Privacy Policy — gempak88

1. Introduction and Scope

This Privacy Policy ("Policy") is issued by gempak88 ("gempak88", "we", "us", "our") and sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us in connection with the gempak88 online gaming platform, website, and related services (collectively, "the Platform").

gempak88 acts as the data controller in respect of personal data collected and processed through the Platform. We are committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection laws, including but not limited to the Malaysian Personal Data Protection Act 2010 (PDPA) and any other relevant legislation applicable to our operations.

This Policy applies to all users who register for, access, or use the gempak88 Platform, including players from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and across Malaysia. By using gempak88, you acknowledge that you have read and understood this Policy. If you do not agree with how gempak88 handles your personal data as described herein, please discontinue use of the Platform and contact us to close your account.

2. Personal Data We Collect

gempak88 collects personal data in the following categories, depending on how you interact with the Platform:

2.1 Registration and Account Data

When you create a gempak88 account, we collect the information you provide during registration, including:

• Full legal name;
• Date of birth (for age verification purposes — minimum age 21);
• Residential address;
• Email address;
• Mobile phone number;
• Username and hashed password;
• Preferred currency (Malaysian Ringgit / MYR).

2.2 Identity Verification (KYC) Data

To comply with our Know Your Customer (KYC) and anti-money laundering (AML) obligations, gempak88 may collect the following documents and information:

• Government-issued identification documents (e.g., Malaysian MyKad, passport);
• Proof of address documents (e.g., utility bill, bank statement);
• Proof of payment method ownership;
• Source of funds declarations where required by our AML procedures.

2.3 Financial and Transaction Data

gempak88 records transaction data associated with your account, including deposit amounts, withdrawal requests, payment method details (e-wallet identifiers, masked card numbers, bank account references), transaction timestamps, and currency conversion records.

2.4 Gaming and Betting Activity Data

We record your gaming and betting activity on the gempak88 Platform, including bet history, casino game sessions, wagered amounts, winnings and losses, bonus usage, and gameplay timestamps. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory compliance.

2.5 Technical and Device Data

When you access gempak88, we automatically collect certain technical data, including your IP address, browser type and version, operating system, device identifiers, session duration, pages visited, and referring URLs. This data helps us maintain Platform security, detect fraud, and improve user experience.

2.6 Communications Data

If you contact gempak88 customer support via live chat, email, or other channels, we retain records of those communications for quality assurance, training, and dispute resolution purposes.

3. How gempak88 Uses Your Personal Data

gempak88 processes your personal data for the following purposes:

4. Legal Basis for Processing

gempak88 relies on the following legal bases for processing your personal data under applicable data protection legislation:

• Contractual Necessity: Processing necessary to perform the contract between you and gempak88 — including account management, payment processing, and provision of gaming services.
• Legal Obligation: Processing necessary to comply with legal obligations, including KYC/AML requirements, tax reporting, and regulatory record-keeping obligations imposed on gempak88 by its licensing authority.
• Legitimate Interests: Processing for gempak88's legitimate business interests, including fraud prevention, Platform security, responsible gaming monitoring, and service improvement, where these interests are not overridden by your rights and interests.
• Consent: For marketing communications and non-essential cookies, gempak88 will rely on your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing and Third-Party Disclosure

gempak88 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate contractual protections:

• Payment Processors: Financial institutions and e-wallet providers (including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX banking partners) that process your deposits and withdrawals. These parties receive only the data necessary to execute payment transactions.
• Game Providers: gempak88's licensed game content providers who supply casino games and sports betting functionality. Game session data is shared only to the extent required for game delivery and RNG certification.
• KYC and AML Service Providers: Third-party identity verification and fraud screening services used to fulfil our regulatory obligations.
• Technology and Infrastructure Providers: Cloud hosting, cybersecurity, and IT support providers who process data on our behalf under strict data processing agreements.
• Regulatory and Law Enforcement Authorities: Where required by applicable law, court order, or regulatory directive, gempak88 may disclose your data to competent authorities. We will notify you of such disclosures where legally permitted to do so.

