Official Document – Malaysia PDPA

Gempak 99 Privacy Policy – Malaysian Player Data Protection

Your privacy is not just a priority – it is our responsibility. Find out exactly how Gempak 99 collects, uses, and protects every piece of personal information you entrust to us.

Last Updated: 1 January 2026  |  Complying with the Personal Data Protection Act 2010 (Malaysia PDPA)

Gempak 99's Privacy Commitment

Six core pillars that ensure the protection of your personal data on our platform

256-bit SSL Encryption

All data transmitted between your device and the Gempak 99 is protected by 256-bit SSL encryption — the same security standard used by Malaysia's leading banks.

Secure Data Storage

Your personal data is stored on servers protected by multi-layered firewalls, automated intrusion detection, and strict access controls. Only authorised personnel are permitted to access it.

Full Control in Your Hands

You have the full right to access, correct, or request the deletion of your personal data at any time. Requests are processed within 14 working days.

No Data Selling

Gempak 99 has never sold, and will never sell, your personal data to third parties for marketing purposes or any other commercial use without your explicit consent.

Malaysia PDPA Compliance

Privacy Policy Gempak 99 is established and updated in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection standards.

Transparent Cookie Management

You can manage your cookie preferences at any time through your browser settings. We clearly explain the types of cookies used and their purposes.

Key Summary

This Privacy Policy describes how Gempak 99 ("we", "platform") collects, uses, discloses, and protects your personal information ("personal data") when you use our services at gempak99.cash. We are committed to ensuring your privacy is fully protected in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

1

Introduction & Scope of This Privacy Policy

Gempak 99 takes its responsibility to protect every user's privacy on our platform seriously. We understand that your trust is our most valuable asset, and we are committed to managing your personal data with full integrity and transparency.

This Privacy Policy applies to all users of the Gempak 99, including website visitors, prospective members in the process of registering, active registered members, and former members whose accounts have been closed. It covers all your interactions with us via the website gempak99.cash, the gempak 99 mobile app, email communications and customer support, as well as our official social media channels.

By using any part of the Gempak 99, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy. If you do not agree, please discontinue use of our services and contact us to request deletion of your data.

2

Types of Personal Data We Collect

Gempak 99 only collects personal data that is strictly necessary to provide you with a secure, fair, and high-quality service. The following are the categories of data we collect:

Data Category Specific Information Requirement
Personal Identity Full name, MyKad number, date of birth, gender, nationality Mandatory
Contact Information Email address, mobile phone number, residential address Mandatory
Financial Data Bank account number, e-wallet numbers (TNG, GrabPay, Boost, ShopeePay, DuitNow), transaction history Mandatory
Technical Data IP address, device type, operating system, browser, screen resolution Automatic
Behavioural Data Game history, betting patterns, game preferences, session duration Automatic
Communications Customer service conversation records, feedback, complaints Where applicable
Sensitive Data

Gempak 99 does not collect sensitive data such as your medical information, religious beliefs, or sexual orientation. Should you voluntarily disclose such information during a customer service session, it will be handled with complete confidentiality and will not be stored in your permanent records.

3

How We Collect Your Personal Data

Gempak 99 collects your personal data through the following transparent and responsible methods:

  • Account registration: When you complete the registration form at gempak99.cashplatform, you are providing your identity and contact information directly to us.
  • Financial transactions: Each time you make a deposit via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX (Maybank2u / CIMB Clicks), we record the transaction details required for processing and compliance.
  • Platform usage: Our system automatically records betting activity, website navigation, and in-app interactions for security and service improvement purposes.
  • Identity verification (KYC): When you submit verification documents such as a copy of your MyKad or bank statement, we retain those documents in accordance with legal requirements.
  • Customer support: Communication records via live chat, email, or phone are retained for reference and service quality improvement purposes.
  • Cookies and tracking technologies: Your browser automatically transmits certain technical data — collected via cookies and similar technologies — whenever you visit our website.
4

How Your Personal Data Is Used

Gempak 99 uses your personal data solely for legitimate purposes that are clearly stated below. We will not use your data for any other purpose without obtaining your consent first:

  • Account management: Create, verify, and maintain your account on the platform Gempak 99 securely.
  • Transaction processing: Processing your deposits and withdrawals accurately and securely via local Malaysian payment methods.
  • Identity verification (KYC/AML): Complies with Malaysian legal requirements on customer identity verification and anti-money laundering.
  • Security and fraud prevention: Monitoring account activity to detect and prevent fraud, bot usage, duplicate accounts, and other suspicious activities.
  • Service improvement: Analysing usage patterns to enhance the gaming experience, platform speed, and service quality Gempak 99 as a whole.
  • Marketing communications: Sending information about promotions, bonuses, and the latest offers — only to users who have consented to receive such communications.
  • Customer Support: Providing efficient and effective assistance when you reach out to our support team.
  • Legal compliance: Fulfil all legal and regulatory obligations applicable to the operation of the platform Gempak 99 in Malaysia.
Unsubscribe from Marketing Communications

You may opt out of receiving marketing emails or notifications from Gempak 99 at any time by clicking the "Unsubscribe" link in any email we send, or by contacting our support team via live chat. Requests will be processed within 5 working days.

5

Third-Party Data Sharing & Disclosure

Gempak 99 does not sell your personal data to any party. However, in certain limited and legitimate circumstances, we may share your data with the following categories of third parties:

  • Payment processors: Required transaction data is shared with payment service providers such as DuitNow, FPX, and authorised Malaysian e-wallet operators solely for the purpose of processing your transactions.
  • Game providers: Third-party game software providers that partner with Gempak 99 may receive technical data necessary to deliver a seamless gaming experience.
  • IT service providers: Companies that provide server hosting, analytics, and cybersecurity services that help us operate this platform securely.
  • Legal authorities: Gempak 99 will disclose personal data to Malaysian authorities (such as the police, courts, or financial regulators) when required by law or court order.

