Official medusa88 Documents

Medusa88 Privacy Policy – Data Protection for Malaysian Members

Your privacy is not merely a legal obligation to us — it is a responsibility we take seriously. This document clearly explains what types of data we collect, why we need it, how we protect it, and what your rights are as a Medusa88 member in the context of personal data protection.

Last updated: January 2026 Bahasa Melayu (ms-MY) Compliant with Malaysia's PDPA 2010

Our Privacy Commitment

"Your personal data belongs to you. medusa88 is simply its custodian — and we take that responsibility very seriously."

256-bit SSL PDPA 2010 No Data Selling

Medusa88's Six Data Protection Principles

The foundation of how we handle every member's personal information with respect and responsibility.

256-bit SSL Encryption

All data transmitted between your browser and Medusa88's servers is encrypted using 256-bit SSL protocols — the same security standard used by Malaysia's leading banks. No third party can intercept or read your data while it is in transit.

No Data Selling

Medusa88 has never and will never sell members' personal information to any third party for marketing or any other purpose. Your data is not a product we trade — it is a trust we safeguard.

Full PDPA 2010 Compliance

Medusa88's privacy policy is designed and updated in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). We respect the rights granted to you under this Act and provide clear mechanisms for you to exercise them.

Data Minimisation

Medusa88 only collects data that is strictly necessary to deliver our services safely and efficiently. We do not collect excessive or irrelevant data beyond the stated purpose. The principle of data minimisation is central to our practice.

Full Control in Your Hands

As a medusa88 member, you have the right to access, correct, transfer, or request the deletion of your personal data. You may also withdraw consent to receive marketing communications at any time without affecting your access to our services.

Clear Retention Periods

Your data is not kept indefinitely. Medusa88 has a clear data retention policy — transaction data is retained for seven years for legal compliance purposes, while other data is deleted once it is no longer needed for its stated purpose.

Medusa88 Full Privacy Policy

This document details how Medusa88 ("Platform", "We") collects, uses, stores, and protects your personal information ("Member", "You") as a user of our platform. This policy applies to all members in Malaysia and is fully compliant with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

Introduction – Who We Are and Why This Policy Exists

Medusa88 is an online entertainment platform offering casino games, slots, Sports Betting, and Live Casino to players across Malaysia. In delivering these services, we require at least some personal information from you to keep your account secure, process your financial transactions correctly, and optimise your gaming experience.

We understand that privacy matters a great deal to many Malaysian users. The decision to share personal information with any online platform should never be taken lightly. That is why we have taken the time to write this policy in clear, plain language — not just legal jargon that means little to most people.

By using the medusa88 platform, you agree to the data collection and usage practices described in this document. If you do not agree with any part of this policy, please stop using the platform and contact us to close your account.

Types of Personal Data We Collect

Medusa88 collects the following categories of data from our members:

  • Identity Data: Full name, date of birth, and MyKad or passport number for KYC verification purposes when required.
  • Contact Data: Mobile phone number and email address used during Medusa88 account registration.
  • Financial Data: Information related to your chosen payment method – the account name for Touch 'n Go, GrabPay, DuitNow, ShopeePay, Boost, or FPX. Medusa88 does not store your full bank account number – only the details necessary to process your transactions.
  • Transaction Data: A complete record of all deposits, withdrawals, and betting activity within your Medusa88 account.
  • Technical Data: IP address, web browser type, device type, operating system, and access log information.
  • Usage Data: Records of games played, time spent playing, game preferences, and in-platform navigation behaviour.
  • Communication Data: Records of your interactions with the Medusa88 support team via live chat or email.

We do not collect sensitive data such as medical information, religious beliefs, political views, or biometric data, except in very limited circumstances and with your explicit consent.

How medusa88 Collects Your Data

Your personal data is collected through the following methods:

  • Direct registration: When you complete the Medusa88 account registration form, you provide your identity and contact data directly.
  • Financial transactions: Every time you make a deposit or withdrawal via Touch 'n Go, DuitNow, GrabPay, or any other method, your transaction details are automatically recorded.
  • Platform usage: Your activity on the platform – games played, time spent, betting patterns – is recorded by our system for security and experience improvement purposes.
  • Cookies and web technologies: As described in Section 7, medusa88 uses cookies and similar technologies to automatically collect technical and usage data.
  • Support communications: When you contact the Medusa88 support team via live chat or email, records of those communications are retained for service quality and complaint resolution purposes.
  • KYC Verification: When you submit identity verification documents such as your MyKad or driving licence, those documents are stored securely for the period prescribed by law.

