gempak99 Privacy Policy – How We Protect Your Personal Data

1. Data Controller Identity

The data controller responsible for your personal data collected via gempak99 is the licensed operating entity behind gempak99.vu. For all privacy-related queries, the designated data protection contact can be reached at [email protected].

2. Personal Data We Collect

gempak99 collects personal data across several categories:

2.1 Identity Data

• Full legal name (as per MyKad or equivalent government-issued ID)
• Date of birth
• Nationality and country of residence
• Government-issued identification number (e.g. Malaysian IC number)
• Copies of identity documents submitted for KYC verification

2.2 Contact Data

• Email address
• Malaysian mobile phone number
• Residential address (for enhanced KYC or proof-of-address requests)

2.3 Financial Data

• Malaysian bank account details linked for withdrawal purposes
• E-wallet identifiers (Touch n Go eWallet, Boost, GrabPay) where used for transactions
• Transaction history including deposits, withdrawals, and bonus credits
• FPX and DuitNow reference numbers associated with payment transactions

2.4 Technical Data

• IP address and approximate geolocation
• Browser type, version, and device type
• Operating system
• Session identifiers and login timestamps
• Cookie data (see Section 5)

2.5 Gaming Activity Data

• Game play history, wager amounts, win/loss records
• Sports betting selections and settlement outcomes
• Bonus usage, free spin claims, and promotional participation history
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status)

2.6 Communications Data

• Records of live chat, email, and support ticket interactions with gempak99
• Survey responses and feedback submitted voluntarily

3. How We Collect Your Data

gempak99 collects personal data through the following means:

• Directly from you during registration, KYC submission, payment transactions, support interactions, and promotional participation
• Automatically through the use of cookies, server logs, and analytics tools when you interact with the gempak99 Platform
• From third parties including identity verification service providers, payment processors (e.g. FPX gateway operators), fraud prevention services, and our licensing authority's compliance databases where applicable

4. Purposes of Processing and Legal Basis

gempak99 processes personal data for the following purposes and on the following legal bases:

• Account registration and management — contractual necessity to provide the service
• KYC and age verification — legal obligation under our gaming licence and applicable AML regulations; also to enforce the 21+ age restriction applicable to gempak99
• Payment processing — contractual necessity; also required to comply with AML and counter-terrorism financing obligations
• Game provision and personalisation — contractual necessity and legitimate interest to improve the gempak99 player experience
• Responsible gaming tools — legal obligation and player protection; gempak99 is required to maintain records of self-exclusion and limit settings
• Fraud prevention and security — legitimate interest to protect players and the Platform from fraudulent activity
• Marketing communications — consent (which may be withdrawn at any time; see Section 10)
• Regulatory reporting — legal obligation to report to licensing and law enforcement authorities as required
• Platform analytics and improvement — legitimate interest in understanding how the Platform is used to enhance service quality

5. Cookies and Tracking Technologies

5.1 gempak99 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies used by gempak99 fall into the following categories:

• Strictly necessary cookies: Required for the Platform to function, including session management, login state, and security tokens. These cannot be disabled.
• Analytics cookies: Used to understand aggregated player behaviour on the Platform (e.g. which pages are visited most frequently). Data is anonymised where possible.
• Preference cookies: Used to remember your language preference, display settings, and similar personalisation choices.
• Marketing cookies: Used only with your consent to deliver relevant promotional content. You may withdraw consent via your account settings or browser settings at any time.

5.2 You can control non-essential cookies via your browser settings. Note that disabling strictly necessary cookies will impair or prevent access to the gempak99 Platform.

6. Data Sharing and Disclosure

gempak99 does not sell, rent, or trade personal data to third parties for commercial purposes. Personal data may be shared in the following circumstances:

• Payment processors and banking partners: FPX gateway operators, DuitNow infrastructure providers, and card scheme processors (Visa/Mastercard) receive the minimum data necessary to process transactions.
• Identity verification providers: Third-party KYC service providers receive identity document data for verification purposes under strict data processing agreements.
• Game software providers: Licensed game suppliers (e.g. Pragmatic Play, PG Soft) receive anonymised player session identifiers for game delivery and fairness auditing purposes. Full personal identity is not shared with game providers.
• Regulatory and law enforcement authorities: gempak99 is legally obligated to disclose certain data to its licensing authority, financial intelligence units, or law enforcement agencies upon valid legal request.
• Group companies and service providers: Hosting, analytics, and customer support service providers operating under binding confidentiality and data processing agreements that meet the standards required by applicable data protection law.

