This Privacy Policy explains how Gempak888 collects, uses, stores, and protects the personal information you provide when accessing our platform. Your privacy matters to us — we handle your data with care and transparency.
This Privacy Policy (hereinafter "this Policy" or "the Policy") is issued by Gempak888 (hereinafter "Gempak888", "we", "us", or "our"), the operator of the online gaming platform accessible at gempak888.cam. This Policy governs the collection, use, storage, disclosure, and protection of personal data relating to individuals (hereinafter "you", "your", or "the User") who access, register on, or otherwise interact with the Gempak888 platform.
Gempak888 operates as an international online gaming platform serving players in Malaysia and other eligible jurisdictions. In the course of providing our services — including sports betting, casino gaming, live dealer tables, and associated account management functions — we necessarily collect and process certain categories of personal data. We are committed to handling that data responsibly, securely, and in accordance with the data protection standards applicable under our international licensing obligations.
This Policy applies to all personal data collected through the Gempak888 website, any associated mobile interfaces, email communications, and customer support interactions. It should be read in conjunction with our Terms and Conditions and our Responsible Gambling policy, both of which form part of your overall agreement with Gempak888.
By registering an account with Gempak888 or by continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein.
For the purposes of this Privacy Policy, the following terms have the meanings set out below:
Gempak888 collects personal data across several categories, depending on the nature of your interaction with the Platform. The following table summarises the categories of data we collect and specific examples of data within each category.
| Category | Examples of Data Collected | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, MyKad / Passport / Driver's Licence number | Registration and KYC verification |
| Contact Data | Email address, Malaysian mobile phone number, residential address (including city — e.g., Kuala Lumpur, Penang, Johor Bahru) | Registration; account updates |
| Financial Data | Bank account details, e-wallet identifiers (Touch 'n Go, Boost, GrabPay, DuitNow, FPX), cryptocurrency wallet addresses, transaction history in MYR | Deposit and withdrawal processing |
| Identity Documents | Scanned / photographed copies of Malaysian MyKad (front and back), Passport data page, Driver's Licence, proof of address documents, selfie photographs | KYC verification process |
| Gaming Activity Data | Bet history, game session logs, wagering patterns, win/loss records, bonus claims, sports markets accessed (EPL, Liga Super Malaysia, UFC etc.) | Ongoing platform use |
| Technical Data | IP address, device type, operating system, browser type, session duration, referring URL, login timestamps | Automated collection during platform use |
| Communications Data | Support chat transcripts, email correspondence, feedback or complaint records | Customer support interactions |
| Preference Data | Language preferences (English, Bahasa Melayu, Mandarin), notification settings, responsible gambling limit configurations | Account settings and platform use |
Gempak888 collects personal data through the following means:
The majority of personal data we hold is provided directly by you in the course of:
Certain technical and usage data is collected automatically when you interact with the Platform, including through the use of cookies, web beacons, server logs, and similar tracking technologies. This includes your IP address, device identifiers, browser type, operating system, session duration, pages visited, and betting or gaming activity.
We may receive personal data about you from third parties including:
Gempak888 processes your personal data for the following specific and legitimate purposes:
Gempak888 relies on the following legal bases to process your personal data, consistent with the data protection standards applicable under our international licensing framework:
Gempak888 does not sell or rent your personal data. We may share your personal data with the following categories of recipients where it is necessary and proportionate to do so:
We engage third-party service providers who process personal data on our behalf under written data processing agreements. These include:
We may disclose personal data to competent regulatory authorities, law enforcement agencies, or courts where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of Gempak888, its Players, or third parties.
In the event of a merger, acquisition, restructuring, or sale of all or part of Gempak888's business, your personal data may be transferred as part of that transaction, subject to equivalent data protection commitments.
We may share your personal data with additional third parties where you have provided your specific, informed, and prior consent to such sharing.
Gempak888 is an international platform. Your personal data may be transferred to, processed in, and stored in countries other than Malaysia, including the jurisdiction in which Gempak888 is licensed to operate. Some of these countries may have data protection laws that differ from those applicable in Malaysia.
Where personal data is transferred internationally, Gempak888 takes steps to ensure that appropriate safeguards are in place to protect the data in a manner consistent with applicable data protection standards. These safeguards may include:
By using the Platform, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Malaysia as described in this clause.
Gempak888 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, accounting, or reporting obligations. The following general retention guidelines apply:
| Data Category | Standard Retention Period | Basis |
|---|---|---|
| Account and identity data | For the duration of the account plus 5 years post-closure | Licensing and AML obligations |
| KYC documents | 5 years from account closure or last transaction | Regulatory requirement |
| Transaction / payment records (MYR) | 7 years from the date of the transaction | Financial record-keeping requirements |
| Gaming activity logs | 5 years from the date of activity | Licensing obligations; dispute resolution |
| Support communications | 3 years from the date of last interaction | Legitimate interests; dispute resolution |
| Technical / log data | 12 months from collection | Platform security; fraud prevention |
| Marketing consent records | Until consent is withdrawn, plus 3 years | Compliance with consent obligations |
Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with Gempak888's data destruction procedures. Where data is anonymised, it may be retained indefinitely for statistical and analytical purposes as it no longer constitutes personal data.
