Privacy Policy gempak888 – Malaysian Member Data Protection

Gempak888 is a digital entertainment platform operating in Malaysia, offering online casino services, Sports Betting, live dealer blackjack, table games, digital lottery, e-sports, and a range of other online entertainment to registered members. In delivering these services, gempak888 needs to collect and process certain personal data relating to each member.

This Privacy Policy applies to all individuals who register an account, use any of our services, visit our website, or communicate with gempak888 through any channel — including the main website, mobile app, live chat, email, WhatsApp, and Telegram. It also applies to individuals who sign up to receive marketing communications from gempak888 even without opening an active account.

In the event of any discrepancy between a translation or other version of this document and the Malay version, the Malay version shall prevail. For any enquiries regarding this Privacy Policy, please contact gempak888's Data Privacy Officer at support@gempak888.click.

Gempak888 collects personal data through several means — directly from you during registration and platform use, automatically via technologies such as cookies, and in some cases from legitimate third-party sources such as payment providers.

Gempak888 processes your personal data only for legitimate, necessary purposes that are directly related to delivering our platform services to you. We do not process data for purposes not stated in this Privacy Policy without first obtaining your consent.

• Account Management: Creating and managing your gempak888 account, verifying your identity, processing registration, and enabling secure login including two-factor authentication (2FA).
• Financial Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, DuitNow, FPX (Maybank2u, CIMB Clicks), Boost, and ShopeePay, as well as processing winnings withdrawals to your Malaysian e-wallet or local bank account.
• Gaming Service Delivery: Enables you to access and play all games on the gempak888 platform, including Live Casino, blackjack, football, live matches, e-sports, and lottery.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, bonus abuse, and other security threats that could harm the platform or other members.
• Legal Compliance: Meeting legal obligations including anti-money laundering (AML) compliance requirements, identity verification (KYC), and financial record-keeping in accordance with Malaysian law.
• Experience Personalisation: Tailoring game recommendations, promotions, and platform content based on your preferences and usage history — to make your gempak888 experience more relevant to you.
• Service Communications: Sending important account-related notifications such as deposit confirmations, withdrawal outcomes, security updates, and changes to terms or policies.
• Responsible Gaming: Monitoring usage patterns to identify signs of problem gambling and provide appropriate support to members who need it, including enforcing the self-exclusion limits you have set.

For marketing and promotional communications, gempak888 only sends promotional information to members who have given explicit consent to receive such communications. You may withdraw this consent at any time through the unsubscribe option in your gempak888 account settings.

Gempak888 is firm and unequivocal: we do not sell, rent, or transfer members' personal data to any third party for their marketing or commercial purposes. However, in the course of operating the platform, there are limited situations where data must be shared with specific parties.

• Platform Service Providers: Licensed game providers, payment processors (including TNG, GrabPay, DuitNow, FPX, Boost, and ShopeePay networks), and other technical service providers that support gempak888 in operating the platform. All such parties are bound by strict confidentiality agreements and may only use your data for purposes specified by gempak888.
• Legal Obligations: Where required by Malaysian law, a court order, or a legitimate request from a relevant authority, gempak888 may be obligated to disclose certain data. In such circumstances, gempak888 will endeavour to notify you before any disclosure is made, unless doing so is prohibited by law.
• Fraud Prevention: In cases involving suspected fraud, gempak888 may share relevant information with financial institutions, law enforcement, or relevant regulatory bodies in Malaysia for the purposes of investigation and financial crime prevention.

The security of your personal data is gempak888's top priority. We continually invest in security infrastructure and industry best practices to keep your data safe from both external and internal threats.

• 256-bit SSL Encryption: All communications between your device and gempak888's servers are encrypted using TLS 1.3 with 256-bit encryption keys — the same level of security used by Malaysia's major commercial banks.
• Strict Access Controls: Member data is accessible only to gempak888 staff who require it to carry out their specific duties. All access is logged and audited on a regular basis. The principle of least privilege is strictly observed.
• 24/7 Monitoring: gempak888's security systems are continuously monitored by an experienced cybersecurity team who will respond immediately to any suspicious activity.
• Two-Factor Authentication (2FA): gempak888 offers and actively encourages the use of 2FA on all member accounts as an additional layer of protection against unauthorised access.
• Regular Penetration Testing: gempak888's infrastructure undergoes regular penetration testing conducted by independent cybersecurity firms to identify and address any vulnerabilities before they can be exploited.
• Data Breach Response Plan: gempak888 has a comprehensive data breach response procedure in place. In the event of a data breach affecting members, gempak888 is committed to notifying affected members within 72 hours of confirming the breach, in line with international data protection best practices.

