GEMPAK99 Privacy Policy

1. Information We Collect

Different interactions create different data. Here’s what we typically hold for an active Malaysian player account.

Account Information

• Username and mobile number
• Password (stored in encrypted form)
• Bank account details for withdrawals
• Identity documents when KYC verification is required

Your password never sits in plain text on our servers. We can’t read it back to you — if you forget it, you reset through the official flow on gempak99.my or the mobile app. Don’t share OTP codes or reset links with anyone claiming to be “GEMPAK99 admin” on WhatsApp. Real support won’t ask for your password.

Transaction Data

• Deposit and withdrawal records
• Bet history and gaming activity
• Bonus and promotion participation

Bet history covers slots, live casino, fishing, and sports — timestamps, stakes, outcomes, and wallet movements. We keep this for dispute resolution, bonus wagering verification, and regulatory record-keeping.

Technical Data

• IP address and device type
• Browser and app version
• Login timestamps and session logs
• Cookies and similar technologies for site functionality

Technical logs help us spot fraud — same account logging in from KL and Eastern Europe within five minutes triggers a flag. They also help debug issues like the ones covered in our disconnect policy when a round didn’t sync properly.

Communications

• Live chat transcripts
• Support tickets and correspondence

Chat logs protect both sides. If you said you wanted self-exclusion on Tuesday and logged in Wednesday asking why you’re blocked, we can verify what was agreed.

2. How We Use Your Information

• Create and manage your account
• Process deposits, withdrawals, and bets
• Verify identity and prevent fraud
• Apply bonuses and track wagering requirements
• Provide customer support
• Send service notifications and promotional offers (you may opt out of marketing)
• Comply with legal and regulatory obligations
• Improve platform security and performance

Service notifications — deposit confirmations, withdrawal status, security alerts — aren’t marketing. You’ll still get those even if you opt out of promo SMS. Marketing covers lucky draw reminders, new promotion blasts, and referral nudges. Unsubscribe links and support requests both work for opting out of promos.

3. Legal Basis for Processing

We process data to perform our contract with you (account and gaming services), comply with legal duties (anti-fraud, age verification), and pursue legitimate interests (security, service improvement) where those don’t override your rights.

“Contract” means we need your phone number to create an account and your bank details to pay you — basic stuff. “Legal duty” covers anti-money-laundering checks and responding to valid law enforcement requests. “Legitimate interest” covers things like analysing crash logs to fix a buggy game lobby — always balanced against your privacy rights.

4. Data Sharing

We don’t sell your personal data. We may share information with:

• Payment processors to complete transactions
• Game providers for bet settlement and technical support
• Identity verification services during KYC
• Law enforcement when legally required
• Service providers under strict confidentiality agreements (hosting, analytics, support tools)

Game providers see bet data relevant to their titles — not your full bank statement. Payment processors see what’s needed to move RM between your bank and your wallet. Every third party we use is bound by confidentiality and data protection terms. We don’t hand your IC scan to random advertisers.

5. Data Security

GEMPAK99 uses encryption, access controls, and monitoring to protect your data. No online system is 100% secure — protect your password and use official gempak99.my links only.

Staff access to personal data is limited to people who need it for their job — support resolving your withdrawal, compliance reviewing a flagged account. We train teams on handling documents safely and logging out of admin panels. You do your part: strong password, don’t install sketchy APKs from Telegram, log out on shared devices.

6. Data Retention

We keep account and transaction records as long as your account is active and for a period afterward as required by law, dispute resolution, and anti-money-laundering rules. Marketing preferences are honoured on request.

Closed accounts don’t vanish overnight from every backup tape — legal retention windows apply. After those periods, data is deleted or anonymised where we no longer need it. If you want specifics on your account, submit a request through contact us.

7. Cookies

Cookies help the site remember your login session and preferences. You can disable cookies in your browser, but some features may not work properly.

Session cookies keep you logged in while you browse from slots to sports. Preference cookies remember language or display settings. We don’t use cookies to track you across unrelated websites. Clearing cookies logs you out — annoying but sometimes fixes a stuck lobby.

8. Your Rights

Depending on applicable law, you may request:

• Access to personal data we hold about you
• Correction of inaccurate information
• Deletion where legally permitted
• Restriction of certain processing
• Opt-out of marketing communications

Submit requests through contact us. We may need to verify your identity before releasing data.

We can’t always delete everything on demand — transaction records tied to AML rules may need to stay for years even after account closure. We’ll explain what we can and can’t do when you ask.

9. Children’s Privacy

GEMPAK99 does not knowingly collect data from anyone under 18. Accounts found to belong to minors are closed.

Parents and guardians: if you suspect a minor registered using your details, contact support immediately. See our responsible gaming page for underage gambling prevention tips.

10. Third-Party Links

Our site may link to external pages (e.g. game providers, Telegram). Their privacy practices are their own — read their policies before sharing data there.

When you launch a game from the GEMPAK99 lobby, you’re interacting with the provider’s servers for gameplay. Your account and wallet stay with us; the game round runs on their infrastructure. Both sides handle data under their respective policies.

11. International Transfers

Data may be processed on servers outside Malaysia with appropriate safeguards where required.

Hosting and game providers often operate regionally across Southeast Asia or globally. We use contractual safeguards and industry-standard security so your data stays protected regardless of which data centre handles a given request.

12. Policy Updates

Changes appear on this page with a new “last updated” date. Significant changes may be notified via email or on-site banner.

Material updates — new data categories, new sharing partners, changed retention — get flagged. Continued use after an update means you accept the revised policy. If you disagree, withdraw cleared funds and close your account.

13. Contact

Privacy questions: contact us via live chat. Say “privacy request” in your first message so it routes correctly.

Data controller — registered office: