gempak44 Privacy Policy

1. Data Controller

gempak44, accessible at gempak44.club, is the data controller responsible for the personal data of players and visitors processed in connection with the gempak44 platform and its associated services. References to "gempak44", "we", "us", or "our" in this Privacy Policy refer to the gempak44 operating entity in its capacity as data controller.

This Privacy Policy applies to all personal data collected through the gempak44 website, mobile interface, account registration process, customer support interactions, and any other touchpoint through which you provide information to gempak44.

2. Personal Data We Collect

gempak44 collects the following categories of personal data in connection with the operation of the Platform and the provision of its services to Malaysian players:

gempak44 does not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, or health data, except where gaming behaviour data is processed for responsible gaming purposes as described below.

3. How We Collect Your Data

gempak44 collects personal data through the following means:

• Direct submission: Data you provide when registering an Account, completing KYC, making deposits or withdrawals, contacting support, or responding to promotions.
• Automated collection: Technical data collected automatically through cookies, log files, and session tracking technologies when you access and use the Platform.
• Third-party sources: Identity verification data from KYC providers; fraud screening data from risk management partners; payment confirmation data from payment processors including Touch n Go eWallet, Boost, Maybank, CIMB, and Public Bank.
• Publicly available sources: Where necessary for fraud prevention or compliance purposes, gempak44 may cross-reference publicly available information against data provided by Players.

4. Legal Basis for Processing

gempak44 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions — including account management, payment processing, game provision, and customer support.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, and gaming authority obligations.
• Legitimate interests: Processing necessary for fraud prevention, security monitoring, platform improvement, and responsible gaming monitoring, where these interests are not overridden by your rights and freedoms.
• Consent: Processing for direct marketing communications, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. How We Use Your Personal Data

5.1 Account Management

gempak44 uses your identity, contact, and financial data to create and maintain your Account, verify your eligibility to use the Platform, process your deposits and withdrawals in MYR, manage your bonus entitlements, and provide access to all Platform features following successful gempak44 login.

5.2 Security and Fraud Prevention

Technical data, identity data, and financial data are used to monitor for suspicious activity, detect and prevent fraudulent transactions, identify and block unauthorised access attempts, and comply with anti-money laundering obligations. gempak44 employs automated risk scoring systems as part of this process.

5.3 Responsible Gaming

Gaming data and session data are used to monitor Player behaviour for indicators of problem gambling. gempak44 uses this data to trigger responsible gaming interventions including session time reminders and proactive outreach where concerning patterns are detected. This processing is in the legitimate interests of Player welfare.

5.4 Customer Support

Communications data and Account data are used to respond to support enquiries, resolve disputes, and maintain records of interactions for quality assurance purposes. Support records are retained for the period specified in Section 8.

5.5 Legal and Regulatory Compliance

gempak44 processes and retains personal data to the extent required by applicable gaming authority regulations, AML legislation, and any order or request from a competent authority. Such processing takes precedence over data minimisation principles where legally required.

5.6 Platform Improvement

Aggregated and anonymised technical and gaming data is used to analyse Platform performance, identify areas for improvement, and inform decisions about new features and game additions. This processing does not involve the use of individually identifiable data.

6. Sharing Your Personal Data

gempak44 does not sell your personal data to third parties. We may share your data with the following categories of recipient where necessary:

• KYC and identity verification providers: To verify your identity and age in compliance with gaming authority requirements.
• Payment processors: Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, and other payment service providers, to process deposits and withdrawals.
• Game providers: Your username and session data may be shared with game software providers (such as Pragmatic Play, Microgaming, NetEnt) to the extent necessary to deliver the gaming experience. These providers do not receive financial or identity data beyond what is technically required.
• Fraud prevention and security services: Risk management and fraud detection partners who assist in protecting the Platform and its players.
• Legal and regulatory authorities: Gaming regulators, law enforcement agencies, financial intelligence units, and courts where disclosure is required by law or court order.
• Professional advisors: Legal, accounting, and audit professionals subject to strict confidentiality obligations.

All third-party recipients are required to process your data in accordance with applicable data protection laws and to implement appropriate security measures. gempak44 does not permit third parties to use your data for their own independent marketing purposes.

7. Cookies & Tracking Technologies

gempak44 uses cookies and similar tracking technologies to operate and improve the Platform. The following categories of cookies are used:

• Strictly necessary cookies: Required for the Platform to function, including maintaining your login session, remembering your account preferences, and enabling secure transactions. These cannot be disabled without impairing Platform functionality.
• Functional cookies: Used to remember your preferences such as language settings and display options to improve your experience across sessions.
• Analytics cookies: Used to collect aggregated data about how players navigate the Platform, which pages are most visited, and where technical errors occur. This data is used to improve Platform performance and is not used to personally identify individual players.
• Security cookies: Used to detect and prevent fraudulent activity, including session hijacking and cross-site request forgery attacks.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the gempak44 login and Account functions.

