1. Home
  2. Privacy Policy
Updated: January 2026

Gempak88 Privacy Policy – Member Data Protection Malaysia

Your privacy is our priority. Find out exactly how Gempak88 collects, uses, stores, and protects every piece of personal information you entrust to us.

Register Securely Log In
256
SSL Encryption Bits
0
Sale of Data to Third Parties
24/7
Active Security Monitoring
2FA
Two-Factor Authentication Available
Content
Key Highlights of This Privacy Policy

Gempak88 takes member privacy seriously. This document clearly explains the types of personal data we collect, why we need it, how we use it, who it may be shared with under strictly limited circumstances, and your rights as a member to control your own data. By using the Gempak88 platform, you consent to the collection and use of data as described in this Privacy Policy.

At Gempak88, we understand that your trust is invaluable. You share your personal information with us because you trust us to use it responsibly and protect it to the best of our ability. That is our promise — and this Privacy Policy is the written document that details how that promise is upheld every day in Gempak88's operations.

This Privacy Policy applies to all products and services offered by Gempak88, including the website, mobile applications where available, and all our official communication channels. It sets out our privacy practices in plain language so that every Malaysian member can understand them without needing a legal background.

01

Introduction and Scope of This Policy

Gempak88 is an online betting platform operating for members in Malaysia. As the platform operator, we act as the "data controller" responsible for all personal information collected from you during registration, platform use, and communications with our support team.

This Privacy Policy has been developed with relevant personal data protection requirements and international industry best practices in mind. gempak88 is committed to ensuring your data is handled in a manner that fully respects your privacy rights.

Please note that this Privacy Policy may be updated from time to time to reflect changes in how we operate, new technologies we adopt, or evolving legal requirements. Any updates will be published on this page along with the most recent revision date. We encourage you to review this page periodically to stay informed about how we handle your data.

This Privacy Policy is written specifically for Gempak88 members and users who are residents of Malaysia. All practices described herein comply with the data protection laws applicable to the operation of an online betting platform serving the Malaysian market.

02

Personal Data We Collect

Gempak88 only collects personal data that is strictly necessary to provide our services safely and efficiently. We do not collect irrelevant or excessive data. Below are the categories of data we collect and the reasons why:

Data Category Example Information Reason Required
Identity Data Full name, date of birth, MyKad number Identity verification & KYC compliance
Contact Data Phone number, email address Account communications & OTP verification
Financial Data Deposit records, withdrawal records, payment provider name Transaction processing & fraud prevention
Technical Data IP address, device type, browser type, session time Account security & platform improvements
Activity Data Betting history, games played, account balance Account management & responsible gambling
Communication Data Live chat content, support emails, complaint records Issue resolution & service improvement

For deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX through Maybank2u and CIMB Clicks, Gempak88 does not store your full payment account details. We only retain the transaction records necessary for reconciliation and verification purposes. Sensitive details such as full account numbers are handled securely by the respective payment providers.

Data We Do Not Collect

Gempak88 does not collect biometric data, real-time GPS location data, private conversation content outside of customer support contexts, ethnicity or religion-related information, or any data belonging to individuals under the age of 18. If our systems detect that a user may be underage, the account will be suspended immediately pending completion of age verification.

03

How We Use Your Data

Gempak88 uses your personal data only for legitimate, necessary purposes that are directly related to the provision of our services. The specific purposes for which your data is used are as follows:

  • Account Management — to create, verify, and manage your gempak88 account, including the login process, identity verification, and profile information updates.
  • Financial transaction processing — to process deposits via Touch 'n Go eWallet, GrabPay, DuitNow, FPX, and other methods, and to manage your withdrawal payouts promptly and accurately.
  • Providing betting services — to give you access to all Gempak88 products, including Malaysia Super League and EPL Sports Betting, live casino, baccarat, table games, slots, and MPL Malaysia e-sports.
  • Security and fraud prevention — to detect and prevent fraudulent activity, duplicate accounts, money laundering, and any other misuse of the platform.
  • Responsible Gaming — to monitor betting patterns and identify members who may need support related to problem gambling, for the purpose of early and compassionate intervention.
  • Service Communications — to send important account-related notifications, transaction alerts, platform updates, and responses to customer support enquiries.
  • Direct marketing — to send you information about Gempak88 promotions, bonuses, and special offers that may interest you. You can opt out of marketing communications at any time.
  • Legal compliance — to fulfil applicable legal obligations, including anti-money laundering (AML) requirements and customer identity verification (KYC) requirements.
  • Platform improvements — to analyse aggregated usage patterns for the purpose of improving user experience, platform performance, and the development of useful new features.

