Gampak99 Privacy Policy – Malaysia Player Data Protection

This Privacy Policy is issued by Gampak99 ("we", "the platform", or "Gampak99") and applies to all registered players and website visitors of Gampak99 in Malaysia. This document clearly sets out how we collect, store, use, protect, and in certain circumstances share your personal information when you use the Gampak99 platform.

Gampak99 believes that trust is the foundation of our relationship with every player. That trust is built not only through fair gameplay and fast payouts — it is also built through how we handle something far more valuable: your personal information. We do not treat data as a business asset to be sold or exploited. We treat it as a responsibility entrusted to us, to be safeguarded to the best of our ability.

This policy is formulated in accordance with the provisions of Personal Data Protection Act 2010 (PDPA) Malaysia, which entitles individuals in Malaysia to know how their personal data is being used and to make choices regarding its use.

Gampak99 collects personal information through two main channels — information you provide directly during registration or platform use, and information collected automatically through technologies such as cookies and server logs.

Information you provide directly:

• Identity information: Full name as per MyKad or Malaysian passport, date of birth, gender, and identification number (for KYC verification purposes when required).
• Contact information: Email address, active Malaysian mobile number, and residential address.
• Account information: Username, password (stored in encrypted hash form — not readable by Gampak99 staff), security questions, and account preference settings.
• Financial information: Payment method details such as your Touch 'n Go e-wallet number, GrabPay, Boost, ShopeePay, DuitNow, or bank account information for FPX (Maybank2u, CIMB Clicks, and others). Note: Gampak99 does not store credit or debit card numbers directly — all processing is handled by licensed payment providers.
• Support communications: Chat content, emails, and any other communications you send to the Gampak99 support team.

Automatically collected information:

• IP address, device type, operating system, browser type, and screen resolution.
• Session log data including pages visited, games played, session duration and in-platform actions.
• General location data derived from IP address (state or city only — not precise GPS location).
• Cookie data and similar tracking technologies, subject to the consent you have provided.

Gampak99 uses your personal information only for legitimate, specific purposes that are directly related to the services you use. We do not use your data for any other purpose without first obtaining your renewed consent.

The primary purposes for which gampak99 uses your data are:

• Account management: Register your account, verify your identity, process logins, and manage your gampak99 account settings.
• Financial transaction processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX; processing withdrawals of winnings to your bank account or e-wallet; and maintaining accurate financial records.
• Provision of gaming services: Allows you to access and play all games on gampak99, save your game history, manage your account balance, and ensure a consistent experience across devices.
• Customer support: Handling enquiries, complaints and support requests you submit to the Gampak99 support team via live chat or email.
• Security and fraud prevention: Detecting and preventing unauthorised access, fraud, money laundering, and other suspicious activities that violate Gampak99's Terms & Conditions.
• Legal compliance: Meeting the legal and regulatory obligations applicable to gampak99's operations, including KYC and AML (Anti-Money Laundering) requirements.
• Marketing (with your consent): Sending information about bonus promotions, special offers, and Gampak99 platform updates, provided you have consented to receiving such communications. You may withdraw this consent at any time.
• Platform improvements: Analysing usage patterns in aggregate (not individual data) to understand how players interact with the Gampak99 platform and to make relevant improvements.

Gampak99 does not sell, rent, or trade players' personal data to any third party. However, in the course of operating the platform, we do need to share certain data with selected and trusted categories of third parties:

• Payment service providers: Transaction information that must be shared with e-wallet providers (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow) and the FPX gateway to process your deposits and withdrawals. These providers are subject to their own Privacy Policies and Bank Negara Malaysia regulations.
• Game providers: Providers such as Pragmatic Play, NetEnt, Habanero, Jili Games, Spribe, and others may receive session data necessary for the technical operation of games. This is typically limited to anonymised player IDs and session data — not full identity information.
• Technology infrastructure provider: Companies that provide server, cloud storage, CDN and cybersecurity services that Gampak99 relies on to operate. All such providers are bound by strict data protection agreements.
• Legal authority: Gampak99 will disclose personal data to law enforcement agencies, courts or regulatory bodies where required by Malaysian law, court order, or in efforts to prevent financial crime.
• Professional consultants: Lawyers, accountants and auditors providing professional services to Gampak99, subject to their professional confidentiality obligations.

In all data-sharing instances mentioned above, gampak99 shares only the minimum data necessary for that specific purpose. We never share more than what is required.

Gampak99 invests seriously in data security infrastructure to ensure that players' personal and financial information is always protected. The key security measures we implement are:

• 256-bit SSL Encryption: All communications between your device and Gampak99 servers are secured using TLS protocol with 256-bit encryption. This means that any data transmitted cannot be read by any party that may intercept network traffic.
• Data-at-rest encryption: Sensitive data stored in the gampak99 database — including passwords, payment information, and KYC documents — is held in encrypted form using robust encryption algorithms.
• Role-based access control: The gampak99 system is designed so that each staff member can only access the data needed to carry out their role. System administrators have full access, while support staff can only view account information and game history relevant to handling customer enquiries.
• Continuous security monitoring: Gampak99's systems are continuously monitored to detect unauthorised access attempts, cyberattacks, and suspicious activity. Intrusion detection systems remain active at all times.
• Two-factor authentication: Gampak99 offers two-factor authentication (2FA) for all accounts as an additional layer of protection. We encourage all players to enable this feature.
• Regular security audits: gampak99 conducts regular security audits and independent penetration testing to identify and address any vulnerabilities in our systems.

