers (e.g., last four digits of bank account, e-wallet registered phone number)
Account balance history and wagering activity records
Bonus and promotional transaction history

3.4 Technical & Usage Data

IP address and approximate geolocation derived from IP
Device type, operating system, and browser information
Session timestamps, login history, and activity logs
Pages visited, games played, and features accessed on the platform
Referring URL and navigation path through the platform

3.5 Communications Data

Content of messages sent to and received from our support team via live chat or email
Records of support ticket submissions and resolution outcomes
Email communication history, including promotional emails where applicable

3.6 Responsible Gambling Data

Self-imposed deposit limits, session limits, or cooling-off instructions set by the Player
Self-exclusion requests and their effective dates
Internal risk assessments or responsible gambling flags where applicable

Sensitive data handling: Identity documents, financial details, and responsible gambling records are treated as sensitive personal data and are subject to stricter access controls, storage standards, and retention limits than standard account data.

04

How We Collect Data

Mesinkuda collects personal data through the following channels:

4.1 Directly from You

When you register an account, complete KYC verification, make a deposit or withdrawal request, contact our support team, respond to a survey, or participate in a promotion, you provide personal data directly to mesinkuda.

4.2 Automatically During Platform Use

Technical and usage data is collected automatically as you browse and interact with the mesinkuda platform, via server logs, session tracking tools, and cookies (see Section 8 for full cookie details).

4.3 From Third-Party Service Providers

In certain circumstances, mesinkuda receives data from third-party providers engaged to assist with platform operations, including:

Payment processors (e.g., FPX gateway providers, e-wallet operators including Touch'n Go eWallet, DuitNow, Boost, and GrabPay) — transaction confirmation and status data
KYC verification service providers — identity verification results and document authentication outcomes
Fraud detection services — risk scores and alert flags related to account security
Analytics providers — aggregated and anonymised platform usage statistics

05

Purpose of Data Processing

Mesinkuda processes personal data for the following specific purposes. We do not process personal data for any purpose that is incompatible with the purposes described below.

Purpose	Data Categories Used
Account creation and management	Registration data, contact details
Age verification and KYC compliance	Identity documents, date of birth, KYC data
Processing deposits and withdrawals	Financial data, payment method identifiers
Fraud prevention and security monitoring	Technical data, IP address, transaction data
Responsible gambling management	Gambling activity records, responsible gambling flags
Customer support and dispute resolution	Communications data, account
Regulatory and compliance obligations	KYC data, financial records, account history
Platform improvement and analytics	Anonymised usage data, technical data
Promotional communications (with consent)	Email address, name, account activity (aggregated)

Promotional communications: Mesinkuda may send you promotional emails or platform notifications about new games, bonuses, or events. You may opt out of marketing communications at any time by adjusting your account notification settings or contacting our support team. Opting out of marketing communications will not affect your receipt of transactional or security-related account notifications.

06

Legal Basis for Processing

Mesinkuda processes personal data on the following legal grounds, consistent with internationally recognised data protection principles:

Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions — including account management, payment processing, and the delivery of gaming services — is carried out on the basis that it is necessary for the performance of the contract between you and mesinkuda.
Legal obligation: Processing required for KYC verification, AML compliance, age verification, and the maintenance of records for regulatory inspection is carried out on the basis of our legal obligations under applicable international gaming licensing requirements.
Legitimate interests: Processing for fraud prevention, platform security, responsible gambling monitoring, and platform analytics is carried out on the basis of our legitimate business interests, balanced against your privacy rights. We conduct proportionality assessments to ensure this balance is maintained.
Consent: Processing for promotional and marketing communications is carried out on the basis of your explicit consent, which may be withdrawn at any time without affecting other data processing activities.

07

Data Sharing & Disclosure

Mesinkuda does not sell, rent, or otherwise commercially transfer your personal data to third parties. We share data only in the limited circumstances described below.

7.1 Service Providers (Data Processors)

We engage carefully selected third-party service providers to assist with platform operations. These providers process personal data only under our instructions and are contractually prohibited from using player data for their own purposes. Categories of service providers include:

Payment gateway and e-wallet operators (Touch 'n Go, DuitNow, FPX, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong)
KYC and identity verification platforms
Fraud detection and cybersecurity services
Game content providers and studio platforms
Customer support platform operators
Cloud infrastructure and data hosting providers

7.2 Legal & Regulatory Disclosure

Mesinkuda may disclose personal data where required to do so by a valid legal order, court ruling, or regulatory demand issued under the jurisdiction governing our international licensing. We will take reasonable steps to notify affected Players of any such disclosure request unless legally prohibited from doing so.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of substantially all of mesinkuda's assets, player personal data may be transferred as part of that transaction. Affected players will be notified prior to any such transfer taking effect, and the acquiring entity will be required to honour the terms of this Privacy Policy.

We do not share data with advertising networks for the purposes of targeted advertising to third-party audiences. Mesinkuda does not participate in data broker arrangements or sell audience segments derived from player data.

08

Cookies & Tracking Technologies

Mesinkuda uses cookies and similar tracking technologies to provide, maintain, and improve the platform experience. Cookies are small data files stored on your device by your browser when you visit the mesinkuda website.

8.1 Cookie Categories

Category	Purpose	Can be Disabled?
Strictly Necessary	Session management, login authentication, security tokens	No — required for platform function
Functional	Language preferences, game display settings, responsible gambling reminder state	Optional
Analytics	Aggregated usage statistics, page performance measurement, error tracking	Optional
Marketing	Tracking of promotional campaign effectiveness (internal, not shared with ad networks)	Optional

8.2 Managing Cookies

You may control non-essential cookies through your browser settings or through any cookie preference panel displayed on the mesinkuda platform. Disabling strictly necessary cookies will impair your ability to use the platform, as these are required for core functionality including session management and secure login.

