Privacy & Data Protection

Privacy Policy Gempak99
Your Information, Our Responsibility

At Gempak99, we understand that your personal data is a trust that must be safeguarded with the utmost responsibility. This document clearly explains how we collect, use, store, and protect your information in accordance with Malaysian law.

Compliant with Malaysia's Personal Data Protection Act (PDPA) 2010
🔒
SSL 256-bit
Full data encryption
🏛️
PDPA 2010
Legal compliance
🚫
No Data Sales
Data is not sold to third parties
Full Rights
Request access / delete your data

Our Commitment To Your Privacy

Six core pillars that prove Gempak99 is serious about protecting every member's personal information

🔐

High-Grade Data Encryption

All data transmitted between your device and Gempak99 servers is encrypted using SSL 256-bit technology. This means sensitive information such as bank account numbers and passwords cannot be intercepted by any party during transmission.

🏛️

Full PDPA 2010 Compliance

Gempak99 operates in compliance with Malaysia's Personal Data Protection Act (PDPA) 2010. All data collection, storage, and usage processes are carried out in accordance with the principles set out in that Act without exception.

🎯

Purpose-Driven Data Collection

We only collect data that is strictly necessary to operate our services. No excess data is collected solely for third-party marketing purposes. Every piece of information you provide is used exclusively to enhance your experience at gempak99.

🚫

No Sale of Data to Third Parties

Gempak99 has never and will never sell, rent, or transfer your personal data to any third party for commercial gain. Your data belongs to you – we are only its responsible custodian.

👁️

Full Transparency

We are committed to being transparent about what data we collect, how it is used, and how long it is retained. This Privacy Policy is written in plain language so every Malaysian member clearly understands their rights.

⚙️

Control Is in Your Hands

You have the full right to access, correct, download, or request deletion of your personal data at any time. Contact our team and we will process your request within the timeframe required by law.

01 Introduction

Welcome to the Gempak99 Privacy Policy page. As an online entertainment platform operator in Malaysia, we care deeply about the privacy of every individual who interacts with our services. This document has been prepared to provide a clear and transparent overview of our data handling practices.

By registering an account or using any Gempak99 service, you consent to the collection and use of your personal data as described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our platform.

Note: This Privacy Policy should be read together with Terms & Conditions Gempak99. Both documents together form the complete agreement between you and our platform.

02 Data We Collect

Gempak99 collects various types of information from our members to ensure a smooth, secure, and high-quality service. The following are the categories of data we collect:

A. Registration & Identity Information

  • Full name as stated on your identification document
  • National identification number (MyKad) or passport for KYC purposes
  • Date of birth for age verification
  • Active mobile phone number
  • A valid email address
  • Username and encrypted password

B. Financial Information

  • Bank account number for deposit and withdrawal purposes
  • Registered bank name and e-wallet account number
  • Deposit and withdrawal transaction history
  • Betting records and gaming activity

C. Technical Information

  • Device IP address recorded at login and during platform usage
  • Device type, operating system, and web browser version
  • Access log data and usage timestamps
  • Cookie data and session data
Data Category Primary Purpose Legal Basis
Identity Information KYC verification, fraud prevention Legal obligation
Financial Information Transaction processing, audit Contract performance
Technical Data Platform security, analytics Legitimate interest
Usage Data Service improvement, internal marketing User Consent

03 How We Use Your Data

Every piece of data collected by Gempak99 is used for specific and legitimate purposes. We do not use your data for any purpose other than those stated below:

  • Account Management: Verifies your identity, processes registration, and securely maintains your account
  • Transaction Processing: Processes all deposits and withdrawals accurately and promptly
  • Platform Security: Detects and prevents fraud, money laundering, and other illegal activities
  • Customer Support: Enables our team to assist you more effectively when you contact us
  • Legal Compliance: Fulfils the reporting and audit obligations required under Malaysian law
  • Service Improvement: Analyses usage patterns to improve the player experience at gempak99
  • Communications: Sends transaction notifications, platform updates, and relevant promotions (if you have consented)
Marketing Consent: You may withdraw your consent to receive marketing communications at any time through your account settings or by contacting the Gempak99 support team.

04 Data Sharing with Third Parties

Gempak99 does not sell or transfer your personal data to third parties for commercial purposes. However, in certain limited circumstances, we may share your data with the following parties:

  • Payment Service Providers: Banking institutions and e-wallet providers to securely process your financial transactions
  • Identity Verification Providers: A licensed third-party KYC service to verify your identity documents
  • Statutory Authorities: Government agencies, law enforcement bodies, or courts when required by law
  • Technical Partners: Cloud infrastructure and cybersecurity providers bound by strict confidentiality agreements

All third parties we work with are bound by data protection agreements that require them to handle your information to a standard of security no less than that of Gempak99.