All third parties receiving your personal data are bound by strict data protection agreements and are only permitted to use that data for the specified purposes.

6

Data Security Measures We Have in Place

Gempak 99 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, or misuse:

  • End-to-end encryption: All communications between your device and our servers are secured by TLS 1.3 protocol with AES-256 encryption.
  • Two-factor authentication (2FA): We encourage and support the use of two-factor authentication on all accounts for an added layer of protection.
  • 24/7 Monitoring: Our threat detection and intrusion monitoring systems operate around the clock to detect and respond to any suspicious activity.
  • Internal access controls: Only authorised Gempak 99 with a legitimate business need are the only individuals permitted to access your personal data, and all access is logged and audited.
  • Regular backups: Data is regularly backed up to a secure, separate location to ensure recoverability in the event of any incident.
  • Penetration testing: We conduct regular security audits by independent experts to identify and patch any system vulnerabilities.
Security Incident Reporting

While we take all reasonable precautions, no system is 100% secure. In the event of a data breach that affects your information, Gempak 99 will notify you within 72 hours via your registered email address, in line with industry best practices.

7

Cookies & Tracking Technologies

Website Gempak 99 uses cookies and similar tracking technologies to enhance your user experience. The following are the types of cookies we use:

Cookie Type Purpose Retention Period
Essential Cookies Maintaining your login session, security, and core platform functionality Session only
Performance Cookies Analysing how you use the website to improve speed and experience 12 months
Functional Cookies Remembering your preferences such as language, region, and display settings 12 months
Marketing Cookies Delivering relevant advertisements and measuring the effectiveness of promotional campaigns 30 days

You can manage or block cookies through your browser settings at any time. Please note that blocking essential cookies may affect certain features of the platform. Gempak 99.

8

Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by Gempak 99:

Right of Access

You have the right to request a copy of the personal data we hold about you. Requests will be processed within 14 business days.

Right to Rectification

If your personal data is inaccurate or incomplete, you have the right to request a correction. Basic information can be updated directly through your account profile section.

Right to Erasure

You have the right to request the deletion of your personal data, subject to data retention obligations required under Malaysian law (e.g., financial records for 7 years).

Right to Object to Processing

You may object to the processing of your data for direct marketing purposes at any time. Requests will be actioned within 5 working days.

Data Portability Rights

You have the right to receive your personal data in a structured, machine-readable format for transfer to another service provider.

How to Submit a Data Rights Request

To submit any request relating to your data rights, please contact the Data Protection Officer Gempak 99 via email at privacy@gempak99.cash or via 24/7 live chat. Please include your account number and the type of request for faster processing.

9

Cross-Border Data Transfers

In operating the Gempak 99, your personal data may be processed or stored on servers located outside Malaysia. In such circumstances, we ensure:

  • Data transfers are only carried out to countries or entities with a level of data protection equivalent to or exceeding Malaysia's PDPA standards.
  • All cross-border data transfers are protected by contractually binding data processing agreements and comply with applicable legal requirements.
  • We employ internationally recognised safeguards including Standard Contractual Clauses (SCCs) and additional technical measures to protect your data during transfer.
10

Data Retention Period

Gempak 99 only retains your personal data for as long as it is needed for the stated purposes or as required by Malaysian law. The following are our data retention guidelines:

  • Active account data: Retained for the duration that your account remains active on the platform Gempak 99.
  • Financial & transaction records: Retained for a minimum of 7 years after a transaction occurs, in accordance with Malaysian financial regulatory requirements.
  • Identity verification (KYC) records: Retained for a minimum of 5 years after account closure, in accordance with anti-money laundering (AML) requirements.
  • Communication logs: Customer service records are retained for 2 years for quality control and dispute resolution purposes.
  • Technical data: Access logs and technical data are retained for 12 months for security and troubleshooting purposes.

Once the applicable retention period has expired, your personal data will be securely deleted or anonymised in accordance with established procedures.

11

Child & Minor Protection

Platform Gempak 99 is strictly intended for individuals aged 18 years and above only. We do not knowingly collect or process personal data of children or minors.

Should we discover that we have collected personal data from someone under the age of 18, we will take immediate action to delete that data and close the account in question. Parents or guardians who believe their child has registered an account with Gempak 99 urged to contact us immediately at privacy@gempak99.cash.

12

Amendments to This Privacy Policy

Gempak 99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, technological developments, or new legal requirements.

  • Any material amendments will be communicated to you via email notification or a prominent banner on the website Gempak 99 at least 14 days before it takes effect.
  • The "Updated" date at the top of this page will reflect the latest version of the Privacy Policy in effect.
  • Continued use of the platform Gempak 99 after the amendment's effective date will be considered your acceptance of the revised Privacy Policy.
  • We encourage you to review this Privacy Policy page periodically to stay informed about how we protect your information.
13

Contact Our Data Protection Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how Gempak 99 manage your personal data, please reach us through the following channels:

  • Email Privacy: privacy@gempak99.cash
  • General Support Email: support@gempak99.cash
  • Live Chat: Available 24 hours a day, 7 days a week via the chat icon at the bottom of the website

Our dedicated team will respond to all privacy-related enquiries within 5 business days. For urgent matters, please include "URGENT – PRIVACY" in your email subject line for faster processing.

Complaints to Regulatory Authorities

If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia (PDPCommissioner), who is responsible for enforcing the PDPA 2010.

Your Data Is Secure. Your Experience Is Guaranteed.

Join over 500,000 Malaysian players who have trusted Gempak 99. Register today with confidence – your privacy and security are our number one priority.

Bahasa Melayu