Gempak88 is committed to protecting the personal data of every member. This Policy explains exactly what information we collect, how we use it, who we share it with, and the rights you hold over your own data.
This Privacy Policy ("Policy") sets out the basis on which Gempak88 ("Company", "we", "us", "our"), the operator of the online gaming platform at gempak88.cam (the "Platform"), collects, processes, stores, and discloses personal data relating to its members, prospective members, and visitors ("you", "User", "Data Subject").
Gempak88 is committed to handling personal data responsibly, transparently, and in compliance with applicable data protection legislation. This Policy applies to all personal data collected through the Platform, our customer support channels, email communications, and any other point of interaction between you and Gempak88.
By registering an Account or using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with how we process your personal data as described herein, you should not use the Platform.
For the purposes of this Policy, the following terms shall have the meanings ascribed to them below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or can be used to identify a natural person directly or indirectly, including name, identification number, email address, IP address, and financial data. |
| "Processing" | Any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure, or destruction. |
| "Data Controller" | Gempak88, as the entity that determines the purposes and means of processing personal data collected through the Platform. |
| "Data Processor" | Any third party that processes personal data on behalf of Gempak88 in accordance with this Policy and applicable agreements. |
| "KYC" | Know Your Customer — the identity verification process required to comply with anti-money laundering obligations and confirm account eligibility. |
| "Cookies" | Small text files stored on your device by the Platform for functional, analytical, and preference-related purposes. |
| "Consent" | Freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for one or more specific purposes. |
Gempak88 collects only the personal data that is necessary and proportionate to the purpose for which it is collected. The categories of personal data we collect include the following:
Gempak88 collects personal data through the following methods and interactions:
Gempak88 processes your personal data for the following specific, documented purposes:
| Purpose | Data Categories Used |
|---|---|
| Account creation and management | Identity data, contact data, authentication credentials |
| Identity and age verification (KYC) | Identity data, documentary evidence, photographic data |
| Processing deposits and withdrawals in MYR | Financial data, identity data, transaction records |
| Providing casino games and sports betting services | Account data, gaming, financial data |
| Fraud prevention and anti-money laundering compliance | Identity data, financial data, technical data, behavioural data |
| Responsible gambling monitoring and tool administration | Gaming data, financial data, account settings |
| Customer support and dispute resolution | Communications data, account data, gaming data |
| Platform analytics and service improvement | Technical data, behavioural data (aggregated and pseudonymised) |
| Marketing communications (where consent is given) | Contact data, communications preferences |
| Legal and regulatory compliance obligations | All relevant data categories as required by applicable law |
Gempak88 relies on one or more of the following legal bases when processing your personal data, in accordance with applicable data protection law:
Gempak88 does not sell, rent, or otherwise trade your personal data. We may share your personal data with third parties only in the following limited circumstances:
We engage third-party service providers who process personal data on our behalf and in accordance with our written instructions. These include payment processors (supporting DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and cryptocurrency providers), identity verification services for KYC processing, cloud hosting and infrastructure providers, analytics and fraud detection platforms, and customer support tooling providers.
All Data Processors are contractually bound to process personal data only as directed by Gempak88, to maintain appropriate security standards, and to delete or return data upon conclusion of the service engagement.
Gempak88 will disclose personal data to relevant regulatory authorities, law enforcement agencies, or courts of competent jurisdiction where required to do so by applicable law, valid legal process, or a lawful order — including in connection with anti-money laundering investigations, licence compliance audits, or fraud inquiries.
In the event of a merger, acquisition, restructuring, or sale of all or part of Gempak88's business, personal data held by Gempak88 may be transferred to the successor entity as part of that transaction. Users will be notified of any such transfer via the Platform or registered email address.
Gempak88 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including compliance with legal and regulatory retention obligations. Our standard retention periods are as follows:
Once personal data is no longer required and the applicable retention period has expired, it is securely deleted or anonymised so that it can no longer be associated with you as an individual.