05 Data Security

Protecting your personal data from unauthorised access, loss, or misuse is gempak99's highest priority. We implement multiple layers of security to ensure comprehensive protection:

  • 256-bit SSL encryption for all data transmitted over the network
  • Encryption of sensitive data in the database using AES-256 algorithm
  • Two-factor authentication (2FA) is available and encouraged for all member accounts
  • 24/7 security monitoring by our dedicated cybersecurity team
  • Periodic security audits conducted by independent third-party audit firms
  • Strict access controls – only authorised personnel may access sensitive data
  • Regular data backups to secure, separate server locations

While we take all reasonable precautions, no digital security system can be guaranteed to be 100% secure. In the event of a data security incident affecting your information, we will notify you and the relevant authorities within the timeframe prescribed by law.

06 Data Retention Period

Gempak99 retains your personal data only for as long as necessary to fulfil the original purpose of collection or as required by Malaysian law. In general:

  • Active account data is retained for the duration of your membership with Gempak99
  • Financial transaction records are retained for a minimum of seven (7) years in accordance with tax and audit legal requirements
  • Communications and customer support logs are retained for three (3) years
  • Technical data and access logs are retained for twelve (12) months
  • After an account is closed, personal data that is no longer required will be deleted or anonymised
Exclusion: In cases involving fraud investigations or legal proceedings, relevant data may be retained for a longer period until the matter is fully resolved.

07 Your Rights Under PDPA 2010

As a data subject under Malaysia's Personal Data Protection Act (PDPA) 2010, you have the following rights, which you may exercise at any time:

Right of Access

You have the right to know what personal data we hold about you and to obtain a copy of it.

Right to Rectification

You may request the correction of any inaccurate or incomplete personal data held in our system.

Right to Erasure

In certain circumstances, you may request the deletion of your personal data from the Gempak99 system.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time.

Right to Data Portability

You may request your data in a machine-readable format for the purpose of transferring it to another platform.

Right to Restrict Processing

You may request a restriction on the processing of your data in certain situations during an investigation or dispute.

To exercise any of the rights above, please contact our data protection team. We will process your request within 21 business days as required under PDPA 2010.

08 Cookies & Tracking Technologies

Gempak99 uses cookies and similar tracking technologies to enhance your browsing experience on our platform. Cookies are small text files stored on your device when you visit our website.

  • Essential Cookies: Required for core platform functions such as login and session security – cannot be disabled
  • Performance Cookies: Collects information on how you use the platform to help us improve our services
  • Functional Cookies: Saves your preferences such as language and display settings for ease of use
  • Analytics Cookies: Helps us understand aggregated and anonymised traffic patterns and platform usage

You can manage or disable non-essential cookies through your web browser settings. Please note that disabling certain cookies may affect some features on the Gempak99 platform.

09 KYC & Identity Verification

As a responsible platform, Gempak99 enforces a rigorous Know Your Customer (KYC) process to comply with Anti-Money Laundering (AML) and Counter Financing of Terrorism (CFT) regulations in Malaysia.

  • KYC documents collected include a photo of your identity card (MyKad), bank statements, and recent utility bills
  • All KYC documents are stored in a secure system with access restricted to authorised personnel only
  • KYC documents are not shared with any third party except statutory authorities with legal jurisdiction
  • The KYC verification process is typically completed within one to three (1–3) business days

Gempak99 will never ask you to submit identity documents via social media or third-party messaging applications. All KYC document submissions must be made through the official channels within the platform only.

10 Children's Privacy

Gempak99 is an exclusive platform for adults aged 18 and above. We do not knowingly collect any personal information from individuals under the age of 18.

If we discover that personal data belonging to a child has been collected without our knowledge, we will take immediate steps to delete that data and close the relevant account. Parents or guardians who become aware that their child has registered on our platform are encouraged to contact us immediately.

11 Changes to This Privacy Policy

Gempak99 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. Any changes will take effect immediately upon publication of the updated version on this page.

For significant and material changes, we will endeavour to notify you via in-platform notifications or your registered email before the changes take effect. Continued use of the Gempak99 platform after any amendments constitutes your acceptance of the updated policy.

Recommendation: We encourage you to review this Privacy Policy page periodically to stay informed about how we protect your information. The "updated" date at the top indicates when the latest revision was made.

12 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how Gempak99 handles your personal data, our team is available to assist you 24 hours a day, 7 days a week.

  • Contact our support team via live chat within the platform for an immediate response
  • Visit the page FAQ us for answers to frequently asked questions about privacy
  • For formal complaints relating to PDPA, you may also contact the Department of Personal Data Protection (JPDP) Malaysia

We are committed to addressing every privacy-related inquiry within three (3) business days. Your satisfaction and trust are our top priority at gempak99.

🛡️

Your Data Is Safe. Join Gempak99 with Confidence

With a transparent privacy policy and high-standard data protection, you can enjoy all Gempak99 games and services without any worry. Register now and experience entertainment that is safe and trustworthy.

256-bit SSL Encryption PDPA 2010 Compliant No Data Sales
Bahasa Melayu