gempak99 Privacy Policy

1. About This Privacy Policy

This Privacy Policy ("Policy") is issued by gempak99 ("Company", "we", "us", "our") and applies to all personal data collected through the gempak99 website, mobile platform, and all related services (collectively, the "Platform"). It applies to all registered players, prospective players who browse the Platform, and any individual who communicates with gempak99 via live chat, email, or any other channel.

This Policy should be read together with the gempak99 Terms & Conditions. By registering an account or using any part of the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

2. Personal Data We Collect

gempak99 collects personal data that is necessary for the lawful operation of an online gaming platform, including for identity verification, payment processing, regulatory compliance, and the delivery of our services. The categories of personal data we collect include:

gempak99 does not collect or store full payment card numbers. Where payment card data is processed, it is handled exclusively by our PCI-DSS compliant payment gateway partners and is not retained on gempak99 servers.

3. How We Use Your Personal Data

gempak99 uses your personal data only for the purposes set out below. We do not use your data for purposes that are incompatible with those for which it was originally collected without first obtaining your consent.

• Account creation and management: To register your gempak99 account, verify your identity, maintain your account, and manage your session security.
• Service delivery: To provide access to games, process bets, credit winnings, and deliver the features of the gempak99 Platform.
• Payment processing: To execute deposits and withdrawals via your chosen payment method, including Touch n Go eWallet, Boost, Maybank, CIMB, and others, and to maintain accurate transaction records.
• Legal and regulatory compliance: To conduct anti-money laundering (AML) checks, Know Your Customer (KYC) verification, age verification, and to comply with obligations under applicable licensing conditions and relevant Malaysian law.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, unauthorised account access, and other prohibited conduct.
• Responsible gaming: To monitor for patterns of play that may indicate problem gambling, and to apply self-exclusion or deposit limits where requested or where required under our responsible gaming obligations.
• Customer support: To respond to your queries, complaints, and requests through live chat, email, and other support channels.
• Platform improvement: To analyse aggregated, anonymised usage data to improve the gempak99 Platform's performance, features, and user experience.
• Marketing communications: To send you promotional offers, bonus information, and Platform updates, where you have provided consent or where we have a legitimate interest in doing so. You may opt out of marketing communications at any time by contacting support.

4. Legal Basis for Processing

gempak99 processes your personal data on one or more of the following legal bases, depending on the nature of the processing activity:

• Contractual necessity: Processing that is necessary to perform the contract between you and gempak99 — for example, processing your deposit or crediting your winnings.
• Legal obligation: Processing required to comply with applicable laws and regulatory requirements, including AML obligations, KYC requirements, and licensing conditions.
• Legitimate interests: Processing necessary for our legitimate business interests, including fraud prevention, platform security, and service improvement, provided those interests are not overridden by your rights and interests.
• Consent: Where processing is based on your consent — for example, marketing communications — you may withdraw your consent at any time without affecting the lawfulness of processing prior to withdrawal.

5. Sharing of Personal Data

gempak99 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only in the following circumstances and only to the extent necessary:

• Licensed game providers: Game studios and live casino operators who provide games accessible through gempak99 may receive limited technical data (such as session tokens or anonymised player identifiers) necessary to deliver the game service. They are contractually prohibited from using this data for any other purpose.
• Payment processors: Your transaction data is shared with payment gateway providers, e-wallet operators (such as Touch n Go eWallet or Boost), and banking partners to the extent necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and applicable financial regulation.
• Regulatory and law enforcement authorities: gempak99 may be required to disclose your personal data to gaming regulators, financial intelligence units, or law enforcement agencies under applicable law, including for AML reporting purposes.
• Professional advisers: Lawyers, auditors, and accountants acting as service providers may have access to personal data as necessary and are bound by professional confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of the gempak99 business, personal data may be transferred to the relevant successor entity, subject to equivalent privacy protections.