Gempak88 does not make decisions that affect your rights and interests based solely on automated data processing without meaningful human involvement. Every significant decision — such as account suspension or withdrawal rejection — is reviewed by our team.

04

Sharing Data with Third Parties

Gempak88 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. This is an unwavering commitment. That said, there are limited situations where we may need to share your data with certain parties, and we want to be fully transparent about those circumstances:

  • Payment providers — transaction data required is shared with providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX banks to facilitate deposit and withdrawal processing. These providers are bound by strict confidentiality agreements.
  • Game software providers — certain game session information may be shared with third-party game providers that support the Gempak88 platform for technical and dispute resolution purposes.
  • Legal authorities — Gempak88 will disclose personal data when required by law, court order, or a lawful request from a law enforcement agency. We will notify you of any such disclosure wherever possible, unless prohibited by law.
  • Technical service providers — cloud infrastructure, cybersecurity, and analytics service providers that help us operate the platform may access limited data within the scope of the services they provide. All such providers are bound by comprehensive data protection agreements.
Cross-Border Data Transfers

In some cases, Gempak88's technical service providers may store or process data on servers located outside Malaysia. When this occurs, we ensure that an equivalent level of data protection — consistent with Malaysian standards — is maintained through binding contractual agreements with those providers. We do not transfer data to countries that lack adequate privacy protections without putting additional safeguards in place.

05

Gempak88's Data Security Measures

Gempak88 takes security infrastructure seriously to keep your data protected at all times. Here are the security layers we have in place:

256-bit SSL Encryption

All data transmitted between your device and Gempak88's servers is protected by 256-bit SSL encryption — the same security standard used by Malaysia's leading banking institutions, including Maybank and CIMB. This means that even if someone were to intercept your connection, the data would be unreadable without the unique encryption key.

Two-Factor Authentication (2FA)

Gempak88 members can activate 2FA via OTP sent to their registered Malaysian mobile number. This means that even if someone else knows your password, they still cannot log in without access to your phone. Gempak88 encourages all members to enable this feature.

Real-Time Threat Monitoring

Gempak88's automated monitoring system operates 24 hours a day to detect suspicious activity such as login attempts from unrecognised locations or devices, unusual transaction patterns, and early signs of cyberattacks. Any anomaly will trigger an immediate review by our security team.

Encrypted Data Storage

All personal data stored in gempak88's databases is also encrypted at rest. Passwords are stored in hashed form using strong cryptographic algorithms — gempak88 itself cannot read your password in its original form; only you know your password.

Internal Access Controls

Only Gempak88 staff who require access to specific data to carry out their duties are permitted to access that data — a strict "least privilege" principle. All staff access to member data is logged and regularly audited to detect any inappropriate use.

While gempak88 employs the best available security measures, no system in the world is 100% immune to every threat. We strongly recommend taking personal precautions as well — such as using a strong, unique password, avoiding unsecured public Wi-Fi when accessing your account, and always logging out when you are done.

06

Data Retention and Deletion

Gempak88 retains your personal data only for as long as necessary for the purposes outlined in this Privacy Policy, or as required by applicable law. We do not keep data longer than needed.

Data Type Retention Period Reason
Active account information Throughout active account period Required for account operations
Financial transaction records Minimum 5 years Financial legal requirements
Identity verification records (KYC) 5 years after account closure AML compliance and legal obligations
Support communication logs 2 years Dispute resolution and service quality
Technical data (server logs, IP) 90 days Security and technical troubleshooting
Marketing data (where you have given consent) Until consent is withdrawn Related promotional communications

When data is no longer needed and there is no legal obligation to retain it, gempak88 will securely delete it or anonymise it so that it can no longer be linked to you personally. The deletion process uses methods that ensure the data cannot be recovered.

If you close your gempak88 account, data related to financial transactions and identity verification will be retained for the legally required period before being permanently deleted. Data not subject to legal retention obligations will be deleted within 30 days of account closure.

07

Cookies and Tracking Technologies

The Gempak88 platform uses cookies and similar tracking technologies to enhance your experience, maintain session security, and help us understand how the platform is being used. Below are the types of cookies we use:

REQUIRED
Session Cookies

Keeps you logged in during active sessions, saves your language preferences, and remembers items in your betting slip. Without these cookies, the platform cannot function properly.

REQUIRED
Security Cookies

Helps detect suspicious activity, prevents CSRF attacks, and ensures that every request within your session is legitimate. This is an important layer of protection for your account.

