Privacy Policy

Gempak999 Privacy Policy – Malaysian User Data Protection

We are committed to protecting your personal information to the highest security standards. Find out exactly how your data is collected, used, and safeguarded at gempak999.

Last updated: January 2026  |  Effective immediately
SSL 256 Encryption Bit
24/7 Security Monitoring
PDPA Legal Compliance
0 Data Sold to Third Parties

Quick Summary: gempak999 only collects information that is strictly necessary. We do not sell your data to anyone. All information is stored with encryption and 24-hour security monitoring. You have the right to access, correct, or request deletion of your data at any time.

1 Introduction and Scope of This Policy

Gempak999 ("we", "Platform", or "gempak999") takes the privacy and security of our users' personal information very seriously. This Privacy Policy explains in detail how we collect, store, use, and protect your personal information when you use our website, mobile app, and all services we offer.

This policy applies to all gempak999 users, including those who browse our website without registering an account, active registered users, and individuals who interact with our platform through any official communication channel.

By registering an account or using any part of the gempak999 platform, you hereby consent to the collection and use of your personal information as described in this Privacy Policy. If you do not agree, please discontinue use of our platform.

The gempak999 Privacy Policy is drafted in accordance with the Malaysia Personal Data Protection Act 2010 (PDPA). We are committed to complying with all applicable legal requirements in protecting our users' personal data.

2 Types of Information We Collect

Gempak999 collects various types of information depending on how you interact with our platform. The following are the categories of information we may collect:

a) Basic Personal Information

  • Full name as stated on official identification documents
  • Active email address used for account registration
  • Valid Malaysia mobile number
  • Date of birth (to verify the user is 18 years of age or older)
  • National ID number (MyKad) or passport number for KYC verification

b) Financial Information

  • Bank account number used for deposits and withdrawals
  • Bank name and branch
  • Deposit and withdrawal transaction records
  • Registered digital wallet details (Touch 'n Go, DuitNow, and others)

c) Technical & Usage Information

  • IP address and device information used to access the platform
  • Type and version of web browser or mobile app
  • Your device's operating system
  • Activity logs and platform usage records
  • General location data based on IP address (state/country)

We never request or store your password in plain text, your full bank PIN, or your credit/debit card details. If anyone claims to be a gempak999 representative and asks for such information, please report it to our security team immediately.

The following table explains each data category and the purpose for which it is collected:

Data Category Primary Purpose Retention Period
Basic Personal Information Account registration, identity verification (KYC) Throughout active account + 7 years
Financial Information Deposit & withdrawal processing, fraud prevention 7 years (legal requirement)
Technical Information Account security, platform performance analytics 90 days to 2 years
Communication Records Customer support, dispute resolution 3 years
Cookie & Tracking Data User experience, website analytics Up to 12 months

3 How We Use Your Information

Every piece of information we collect from you is used for legitimate and specific purposes. gempak999 will not use your data for any other purpose without obtaining your consent beforehand. The primary uses of your data are as follows:

  1. Account Management: Allowing you to log in, access games, make deposits and withdrawals, and manage your account settings securely.
  2. Identity Verification (KYC): Ensuring all users meet the minimum age requirement (18 years) and verifying identity to comply with anti-money laundering (AML) regulations.
  3. Transaction Processing: Verifying and completing all deposit and withdrawal transactions quickly and securely.
  4. Fraud Prevention: Identifying and preventing suspicious activity, fraud, account abuse, and other security threats.
  5. Customer Support: Helping you resolve issues, answer enquiries, and settle any disputes effectively.
  6. Platform Communications: Sending important notifications related to your account, policy updates, and relevant promotional information (with your consent).
  7. Platform Improvement: Analysing usage patterns to improve the user experience, platform performance, and new features.
  8. Legal Compliance: Fulfilling legal and regulatory obligations under Malaysia's PDPA and reporting requirements to relevant authorities.

You may withdraw consent to receive marketing communications at any time by contacting our support team. However, important notifications related to account security and transactions cannot be disabled as they form part of your account protection.

4 Data Storage & Security Measures

Gempak999 employs sophisticated digital security infrastructure to ensure your personal data is always protected against unauthorised access, data breaches, or any cyber threats. Key protective measures we implement include:

  • 256-bit SSL Encryption: All data transmitted between your device and gempak999 servers is protected with the same high-grade SSL encryption used by leading financial institutions.
  • Static Data Encryption: Sensitive data stored in our database is encrypted using the AES-256 standard — no sensitive information is stored in plain text.
  • Layered Access Control: Only authorised staff with a legitimate business need may access user data, and all access is logged and regularly audited.
  • 24/7 Monitoring: An automated monitoring system operates around the clock to detect and contain any suspicious activity or intrusion attempts in real time.
  • Two-Factor Authentication (2FA): An additional security layer is available for all user accounts to prevent unauthorized access.
  • Regular Backups: Data is automatically and regularly backed up to secure storage locations to ensure service continuity.

Gempak999 servers are hosted in data centres compliant with the ISO 27001 international security standard. We conduct regular penetration testing to ensure there are no vulnerabilities in our security systems.

