Important Note: This Privacy Policy describes our data collection and usage practices. By using the Gempak99 platform, you agree to this policy. Please read it carefully and contact us if you have any questions.
1 Information We Collect
Gempak99 collects your personal information through several channels — either directly from you during account registration, through your use of the platform, or automatically via standard tracking technologies. Each type of data collected has a clear purpose and is only used within the scope stated in this policy.
1.1 Information You Provide Directly
When you register an account or use our services, we collect the following information:
- Identity information: full name, date of birth, and identification card number for KYC verification purposes.
- Contact information: an active email address and mobile phone number.
- Financial information: bank account details or e-wallet information used for deposits and withdrawals.
- Verification documents: copies of your identification card, proof of address, and other supporting documents requested during the KYC process.
- Communication preferences: language settings, notification preferences, and feedback you provide to our team.
1.2 Information Collected Automatically
While you use the gempak99 platform, our systems automatically record certain technical information required to keep the platform running smoothly and securely:
| Data Type | Example Information | Purpose of Collection |
|---|---|---|
| Device Data | Device type, operating system, phone model | Platform optimization & fraud detection |
| Network Data | IP address, approximate location, ISP | Account security & regional compliance |
| Session Data | Login time, session duration, pages visited | Usage analytics & UX improvement |
| Game Data | Betting history, wins, and games played | Transaction records & responsible gambling compliance |
| Payment Data | Records of deposits, withdrawals, and payment methods | Transaction processing & anti-money laundering |
1.3 Information From Third Parties
In certain circumstances, we may receive additional information about you from trusted sources, including third-party identity verification service providers we use for KYC purposes, fraud prevention agencies, and authorized payment partners. All information received from these third parties is handled to the same security standards as data you provide directly.
Data Minimisation Principle: Gempak99 only collects data that is genuinely necessary to operate our services safely and to meet legal requirements. We do not collect excessive or irrelevant information.
2 How We Use Your Information
Every piece of information we collect is used for a clear and lawful purpose. gempak99 does not use your data for any purpose not stated in this privacy policy without first obtaining your consent.
- Account management: creating, verifying, and securely maintaining your user account.
- Transaction processing: processing deposits, withdrawals, and all financial transactions accurately and efficiently.
- Identity verification (KYC): ensuring all users meet the age and eligibility requirements set by compliance obligations.
- Platform security: detecting, investigating, and preventing fraud, money laundering, and unauthorized account access.
- Customer support: helping you resolve technical issues, account inquiries, and complaints quickly and effectively.
- Legal compliance: meeting legal obligations, regulatory requirements, and lawful requests from relevant authorities.
- Platform improvements: analyzing usage patterns to improve the user experience, enhance the interface, and introduce new features.
- Service-related communications: sending important notifications about your account, promotions you have subscribed to, and policy updates that affect you.
- Responsible gaming: monitoring betting patterns to identify early signs of problem gambling and offering appropriate assistance.
Marketing Communications: We only send you marketing communications if you have given explicit consent. You may withdraw this consent at any time through your account settings.
3 Personal Information Sharing
Gempak99 respects your privacy and does not share your personal information with external parties indiscriminately. However, there are certain circumstances where sharing data is necessary to enable us to provide services effectively or to comply with legal requirements.
3.1 Trusted Service Providers
We work with carefully selected third-party service providers to support our platform operations. These providers are granted access only to the data required to carry out their specific functions and are bound by strict confidentiality agreements:
- Certified payment processing providers to handle deposit and withdrawal transactions.
- A KYC identity verification service provider ensuring compliance with legal requirements.
- Cloud infrastructure and cybersecurity providers to ensure platform availability and security.
- Analytics service providers that help us understand platform usage patterns on an aggregate basis.
- Gaming software providers who require access to session records for technical dispute resolution purposes.
3.2 Legally Required Disclosures
Gempak99 may disclose your personal information to authorities when legally required, including:
- Valid court orders or lawful legal processes.
- Requests from relevant gambling regulatory authorities.
- Investigations related to financial crime, fraud, or money laundering.
- Emergency situations involving threats to public safety.
Our Guarantee: Every instance of data sharing with third parties is governed by data processing agreements that require them to protect your information to a standard no less stringent than this privacy policy.
4 Cookies & Tracking Technologies
The gempak99 platform uses cookies and similar tracking technologies to enhance the user experience and collect diagnostic information that helps us improve our services. Cookies are small data files stored on your device when you visit our platform.
4.1 Types of Cookies Used
| Cookie Category | Function | Duration |
|---|---|---|
| Essential Cookies | Ensuring core platform functionality, login sessions, and security | Session / 24 hours |
| Performance Cookies | Collecting analytics data on how users interact with the platform | 30 days |
| Functional Cookies | Remembering your preferences and personal settings (language, theme) | 90 days |
| Security Cookies | Detecting suspicious activity and protecting against fraud | 7 days |
You can manage your cookie preferences through your web browser settings. Please note that disabling essential cookies may affect platform functionality and your login experience. Non-essential cookies can be disabled without impacting the platform's core features.