7. International Data Transfers

Some of gempak99's service providers and infrastructure are located outside Malaysia. Where personal data is transferred internationally, gempak99 ensures that appropriate safeguards are in place, including standard contractual clauses or equivalent protections, to ensure your data receives a level of protection consistent with Malaysian data protection standards.

8. Data Retention

8.1 gempak99 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, and accounting obligations.

8.2 Specific retention periods include:

• KYC and identity documents: minimum 5 years from account closure, as required by AML regulations
• Financial transaction records: minimum 7 years from the date of the transaction
• Gaming activity logs: 3 years from the date of activity, or longer if required by our licensing authority
• Support communications: 2 years from resolution of the relevant issue

8.3 After the applicable retention period expires, personal data is securely deleted or anonymised in a manner that prevents identification of the individual.

9. Your Data Rights

Subject to applicable law and gempak99's legal retention obligations, you have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data gempak99 holds about you
• Right of rectification: Request correction of inaccurate or incomplete personal data
• Right of erasure: Request deletion of your personal data where processing is no longer necessary or lawful (subject to retention obligations)
• Right to restrict processing: Request that gempak99 limits its use of your data in certain circumstances
• Right to data portability: Receive a structured, machine-readable copy of data you have provided to gempak99
• Right to object: Object to processing of your personal data for direct marketing or where processing is based on legitimate interest
• Right to withdraw consent: Where processing is based on your consent, withdraw that consent at any time without affecting the lawfulness of prior processing

To exercise any of these rights, please contact gempak99's data protection contact at [email protected]. gempak99 will respond to valid requests within 30 calendar days.

10. Marketing Communications

10.1 With your consent, gempak99 may send promotional emails and in-platform notifications about bonuses, new games, sportsbook events, and other offers relevant to Malaysian players.

10.2 You may opt out of marketing communications at any time by: (a) updating your communication preferences in your gempak99 account settings; (b) clicking the unsubscribe link in any marketing email; or (c) contacting support at [email protected]. Opt-out requests are processed within 5 business days.

10.3 Withdrawal of marketing consent does not affect your ability to receive service-related communications (e.g. account security alerts, withdrawal confirmations, KYC notifications), which are sent as part of the contractual service.

10.4 gempak99 will not send marketing communications to players who have self-excluded under the responsible gaming programme.

11. Minors

The gempak99 Platform is strictly intended for persons aged 21 years and above. gempak99 does not knowingly collect or process personal data from individuals under the age of 21. Where gempak99 becomes aware that a person under 21 has registered an account, the account will be immediately closed, all associated data will be handled in accordance with applicable retention obligations, and the incident may be reported to the relevant regulatory authority.

If you believe that an underage individual has submitted personal data to gempak99, please notify us immediately at [email protected].

12. Security Measures

gempak99 implements a layered technical and organisational security programme to protect your personal data, including:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and our servers
• Encrypted storage of sensitive data fields including identity document records and financial details
• Role-based access controls limiting staff access to personal data on a need-to-know basis
• Regular penetration testing and vulnerability assessments conducted by independent security specialists
• Multi-factor authentication requirements for all administrative systems
• Automated anomaly detection to identify and respond to unusual account access patterns

While gempak99 applies rigorous security controls, no system is immune to all risks. You are responsible for maintaining the security of your own account credentials. If you suspect your account has been compromised, contact gempak99 support immediately.

13. Third-Party Links

The gempak99 Platform does not contain links to external third-party websites for general browsing purposes. Where references to payment service providers or licensing authorities are made within the Platform, those external services operate under their own privacy policies and gempak99 is not responsible for their data practices. We encourage you to review the privacy policies of any third-party services you interact with in connection with your gempak99 account.

14. Changes to This Privacy Policy

gempak99 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or regulatory requirements. Material changes will be communicated to registered players via email or in-platform notification at least 14 days before they take effect. The "Last Updated" date at the top of this page will always reflect the most recent revision. Continued use of the gempak99 Platform after the effective date of an updated Policy constitutes your acceptance of the revised terms.

15. Contact and Complaints

For any privacy-related questions, requests to exercise your data rights, or complaints regarding gempak99's handling of your personal data, please contact:

Data Protection Contact — gempak99
Platform: gempak99.vu
Email: [email protected]
Support channel: 24/7 live chat available on the gempak99 Platform

If you are not satisfied with gempak99's response to a privacy complaint, you may have the right to escalate the matter to the relevant data protection authority in your jurisdiction or to the dispute resolution body designated by gempak99's licensing authority.