OPTIONAL
Performance Cookies

Collects anonymous information about how you use the platform to help us identify areas for improvement. You may decline these cookies without affecting the core functionality of the platform.

OPTIONAL
Preference Cookies

Saves your preferences such as favourite games, display settings, and communication choices so you do not have to reconfigure them each time you log in to Gempak88.

You can manage cookies through your browser settings. However, blocking essential cookies may affect your ability to use the Gempak88 platform fully. For guidance on managing cookies in your browser, please refer to your browser's help documentation.

08

Your Rights as a gempak88 Member

As a gempak88 member, you have certain rights regarding your personal data. We fully respect and uphold these rights:

Right of Access

You may request a copy of all personal data that Gempak88 holds about you at any time. We will provide this information in a readily readable format within 30 days of receiving your request.

Right to Correction

If the personal data we hold about you is inaccurate or out of date, you may request a correction at any time through your account settings or by contacting our support team.

Right to Deletion

You may request the deletion of your personal data under certain circumstances. Please note that Gempak88 may be legally required to retain certain data, such as financial records, even after a deletion request has been made.

Right to Object to Marketing

You can opt out of marketing communications from Gempak88 at any time by clicking the "unsubscribe" link in any email, or by contacting our support team directly.

Right to Data Portability

You may request a copy of your personal data in a machine-readable format (such as CSV or JSON) for your own use or to transfer to another service.

Right to Restrict Processing

Under certain circumstances, you may request that Gempak88 temporarily restrict the processing of your data while an issue is being resolved, without permanently deleting it.

To submit any request relating to your data rights, please contact our privacy team by email at support@gempak88.best with the subject line "Privacy Data Rights Request". We will process your request within 30 business days and notify you of the action taken.

09

Protection of Children's Data

Gempak88 takes the protection of minors extremely seriously. Our platform is strictly for adults aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

During the registration process, we collect date of birth information and conduct an age check to confirm that users meet the minimum age requirement. If Gempak88 determines that data has been inadvertently collected from an underage individual, the following steps will be taken immediately: the account will be suspended, all collected data will be permanently deleted, and any existing deposits will be refunded.

If you are a parent or guardian concerned that your underage child may have registered an account on Gempak88, please contact our support team immediately via live chat or by emailing support@gempak88.best. We will take prompt action to close the account and delete all associated data.

10

Amendments to This Privacy Policy

Gempak88 reserves the right to update this Privacy Policy from time to time to reflect changes in how we operate, new technologies we adopt, or updates to applicable laws and regulations. Every update will be accompanied by a revised "Last Updated" date at the top of this page.

For significant changes — such as changes to the types of data collected, new processing purposes, or updates to our data-sharing policy — gempak88 will proactively notify members by email or in-platform notification before the changes take effect. For minor changes that do not materially affect your privacy rights, a notice on this page is considered sufficient.

We encourage you to review this Privacy Policy page periodically — at least once every few months. Continued use of the Gempak88 platform after any changes are published will be considered your acceptance of the updated policy.

11

Contact Us about Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how Gempak88 handles your personal data, we strongly encourage you to get in touch. Our team is ready to assist and will take every privacy-related enquiry seriously.

Live Chat

The fastest way to get a response — typically within 2 minutes

Available 24/7 on the platform
Support Email

For written privacy enquiries and official data requests

support@gempak88.best
WhatsApp

For immediate account-related communications and general privacy enquiries

Check the numbers in the platform

When contacting us about a privacy matter, please clearly state the nature of your enquiry, your Gempak88 account number (for account-specific enquiries), and what you expect as a response. This helps us process your request more quickly and accurately.

Gempak88's Privacy Commitment to You

Six principles that shape how we protect the personal data of every member in Malaysia

Your Data Is Not for Sale

Gempak88 has never and will never sell, rent, or trade your personal data to advertisers, data brokers, or any third party for their commercial gain. This is a firm line we will not cross under any circumstances.

Bank-Grade Encryption

The 256-bit SSL encryption protecting every Touch 'n Go, GrabPay, DuitNow, and FPX transaction you make is the same standard used by Maybank2u and CIMB Clicks online banking. Your data travels through an encrypted tunnel that no outside party can break into.

A Privacy Policy in Plain Language

Gempak88 has written this Privacy Policy in straightforward language that every Malaysian member can understand — free from confusing legal jargon. You have the right to know exactly what happens to your data, and we are committed to explaining it clearly.

