Privacy Policy Gempak66 – Our Commitment to Protecting Malaysian Players' Personal Data

1Introduction & Scope of This Policy

Gempak66 takes the personal data protection of every member and visitor seriously. This Privacy Policy clearly explains how we collect, use, store, and protect your personal information when you register and use gempak66's services.

This policy is drawn up in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards. It applies to all data processing activities conducted through gempak66.app, our official mobile app (Android and iOS), and all other official communication channels including live chat support and email.

By using the gempak66 platform, you agree to the collection and use of your information as described in this Privacy Policy. If you do not agree, please stop using the platform and contact us with a data deletion request.

2Personal Data We Collect

Gempak66 collects your personal data through several channels — directly from you during registration, automatically during platform use, and in certain situations from trusted third-party sources for identity verification purposes.

3How We Use Your Personal Data

Every piece of data collected by gempak66 has a clear and legitimate purpose. We do not use your data for anything unrelated to the services you have joined.

• Account Management: Creating, verifying, and maintaining your account, including the KYC process and identity verification to ensure the security of all members.
• Transaction Processing: Processing deposits, withdrawals, and all financial transactions securely and accurately. Your financial data is used solely for this purpose.
• Platform Security: Detecting and preventing fraud, money laundering, bonus abuse, and suspicious activity through automated monitoring and manual reviews.
• Legal Compliance: Fulfilling legal obligations including AML (Anti-Money Laundering), KYC requirements, and reporting to authorities as required by law.
• Service Improvement: Analysing aggregated usage patterns to improve the user experience, platform performance, and game selection.
• Service Communications: Sending transaction notifications, account security updates, and other important information related to your service.
• Promotions & Offers: Sending relevant promotional information and bonus offers. You may opt out of marketing communications at any time via your account settings.
• Customer support: Resolving enquiries, complaints, and support requests more effectively using previous interaction records.

4Data Sharing with Third Parties

Gempak66 does not sell, rent, or trade your personal data to any third party for marketing purposes. However, there are specific situations where we need to share your data with trusted parties to enable our services to function:

• Payment Providers: Payment gateways and banks that handle your deposit and withdrawal transactions. They receive only the minimum data required to process the relevant transaction.
• Game Software Providers: Internationally licensed third-party gaming platforms require session data to deliver games. This data is limited to technical information only.
• KYC Service Providers: Identity verification companies used to verify your documents during the KYC process. They are bound by strict confidentiality agreements.
• Statutory Authorities: Government agencies, regulatory bodies, or law enforcement authorities when required by Malaysian law or court order.
• Professional Advisors: Accountants, lawyers, and auditors bound by strict professional confidentiality obligations.

All third parties who receive your data are required to comply with an equivalent or stricter privacy policy and are only permitted to use that data for the specified purposes.

5Data Storage & Security Measures

Gempak66 uses secure server infrastructure with the highest-level data encryption to ensure your information is always protected from unauthorized access.

• Data Encryption in Transit: All communications between your device and gempak66's servers are protected by 256-bit SSL/TLS encryption, meaning your data cannot be intercepted in transit.
• Data Encryption at Rest: Sensitive data such as financial information and identity documents are stored in encrypted format on our servers.
• Access Controls: Only authorized personnel with a specific need may access member personal data. All access is logged and audited regularly.
• Retention period: Active account data is retained for the duration of the account plus 5 years after closure to meet legal and audit requirements. Technical log data is retained for 12 months.
• Data Centres: Data is stored in data centers compliant with ISO 27001 security standards, with robust backup and disaster recovery systems in place.
• 24/7 Monitoring: The security monitoring system operates around the clock to detect and respond to any cyber threats in real time.

6Cookies & Tracking Technologies

Gempak66 uses cookies and similar tracking technologies to keep the platform running smoothly and to deliver a better experience for you.

• Essential Cookies: Required for core platform functionality such as maintaining login sessions and security settings. These cookies cannot be disabled.
• Performance Cookies: Collecting anonymous information about how you use the platform to help us improve our services.
• Functional Cookies: Saving your preferences such as interface language, preferred betting limits, and other display settings.
• Analytics Cookies: Aggregated usage data (without personal information) to understand usage patterns and improve the overall user experience.

You can control and disable certain cookies through your web browser settings. Please note that disabling essential cookies may affect platform functionality. For more information on managing cookies in your browser, refer to your browser's help guide.

7Your Rights as a Data Subject

Under Malaysia's PDPA and gempak66's privacy policy, you have the following rights regarding your personal data. We are committed to facilitating these rights promptly and without hassle.

To exercise any of the above rights, contact the gempak66 support team via in-platform live chat or email at [email protected]. We will process your request within 21 business days.

8Children's Data Protection

Gempak66 strictly does not accept registrations from individuals under 18 years of age. Our platform is not designed for children and we do not knowingly collect personal data from them.

If we find that personal data belonging to a minor has been collected without proper verification, we will take immediate action to delete that data and close the account in question. Parents or guardians who become aware that their child has registered on our platform are encouraged to contact us right away.

9Changes to This Privacy Policy

Gempak66 reserves the right to update this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or service improvements. All material changes will be communicated to members via:

• In-platform notification at least 14 days before changes take effect.
• Email to your registered address for significant changes to how your data is used.
• Update the "Last Updated" date at the top of this page.

Continued use of the gempak66 platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. It is your responsibility to review this page periodically.

10Contact Us About Privacy

If you have any questions, concerns or requests regarding this Privacy Policy or how we handle your personal data, the gempak66 privacy team is ready to assist.

• Live Chat: The fastest way – available 24/7 directly on the gempak66 platform.
• Email: [email protected] (response within 1–2 business days).
• Response Time: General privacy enquiries are resolved within 3 business days. Formal data subject rights requests are resolved within 21 business days.