Purpose of Using Your Personal Data

Medusa88 uses the personal data collected for the following purposes:

  • Account management: Registration, identity verification, secure login, and account profile management on medusa88.
  • Payment processing: Securely and efficiently processes deposits and withdrawals via Touch 'n Go, DuitNow, GrabPay, ShopeePay, Boost, and FPX.
  • Security and fraud prevention: Detecting and preventing fraudulent activity, hacking, money laundering, and any misuse of the platform.
  • Legal compliance: Meet our obligations under Malaysia's PDPA 2010 and other applicable laws, including anti-money laundering requirements.
  • Service improvement: Analysing usage patterns to improve the interface, add relevant games, and optimise the playing experience for Malaysian players.
  • Service communications: Sending important notifications related to your account, Medusa88 platform updates, and information relevant to your activity.
  • Marketing (with consent): Promotional information, bonuses, and exclusive Medusa88 offers are only sent to members who have given consent to receive marketing communications.
  • Responsible gaming: Monitoring play patterns to identify members who may need support related to responsible gaming.

Legal Basis: medusa88 processes your data on the basis of contract performance (to provide the services you signed up for), legal obligation (PDPA compliance and applicable laws), the platform's legitimate interests (security and fraud prevention), and your consent (for marketing communications).

Data Sharing with Third Parties

Medusa88 does not sell, rent, or disclose your personal information to third parties for their own marketing purposes. However, in the course of operating the platform, we may share your data with a limited set of third-party categories as outlined below:

  • Payment processors: Touch 'n Go, GrabPay, DuitNow, ShopeePay, Boost, and FPX-participating banks that process your financial transactions. Data shared is strictly limited to what is necessary to complete each transaction.
  • Game providers: Companies such as Evolution Gaming, Pragmatic Play, and others that supply games to medusa88 may receive the minimum technical data required to deliver those games to your device.
  • IT service providers: Server hosting providers, cybersecurity services, and analytics partners that help Medusa88 operate the platform securely. All such providers are bound by strict confidentiality agreements.
  • Legal authorities: Medusa88 will disclose the necessary data to Malaysian authorities when required by law, court order, or a legitimate criminal investigation.

In all of the above situations, data sharing is limited to the minimum necessary, and we ensure that every third party has adequate security measures in place to protect your data. We do not permit third parties to use your data for their own purposes beyond what has been specified.

Medusa88 Data Security Measures

Medusa88 invests in robust security infrastructure to protect your personal data from unauthorized access, alteration, disclosure, or destruction. Our key security measures are as follows:

  • 256-bit SSL Encryption: All communication between your browser and Medusa88's servers is encrypted using the latest TLS/SSL protocols. This means that even if someone were to intercept your network traffic, the captured data would be completely unreadable.
  • Secure password storage: Medusa88 account passwords are never stored in plain text — they are processed using a strong one-way hashing algorithm. This means that even Medusa88 staff cannot view your password.
  • Internal access controls: Only medusa88 staff with a legitimate business need are granted access to member personal data, and all such access is strictly logged and monitored.
  • 24/7 security monitoring: Our automated monitoring system detects and raises alerts for any suspicious activity, intrusion attempts, or unusual access patterns in real time.
  • Regular security testing: Medusa88 conducts regular penetration testing and security audits to identify and patch any vulnerabilities before they can be exploited.
  • Secure data backups: Member data is automatically backed up to a secure, encrypted location to ensure rapid recovery in the event of a system failure.

While we take every reasonable precaution, no security system is 100% foolproof. In the unlikely event of a data breach affecting your personal information, Medusa88 is committed to notifying you within the timeframe required by Malaysian law.

Cookies & Tracking Technologies

Medusa88 uses cookies and similar technologies to enhance your experience on our platform. The following are the types of cookies we use:

Essential cookies are required for the core functionality of the Medusa88 platform and cannot be disabled. Functional and analytics cookies can be disabled through your browser settings, though this may affect certain features on the platform. Medusa88 does not use third-party cookies for advertising or cross-site tracking.

