Privacy Policy Gempak99 – User Personal Data Protection

Gempak99 ("we", "Platform", or "Gempak99") respects the privacy of every user who uses our services. This Privacy Policy explains in detail how we collect, process, store, and protect your personal information when you register, access, or interact with the Gempak99 platform through our website or mobile app.

We wrote this document in plain language because we believe every user has the right to know exactly what happens to their information — not have it buried in lengthy, confusing legal jargon.

Gempak99 collects your personal information through various means as you interact with our platform. The following are the main categories of information collected:

We only collect information that is strictly necessary for the stated purposes. We do not collect sensitive data categories unrelated to the delivery of platform services.

The personal information we collect is used solely for legitimate purposes directly related to the delivery of gempak99's services, as follows:

• Account management: Creating, maintaining, and securing your account, including a safe login process and identity verification.
• Transaction processing: Processing all deposits, withdrawals, and financial transactions in your account accurately and securely.
• KYC verification: Meeting legal requirements to verify user identity in order to prevent money laundering and fraud.
• Service improvement: Analysing usage patterns on an aggregate (not individual) basis to improve the user experience and develop new features.
• Customer support: Resolving complaints, responding to enquiries, and providing the technical assistance you need.
• Service communications: Sending important notifications related to your account, security, and service updates.
• Marketing communications: Sending promotional offers and news — only if you have consented to receive them.

Gempak99 does not sell, rent, or trade users' personal data to any party for commercial purposes. However, in certain limited situations, we may share some of your information with the following parties:

• Payment providers: Information required to process your financial transactions is shared with vetted and recognised payment providers, solely for the purpose of completing those transactions.
• Technology service providers: Companies providing cloud computing, cybersecurity, and platform analytics services — all subject to strict confidentiality agreements.
• Legal authorities: When required by law, court order, or direction from a legitimate regulatory authority. We only disclose the minimum necessary data.
• Identity verification providers: Third-party KYC services are used to verify user identity documents in order to meet regulatory requirements.

All third parties that receive gempak99 user data are contractually bound to protect that data to a security standard no less stringent than our own.

Gempak99 continuously invests in data security infrastructure to ensure your personal information remains protected at all times. The security measures we implement include:

• 256-bit SSL encryption for all data communications between users and servers.
• Encryption of sensitive data stored in the database — passwords, banking information, and KYC documents are never stored in plain text.
• Role-based access control — only authorised staff with a legitimate need may access user data.
• 24/7 security monitoring by gempak99's cybersecurity team to detect and respond to any threats in real time.
• Regular penetration testing by independent security experts to identify vulnerabilities before they can be exploited.
• Encrypted data backups stored across multiple locations for disaster recovery purposes.

Gempak99 retains users' personal data for as long as necessary to fulfil the purpose for which it was collected, or to comply with applicable legal requirements.

• Active account data: Retained for the duration the account remains active, plus any additional period required by law.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysia's anti-money laundering legal requirements.
• KYC documents: Retained for the duration of the active account and 5 years after account closure.
• Technical logs: Retained for 12 months for troubleshooting and security audit purposes.
• Communication records: Retained for 2 years for dispute resolution and service quality improvement purposes.

Once the specified retention period has expired, data will be securely deleted using methods that ensure it cannot be recovered.

Gempak99 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. The following are the types of cookies used:

• Essential cookies: Required for core platform functions such as login verification and session security. Cannot be disabled.
• Performance cookies: Collecting information on how users interact with the platform to help us identify and fix issues.
• Functional cookies: Saving your preferences such as language and display settings to deliver a more personalised experience.
• Analytics cookies: Used to understand aggregate usage patterns for product improvement purposes.

You can manage cookie settings through your web browser. However, disabling essential cookies may affect platform functionality.

Under applicable data protection laws, you have the following rights regarding your personal data held by Gempak99:

To exercise any of the above rights, contact the gempak99 support team through the available channels in your account. We will process your request within 30 business days.

Gempak99 is a platform restricted to users aged 18 and above. We do not knowingly collect or process personal information from individuals under the age of 18.

If we discover that a person under 18 has registered using false information, the account will be closed immediately and all related information will be deleted from our system. We encourage parents to monitor their children's internet usage and notify us if they become aware of such a situation.

Gempak99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or service improvements. The "Last updated" date at the top of this page will always reflect the latest version.

For material and significant amendments, we will notify users via in-platform notifications or email at least 14 days before the changes take effect. Continued use of the platform after the amendments take effect will be considered acceptance of the revised policy.

If you have any questions, concerns, or complaints regarding how gempak99 handles your personal data, we encourage you to reach out to us directly through the customer support channels available in your account.

Gempak99's data privacy team will take your enquiry seriously and respond within 5 business days. For more complex cases, we will provide an estimated timeframe upon receiving your enquiry.

You may also refer to the FAQ us for answers to general questions about privacy and data security at gempak99, or visit the Responsible Gaming for information on responsible gaming practices.