Privacy Policy – gempak33

1. Who We Are

gempak33 ("we", "us", "our", "the Platform") operates the online gaming platform accessible at gempak33.net, offering casino games, sportsbook betting, lottery, and related entertainment services. For the purposes of applicable data protection law, gempak33 is the data controller in respect of personal data collected through your use of the Platform.

Questions or requests relating to your personal data may be directed to our data protection contact at: [email protected]

2. Personal Data We Collect

2.1 Registration Data

When you create a gempak33 account, we collect the following information:

• Full legal name (as it appears on a government-issued identity document)
• Date of birth (for age verification — all players must be 21 or older)
• Malaysian mobile number (primary contact and 2FA verification)
• Email address
• Residential address
• Username and encrypted password

2.2 Identity Verification (KYC) Data

To comply with anti-money laundering obligations and our licensing requirements, gempak33 may request:

• A copy of your Malaysian national identity card (MyKad), passport, or other government-issued photo ID
• Proof of address (e.g., a utility bill or bank statement issued within the last three months)
• Proof of payment method ownership (e.g., a screenshot of your Touch n Go eWallet, Boost account, or bank account showing your name)

2.3 Financial Data

We collect records of all deposits, withdrawals, wagers, and bonus transactions associated with your account. Payment instrument details (e.g., bank account numbers) are handled by our payment processing partners and are not stored in full on gempak33's systems.

2.4 Technical & Usage Data

When you access the gempak33 platform, we automatically collect:

• IP address and approximate geographic location
• Device type, operating system, and browser type
• Session timestamps, pages visited, and features accessed
• Game session logs including wagers placed, game results, and session duration
• Click patterns and navigation behaviour for platform optimisation purposes

2.5 Communications Data

If you contact gempak33's support team via live chat or email, we retain records of those communications including the content of messages and any attachments shared. This data is used to resolve support queries and to improve our customer service quality.

3. How We Collect Your Data

gempak33 collects personal data through the following means:

• Directly from you: Registration forms, KYC submissions, payment transactions, support interactions, and any data you voluntarily provide via the Platform.
• Automatically: Server logs, session cookies, and analytics tools capture technical and behavioural data each time you access the Platform.
• From payment processors: Our payment partners confirm the status of deposit and withdrawal transactions and may share limited transactional metadata with us.
• From identity verification services: Where we engage third-party KYC or fraud detection providers to verify the identity documents you submit.

4. Why We Use Your Personal Data

gempak33 uses the personal data it collects for the following purposes:

• Account creation and management: To register your account, verify your identity and age, and manage your ongoing relationship with the Platform.
• Processing transactions: To process deposits, withdrawals, wagers, and bonus credits accurately and securely.
• Regulatory compliance: To fulfil anti-money laundering (AML) obligations, fraud prevention requirements, and the conditions of our gaming licence, including mandatory age verification for all players (21+).
• Customer support: To respond to enquiries, investigate complaints, and resolve account issues.
• Platform security: To detect and prevent unauthorised account access, collusion, bonus abuse, and other prohibited conduct.
• Service improvement: To analyse usage patterns and improve the functionality, design, and game selection of the Platform.
• Marketing communications: To send you promotional offers, bonus notifications, and news about new games or features — only where you have provided your consent or where permitted by applicable law. You may opt out of marketing communications at any time.
• Responsible gaming: To monitor gaming patterns that may indicate problem gambling behaviour and to activate responsible gaming interventions where appropriate.

5. Legal Basis for Processing

gempak33 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to create your account, process transactions, and deliver the services you have requested.
• Legal obligation: Processing required to comply with AML regulations, licensing conditions, and mandatory age verification requirements.
• Legitimate interests: Processing for fraud prevention, platform security, and service improvement, where these interests are not overridden by your privacy rights.
• Consent: Marketing communications and optional personalisation features, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

6. Data Sharing & Disclosure

gempak33 does not sell your personal data to third parties. We may share personal data with the following categories of recipients under strict confidentiality obligations:

• Payment processing partners: Malaysian e-wallet providers (Touch n Go eWallet, Boost) and banking partners (Maybank, CIMB, Public Bank, Hong Leong, RHB) for the purpose of processing your deposits and withdrawals.
• Identity verification providers: Third-party KYC and age verification services engaged to verify the identity documents you submit during account registration or withdrawal processing.
• Game content providers: Licensed game studios and live casino operators whose titles are hosted on the gempak33 platform. These providers may receive session metadata necessary for game delivery and RNG auditing.
• Fraud detection services: Specialist third-party providers engaged to detect and prevent financial fraud, bonus abuse, and multi-accounting.
• Regulatory and law enforcement authorities: Where required by law, court order, or our gaming licence conditions, we will disclose personal data to the relevant regulatory authority or law enforcement body.

