Privacy Policy

Introduction

This Privacy Policy ("Policy") describes how gembet8888 ("Company", "we", "us", "our") collects, processes, stores, discloses, and protects the personal data of individuals ("you", "User", "Member") who access or use the gembet8888 website at https://gembet8888.cam and all associated services, features, and platforms (collectively, the "Platform").

gembet8888 is Malaysia's premier online sports betting and casino platform, serving members across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and beyond. We are committed to handling your personal data with integrity, transparency, and in compliance with applicable data protection legislation, including the Personal Data Protection Act 2010 (PDPA) of Malaysia.

This Policy should be read alongside our Terms & Conditions, which govern your use of the Platform. In the event of any conflict between this Policy and the Terms & Conditions in respect of data protection matters, this Policy shall prevail.

Definitions

The following terms carry the meanings assigned to them below throughout this Policy:

• "Personal Data" — Any information that relates to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial information, and online identifiers.
• "Processing" — Any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" — gembet8888, the entity that determines the purposes and means of processing Personal Data.
• "Data Processor" — Any third-party entity that processes Personal Data on behalf of gembet8888 under a contractual arrangement.
• "Sensitive Personal Data" — A subset of Personal Data warranting heightened protection, including financial account details, health information, and government-issued identification numbers.
• "Cookies" — Small text files placed on your device by the Platform to facilitate functionality, analytics, and user experience improvements.
• "KYC Data" — Identity verification documentation collected pursuant to Know Your Customer requirements, including copies of identity documents and proof of address.
• "PDPA" — The Personal Data Protection Act 2010 of Malaysia, together with any subsidiary legislation, guidelines, and codes of practice issued thereunder.

Personal Data We Collect

gembet8888 collects personal data necessary to provide our Services, comply with legal obligations, and deliver a safe and personalised experience. The categories of data we collect include:

3.1 Registration & Identity Data

• Full legal name as it appears on your government-issued identity document;
• Date of birth (to verify that you are aged 21 or above);
• Malaysian MyKad number or passport number;
• Email address and mobile phone number;
• Residential address, including city (e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya).

3.2 Financial & Transaction Data

• Bank account details, e-wallet identifiers (Touch 'n Go eWallet, Boost, GrabPay), and payment card information;
• Deposit and withdrawal history, transaction amounts, and payment method records;
• Cryptocurrency wallet addresses where applicable;
• Source of funds information collected during enhanced due diligence.

3.3 Account Activity Data

• Betting history, wagering patterns, game selections, and stakes placed;
• Bonus usage, promotional claims, and VIP programme activity;
• Responsible gambling tool usage, including deposit limits set and self-exclusion requests;
• Customer support interaction records and complaint history.

3.4 Technical & Device Data

• IP address, device type, operating system, and browser type;
• Session timestamps, pages visited, and features accessed;
• Geolocation data (city-level) derived from your IP address;
• Cookies and similar tracking technologies as described in Section 9.

How We Collect Your Data

We collect personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make deposits or withdrawals, contact our support team, or respond to promotions;
• Automatically — through cookies, web beacons, and server logs as you interact with the Platform;
• From third parties — including identity verification providers, payment processors (e.g., Maybank, CIMB, FPX network operators, DuitNow), fraud detection services, and data analytics partners;
• From public sources — including publicly available sanction lists, politically exposed persons (PEP) databases, and adverse media sources consulted as part of our anti-money laundering compliance obligations.

Data Processing: Purposes & Legal Bases

We process your personal data only for specified, explicit, and legitimate purposes. The table below sets out the primary purposes for which we process your data and the corresponding legal basis for each:

Data Sharing & Disclosure

gembet8888 does not sell, rent, or trade your personal data to any third party for that party's own marketing purposes. We may, however, share your personal data with the following categories of recipients where necessary and proportionate:

6.1 Service Providers & Data Processors

We engage trusted third-party service providers to assist in operating the Platform. These include payment processors (e.g., FPX operators, DuitNow network providers, Touch 'n Go, Boost, Visa/Mastercard acquiring banks, cryptocurrency exchange processors), KYC and identity verification providers, IT infrastructure and hosting providers, fraud detection and risk management vendors, and customer support platform operators. All such providers are bound by data processing agreements that restrict their use of your personal data to the services they provide to us.

6.2 Regulatory & Law Enforcement Authorities

We may be required to disclose your personal data to relevant regulatory bodies, law enforcement agencies, or courts of competent jurisdiction where required to do so by law, court order, or binding regulatory instruction. Such disclosures will be made only to the extent required and in a manner consistent with our obligations under applicable data protection law.

6.3 Business Transfers

In the event of a merger, acquisition, reorganisation, or sale of all or substantially all of our assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will provide notice of such a transfer and the new entity will be required to honour this Policy or provide you with a materially equivalent level of protection.

6.4 Aggregated and Anonymised Data

We may share aggregated, anonymised, or de-identified data — which cannot reasonably be used to identify any individual — with analytics partners, industry bodies, or for research purposes. This does not constitute sharing of personal data.

