Section 01
Introduction and Scope
This Privacy Policy applies to all personal information processed by Gempak999 in connection with the website, gaming platform, live casino, sports betting services and associated payment functions. It covers personal data submitted during account registration, identity verification, deposits via Malaysian payment channels, betting and withdrawal activity, customer support interactions and ordinary website browsing.
Gempak999 services are directed at adult users in Malaysia aged 21 and above. If you access Gempak999 from outside Malaysia, this policy still applies to any personal data we process about you. Where local laws impose additional obligations regarding data handling, we will seek to meet those requirements to the extent we are aware of them.
This policy should be read alongside the Gempak999 Terms & Conditions. Words and phrases defined in those terms carry the same meaning here where context allows.
Section 02
Definitions
For the purposes of this Privacy Policy:
- "Personal data" means any information that identifies or can reasonably be used to identify a natural person, including name, identity document number, email address, device identifier and payment account reference.
- "Processing" means any operation performed on personal data, including collection, storage, use, transfer, deletion and anonymisation.
- "Data controller" means Gempak999, the entity that determines the purposes and means of processing personal data collected through this platform.
- "Third-party service provider" means a business engaged by Gempak999 to perform specific functions, such as payment processing, fraud detection or platform infrastructure.
- "KYC" means Know Your Customer verification, the identity and document checks required to confirm a player's age, identity and payment ownership.
Section 03
Data We Collect
Gempak999 collects personal data through several channels. The categories and specific data points collected depend on how you interact with the platform.
3.1 Registration Information
When you create a Gempak999 account we collect your chosen username, full legal name, date of birth, email address, contact number and residential country. This information is required to open and manage your account.
3.2 Identity Verification Documents
KYC verification may require submission of a valid Malaysian MyKad, driving licence or passport, a proof of address document issued within the previous three months, and a selfie photograph holding the identity document. These documents are used solely for age and identity confirmation and are handled with strict access controls.
3.3 Payment and Transaction Data
Records of deposits and withdrawals, including the method used (such as DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, USDT TRC20 or BTC), transaction reference, amount in MYR and timestamp, are recorded as part of normal account operation and financial compliance obligations.
3.4 Technical and Usage Data
When you access Gempak999 we automatically collect certain technical data including your IP address, browser type, operating system, device model, session duration and pages viewed. This information is used for security monitoring, fraud prevention and platform performance review.
No sensitive social profiling: Gempak999 does not collect or process data relating to racial origin, religious belief, political opinion or health condition for profiling purposes. Identity documents are reviewed solely for age and identity confirmation.
3.5 Communications
When you contact Gempak999 support, the content of messages, attached files and session records may be retained to resolve the query, maintain a record of the interaction and improve service quality.
Section 04
How We Use Your Data
Gempak999 uses personal data for the following purposes:
| Purpose |
Data Used |
Notes |
| Account creation and management |
Registration details, contact information |
Necessary to provide the service |
| Identity and age verification |
KYC documents, selfie photograph |
Required before withdrawal processing |
| Payment processing |
Transaction records, payment method references |
Processed via secure payment providers |
| Fraud and AML monitoring |
IP address, transaction patterns, device data |
Necessary for legal compliance |
| Platform support |
Account details, support communications |
To resolve player queries |
| Responsible gambling tools |
Wager history, session data, deposit records |
To enable limits and self-exclusion |
| Platform security and stability |
Technical data, login records |
Monitoring for unauthorised access |
| Service communications |
Email address, contact number |
For account notices; not for unsolicited marketing |
Section 05
Legal Basis for Processing
Gempak999 processes personal data on the following legal grounds, which may apply individually or in combination depending on the specific activity:
- Contractual necessity: Processing required to open and operate a Gempak999 account, execute transactions and provide the services described in the Terms & Conditions.
- Legal obligation: Processing required to meet anti-money laundering, counter-terrorism financing, age verification and record-keeping obligations under applicable law.
- Legitimate interests: Processing for platform security, fraud prevention, dispute resolution and service improvement, where those interests are not overridden by your rights.
- Consent: Where you have provided clear consent for a specific processing activity. Consent can generally be withdrawn by contacting Gempak999, although withdrawal may affect access to certain features.
Section 06
Data Sharing and Disclosure
Gempak999 does not sell, rent or trade personal data to third-party advertisers, data brokers or unrelated commercial entities. Personal data may be shared in the following limited circumstances:
- Payment providers: Information necessary to process deposits and withdrawals via FPX, DuitNow, e-wallets and banking channels is shared with the relevant payment processor under contractual data protection obligations.
- Identity verification services: KYC documents may be processed by third-party verification providers engaged by Gempak999 for compliance purposes. These providers may not use the data for their own purposes.
- Platform technology providers: Infrastructure, security and gaming system providers may access technical data necessary to deliver or maintain their contracted service.