Gempak888 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:
Gempak888 uses cookies and similar tracking technologies to enhance your experience on the Platform, maintain session security, analyse usage patterns, and support our fraud prevention systems.
You may control or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. Your browser documentation will provide specific guidance on managing cookie settings for your preferred browser.
Subject to applicable data protection laws and certain conditions and limitations, you have the following rights in respect of your personal data held by Gempak888:
You have the right to request a copy of the personal data we hold about you and information about how we process it. Requests will be responded to within a reasonable period, subject to identity verification.
You have the right to request correction of inaccurate or incomplete personal data we hold about you. You may also update your personal details directly through your Account settings.
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our retention obligations under applicable law and our licensing requirements.
In certain circumstances, you may request that we restrict the processing of your personal data — for example, while the accuracy of your data is being contested.
Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
You have the right to object to processing of your personal data where that processing is based on legitimate interests. You may also withdraw consent to marketing communications at any time through your account preferences.
To exercise any of the above rights, please contact our Data Privacy team via the support channels described in Section 16 of this Policy. We will respond to all verifiable requests within a reasonable period and may require identity verification before processing your request.
Age verification is a mandatory component of our KYC process. All registered Players are required to provide valid government-issued identity documentation confirming that they meet the minimum age requirement before full account functionality is enabled.
If Gempak888 becomes aware that personal data has been collected from an individual under the age of 21, we will take immediate steps to suspend the relevant Account, delete the data associated with it, and, where appropriate, report the matter to the relevant authorities. If you are aware that a person under 21 has registered an account on the Platform, please notify our support team immediately.
The Gempak888 Platform does not include links to external third-party websites for general browsing purposes. However, in the course of payment processing, certain transactions may involve interaction with the interfaces of third-party payment service providers including e-wallet operators (Touch 'n Go eWallet, Boost, GrabPay), banking portals (Maybank, CIMB, Public Bank, Hong Leong), or FPX/DuitNow infrastructure.
These third-party services operate under their own privacy policies and terms of service, which are independent of Gempak888's Privacy Policy. Gempak888 is not responsible for the privacy practices or data handling of third-party service providers. We recommend that you review the privacy policies of any third-party payment services you use in connection with your Gempak888 account.
Gempak888 selects payment partners carefully and requires contractual data protection commitments from all third-party processors. However, interactions with third-party payment interfaces are subject to those parties' own terms once you are redirected to their environments.
Gempak888 reserves the right to update, revise, or replace this Privacy Policy at any time in response to changes in applicable data protection law, our operational practices, our licensing obligations, or the services we offer.
Material changes to this Policy will be communicated through one or more of the following channels: a prominent notice displayed on the Platform, an email notification to your registered email address, or an in-account notification. We will update the "Last Updated" date at the top of this page to reflect the date of the most recent revision.
Your continued use of the Gempak888 Platform following the effective date of any revision to this Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you must cease using the Platform and may request Account closure in accordance with the process described in our Terms and Conditions.
We recommend that you review this Privacy Policy periodically to stay informed about how we protect your personal data.
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by Gempak888, please contact us through the following channels:
For rights requests (access, erasure, portability, objection), please include your registered name, registered email address, and a description of your request. You may be asked to verify your identity before your request is processed. We aim to acknowledge all formal data rights requests within 5 business days and to respond substantively within 30 days.
For self-exclusion requests or responsible gambling assistance, please refer to our dedicated Responsible Gambling page, which contains specific guidance and direct contact options for our responsible gambling support team.
Six key pillars of the Gempak888 data protection framework — plain English, no jargon.
All data in transit between your device and Gempak888 is protected by TLS/SSL encryption. Your login, financial data, and personal details travel securely across every connection.
Gempak888 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Your data stays within our controlled processing ecosystem.
Access, correct, restrict, or delete your data at any time. Exercise your full suite of data rights by contacting our support team — we aim to respond to all requests within 30 days.
We keep your data only as long as legally required or operationally necessary. Financial records are kept for 7 years per regulatory requirements; other data is deleted on a defined schedule.
Our platform undergoes regular independent security assessments and penetration testing. We maintain incident response procedures and commit to timely breach notification where required.
Privacy queries can be handled in English, Bahasa Melayu, or Mandarin by our 24/7 support team. Malaysian players in KL, Penang, Johor Bahru and beyond can get help in their preferred language.
Contact our support team to exercise any of these rights. Identity verification may be required.
Our 24/7 support team handles data rights requests, privacy queries, and account assistance in English, Bahasa Melayu, and Mandarin. Visit our FAQ for quick answers or head back to the homepage.
For players aged 21 and above only. Gempak888 operates under international licensing. Please gamble responsibly.