While Gampak99 takes all reasonable steps to protect your data, no security system is 100% guaranteed. In the unlikely event of a data breach affecting players, Gampak99 is committed to notifying affected players as quickly as possible and taking immediate remedial action.

Gampak99 uses cookies and similar technologies to enhance your experience on the platform. Cookies are small text files stored on your device when you visit the website. They help the gampak99 platform remember your preferences, maintain your login session, and understand how you interact with the platform.

Types of cookies used by gampak99:

• Essential Cookies: Required for core Gampak99 platform functions such as maintaining login sessions, remembering items in your betting cart, and ensuring session security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting anonymous data on how players use the Gampak99 platform — including the most frequently visited pages, errors encountered, and page load times. This data is used to improve overall platform performance.
• Functional Cookies: Remembering your preferences such as language, text size, favourite games and display settings. This allows Gampak99 to deliver a more personalised experience.
• Marketing Cookies: Used to display relevant gampak99 offers and promotions to you. These cookies require your explicit consent and can be disabled at any time through your web browser settings.

You can control and manage cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality of the gampak99 platform — for example, disabling essential cookies will prevent you from staying logged in.

Gampak99 retains your personal information only for as long as necessary for the purposes set out in this Privacy Policy, or as required by applicable laws and regulations in Malaysia.

• Active account data: Retained for as long as your account remains active and for a reasonable period following account closure to allow for the resolution of any outstanding claims or investigations.
• Financial transaction records: Retained for a minimum of 7 years from the transaction date, in line with applicable tax legislation and anti-money laundering regulations in Malaysia.
• Support communication records: Retained for 3 years to enable the gampak99 support team to deliver consistent service and resolve any disputes that may arise.
• KYC Documents: Identity verification documents are retained for the period required under Malaysia's AML laws — typically 5 years from the date the business relationship is closed.
• Log and technical data: Retained for 90 days for security and investigation purposes, after which it is automatically deleted.

Once the retention period expires and there is no legal requirement preventing deletion, Gampak99 will delete or anonymise your data in a secure and permanent manner. Anonymised data cannot be traced back to any individual and therefore no longer constitutes personal data under Malaysia's PDPA.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by Gampak99:

• Right to Access: You may request a copy of the personal information we hold about you. Gampak99 will process this request within 30 days.
• Right to Rectification: If any data we hold is inaccurate or out of date, you have the right to request a correction. For basic details such as your phone number or email address, you can update these directly in your gampak99 account settings.
• Right to request erasure: In certain circumstances, you may request that we delete your personal data. Please note that this request may not be fully fulfilled if there is a legal obligation to retain the data in question (such as financial transaction records).
• Right to Restrict Processing You may ask us to restrict how we use your data in certain circumstances — for example, while a dispute regarding the accuracy of your data is being resolved.
• Right to object: You may object to the use of your data for direct marketing purposes at any time. You may also object to processing based on Gampak99's legitimate interests where there are specific grounds relating to your situation.
• Right to Withdraw Consent: Where we rely on your consent as the legal basis for processing your data, you may withdraw that consent at any time. Withdrawal does not affect the validity of any processing that took place prior to that withdrawal.

To exercise any of the above rights, please contact gampak99 by email at support@gampak99.click or via Live Chat. Include your account details and a clear description of your request. Gampak99 will process the request within 30 days and inform you of the outcome.

The gampak99 platform is intended for users aged 18 and above only. Gampak99 does not knowingly collect, store, or process any personal information from individuals under the age of 18.

Should gampak99 discover that personal data belonging to a minor has been collected without proper parental or guardian consent verification, we will take immediate steps to delete that data from our records and close the account in question.

If you are a parent or guardian and believe that your minor child has registered a gampak99 account or provided us with personal information, please contact the gampak99 support team at support@gampak99.click immediately. We will treat this as a matter of the highest priority.

Gampak99 reserves the right to update or amend this Privacy Policy from time to time in line with changes to business practices, legal requirements, or technological developments. The latest version of the Privacy Policy will always be published on this page with an updated revision date.

When material changes are made to this Privacy Policy, Gampak99 will notify players through one or more of the following methods:

• An email notification to the registered email address on your Gampak99 account, at least 14 days before the changes take effect (for material changes).
• A pop-up notice or notification banner displayed when you first log in to your gampak99 account after the Privacy Policy has been updated.
• Updated on the "Last Updated" date shown at the top of this page.

Your continued use of the Gampak99 platform after any changes to the Privacy Policy take effect will be considered your acceptance of the revised policy. If you do not agree with any changes, you have the right to close your Gampak99 account and request deletion of your data.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how Gampak99 handles your personal data, please do not hesitate to get in touch with us:

• Privacy Email: support@gampak99.click — please include "Privacy Enquiry" in your email subject line to ensure it is handled by the appropriate staff. Responses are provided within 48 business hours.
• Live Chat: Available 24 hours a day, 7 days a week via the chat icon on the Gampak99 platform. Best for general enquiries — for more complex matters relating to data rights, email is the more appropriate channel.

Gampak99 takes every privacy-related complaint seriously and is committed to addressing each one thoroughly and within a reasonable timeframe. If you are not satisfied with our response, you have the right to refer your complaint to the Department of Personal Data Protection under the Malaysian Ministry of Communications.