Gempak44 Privacy Policy — How We Handle Your Personal Information

1 Definitions

Throughout this Privacy Policy, the following defined terms apply consistently:

• "Personal Data" means any information relating to an identified or identifiable individual, including name, identification number, contact details, financial account information, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, alteration, and deletion.
• "Controller" refers to Gempak44 as the entity that determines the purposes and means of processing Personal Data in connection with the services.
• "Player" / "you" / "your" refers to the registered account holder or any individual whose Personal Data Gempak44 processes.
• "Services" means all casino games, live dealer products, sports betting markets, promotions, payment tools, and support features available through Gempak44.
• "Third-Party Processor" means an entity engaged by Gempak44 under a data processing agreement to carry out specified Processing activities.

2 Personal data we collect

2.1 Registration and account information

When you create a Gempak44 account, we collect your full name, date of birth, Malaysian identification number or passport number, residential address, email address, and chosen account credentials. This data is required to establish your account, verify your identity, and ensure eligibility.

2.2 Identity verification documents

For Know Your Customer compliance and payment security, Gempak44 may request a copy of your MyKad, passport, utility bill, or bank statement. Uploaded documents are processed for verification and stored in accordance with Section 6 of this policy.

2.3 Payment and transaction data

Gempak44 processes details of deposits, withdrawals, and account balances in MYR. This includes the payment method used — which may be Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, BTC, or USDT — the transaction reference, amount, timestamp, and outcome. Full payment credentials such as bank login passwords are not collected or stored by Gempak44.

2.4 Usage, behavioural, and technical data

When you use Gempak44, we automatically collect device type, operating system, browser version, IP address, session timestamps, pages visited, game rounds played, bet values, sports markets selected, and in-app navigation paths. This data helps us maintain service stability, personalise the experience, and identify unusual account activity.

2.5 Communications and support records

When you contact Gempak44 through live chat, WhatsApp, or email, the content of those exchanges, your contact details, and the resolution outcome are retained for quality assurance, dispute handling, and regulatory purposes.

3 Legal basis and purposes of processing

Gempak44 processes Personal Data on the following lawful grounds:

• Contractual necessity: account creation, payment processing, game delivery, withdrawal fulfilment, and support resolution.
• Legal obligation: anti-money laundering checks, age verification, licensing compliance, fraud investigation, and mandatory record retention.
• Legitimate interests: platform security, fraud prevention, responsible gambling monitoring, service improvement, and business continuity.
• Consent: marketing communications and non-essential analytics cookies, where the Player has specifically opted in.

Gempak44 does not use Personal Data for purposes materially different from those stated above without providing notice and, where required, seeking fresh consent.

4 Cookies and tracking technologies

Gempak44 uses cookies and similar tracking tools to maintain login sessions, remember player preferences, measure page performance, and support responsible gambling controls. Cookies may be categorised as follows:

• Strictly necessary cookies: Required for core functions such as secure login, session persistence, and account balance display. These cannot be disabled without impairing the service.
• Functional cookies: Retain preferences such as language setting, display mode, and sports betting market filters.
• Analytics cookies: Collect aggregated data about how Gempak44 pages are used to guide improvements. Where consent is required, analytics cookies are not activated until the Player has agreed.
• Responsible gambling cookies: Support session time tracking, reality check prompts, and deposit limit enforcement.

Players may manage or delete cookies through their browser or device settings. Disabling certain cookies may affect account functionality. Gempak44 does not use cross-site tracking cookies for third-party advertising.

5 Sharing and disclosure of personal data

Gempak44 does not sell or rent Personal Data. Disclosure to third parties occurs only in the following circumstances:

• Payment processors and e-wallet providers: Data necessary to execute and verify transactions, including DuitNow, FPX, and supported e-wallet services, is shared with the relevant payment partner under a data processing agreement.
• Identity and fraud verification services: KYC providers and document authentication services may receive identification data to verify age, identity, and source of funds.
• Game and platform technology providers: Game studios and infrastructure providers receive only the data technically required to deliver the relevant game session.
• Regulatory and legal authorities: Gempak44 will disclose Personal Data to competent authorities when legally required, including for anti-money laundering investigations and licensing audits.
• Professional advisers: Legal counsel, auditors, and insurers may receive Personal Data under binding confidentiality obligations for the specific purpose of their engagement.