Financial & Transaction Data

As medusa88 handles financial transactions in Malaysian Ringgit (RM), we pay particular attention to safeguarding members' financial data. Our core principles for handling financial data are:

  • Medusa88 does not store full bank account numbers, credit card numbers, or any unnecessary sensitive financial information on our servers.
  • All transactions via Touch 'n Go, GrabPay, DuitNow, ShopeePay, Boost, and FPX are processed through payment gateways that comply with PCI DSS security standards.
  • Transaction records – deposit amounts, withdrawal amounts, dates, and times – are stored in encrypted format and are accessible only to authorized personnel.
  • You can view the full transaction history of your Medusa88 account from within your account dashboard.
  • Medusa88 only allows withdrawals to the same payment method or under the same name used for the deposit — this is an important security measure to prevent fraud and money laundering.

Financial transaction records are retained for a minimum of seven years in accordance with Malaysian legal requirements under the Anti-Money Laundering Act (AMLA).

Your Rights Under PDPA 2010

As a registered medusa88 member in Malaysia, you have the following rights under the Personal Data Protection Act 2010:

Right of Access

You have the right to request a copy of the personal data Medusa88 holds about you. This request can be submitted to our support team and will be processed within 14 business days.

Right to Rectification

If you find that any personal data Medusa88 holds about you is inaccurate or incomplete, you have the right to request a correction. Basic details such as your phone number can be updated directly from your account dashboard.

Right to Erasure

You may request the deletion of your personal data upon closing your Medusa88 account, subject to legal data retention requirements (such as transaction records that must be kept for seven years).

Right to Object to Marketing

You may withdraw your consent to receive marketing communications from Medusa88 at any time, either via the "unsubscribe" link in our emails or by contacting our support team.

Data Portability Rights

You have the right to request your data in a machine-readable format (such as CSV) for transfer to another platform where this is technically practical and relevant.

To exercise any of the rights above, please contact the Medusa88 support team via live chat or email at support@medusa88.best. We will verify your identity before processing any request relating to personal data.

Data Retention Period

Medusa88 retains your personal data only for as long as necessary for the stated purpose or as required by Malaysian law. The following are general data retention guidelines:

  • Identity and account data: Retained for the duration of your active account and for 5 years after account closure, in line with applicable legal requirements.
  • Financial transaction records: Retained for a minimum of 7 years in compliance with the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLA).
  • Support communication records: Retained for 2 years from the date of communication for service quality and complaint resolution purposes.
  • Technical and security logs: Retained for 90 days for fraud detection and technical troubleshooting.
  • Marketing data (with consent): Retained until you withdraw consent or request deletion.

Once the retention period has expired, data is securely deleted or anonymised so that it can no longer be linked to your identity.

International Data Transfers

In certain circumstances, your personal data may need to be transferred to servers located outside Malaysia — for example, for hosting or the provision of specific services. In such situations, medusa88 ensures that:

  • Data transfers only take place to countries or organizations that maintain an adequate level of data protection.
  • Appropriate data processing agreements incorporating standard protection clauses are in place with all data recipients.
  • Any data transferred is limited to the minimum necessary for legitimate operational purposes.

Medusa88 does not transfer the personal data of Malaysian members to countries that lack equivalent data protection standards without appropriate safeguards in place.

Children & Minor Protection

The Medusa88 platform is strictly for users aged 18 and above. We do not knowingly collect or process personal data of individuals under the age of 18.

If you believe that someone under the age of 18 has registered an account on medusa88 using false information, please contact us immediately at support@medusa88.best. We will investigate the matter, close the account in question, and delete all data associated with that minor.

Medusa88 employs an age verification process during registration and reserves the right to request proof of age (MyKad, driving licence, or passport) at any time if there is reasonable doubt about a member's actual age.

Changes to This Privacy Policy

Medusa88 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. When we make material changes, we will:

  • Updating the "Last Updated" date shown at the top of this page.
  • Displaying a notification within the Medusa88 platform the next time you log in.
  • Sending notification emails to all registered members for significant changes that affect your rights.

We encourage you to review this Privacy Policy page periodically. Continued use of the Medusa88 platform after a policy update takes effect constitutes your acceptance of the revised terms. If you do not agree with any changes, please contact us to close your account.

Contact the Medusa88 Data Protection Officer

If you have any questions, concerns, or complaints regarding how Medusa88 handles your personal data, please contact us via:

  • Live Chat: Available 24 hours a day, 7 days a week, directly within the Medusa88 platform – the fastest way to get help with urgent queries.
  • Email: support@medusa88.best – for requests relating to data access, correction, or deletion, please include "Personal Data Request" in the email subject line.
  • Response time: We aim to respond to all privacy-related requests within 5 business days.