All third parties with whom gempak88 shares personal data are required to maintain appropriate technical and organisational security measures and to process data only for specified, lawful purposes.

6. Cookies and Tracking Technologies

gempak88 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device that help us recognise your session, remember your preferences, and understand how you interact with the Platform.

6.1 Types of Cookies Used

• Strictly Necessary Cookies: Required for the Platform to function — including authentication, session management, and security. These cannot be disabled without impairing core Platform functionality.
• Analytics Cookies: Used to understand how players use gempak88, which pages are most visited, and where improvements can be made. Analytics data is aggregated and does not identify individual users.
• Preference Cookies: Used to remember your language settings, display preferences, and other personalisation choices across sessions.

You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using gempak88, but may affect certain personalisation features.

7. Data Retention

gempak88 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention principles apply:

• Account and transaction data is retained for a minimum of five (5) years following account closure, in accordance with AML and financial record-keeping obligations.
• KYC documents are retained for the period required by applicable anti-money laundering legislation, which is typically five (5) years from the end of the business relationship.
• Customer support communications are retained for three (3) years from the date of the interaction, unless a longer period is required for ongoing dispute resolution.
• Technical and device data collected for fraud prevention is retained for up to two (2) years from collection.
• Marketing consent records are retained until you withdraw consent or close your account.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with gempak88's data destruction procedures.

8. Data Security

gempak88 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• TLS/SSL encryption for all data in transit between your device and gempak88 servers;
• AES-256 encryption for sensitive data stored at rest;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Regular security assessments, penetration testing, and vulnerability scanning;
• Two-factor authentication for administrative access to systems holding personal data;
• Incident response procedures for detecting and reporting data breaches within required regulatory timeframes.

While gempak88 takes all reasonable precautions, no internet-based service can guarantee absolute security. You are responsible for maintaining the security of your gempak88 account credentials and for reporting any suspected unauthorised access to us immediately.

9. Your Data Rights

Subject to applicable law, you have the following rights in relation to your personal data held by gempak88:

• Right of Access: You may request a copy of the personal data gempak88 holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes collected, subject to our legal retention obligations.
• Right to Restrict Processing: You may request that gempak88 limits processing of your data in certain circumstances.
• Right to Data Portability: Where technically feasible, you may request a structured, machine-readable copy of personal data you have provided to gempak88.
• Right to Object: You may object to processing of your personal data based on legitimate interests, including direct marketing.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting prior lawful processing.

To exercise any of these rights, please contact gempak88's data team at [email protected]. We will respond to verified requests within thirty (30) days. We may need to verify your identity before processing your request.

10. Children's Privacy

The gempak88 Platform is strictly intended for individuals aged 21 years and above. gempak88 does not knowingly collect personal data from persons under the age of 21. If you are a parent or guardian and believe that a minor has registered on gempak88 or provided us with personal data, please contact us immediately at [email protected]. Upon verification, we will close the relevant account and delete all associated personal data without undue delay.

11. International Data Transfers

gempak88 may transfer personal data to service providers or infrastructure partners located outside of Malaysia. Where such transfers occur, gempak88 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections afforded under applicable Malaysian data protection law. Safeguards may include standard contractual clauses, data processing agreements, and adequacy assessments. By using the gempak88 Platform, you acknowledge and consent to such international transfers where necessary for the provision of our services.

12. Changes to This Privacy Policy

gempak88 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or Platform functionality. When material changes are made, we will notify registered players via their registered email address or via a prominent notice on the Platform. The updated Policy will be effective from the date stated in the revision notice. Your continued use of the gempak88 Platform following notification of changes constitutes your acceptance of the revised Policy.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by gempak88, please contact us through any of the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 via the gempak88 Platform
• Customer Support: Available every day of the year including Malaysian public holidays

We aim to respond to all data-related enquiries within five (5) business days. For formal subject access requests or rights exercise requests, please allow up to thirty (30) calendar days for a full response.