All Third-Party Processors are contractually required to implement appropriate technical and organisational safeguards and to process data only within the scope of documented instructions from Gempak44.

6 Data retention

Gempak44 retains Personal Data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal, licensing, anti-money laundering, or audit obligations. Indicative retention categories include:

• Account and identity records: Retained for the duration of the account relationship and for a minimum period following closure as required by licensing rules.
• Transaction records: Retained in accordance with anti-money laundering and financial record-keeping obligations.
• Support communications: Retained for a period sufficient to resolve disputes and meet complaint-handling standards.
• Responsible gambling records: Self-exclusion decisions and protective limit records are retained for the period necessary to prevent circumvention and to audit compliance.

When Personal Data is no longer required, it is deleted or anonymised securely. Anonymised aggregate data may be retained for statistical and service-improvement purposes indefinitely.

7 Security measures

Gempak44 implements layered technical and organisational security measures to protect Personal Data from unauthorised access, alteration, disclosure, or destruction. These measures include:

• TLS/SSL encryption for all data transmitted between the Player's device and Gempak44 servers.
• Encrypted storage for sensitive data fields including identification numbers and payment references.
• Role-based access controls limiting internal system access to authorised personnel with a documented need.
• Regular security reviews and vulnerability assessments of platform infrastructure and third-party integrations.
• Incident response procedures to identify, contain, and communicate data security events without undue delay.

No method of electronic transmission or storage offers absolute security. Players are encouraged to use strong, unique passwords, enable available two-factor authentication, and inform Gempak44 promptly of any suspected account compromise.

8 User rights

Subject to applicable law and licensing requirements, Players hold the following rights with respect to their Personal Data held by Gempak44:

• Right of access: Request a copy of the Personal Data Gempak44 holds about you and the purposes for which it is processed.
• Right to rectification: Request correction of inaccurate or incomplete Personal Data. Account details may also be updated through the account settings where that function is available.
• Right to erasure: Request deletion of Personal Data where it is no longer necessary for the purpose collected, subject to legal retention obligations that may prevent full erasure.
• Right to restriction: Request that processing be limited while accuracy is disputed or an objection is under review.
• Right to object: Object to processing based on legitimate interests, including profiling, where your specific circumstances justify the objection.
• Right to data portability: Request Personal Data provided by you in a structured, commonly used format where technically feasible.
• Right to withdraw consent: Where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, contact Gempak44 support with your account username, the specific right you wish to exercise, and sufficient detail to allow the request to be verified and fulfilled. Gempak44 will respond within a reasonable period consistent with applicable obligations.

9 Minors and age protection

Gempak44 is strictly for persons aged 21 and above. We do not knowingly collect or process Personal Data from individuals under the age of 21. Age verification is applied at registration and may be reinforced at subsequent points including before the first withdrawal. If Gempak44 identifies that an account has been registered by a person below the minimum age, the account will be suspended, funds will be handled according to the applicable requirements, and the matter may be referred to relevant authorities where appropriate.

If you believe that Gempak44 has inadvertently collected data relating to a person below the age of 21, please contact support immediately at the email address set out in Section 11.

10 Changes to this Privacy Policy

Gempak44 may update this Privacy Policy to reflect changes in data protection law, licensing requirements, operational practices, or platform features. The current effective date is displayed at the top of this page. Where a change is material, Gempak44 will make reasonable efforts to inform active account holders before the revised policy takes effect. Continued use of Gempak44 after the stated effective date constitutes acceptance of the updated terms. If you do not accept the changes, you should stop using Gempak44 and may request account closure.

11 Contact us

For questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact the Gempak44 support team. Support is available around the clock in English, Bahasa Melayu, and Chinese.

Contact email (plain text — not a clickable link): [email protected]

Please include your Gempak44 account username, the nature of your query, and any relevant transaction or session references to help us assist you efficiently. Do not include your account password or one-time security codes in any correspondence.

More information on responsible gambling tools and player protection is available on the Responsible Gambling page.