Privacy Policy Gempak9 – Personal Data Protection for Malaysian Players

Gempak9 (hereinafter referred to as "we", "gempak9", or "the platform") respects the privacy of every individual who uses our services. This Privacy Policy explains in detail how gempak9 collects, processes, uses, stores, and protects your personal data as a member or visitor of our platform at gempak9.ws.

This Privacy Policy applies to all users of the gempak9 platform, including registered members, prospective members in the process of registering, and general visitors to our website. By using the gempak9 platform, you confirm that you have read and understood this Privacy Policy.

Gempak9 operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). We take this responsibility seriously and are committed to ensuring your personal data is handled in a responsible, transparent, and secure manner.

Gempak9 collects your personal data only to the extent necessary to provide the best possible service and to meet relevant legal requirements. The following are the categories of data we may collect:

Gempak9 does not collect sensitive data such as health information, religious beliefs, political views, or biometric data unless required by applicable Malaysian law.

Gempak9 collects your personal data through various channels as you interact with our platform:

• Account Registration: When you complete the gempak9 registration form, you provide your identity and contact details directly to us.
• Identity Verification (KYC): Identity documents such as a copy of your MyKad are collected as part of the mandatory identity verification process.
• Financial Transactions: Payment information is collected when you make a deposit via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or FPX.
• Platform Usage: Technical and usage data are collected automatically via cookies, server logs, and similar tracking technologies when you use the gempak9 platform.
• Communications: When you contact gempak9 customer support via live chat or email, records of those communications are retained.
• Authorised Third Parties: In certain cases, we may receive information from authorised payment service providers or regulatory bodies.

Gempak9 uses your personal data solely for legitimate and reasonable purposes. We do not use your data beyond what is necessary to fulfil the following objectives:

• Account Management: Creating, verifying, and managing your gempak9 account, including the mandatory KYC process.
• Transaction Processing: Processing your deposits, withdrawals, and all financial transactions securely and accurately.
• Service Provision: Enabling you to access all games and features on the gempak9 platform, including Live Casino, slots, Sports Betting for Malaysia Super League and EPL, e-sports, and progressive jackpots.
• Fraud Detection: Monitoring and preventing fraudulent activity, money laundering, or platform abuse.
• Service Communications: Sending important notifications relating to your account, transactions, promotions, and platform updates.
• Responsible Gaming: Monitoring usage patterns to identify signs of problem gambling and provide the necessary support.
• Platform Improvements: Analysing aggregated usage data to improve the functionality, performance, and user experience of the gempak9 platform.
• Legal Compliance: Fulfilling legal and regulatory obligations applicable to gempak9's operations.

Gempak9 does not sell, rent or transfer your personal data to third parties for commercial purposes. However, there are limited circumstances in which we may need to share data with certain parties:

• Payment Service Providers: Transaction details are shared with payment providers such as FPX, Touch 'n Go eWallet, GrabPay, and DuitNow to process your deposits and withdrawals. These providers are bound by strict confidentiality agreements.
• Game Software Providers: Minimum required data may be shared with licensed game providers such as Pragmatic Play and Evolution Gaming for technical gaming purposes.
• Regulatory Body: Data is shared with Malaysian authorities when required by law, court order, or valid regulatory directive.
• Anti-Fraud Services: Technical information may be shared with third-party fraud detection systems to protect the security of the platform.

All third parties that receive data from gempak9 are required to sign a comprehensive data protection agreement and adhere to the security standards we set. They are not permitted to use your data for any purpose beyond the scope of services provided to gempak9.

Gempak9 employs multiple layers of technical and organisational security measures to protect your personal data from unauthorised access, loss, or disclosure:

• Data Encryption in Transit: All communications between your device and gempak9's servers are protected with TLS/SSL 256-bit encryption.
• Encryption of Stored Data: Sensitive data such as financial information is encrypted when stored in our databases.
• Access Controls: Only authorised gempak9 staff who require access to perform their permitted duties may access member data. A role-based access control (RBAC) system is in place.
• Continuous Monitoring: Our security systems monitor suspicious activity in real time, 24/7 throughout the year.
• Regular Security Audits: Penetration testing and independent security audits are conducted periodically to identify and address vulnerabilities.
• Two-Factor Authentication: 2FA is available for all member accounts to provide an additional layer of security.
• Staff Training: All gempak9 staff who handle personal data undergo regular data protection training.

While gempak9 takes all reasonable steps to protect your data, no system can guarantee 100% security in a digital environment. You also play an important role in safeguarding your account by using a strong password and keeping it confidential.

The gempak9 platform uses cookies and similar tracking technologies to enhance user experience and platform functionality. Cookies are small text files stored on your device when you visit our website.

You can manage or disable optional cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the gempak9 platform and your gaming experience.

As a gempak9 member and data subject under Malaysia's PDPA, you have the following rights regarding your personal data:

Gempak9 retains your personal data only for as long as necessary to fulfil the original purpose of collection or as required by Malaysian law:

• Active Account Data: For the entire duration that your gempak9 account remains active.
• Closed Account Data: Up to 7 years after account closure to comply with Malaysia's Anti-Money Laundering (AMLA) legal requirements.
• Financial Transaction Records: A minimum of 7 years as required under Malaysian financial legislation.
• Communication Logs: Up to 2 years from the date of last interaction.
• Technical & Log Data: Up to 90 days.

Once the retention period expires, data will be securely deleted or fully anonymised so it can no longer be linked to your identity.

Gempak9 reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. Changes take effect upon publication on the gempak9 website.

For significant changes, we will notify members via in-platform notifications or email to their registered address at least 14 days before the changes take effect. Continued use of the gempak9 platform following such notice will be considered acceptance of the updated Privacy Policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how gempak9 handles your personal data, please contact us at:

• Live Chat: Available 24/7 within the gempak9 platform — the fastest way to get a response
• Privacy Email: privacy@gempak9.ws (response within 14 business days)
• General Support Email: support@gempak9.ws