5 Data Sharing with Third Parties

Gempak999 does not sell, rent, or disclose your personal information to any third party for commercial purposes. However, in certain situations, we may share your data with the following parties solely to enable us to deliver our services to you:

  • Payment Providers: Required transaction information is shared with approved payment processors (FPX, Touch 'n Go, DuitNow, and others) to complete your deposits and withdrawals.
  • Identity Verification Service Providers: The minimum required KYC data is shared with licensed identity verification service providers to meet compliance requirements.
  • Game Service Providers: Information required to allow you to access games from game content providers within our platform.
  • Government Authorities: Where required by law or court order, we will disclose the necessary information to the relevant authorities in Malaysia.
  • Professional Consultants: Lawyers, accountants, or auditors bound by professional confidentiality obligations for legal compliance purposes.

All third parties that receive gempak999 user data are bound by strict data protection agreements. They are only permitted to use that data for specified purposes and may not use it for any other reason.

6 Use of Cookies and Tracking Technologies

The gempak999 website and app use cookies and similar tracking technologies to enhance the user experience and ensure the platform runs at its best. The following are the types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login sessions, security, and page loading. These cookies cannot be disabled.
  • Performance & Analytics Cookies: Helping us understand how users interact with the platform, which pages are visited most, and where users encounter difficulties, for improvement purposes.
  • Functional Cookies: Saving your preferences such as language, display settings, and login information so you do not need to reconfigure them each time you use the platform.
  • Marketing Cookies: Used to display relevant promotions and offers to you based on your usage patterns (with your consent).

You can manage cookie settings through your web browser. However, disabling essential cookies may affect platform functionality. For non-essential cookies, you may opt out without affecting your core platform experience.

7 Your Rights as a User

Under the Malaysia Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data we hold:

Right of Access

You have the right to request a copy of the personal data we hold about you and to know how it is being used.

Right to Rectification

You may request the correction of any inaccurate or incomplete personal information in your account.

Right to Erasure

You may request the deletion of your personal data, subject to legal record-retention requirements.

Right to Restrict Processing

You have the right to opt out of your data being used for direct marketing purposes at any time.

Right to Data Portability

You may request your personal data in a machine-readable format for the purpose of data portability.

Right to Object

You may object to the processing of your data in certain circumstances, including for analytics or profiling purposes.

To exercise any of the above rights, please contact our data protection team via live chat on the platform or our support email. We will process your request within 14 business days.

Data rights requests that require thorough review or involve large volumes of data may take up to 30 days to be fully resolved. We will notify you if additional time is needed.

8 Protection of Children's Data

Gempak999 is a betting entertainment platform intended exclusively for individuals aged 18 and above. We do not accept registrations from, collect, or store any personal data of individuals under the age of 18.

A strict age verification process (KYC) is conducted during account registration to ensure only adults are permitted to use our platform. Should we discover that personal data of a minor has been collected inadvertently, we will take immediate action to delete that data and close the account in question.

Parents or guardians who believe their child under the age of 18 has registered an account at gempak999 are requested to contact us immediately. The account will be closed and all related data will be deleted without delay.

9 Amendments to the Privacy Policy

Gempak999 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or platform improvements. When significant changes are made, we will:

  • Displaying clear notices on the platform's home page and within the mobile app
  • Sending a notification to the registered email address when changes involve significant user rights
  • Updating the "Last Updated" date at the top of this document

Continued use of the gempak999 platform after changes are published will be considered your acceptance of the latest version of the Privacy Policy. We encourage you to review this policy periodically to stay informed about how we protect your privacy.

10 Contact Our Data Protection Team

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, our data protection team is ready to assist you.

Live Chat
In-Platform / In-App
Support Email

You may also check our FAQ page for answers to frequently asked questions about privacy and data security.

Our Security Commitment

How gempak999 Protects Your Privacy

Data protection is more than a legal obligation for us — it is the foundation of trust we build with every loyal gempak999 user.

Industry-Grade Encryption

All data transmitted between your device and our servers is protected with 256-bit SSL encryption — the same standard used by leading banks in Malaysia.

Malaysia PDPA Compliance

Gempak999 fully complies with the Malaysia Personal Data Protection Act 2010 (PDPA). All our data handling practices are regularly audited to ensure ongoing compliance.

Strict Access Control

Your personal data is accessible only to authorised staff with a legitimate business need. All access is logged, recorded, and regularly audited by our security team.

24/7 Threat Monitoring

Our security monitoring system operates around the clock to detect any suspicious activity, intrusion attempts, or data breaches before they can affect your account.

Full Control in Your Hands

You always have full control over your personal data. Access, correct, or request deletion of your data at any time through our support team.

No Data Selling

Gempak999 has never and will never sell, rent, or share your personal data with any third-party advertisers or data brokers for commercial purposes.

Play with Complete Privacy Protection

Join millions of Malaysians who trust gempak999. Register your account today and enjoy a safe, fair, and exciting gaming experience.

SSL 256-bit Protected Data Malaysia PDPA Compliance 24/7 Security Monitoring
Bahasa Melayu