5 Data Security Measures
Protecting your personal information is gempak99's top priority. We continuously invest in the latest security infrastructure and apply a multi-layered security approach to ensure your data remains protected at every stage — during transmission, processing, and storage.
- Data encryption in transit: all communication between the platform and your device is protected by TLS 1.3 with 256-bit encryption.
- Data encryption at rest: sensitive information such as passwords and financial details is encrypted using industry-recognised encryption algorithms before being stored.
- Role-based access control: staff may only access data relevant to their job responsibilities, and all access is audited.
- Two-factor authentication: administrative accounts are protected with multi-factor authentication to prevent unauthorised access.
- Regular penetration testing: independent security experts conduct regular vulnerability assessments to identify and patch weaknesses before they can be exploited.
- Incident response plan: the Gempak99 security team has clear incident response procedures that are tested on a regular basis.
Shared Responsibility: While we implement comprehensive security measures, the security of your account also depends on your own security practices — such as using a strong password, not sharing your login details, and staying alert to phishing attempts.
6 User Rights
As a gempak99 user, you have clear and enforceable rights regarding your personal data. We respect these rights and provide straightforward mechanisms for you to exercise them.
Right of Access
You have the right to know what personal data we hold about you and to obtain a copy of it.
Right to Rectification
You can request a correction to any personal information that is inaccurate or incomplete.
Right to Erasure
In certain circumstances, you may request the deletion of your personal data from our systems.
Right to Restriction of Processing
You can request that we restrict the processing of your data while any dispute is being resolved.
Right to Data Portability
You have the right to receive a copy of your data in a structured, machine-readable format.
Right to Object
You can object to the processing of your data for direct marketing purposes at any time.
To exercise any of the above rights, please contact the gempak99 customer support team via the in-platform live chat. We will process your request within the timeframe prescribed by applicable data protection requirements. Please note that certain rights may be subject to limitations based on legal obligations or legitimate security interests.
7 Cross-Border Data Transfers
As an online platform operating globally, data you provide to gempak99 may be processed or stored on servers located outside Malaysia. We ensure that any such cross-border data transfers are carried out with adequate safeguards in place.
The safeguards we apply to international data transfers include the use of standard data protection clauses in contracts with overseas service providers, ensuring recipients operate in countries with equivalent levels of data protection, and conducting data protection impact assessments before any large-scale data transfers are approved.
Gempak99 only transfers data to jurisdictions we believe have adequate legal protections or where we have established equivalent contractual safeguards. The protection of your data is not diminished simply because it is processed outside Malaysia.
8 Data Retention Period
Gempak99 retains your personal data only for as long as it is needed for the purposes stated in this privacy policy or for as long as required by applicable law. Retention periods vary depending on the type of data and the relevant legal requirements.
| Data Type | Retention Period | Legal Basis |
|---|---|---|
| Active Account Records | Throughout the active account period | Contract execution |
| KYC & Identity Records | 5 years after account closure | Anti-money laundering obligations |
| Financial Transaction Records | 7 years after transaction | Tax & financial reporting requirements |
| Security & Access Logs | 12 months | Legitimate security interests |
| Marketing Data (with consent) | Until consent is withdrawn | User consent |
| Customer Support Records | 3 years after resolution | Legitimate business interests |
When the retention period expires, your data will be securely deleted or anonymized using methods that ensure it cannot be recovered. In situations where immediate deletion is not practical, the data will be blocked from any active use until it can be safely deleted.
9 Children's Privacy
The gempak99 platform is exclusively for users aged 18 years and above. We do not intentionally collect, store, or process any personal information from individuals under the age of 18.
Our account registration process includes age verification through strict KYC procedures. Should we discover that personal data of a child has been collected without our knowledge, we will take immediate steps to delete that information and close the account in question.
Warning: If you believe a minor has registered an account on our platform, please contact the gempak99 support team immediately. We will investigate and take appropriate action without delay.
10 Changes to This Privacy Policy
Gempak99 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, new legal requirements, or service improvements. Any changes will be communicated to you through the following methods:
- In-account notification on your platform when you next log in.
- Email notification to your registered address for any material changes.
- Update the "Last Updated" date at the top of this page.
Continued use of the gempak99 platform after changes take effect constitutes your acceptance of the updated policy. If you disagree with any changes, you have the right to close your account and stop using the platform. We encourage you to review this page periodically to stay informed about how we protect your data.
11 Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, the gempak99 Data Protection team is ready to assist you.
Live Chat
Available 24/7 via the in-platform chat button for immediate responses.
Response Time
Privacy-related requests are processed within 30 business days.