If you are dissatisfied with Medusa88's response to your privacy request, you have the right to file a complaint with the Department of Personal Data Protection Malaysia under the Ministry of Communications and Digital.

Privacy Policy & Related Terms

This Privacy Policy should be read in conjunction with Terms & Conditions and policies Responsible Gaming Medusa88. Together, these three documents form the complete framework governing the agreement between Medusa88 and each registered member.

Privacy in the Digital Age – Why Medusa88 Takes Your Data Protection Seriously

We live in an age where personal data has become one of the most valuable – and most vulnerable – assets in existence. Every day, millions of digital transactions take place across Malaysia through banking apps, e-wallets such as Touch 'n Go and GrabPay, and a wide range of online entertainment platforms. Behind the convenience of it all lies a significant responsibility to protect the information that users entrust to any given platform.

Medusa88 understands that trust is not given automatically — it must be earned and maintained through consistent action over time. When a member registers with Medusa88 and provides their phone number, e-wallet account details, and conducts financial transactions through our platform, they are entrusting us with something of great value. We do not take that trust lightly.

One concern many Malaysians have about online entertainment platforms is whether their information is truly safe. Will it be sold to advertisers? Will their phone number be used to send spam? Are their financial details protected? At Medusa88, the answers to these questions are firm and clear: no, no, and yes.

Our platform has never sold, and will never sell, member data to any third party for marketing purposes. Your phone number will not be shared with other companies wishing to contact you about products or services unrelated to medusa88. Your financial details are protected by industry-standard encryption and are only accessible to staff who need them to process your transactions.

On the technical side, medusa88 uses the same 256-bit SSL encryption employed by major Malaysian banking institutions such as Maybank and CIMB. This means all data transmitted between your phone or computer and medusa88's servers is fully encrypted — unreadable to any party that may attempt to intercept the communication.

Beyond encryption, medusa88 also maintains continuous security monitoring to detect any unauthorised access attempts. If our systems identify a suspicious pattern — such as login attempts from an unfamiliar location or at an unusual time — we will act promptly to protect your account, including reaching out to you for additional identity verification if necessary.

Ultimately, Medusa88 believes that transparency is the foundation of trust. That is why we have written this Privacy Policy in clear, straightforward language – not as a dense legal document that no one will actually read. We want every Medusa88 member to understand exactly how their data is handled, and to feel comfortable and confident every time they use our platform.

Summary of Your Privacy Rights at Medusa88

All rights you hold as a Medusa88 member under the protection of Malaysia's PDPA 2010.

Access Your Data

Request a copy of all personal data Medusa88 holds about you at any time.

Correct Data

Request the correction of any inaccurate or incomplete information in your account.

Delete Data

Request the deletion of your data when it is no longer needed, subject to legal requirements.

Opt Out of Marketing

Withdraw consent for marketing communications at any time with no impact on your account.

Data Portability

Request your data in a machine-readable format for transfer if needed.

Submit a Complaint

The right to lodge a complaint with the relevant Malaysian authorities if you are not satisfied.

Medusa88 Privacy Policy & Related Documents

This Privacy Policy forms part of Medusa88's comprehensive user protection framework. For a complete understanding of your rights and responsibilities, please also read Terms & Conditions and policies Responsible Gaming us. For any privacy-related enquiries, contact us at support@medusa88.best.

Related Documents

Please also read the following documents to fully understand your rights and responsibilities as a medusa88 member.

Terms & Conditions

Full terms of use for the Medusa88 platform, covering deposits, withdrawals, and bonuses.

Read Now
Responsible Gaming

Tools and resources to help you play responsibly and stay in control.

Read Now
About Us

Get to know Medusa88 — our mission, core values, and commitment to Malaysian players.

Learn More
Frequently Asked Questions

Answers to the most frequently asked privacy and general questions from our members.

View FAQ
Your Data Is Safe at Medusa88

Play with Confidence – Your Privacy Is Protected at medusa88

256-bit SSL encryption, PDPA 2010 compliance, no data selling, and full control in your hands. Register for free and enjoy over 1,000 games with the peace of mind that your information is always protected.

18+ only • Gamble responsibly • Terms & Conditions apply

Bahasa Melayu