All third-party service providers engaged by gempak33 are subject to data processing agreements requiring them to handle your personal data in accordance with applicable data protection law and to use it solely for the purposes specified by gempak33.

7. Data Retention

gempak33 retains your personal data for as long as your account remains active and for a period of at least five (5) years following account closure, in accordance with our anti-money laundering and gaming licence record-keeping obligations.

Technical and usage data is retained in anonymised or aggregated form for platform analytics purposes. Communications data from support interactions is retained for a period of three (3) years following the closure of the relevant support ticket.

Where you have exercised your right to erasure (see Section 10), gempak33 will delete or anonymise your personal data except where retention is required by law or necessary to defend against legal claims.

8. Cookies & Tracking Technologies

gempak33 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies used on gempak33 fall into the following categories:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication tokens, CSRF protection cookies, and load-balancing identifiers. These cannot be disabled.
• Performance cookies: Collect anonymised data about how players use the Platform — which pages are visited most, where errors occur, and how long sessions last. This data helps us improve the Platform.
• Functionality cookies: Remember your language preferences, last visited game category, and other personalisation settings to improve your experience on subsequent visits.
• Marketing cookies: Used only where you have given explicit consent, to deliver relevant promotional content. You may withdraw consent at any time via your account settings.

Most browsers allow you to control cookie behaviour via their settings. Note that disabling strictly necessary cookies will impair the functionality of the gempak33 platform, including account login.

9. Security Measures

gempak33 implements robust technical and organisational security measures to protect your personal data from unauthorised access, loss, alteration, or disclosure. Key measures include:

• 256-bit SSL/TLS encryption on all data transmissions between your device and gempak33's servers
• Encrypted storage of passwords using industry-standard hashing algorithms
• Role-based access controls limiting internal access to personal data to authorised personnel only
• Regular security audits and penetration testing of Platform infrastructure
• Two-factor authentication (2FA) available for all player accounts via registered Malaysian mobile number
• Automated anomaly detection to identify and respond to suspicious login activity

While gempak33 takes all reasonable steps to protect your data, no internet transmission is completely secure. You are responsible for maintaining the confidentiality of your gempak33 login credentials.

10. Your Data Rights

Subject to applicable data protection law, you have the following rights in respect of your personal data held by gempak33:

• Right of access: You may request a copy of the personal data gempak33 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data, subject to retention obligations under AML and licensing requirements.
• Right to restrict processing: You may request that gempak33 limits its processing of your data in certain circumstances.
• Right to data portability: You may request a machine-readable copy of the personal data you provided to gempak33 for transfer to another service.
• Right to object: You may object to processing based on legitimate interests, including profiling for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact gempak33's support team via live chat or email. We will respond to verified requests within 30 days. We may need to verify your identity before processing a data rights request.

11. Children's Privacy

The gempak33 platform is strictly restricted to individuals aged 21 and above. We do not knowingly collect personal data from persons under the age of 21. If gempak33 becomes aware that personal data has been collected from a person under the minimum age, that account will be immediately suspended, all associated data will be deleted, and any funds deposited will be returned via the original payment method, subject to applicable verification.

If you believe a minor has registered on gempak33, please contact us immediately at [email protected] so that we may take appropriate action.

12. Cross-Border Data Transfers

gempak33 may transfer your personal data to, and store it on, servers or systems located outside Malaysia in connection with the delivery of Platform services, payment processing, and KYC verification. Where such transfers occur, gempak33 ensures that appropriate safeguards are in place — including contractual data transfer agreements — to protect your personal data to a standard equivalent to that required under applicable Malaysian data protection law.

13. Changes to This Privacy Policy

gempak33 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform functionality. Material changes will be communicated to registered players by email or via an in-platform notification prior to taking effect. The effective date displayed at the top of this Policy indicates when it was last revised.

Continued use of the gempak33 platform following notification of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you should cease using the Platform and request account closure.

14. Contact & Data Requests

For any questions, concerns, or requests relating to your personal data and gempak33's privacy practices, please contact our support team:

[email protected]

gempak33 aims to acknowledge all data-related enquiries within 48 hours and to resolve them within 30 calendar days. For unresolved privacy concerns, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.