Gempak88 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security infrastructure includes the following:
The Gempak88 Platform uses cookies and similar tracking technologies to operate correctly and to improve the user experience. The categories of cookies we use are as follows:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Session management, authentication, security tokens. Cannot be disabled without breaking core Platform functionality. | Session / up to 24 hours |
| Functional | Remembers your language preference, game settings, and display preferences to provide a personalised experience. | Up to 12 months |
| Analytical | Collects aggregated, anonymised data about Platform usage patterns — page views, navigation flows, feature engagement — to improve Platform performance. | Up to 24 months |
| Security / Fraud Detection | Identifies anomalous access patterns, device fingerprinting for fraud prevention, and bot detection. | Up to 12 months |
You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair or prevent Platform functionality. Gempak88 does not use third-party advertising cookies or cross-site tracking cookies for external marketing purposes.
Subject to applicable data protection law and any overiding legal obligations, you have the following rights with respect to your personal data held by Gempak88:
To exercise any of the above rights, please contact our support team as specified in Section 16. We will respond to all valid requests within thirty (30) calendar days. Where a request is complex or involves a large volume of data, we may extend this period by a further thirty (30) days, with notice provided to you.
The Gempak88 Platform is strictly intended for persons aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Date of birth is collected at registration and verified during the KYC process specifically to enforce this age requirement.
If Gempak88 becomes aware that personal data has been collected from a person under the age of 21, we will immediately close the associated Account, forfeit any bonus funds, and securely delete the personal data collected, subject to any applicable regulatory obligations regarding the reporting of underage gambling incidents.
Gempak88 may process or store personal data on servers or through service providers located outside Malaysia. Where personal data is transferred to a jurisdiction that does not provide an equivalent level of data protection to that of Malaysia, Gempak88 will implement appropriate safeguards, which may include:
By using the Gempak88 Platform, you acknowledge that your personal data may be transferred, stored, and processed in jurisdictions outside Malaysia, subject to the safeguards described above.
The Gempak88 Platform may contain links to third-party content, game studios, or payment service providers whose privacy practices differ from our own. This Privacy Policy does not apply to the data practices of those third parties. We encourage you to review the privacy policies of any third-party service with which you interact via the Platform.
Gempak88 is not responsible for the privacy practices or content of third-party websites, applications, or services accessible through the Platform.
Gempak88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our data processing practices, or Platform features. The "Last Updated" date at the top of this page will be revised to reflect the most recent version.
Where amendments are material — meaning they significantly affect your rights or our obligations — Gempak88 will provide notice via email to your registered address and/or a prominent notification on the Platform at least fourteen (14) days before the amendment takes effect. Your continued use of the Platform following the effective date of any amendment constitutes acceptance of the revised Policy.
If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by Gempak88, please contact using the following channels:
For enquiries specifically regarding data subject rights (access, rectification, erasure, objection, portability), please include as much detail as possible about your request and your registered Account information to facilitate accurate identification and timely response.
Our Privacy Policy is backed by real technical and operational security measures — not just written promises.
All personal and financial data stored on Gempak88's servers is encrypted using AES-256, the same standard used by banks and financial institutions worldwide.
Every piece of data transmitted between your device and the Platform is encrypted in transit via TLS 1.3. Your login credentials and payment data are never sent in plaintext.
Access to personal data is restricted to authorised Gempak88 personnel on a strict need-to-know basis. All access is logged, reviewed, and audited on a regular basis.
Your personal data is never sold, rented, or traded to third-party advertisers, data brokers, or marketing organisations. Full stop.
We document your data rights in plain English — access, rectification, erasure, portability, and objection. Every request is acknowledged within 24 hours and resolved within 30 days.
We retain your data only as long as legally required. Once the retention period expires, data is securely deleted or anonymised — not held indefinitely.
Under applicable data protection law, you hold these rights over your personal data held by Gempak88. Contact us to exercise any of them.
Request a full copy of the personal data Gempak88 holds about you, including how it is used and with whom it is shared.
Request correction of inaccurate or incomplete data — for example, if your registered address or name contains an error.
Request deletion of your personal data where it is no longer necessary, subject to mandatory regulatory retention requirements.
Request your personal data in a structured, machine-readable format suitable for transfer to another service provider.
Object to processing based on legitimate interests, or to any direct marketing communications at any time and without restriction.
Request that we restrict processing of your data — for example, while an inaccuracy is being corrected or a complaint is under review.
Our support team is available 24/7 to help with any data privacy request or concern. You can also review our Terms & Conditions, or return to the homepage to explore everything gempak88 has to offer Malaysian players.
For players aged 21 and above only. Please gamble responsibly.