8. Data Retention

gempak44 retains personal data for as long as necessary to fulfil the purposes outlined in this Privacy Policy and to comply with applicable legal and regulatory obligations. The following general retention periods apply:

• Account data and transaction records: Retained for a minimum of five (5) years following Account closure, in compliance with AML record-keeping requirements.
• KYC documentation: Retained for a minimum of five (5) years following KYC completion or Account closure, whichever is later.
• Support communications: Retained for three (3) years following resolution of the relevant matter.
• Marketing consent records: Retained until consent is withdrawn and for one (1) year thereafter as evidence of the consent interaction.
• Technical and session logs: Retained for up to twelve (12) months for security and fraud prevention purposes.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised. Where anonymisation is applied, the resulting data may be retained indefinitely for analytical purposes.

9. Data Security

gempak44 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS encryption is applied to all data transmitted between your device and the gempak44 Platform.
• Sensitive data including passwords and financial details is stored in encrypted form using industry-standard hashing and encryption algorithms.
• Access to personal data within gempak44 is restricted to authorised personnel on a strict need-to-know basis.
• Two-factor authentication (2FA) is available and encouraged for all player Accounts.
• Regular security assessments and penetration testing are conducted to identify and remediate vulnerabilities.
• KYC documentation is stored in an isolated, access-controlled document management system separate from the main Platform database.

10. Your Data Rights

Subject to applicable law, you have the following rights in respect of your personal data held by gempak44:

• Right of Access: You may request a copy of the personal data gempak44 holds about you, together with information about how it is processed.
• Right to Rectification: You may request that inaccurate or incomplete personal data held by gempak44 be corrected or completed.
• Right to Erasure: You may request that gempak44 delete your personal data, subject to our legal retention obligations. We cannot delete data we are legally required to retain.
• Right to Restriction: You may request that gempak44 restrict processing of your personal data in certain circumstances, for example while the accuracy of data is being contested.
• Right to Object: You may object to processing based on legitimate interests, including profiling for responsible gaming purposes, where you have grounds relating to your particular situation.
• Right to Data Portability: Where processing is based on consent or contract and carried out by automated means, you may request your data in a structured, machine-readable format.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

To exercise any of these rights, contact gempak44 support with your registered details and a description of your request. gempak44 will respond within 30 days. We may require identity verification before processing a rights request.

11. Marketing Communications

With your consent, gempak44 may send you promotional communications about new games, bonuses, sportsbook offers, and other gempak44 promotions relevant to Malaysian players. These may be sent via email or SMS to your registered contact details.

You may opt out of marketing communications at any time by:

• Clicking the unsubscribe link in any marketing email from gempak44.
• Updating your communication preferences in Account Settings → Notifications.
• Contacting gempak44 support with a written request to unsubscribe.

Opting out of marketing communications does not affect transactional communications relating to your Account — including deposit confirmations, withdrawal notifications, security alerts, and KYC requests. These communications are sent on the basis of contractual necessity and cannot be disabled while your Account is active.

12. Children and Minors

The gempak44 Platform is strictly intended for adults. gempak44 does not knowingly collect personal data from any person under the age of 21. 21+ Only

If gempak44 becomes aware that personal data has been collected from a person under 21 — whether through registration misrepresentation or any other means — the Account will be immediately suspended, all balances forfeited, and all personal data relating to the minor deleted to the extent permitted by applicable law.

gempak44 implements age verification as part of the KYC process to reduce the risk of underage access. If you believe a minor has registered an Account on gempak44, please contact our support team immediately.

13. Third-Party Services and Links

The gempak44 Platform integrates with third-party services including game providers, payment processors, and analytics tools. Each of these third parties operates under their own privacy policies and data protection practices. gempak44 is not responsible for the privacy practices of third-party services, and this Privacy Policy does not apply to data processed solely by those parties.

gempak44 selects third-party service providers that meet appropriate data security and privacy standards, and contractual data processing agreements are in place with all key data processors.

14. Changes to This Privacy Policy

gempak44 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. Material changes will be communicated to Players via email to the registered address and/or via a prominent notice on the Platform prior to the change taking effect.

The "Last Updated" date at the top of this page indicates when the Privacy Policy was most recently revised. Continued use of the gempak44 Platform following the effective date of any revision constitutes acceptance of the updated Privacy Policy.

15. Contact & Data Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or gempak44's handling of your personal data, please contact the gempak44 Data & Privacy team:

• Email: [email protected]
• Live Chat: Available 24/7 via the gempak44 Platform
• Subject Line: Please include "Privacy Request" in your subject line for prioritised routing
• Response Time: gempak44 aims to acknowledge all privacy enquiries within 72 hours and to provide a substantive response within 30 days

If you believe your data rights have not been adequately addressed by gempak44, you may have the right to lodge a complaint with the applicable data protection authority in your jurisdiction.