Most modern browsers — including those used on Android and iOS devices common among Malaysian users — provide cookie management controls in their privacy or settings menus. Consult your browser's help documentation for specific instructions.

09

Data Retention

Mesinkuda retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following retention guidelines:

Active account data: Retained for the duration of the active account relationship plus a minimum post-closure period of five (5) years, to meet compliance, audit, and dispute resolution requirements under applicable international gaming licensing obligations.
KYC and identity documents: Retained for a minimum of five (5) years from the date of account closure or the date of the last transaction, whichever is later, in accordance with standard AML record-keeping requirements.
Financial transaction records: Retained for a minimum of five (5) years from the transaction date.
Support communications: Retained for three (3) years from the date of the relevant interaction, unless a longer period is required for an open dispute or legal matter.
Analytics and technical data: Aggregated or anonymised analytics data may be retained indefinitely. Identifiable technical data is retained for up to 24 months.
Marketing consent records: Retained for the period of consent plus three (3) years as an audit trail.

When personal data is no longer required for its intended purpose and the applicable retention period has expired, it is securely deleted or irreversibly anonymised.

10

Data Security

Mesinkuda implements comprehensive technical and organisational security measures to protect player personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security programme includes:

Transport Layer Security (TLS): All data in transit between your device and our servers is encrypted using TLS 1.2 or higher.
Encryption at rest: Sensitive personal data, including identity documents and financial records, is encrypted on storage using AES-256 or equivalent standards.
Access controls: Internal access to player personal data is restricted to authorised personnel with a specific operational need. All access is logged and subject to regular audit.
Two-factor authentication (2FA): Available to all players to add an additional layer of authentication security to their account login process.
Vulnerability management: The platform is subject to regular security assessments, penetration testing, and patch management to address known and emerging vulnerabilities.
Data breach response: Mesinkuda maintains a documented incident response procedure. In the event of a confirmed data breach that poses a risk to player rights, affected players will be notified in accordance with applicable requirements.

Your role in security: Mesinkuda's security measures work most effectively when combined with good player-side security practices. We strongly recommend using a strong, unique password for your mesinkuda account, enabling2FA, and never sharing your login credentials with any third party.

11

Your Data Rights

Subject to applicable law and our legitimate operational requirements, Players have the following rights in relation to their personal data held by mesinkuda:

👁️

Right of Access

Request a copy of all personal data we hold about you, along with information about how it is being processed.

✏️

Right to Rectification

Request correction of any inaccurate or incomplete personal data held your account. Some corrections may require KYC re-verification.

🗑️

Right to Erasure

Request deletion of your personal data where we no longer have a lawful basis for retaining it. Note that regulatory retention obligations may limit full erasure.

⏸️

Right to Restriction

Request that we restrict the processing of your data in certain circumstances — for example, while a dispute regarding data accuracy is being resolved.

📦

Right to Portability

Request your personal data in a structured, machine-readable format where processing is based on consent or contractual necessity.

🚫

Right to Object

Object to processing based on legitimate interests, including profiling. You may also withdraw consent for marketing communications at any time.

To exercise any of the above rights, please contact our support team via live chat on the mesinkuda platform or by email at [email protected]. We will acknowledge your request within 5 business days and aim to resolve it within 30 days. Identity verification will be required before processing data access or deletion requests.

Where we are unable to fulfil a data rights request in full — for example, where regulatory retention obligations prevent complete erasure — we will explain the specific reason and outline what partial steps can be taken.

12

Children & Minors

The mesinkuda platform is strictly for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been submitted by an individual under the minimum age, we will take immediate steps to delete that data and close the associated account.

KYC verification procedures are in place specifically to confirm that all registered players meet the 21+ age requirement before withdrawal of funds or full account activation. Any person who knowingly provides false age information to circumvent this requirement is in breach of our Terms & Conditions and may be subject to legal action.

If you believe a minor has accessed the mesinkuda platform, please contact our support team immediately at [email protected]. We will investigate and take appropriate action as a matter of urgency.

13

Third-Party Links

The mesinkuda platform may, from time to time, reference or link to third-party websites or services — including payment providers, game studios, and responsible gambling support organisations. This Privacy Policy applies only to data processed by mesinkuda and does not govern the data practices of any third-party website or service.

We recommend that you review the privacy policies of any third-party platform you interact with in connection with your use of mesinkuda. Mesinkuda is not responsible for the privacy practices or content of third-party sites.

14

Policy Updates

Mesinkuda reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable legal obligations, or platform features. When we make material changes to this Policy, we will:

Update the "Last updated" date displayed at the top of this page
Send a notification email to all registered players with an active account
Display a prominent notice on the platform for a reasonable period following the update

Your continued use of the mesinkuda platform following notification of a Policy update constitutes your acceptance of the revised terms. If you do not agree with a material change, you may close your account by contacting our support team.

15

Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact the mesinkuda data team through the following channels:

Live Chat: Available24/7 directly on the mesinkuda platform. For privacy-related queries, please specify "Privacy / Data Request" when opening your chat session for routing to the appropriate team member.
Email: [email protected] — for data access, rectification, erasure, or portability requests, please use the subject line "Data Rights Request" and include your registered account username to expedite processing.

Mesinkuda's support team operates with peak coverage aligned to Malaysia Standard Time (MYT, UTC+8), serving players in Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, Johor Bahru, and all other locations across Malaysia.

Response commitment: We acknowledge all privacy-related enquiries within 5 business days and aim to fully resolve data rights requests within 30 calendar days. Where a request is complex or involves multiple data categories, we may extend this period by up to a further 30 days and will notify you of any such extension in advance.

How We Handle Your Data