Privacy Policy Gempak88 — Your Personal Data Protection

Gempak88 takes the privacy of every member seriously. This Privacy Policy is drawn up in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and transparently explains how we handle your personal information throughout your use of our platform.

By registering an account, using our services, or browsing the gempak88 website, you agree to the terms set out in this Privacy Policy. We encourage you to read this document carefully so you fully understand your rights and options.

If you have any questions about this policy after reading it, our support team is available via live chat 24 hours a day, 7 days a week.

We collect various types of information depending on how you interact with the gempak88 platform. Below are the main categories of information we collect:

We never collect sensitive information such as biometric data, health information, or political affiliations. Every piece of information we collect has a clear and legitimate purpose.

Every piece of information we collect is used for a specific and legitimate purpose. gempak88 does not use your data for unrelated purposes without obtaining your consent first.

The primary uses of the data we collect are as follows:

• Account management — verifies identity, enables secure login, and manages member profiles.
• Transaction processing — accurately processes deposits, withdrawals, and financial transaction history.
• Platform security — detects suspicious activity, prevents fraud, and protects all users.
• Customer support — helps resolve issues, answer enquiries, and handle complaints effectively.
• Experience personalisation — displays relevant promotions and game recommendations based on your playing habits.
• Legal compliance — meets the reporting and audit requirements set by the relevant authorities.
• Platform improvement — analyses usage patterns to improve overall platform performance and user experience.

We do not use your data to make automated decisions that could affect your rights without human involvement in the process.

Gempak88 does not sell, rent, or trade your personal information to any third party for marketing purposes. However, there are certain situations where we may need to share your information with trusted parties:

• Payment providers — such as FPX, Touch 'n Go, GrabPay, and banks to securely process your financial transactions.
• Technology service providers — companies that help us manage platform infrastructure, servers, and cybersecurity.
• Legal authorities — if required by court order, criminal investigation, or valid regulatory requirement.
• Game partners — game software providers that require minimal session data to ensure games run smoothly.

Should gempak88 be involved in any business merger or acquisition, you will be notified in advance before any personal data is transferred to the new party, and an updated privacy policy will be published for your review.

Protecting your data is gempak88's top priority. We continuously invest in the latest security infrastructure to ensure your information is always secure, both in transit and at rest.

The security measures we have in place include:

• 256-bit SSL encryption — all data transmitted between your device and our servers is encrypted using industry-standard security protocols.
• Two-factor authentication (2FA) — an additional security layer that ensures only you can access your account even if your password is compromised.
• Real-time monitoring — our intrusion detection system monitors all account activity 24 hours a day to identify any unusual behaviour.
• Secure data storage — sensitive information such as passwords is stored in hashed form and cannot be read even by our internal staff.
• Regular security audits — our platform undergoes penetration testing and security audits by independent third parties on a regular basis.

While we take all reasonable measures, no system can be guaranteed 100% secure. If you suspect your account has been compromised, please contact us immediately via live chat.

Gempak88 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential cookies — required for core platform functions such as login sessions and security. These cookies cannot be disabled.
• Performance cookies — collects information about how you use the platform to help us improve our services.
• Functional cookies — saves your preferences such as language and display settings so you do not have to reset them each time.
• Analytics cookies — helps us understand platform traffic and usage patterns in aggregate and anonymised form.

As a data subject under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data held by gempak88:

• Right to access — you may request a copy of the personal data we hold about you at any time.
• Right to rectification — if any information we hold is inaccurate or outdated, you may request that we update it.
• Right to withdraw consent — you may withdraw consent for specific data processing, though this may affect access to certain services.
• Right to object — you may object to the processing of your data for direct marketing purposes.
• Right to erasure — under certain circumstances, you may request that we delete your personal data from our systems.

To exercise any of the above rights, please contact our support team via live chat or email. We will process your request within 14 business days.

Gempak88 retains your personal data for as long as your account is active or as long as necessary to fulfil the purposes stated in this policy. Retention periods vary by data type:

• Active account data — retained for as long as your account is active and up to 7 years after account closure for legal compliance purposes.
• Financial transaction records — retained for a minimum of 7 years in accordance with financial reporting and anti-money laundering requirements.
• Game activity log — retained for 2 years for dispute resolution and audit purposes.
• Support communication data — retained for 2 years after a case is closed.
• Cookie data — expires automatically according to cookie type, ranging from the current session to 12 months.

Once the retention period expires, your data will be securely deleted using methods that comply with industry security standards, ensuring no unauthorised data recovery is possible.

The gempak88 platform is strictly for individuals aged 18 and above. We do not knowingly collect any personal information from minors.

If you are a parent or guardian and discover that a minor in your care has registered an account on our platform, please contact us immediately. We will take the following steps without delay:

• Suspend the account in question immediately.
• Delete all associated personal data.
• Return any deposited funds where applicable.

Gempak88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or service improvements. Whenever a significant amendment is made, we will:

• Update the "Last Updated" date at the top of this page.
• Send a notification to the email address registered to your account.
• Display a clear notice on the platform when you next log in.

We encourage you to review this page periodically. Continued use of the platform after any amendment is published will be considered acceptance of the updated terms.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, we encourage you to reach out to us directly.

The gempak88 privacy and data protection team can be reached via:

• Live Chat — available 24/7 directly within the gempak88 platform. The fastest way to get an answer.
• Email — send your enquiry to [email protected] and we will respond within 3 business days.

We take every privacy complaint seriously and are committed to resolving each case fairly, transparently, and within a reasonable timeframe.