6. Cookies & Tracking Technologies

gempak99 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small data files stored on your device that help us recognise returning users, maintain your login session, and analyse Platform usage.

• Strictly necessary cookies: Required for the Platform to function. These cannot be disabled — they include session authentication tokens and security cookies.
• Functional cookies: Remember your preferences, such as your language setting or preferred game lobby view.
• Analytics cookies: Collect aggregated, anonymised data about how players navigate the Platform, which pages are visited most frequently, and where errors occur. This data is used solely to improve Platform performance.
• Marketing cookies: Used only where you have consented, to serve relevant promotional offers. You may withdraw consent at any time through your browser settings or by contacting support.

You can manage or disable non-essential cookies through your browser settings. Note that disabling certain cookies may affect Platform functionality.

7. Data Retention

gempak99 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including for legal, regulatory, and accounting obligations. Specific retention periods include:

• Account and identity data is retained for a minimum of five (5) years from the date of account closure, as required under applicable AML regulations.
• Transaction records are retained for a minimum of five (5) years from the date of each transaction.
• Customer support communications are retained for two (2) years from the date of the interaction.
• Marketing consent records are retained until you withdraw consent and for a reasonable period thereafter to evidence that consent was properly obtained.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual.

8. Data Security

gempak99 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and gempak99 servers.
• Encryption of sensitive data fields at rest in our database systems.
• Multi-factor authentication requirements for administrative access to systems holding personal data.
• Segregated access controls ensuring that staff members access only the personal data necessary for their specific roles.
• Regular security assessments, vulnerability scanning, and penetration testing conducted by qualified third-party security specialists.
• Incident response procedures for the detection, assessment, and notification of personal data breaches in accordance with applicable regulatory requirements.

While gempak99 takes data security seriously, no online system is completely immune to risk. You are responsible for maintaining the security of your own account credentials and for notifying gempak99 immediately if you suspect unauthorised access to your account.

9. Your Data Rights

Subject to applicable law, you have the following rights with respect to your personal data held by gempak99:

• Right of access: You may request a copy of the personal data gempak99 holds about you.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where there is no longer a legal basis for its retention. Note that certain data may need to be retained for regulatory compliance purposes even after a deletion request.
• Right to restrict processing: You may request that we limit processing of your data in certain circumstances, for example where you contest the accuracy of the data.
• Right to data portability: Where processing is based on your consent or on a contract, you may request a copy of your personal data in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
• Right to object: You may object to processing of your personal data for direct marketing purposes at any time, and we will cease such processing immediately upon receipt of a valid objection.

To exercise any of the above rights, please contact the gempak99 data team at [email protected] with your request. We will respond within thirty (30) days. We may need to verify your identity before processing your request.

10. Children and Minors

The gempak99 Platform is strictly intended for adults aged 21 years and above. gempak99 does not knowingly collect or process personal data relating to any person under the age of 21. If we become aware that an account has been registered by a person under the age of 21, that account will be immediately closed, all deposits will be returned, and any associated personal data will be securely deleted or, where legally required to be retained, segregated and restricted from further use.

If you believe that a minor has accessed the gempak99 Platform or provided personal data to us, please contact support immediately so that we can take appropriate action.

11. Changes to This Privacy Policy

gempak99 may update this Privacy Policy from time to time to reflect changes in our data practices, Platform features, or applicable law. Material changes will be communicated to registered players via the email address on file or via a prominent notice on the Platform at least seven (7) days before taking effect. The date of the most recent revision is displayed at the top of this page.

Your continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of the changes. If you do not agree with a revised Policy, you should discontinue use of the Platform and contact support to close your account.

12. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by gempak99, please contact our data team:

• Email: [email protected]
• Live chat: Available 24/7 via the Platform

We take all data privacy queries seriously and will respond within thirty (30) calendar days of receiving your request. If you are not satisfied with our response, you may escalate the matter to the relevant data protection or gaming regulatory authority in your jurisdiction.