gembet88 Privacy Policy

1 Introduction & Scope

gembet88 ("gembet88", "we", "us", "our") is committed to protecting the privacy and personal data of all individuals who interact with the gembet88 platform. This Privacy Policy ("Policy") describes our practices with respect to the collection, use, storage, transfer, and deletion of personal data in connection with the gembet88 website (https://gembet88.win) and all related gaming and wagering services ("Services").

This Policy applies to: (a) registered account holders; (b) visitors to the gembet88 website who have not registered an account; and (c) individuals who contact gembet88 customer support. It applies to all personal data processed by gembet88 regardless of the device or method used to access the platform.

This Policy should be read in conjunction with our Terms & Conditions and Responsible Gaming Policy, which together govern your use of the gembet88 platform.

Malaysian users: Malaysia's Personal Data Protection Act 2010 (PDPA) governs the processing of personal data of Malaysian residents in the commercial context. While gembet88 operates under an offshore gaming licence, we are committed to applying data protection standards consistent with established international frameworks, including principles broadly aligned with the Malaysian PDPA.

2 Data Controller

For the purposes of this Privacy Policy, gembet88 acts as the data controller in respect of personal data collected through the gembet88 platform. As data controller, gembet88 determines the purposes and means of processing your personal data.

Where gembet88 engages third-party service providers (including game studios, payment processors, and analytics providers) who process personal data on our behalf, those parties act as data processors and are contractually bound to process your data only in accordance with our documented instructions and applicable data protection obligations.

Queries regarding gembet88's data controller responsibilities or this Privacy Policy should be directed to: [email protected]

3 Personal Data We Collect

gembet88 collects and processes the following categories of personal data:

We do not collect special category data (as defined under GDPR or equivalent frameworks) unless required for specific regulatory compliance purposes, in which case we will seek your explicit consent.

4 How We Collect Your Data

gembet88 collects personal data through the following means:

• Direct submission: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically when you access the platform, including via cookies, web beacons, server logs, and similar tracking technologies described in Section 8 of this Policy.
• Third-party sources: Identity verification and fraud prevention data obtained from licensed third-party identity verification providers as part of our KYC and AML compliance obligations.
• Payment processors: Transaction confirmation data provided by payment processors (including FPX operators and e-wallet providers such as Touch n Go and Boost) in connection with deposit and withdrawal processing.

5 Legal Basis for Processing

gembet88 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions, including account management, payment processing, game delivery, and customer support.
• Legal obligation: Processing required to comply with applicable laws and our gaming licence obligations, including KYC verification, anti-money laundering (AML) screening, and age verification.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where such interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where your explicit consent has been obtained. You may withdraw consent at any time by contacting our support team.

6 How We Use Your Data

gembet88 uses your personal data for the following purposes:

• Creating and managing your gembet88 account;
• Verifying your identity and age (21+ requirement) as mandated by our gaming licence;
• Processing deposits and withdrawals via Touch n Go eWallet, Boost, GrabPay, and FPX bank transfer;
• Detecting and preventing fraudulent activity, account abuse, and money laundering;
• Administering bonuses, promotions, and loyalty programmes;
• Providing customer support via live chat and email;
• Monitoring gameplay patterns for responsible gaming purposes, including application of deposit limits and identification of at-risk players;
• Complying with regulatory and licensing requirements, including audit obligations and reporting to competent authorities where legally required;
• Improving platform performance, user experience, and game content based on aggregated usage data;
• Sending transactional and service notifications (account activity, withdrawal confirmations, security alerts);
• Sending marketing communications regarding gembet88 promotions, subject to your consent preferences.

gembet88 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review, except where required for fraud screening purposes, in which case you have the right to request human review of any automated decision.

7 Data Sharing & Disclosure

7.1 Service Providers. gembet88 shares personal data with trusted third-party service providers who process data on our behalf under contractual data processing agreements. These include payment processors (e-wallet operators, FPX providers), identity verification providers, game studio partners, fraud prevention services, and IT infrastructure providers.

7.2 Gaming Studio Partners. To deliver gaming content from third-party studios (including Evolution Gaming, Pragmatic Play, PG Soft, and SA Gaming), certain technical and account identifiers are shared with the relevant studio to facilitate game session management. Game studios do not receive your full personal identity data.

7.3 Regulatory and Legal Disclosure. gembet88 may disclose your personal data to relevant regulatory bodies, law enforcement agencies, or licensing authorities where: (a) required by applicable law; (b) required under our gaming licence obligations; or (c) necessary to prevent or investigate suspected criminal activity including fraud or money laundering.

7.4 Business Transfers. In the event of a merger, acquisition, or sale of substantially all of gembet88's assets, personal data held by gembet88 may be transferred to the acquiring entity, subject to equivalent privacy protections being maintained.

7.5 No Sale of Data. gembet88 does not sell, rent, or trade your personal data to unaffiliated third parties for their independent marketing or commercial purposes.