Data Retention

We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal retention requirements, and to resolve any disputes or enforce our agreements. The following general retention periods apply:

• Account and registration data — retained for the duration of your membership plus a minimum of seven (7) years after account closure, in accordance with anti-money laundering retention requirements;
• KYC and identity verification documents — retained for a minimum of five (5) years from the date of collection or account closure, whichever is later;
• Transaction and financial records — retained for a minimum of seven (7) years from the date of each transaction;
• Customer support records — retained for three (3) years from the date of the last interaction;
• Marketing consent records — retained for three (3) years from the date of the last marketing communication sent to you, or until consent is withdrawn and confirmed.

Where personal data is no longer required, we will securely delete or anonymise it in a manner that prevents reconstruction of the original data.

Security Measures

gembet8888 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers;
• Encrypted storage of sensitive personal and financial data at rest;
• Strict role-based access controls ensuring that only authorised personnel with a legitimate business need can access personal data;
• Multi-factor authentication for internal administrative systems;
• Regular vulnerability assessments, penetration testing, and security audits conducted by qualified third-party security professionals;
• Incident response procedures to manage, contain, and report data security breaches in accordance with applicable regulatory requirements.

Despite our best efforts, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security, but we are committed to promptly addressing any incidents that may arise and notifying affected users in accordance with our legal obligations.

Cookies & Tracking Technologies

The gembet8888 Platform uses cookies and similar tracking technologies to enhance your browsing experience, remember your preferences, and gather analytical data about Platform usage. The following categories of cookies are used:

9.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function correctly. They enable core features such as user authentication, session management, and security enforcement. These cookies cannot be disabled without significantly impairing Platform functionality.

9.2 Performance & Analytics Cookies

These cookies collect anonymised information about how visitors use the Platform — such as which pages are visited most frequently and how users navigate between sections. This data helps us improve the layout, content, and performance of the Platform. No personally identifiable information is collected through these cookies.

9.3 Functionality Cookies

These cookies allow the Platform to remember your preferences and settings, such as your preferred language, display settings, and sports categories. They provide a more personalised experience during your visit.

9.4 Managing Cookies

You can manage, restrict, or delete cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality and performance of the Platform. Detailed instructions for managing cookies are available through your browser's help documentation.

Your Rights as a Data Subject

Under the Personal Data Protection Act 2010 (PDPA) and applicable data protection principles, you have the following rights in relation to your personal data held by gembet8888:

• Right of Access — You may request a copy of the personal data we hold about you, together with information about how it is being processed.
• Right of Correction — You may request that we correct any inaccurate or incomplete personal data held about you. We aim to process correction requests within 21 days of receipt.
• Right to Withdraw Consent — Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to Limit Processing — In certain circumstances, you may request that we restrict or limit the processing of your personal data, for example while we are verifying the accuracy of disputed data.
• Right to Erasure — You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations.
• Right to Object — You may object to the processing of your personal data for direct marketing purposes. Such objections will be honoured without question.

To exercise any of the above rights, please contact our Data Protection team via live chat or by emailing us at the address set out in Section 14. We will acknowledge your request within five (5) business days and aim to complete the response within 21 days, subject to the complexity of the request.

Protection of Minors

The gembet8888 Platform is strictly intended for use by individuals aged 21 years and above. We do not knowingly collect, store, or process personal data from persons under the age of 21. Age verification is a mandatory step in our account registration and KYC processes.

If we become aware that personal data has been collected from a person under the age of 21 without appropriate consent, we will take immediate steps to delete that data from our records and close the relevant account. All funds associated with an underage account will be handled in accordance with our Terms & Conditions and applicable law.

If you believe that we have inadvertently collected data from a minor, please contact us immediately at the details provided in Section 14 so that we can take appropriate corrective action.

International Data Transfers

In the course of operating the Platform and providing our Services, your personal data may be transferred to, processed in, or stored in countries outside of Malaysia. This may occur where our service providers, data processors, or infrastructure providers operate from overseas locations.

Where such international transfers occur, gembet8888 ensures that appropriate safeguards are in place to protect the confidentiality and integrity of your personal data at a standard at least equivalent to that provided under the PDPA. Such safeguards may include contractual data processing agreements incorporating standard data protection clauses, or transfers to jurisdictions that have been determined to provide an adequate level of data protection.

By using the Platform and accepting this Policy, you acknowledge and consent to the transfer of your personal data to other jurisdictions for the purposes described in this Policy.

Amendments to This Policy

gembet8888 reserves the right to update, amend, or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the nature of our Services. When material changes are made, we will post the updated Policy on this page with a revised "Last Updated" date and, where appropriate, provide notification through the Platform or to your registered email address.

Your continued use of the Platform following the publication of an updated Privacy Policy constitutes your acceptance of the amended terms. We encourage you to review this Policy periodically to remain informed of how we are protecting your personal data.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact the gembet8888 Data Protection team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the Platform
• Email: [email protected] (plain text — not a clickable link)
• Response Time: Under 5 minutes via live chat; within 24 hours by email

For formal data subject access requests, correction requests, or erasure requests, please use the subject line "Data Subject Request" in your communication to ensure it is directed to the appropriate team.

If you are not satisfied with our response to a privacy concern, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.