You're in Control

Through your gempak88 account settings, you can access and update your personal data, manage marketing communication preferences, control cookie settings, and initiate privacy rights requests — all in one convenient place.

No Longer Retained Than Necessary

Gempak88 adheres to the principle of data minimisation. Once data is no longer needed and there is no legal obligation to retain it, it is securely deleted using methods that ensure it cannot be recovered.

Data Breach Notification

In the unlikely event of a security breach that may affect your data, Gempak88 is committed to notifying you promptly and transparently about what happened, what data was involved, and the steps we are taking to address it.

Your Privacy Rights at Gempak88 — A Plain-Language Summary

Everything you need to know about your rights, at a glance

Right of Access

View all data we hold about you

Right to Rectification

Correct inaccurate or outdated data

Right to Erasure

Request deletion of your data under certain circumstances

Portability

Request a copy of your data in a machine-readable format

Right to Object

Opt out of marketing communications at any time

Right to Restrict

Temporarily restrict data processing while an issue is being resolved

To submit any request relating to your privacy rights, email us at support@gempak88.best with the subject "Privacy Data Rights Request". We will respond within 30 business days.

Payment Methods We Securely Support

All deposit and withdrawal transactions are protected with 256-bit SSL encryption

Touch 'n Go eWallet
GrabPay
Boost
ShopeePay
DuitNow
Maybank2u (FPX)
CIMB Clicks (FPX)

Gempak88 Does Not Store Your Full Payment Account Details

Sensitive details such as full eWallet account numbers or bank account numbers are handled securely by the respective payment providers. gempak88 only stores the transaction reference records needed for verification purposes.

Responsible Gambling Support

Your betting activity data on Gempak88 is also used for responsible gambling purposes — to identify patterns that may indicate a risk of problem gambling and to provide timely support where needed. This is a use of data we believe is genuinely in your best interest. For more information, visit the Responsible Gambling us or contact the Health Helpline 1800-888-728.

FAQ – Gempak88 Privacy Policy

Answers to the most frequently asked questions about our privacy and data protection practices

No, Gempak88 does not sell, rent, or share your personal data with any third party for their own marketing purposes. This is a clear and unwavering commitment in our Privacy Policy. Your data may be shared with technical service providers that help us deliver our services — such as payment providers Touch 'n Go, GrabPay, DuitNow, and FPX — but this is strictly within a very limited service scope, and all such providers are bound by strict confidentiality agreements. They are not permitted to use your data for any purpose beyond the services they provide to Gempak88.

You may submit a data access request by emailing the gempak88 support team at support@gempak88.best with the subject line "Personal Data Access Request". In your email, include your full name, gempak88 account number, and a description of the data you wish to access. For security purposes, we may need to verify your identity before processing the request. We will send the requested data within 30 days of successful identity verification. Data will be delivered in an easily readable format to the email address registered on your account.

While Gempak88 uses 256-bit SSL encryption to protect data transmitted between your device and our servers, we do not recommend accessing your account over unsecured public Wi-Fi networks. Unencrypted public networks — such as Wi-Fi at cafes or shopping malls — can expose your device to various threats, including man-in-the-middle attacks or monitoring by other users on the same network. For optimal security, use your Malaysian mobile data connection (4G/5G) or a password-protected private Wi-Fi network when accessing your Gempak88 account, especially when making deposits or withdrawals.

You may submit a data deletion request by emailing support@gempak88.best. Please note, however, that gempak88 is legally required to retain certain categories of data even after an account is closed. This includes financial transaction records, which must be kept for a minimum of 5 years under financial regulatory requirements, and identity verification (KYC) records required for anti-money laundering compliance. Data not subject to legal retention obligations will be deleted within 30 days of the request being confirmed. We will notify you in writing specifying which data has been deleted and which data must still be retained, along with the reasons.

In the event of a security breach involving your personal data, Gempak88 is committed to responding swiftly and transparently. Within 72 hours of detecting a breach, we will notify the relevant authorities where required by law. We will inform affected members via their registered email address with details covering: the type of data involved, the estimated period of the breach, the steps we have taken to contain and address it, and the steps you can take to protect yourself. We will also provide additional support, including enhanced account monitoring and assistance with changing passwords, to all affected members.

Your Data Is Safe at Gempak88 — Join Us with Confidence

Over 980,000 active members in Malaysia have trusted gempak88 with their data because we show — not just say — that privacy is our genuine priority. Register for free today and experience a betting platform that truly cares about you.

Register Now — It's Free Log In

For users aged 18 and above only. | Terms & Conditions | Responsible Gambling

Bahasa Melayu