8 Cookies & Tracking Technologies

The gembet88 platform uses cookies and similar tracking technologies to operate and improve the service. The categories of cookies in use are:

• Strictly Necessary Cookies: Required for core platform functionality including login session management, security token validation, and language preferences. Cannot be disabled without impairing platform use.
• Performance & Analytics Cookies: Collect aggregated, anonymised data about how users interact with the platform to help us improve page performance, navigation, and content. No personally identifiable data is collected by these cookies.
• Functional Cookies: Remember your preferences such as game display settings and notification configurations to provide a personalised experience.
• Marketing Cookies: Used, with your consent, to deliver relevant promotional content. These cookies may track your interactions with gembet88 communications. You may opt out of marketing cookies by adjusting your cookie preferences.

You can manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to log in and use the gembet88 platform.

9 Data Retention

gembet88 retains your personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention requirements:

• Account data and transaction records: Retained for a minimum of five (5) years following account closure, as required by our gaming licence and applicable anti-money laundering regulations.
• KYC verification documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant verification process.
• Communication records (live chat, email): Retained for a minimum of two (2) years for quality assurance and dispute resolution purposes.
• Technical and usage data: Retained for a maximum of thirteen (13) months from the date of collection, unless required for longer periods for security or compliance purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents recovery.

10 Data Security

gembet88 implements technical and organisational security measures appropriate to the sensitivity of the personal data processed, including:

• 256-bit SSL/TLS encryption on all data transmission between your device and gembet88 servers;
• Encrypted storage of sensitive data including payment method identifiers and KYC documents;
• One-way cryptographic hashing of account passwords — gembet88 staff cannot access your plaintext password;
• Access controls restricting access to personal data to staff with a legitimate operational need;
• Regular security audits and penetration testing as mandated by the gembet88 gaming licence;
• Two-factor authentication available to all account holders as an additional access control layer.

While we implement robust security measures, no internet-based transmission is entirely risk-free. In the event of a data security incident that is reasonably likely to result in significant harm to affected individuals, gembet88 will notify affected users and relevant authorities within the timeframes required by applicable law.

11 Your Rights

Subject to applicable law and our regulatory obligations, you have the following rights in relation to your personal data held by gembet88:

• Right of access: Request a copy of the personal data gembet88 holds about you.
• Right to rectification: Request correction of inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your personal data where there is no overriding legitimate ground or legal obligation requiring continued retention.
• Right to restriction: Request that gembet88 restricts the processing of your personal data in certain circumstances, for example while a rectification request is being resolved.
• Right to data portability: Request that your personal data be provided in a structured, machine-readable format for transfer to another data controller, where technically feasible.
• Right to object: Object to processing based on legitimate interests, including processing for direct marketing purposes.
• Right to withdraw consent: Withdraw any consent previously given for processing activities based on consent, without affecting the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, please contact the gembet88 support team via live chat or email. gembet88 will respond to all verified requests within thirty (30) days. Requests may be subject to identity verification before being actioned. Certain rights may be limited where gembet88 has overriding legal obligations — for example, we cannot delete transaction records required for AML compliance within the mandatory retention period.

12 International Data Transfers

As gembet88 operates under an offshore gaming licence and utilises internationally distributed infrastructure and service providers, your personal data may be transferred to and processed in countries outside Malaysia. Where such transfers occur, gembet88 takes steps to ensure that appropriate safeguards are in place to protect your data, including contractual data transfer agreements with third-party processors.

By using the gembet88 platform and submitting personal data, you acknowledge and consent to the transfer of your data to jurisdictions outside Malaysia as described in this Policy.

13 Children's Privacy

The gembet88 platform is strictly for adults aged 21 and above. We do not knowingly collect personal data from persons under the age of 21. If we become aware that personal data has been submitted by an individual under 21, we will take immediate steps to delete that data and close the associated account. Age verification is a mandatory component of the gembet88 KYC process for all accounts.

If you believe that a minor has accessed the gembet88 platform or submitted personal data, please contact our support team immediately so that appropriate action can be taken.

14 Amendments to This Policy

gembet88 reserves the right to amend this Privacy Policy at any time. The revised Policy will be posted on this page with an updated "Last Updated" date. Where changes are material, we will endeavour to notify registered account holders via email or in-platform notification prior to the changes taking effect.

Your continued use of the gembet88 platform following the posting of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Policy, you should cease using the platform and may request account closure.

15 Contact Us

For all privacy-related queries, data subject access requests, or concerns regarding gembet88's handling of your personal data, please contact us via:

• Live Chat: Available 24/7 on the gembet88 platform — recommended for fastest response.
• Email: [email protected] (plain text — not a clickable link)

We aim to acknowledge all privacy-related queries within five (5) business days and to provide a substantive response within thirty (30) days. For complex requests, we may request additional information to verify your identity before processing your request.

This Privacy Policy was last reviewed and updated on 1 June 2026. All previous versions of this Policy are superseded by this document.