While gempak888 takes all reasonable steps to protect your data, it is equally important that you help safeguard your account by using a strong password, not sharing your login credentials, and promptly reporting any suspicious activity to the gempak888 support team.

Gempak888 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit the gempak888 website.

• Essential Cookies: Required for core platform functions, including login session authentication, security, and remembering your preference settings. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Helps gempak888 understand how members interact with the platform — the most frequently visited pages, time spent in each section, and any errors that may occur. This data is used in aggregate and without personal identifiers to improve platform performance.
• Functional Cookies: Enables the gempak888 platform to remember your preferences such as language, display settings, and frequently played games to provide a more personalised experience.
• Marketing Cookies: Used to display relevant promotional content based on your interests and activity on the gempak888 platform. You can opt out of marketing cookies through the cookie settings on our website.

Gempak888 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, as described in this Privacy Policy, or as required by applicable Malaysian law.

• Active Account Data: Retained for the duration of your active gempak888 account, plus a further 6 months following your last activity.
• Financial Transaction Records: Retained for a minimum of 7 years from the transaction date, in line with Malaysia's financial and tax legal requirements.
• KYC Records (Identity Verification): Retained for a minimum of 5 years from the date of last verification or account closure, whichever is later, in accordance with anti-money laundering compliance requirements.
• Communication Records: Customer support conversation records are retained for 3 years from the date of the last communication, for reference purposes and to resolve any disputes that may arise.
• Data After Account Closure: Once an account is closed, gempak888 will delete or anonymise any personal data that is no longer required for legal purposes within 90 days of the confirmed account closure date.

Once the relevant retention period has expired, your personal data will be securely deleted or anonymised so that it can no longer be associated with you as an individual. gempak888 follows industry-recognised data deletion procedures to ensure that deleted data cannot be recovered.

As a gempak888 member, you have rights under Malaysia's Personal Data Protection Act 2010. gempak888 is committed to facilitating the exercise of these rights in a prompt, straightforward, and fee-free manner.

• Right to Data Access: You may request a copy of all personal data that gempak888 holds about you. Requests can be submitted through your account settings or by emailing support@gempak888.click with the subject line "Data Access Request". We will process your request within 14 business days.
• Right to Rectification: Basic details such as your phone number and email address can be updated directly in your gempak888 account settings. For corrections to information that requires verification, such as your full name, please contact our support team with the relevant supporting documents.
• Right to Erasure: To request the deletion of your personal data, contact the gempak888 privacy team at support@gempak888.click. Please note that some data may need to be retained for a specified period in accordance with legal requirements before it can be permanently deleted.
• Right to Object to Marketing: You may opt out of marketing communications at any time by clicking the unsubscribe link in any marketing email from gempak888, or by updating your communication preferences in your account settings. Unsubscribing from marketing does not affect important account-related communications.
• Right to Data Portability: You have the right to request your personal data in a machine-readable format (such as CSV or JSON) for the purpose of transferring it to another service. This request can be submitted by emailing our privacy team.

The gempak888 platform is intended solely for individuals aged 18 and above. gempak888 does not knowingly collect, process, or store personal data from individuals under the age of 18.

All new registrants are required to confirm they are aged 18 and above during the registration process. gempak888 applies an age verification process as part of identity verification (KYC) to ensure compliance with this minimum age requirement. Any account suspected of belonging to a minor will be suspended immediately while an investigation is conducted.

Gempak888 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or service improvements. All previous versions of the Privacy Policy are retained and can be requested from our privacy team for reference.

When material changes are made to this Privacy Policy — for example, changes to the purposes for which data is used, new categories of third parties with whom data is shared, or changes to your rights — gempak888 is committed to notifying you through:

• An in-account notification on gempak888 that will be displayed upon your next login after the changes take effect.
• Email notification to the address registered in your account.
• A clear notice at the top of this Privacy Policy page states the date of the update and a summary of the changes made.

Your continued use of the gempak888 platform after the effective date of any updated Privacy Policy constitutes your acceptance of those changes. The "Last Updated" date at the top of this document always reflects the current version of the gempak888 Privacy Policy. For any questions regarding Privacy Policy updates, contact us at support@gempak888.click.