- Legal and regulatory authorities: Gempak999 may disclose personal data where required by a valid legal process, regulatory direction, court order or to protect against fraud and criminal activity.
- Business transfer: In the event of a merger, acquisition or material restructuring, personal data may be transferred to the relevant successor entity, subject to equivalent privacy protections.
Gempak999 requires contractual data protection commitments from all third-party service providers that handle personal data. However, Gempak999 cannot be responsible for independent privacy practices of entities outside its direct control.
Section 07
Cookies and Similar Technologies
Gempak999 uses cookies, session tokens and similar browser-stored data to maintain login sessions, remember language and display preferences and protect against cross-site request forgery. These are essential to normal platform operation.
Analytics cookies may be used to understand aggregated usage patterns, page load performance and error frequency. Analytical data does not identify individual players by name. Gempak999 does not use third-party behavioural advertising cookies that track your activity across external websites.
Most browsers allow you to block or delete cookies through settings. Blocking essential session cookies may prevent you from logging in or completing transactions on Gempak999.
Section 08
International Data Transfers
Gempak999 may store or process personal data on servers located outside Malaysia where its platform infrastructure or service providers operate. Where data is transferred internationally, Gempak999 takes reasonable steps to ensure equivalent data protection standards apply, including through contractual safeguards with the relevant providers.
By creating a Gempak999 account and using the platform, you acknowledge that personal data may be processed in locations outside your home jurisdiction as described in this policy.
Section 09
Data Retention
Gempak999 retains personal data for the duration that a player account remains active and for a further period as required by applicable legal and compliance obligations. Financial transaction records and KYC documentation are typically retained for a minimum of five years after account closure in accordance with standard anti-money laundering record-keeping requirements.
Technical log data may be retained for shorter periods determined by security and operational needs. Where retention is no longer necessary and no legal requirement applies, personal data is securely deleted or irreversibly anonymised.
A request to close your Gempak999 account does not automatically result in the immediate deletion of all data, because retention obligations under compliance law continue to apply after account closure.
Section 10
Your Rights
Depending on the laws applicable in your jurisdiction, you may have the following rights in respect of personal data held by Gempak999:
- Right of access: Request confirmation of whether Gempak999 holds personal data about you and obtain a copy of that data.
- Right to rectification: Ask Gempak999 to correct inaccurate or incomplete personal data associated with your account.
- Right to erasure: Request deletion of personal data where it is no longer needed for the purpose it was collected, subject to legal retention requirements.
- Right to restriction: Ask Gempak999 to limit processing of your personal data in certain circumstances, such as where accuracy is disputed.
- Right to portability: Where technically feasible and legally applicable, receive personal data in a structured, commonly used format.
- Right to object: Object to processing based on legitimate interests where your particular situation warrants it.
- Right to withdraw consent: Where processing relies on consent, withdraw that consent at any time through a written request to support.
To exercise any of these rights, contact Gempak999 support with your account username and a clear description of your request. We may request identity confirmation before processing a data rights request.
Section 11
Children, Minors and Age Restrictions
Gempak999 is strictly for players aged 21 and above. We do not knowingly collect, store or process personal data from anyone under the age of 21. Age verification during KYC is a required step for all accounts before withdrawal processing is enabled.
If Gempak999 becomes aware that personal data has been collected from a person under 21, that account will be suspended, any relevant funds held pending investigation and personal data deleted to the extent permitted by applicable compliance obligations. If you believe an underage person has created a Gempak999 account, contact support immediately.
Section 12
Security Measures
Gempak999 applies technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, modification or disclosure. These include encryption of data in transit using TLS, encryption at rest for sensitive records, role-based access controls for internal systems and regular security monitoring.
Players should also take responsibility for protecting their own account by using a strong and unique password, enabling available account security features and not sharing login credentials with others. Using a personal and secure device rather than a shared or public computer reduces exposure to credential compromise.
No security system is entirely immune to breach. In the event of a material data security incident that affects player personal data, Gempak999 will take reasonable steps to contain the incident and, where required by applicable law, provide notification to affected individuals.
Section 13
Changes to This Privacy Policy
Gempak999 may revise this Privacy Policy to reflect changes in platform features, payment methods, compliance requirements or applicable law. The effective date displayed at the top of this page confirms the current version.
Material changes may be communicated through a notice displayed after login or via the email address associated with your account. Continued use of Gempak999 following the effective date of a revised policy constitutes acceptance of the changes.
We encourage players to review this Privacy Policy periodically. If a change materially affects how Gempak999 processes your personal data in a way you do not accept, you should stop using the platform and contact support to arrange account closure.
Section 14
Contact Us
For questions about this Privacy Policy, to exercise a data rights request or to report a data protection concern, contact Gempak999 through the channels below. When raising a privacy matter, please provide your account username and a clear description of your query to allow us to respond efficiently.