gempak33 Privacy Policy — How We Handle Your Data

01 About This Privacy Policy

This Privacy Policy ("Policy") describes how gempak33.org ("gempak33", "we", "us", "our") collects, processes, stores, and discloses personal data in connection with your use of our online gaming platform, accessible at gempak33.org. This Policy applies to all registered members, prospective members, and visitors to the gempak33 website.

By registering an account on gempak33, accessing our services, or otherwise interacting with the platform, you acknowledge that you have read and understood this Policy. If you do not agree with the practices described herein, you should not use the gempak33 platform.

This Policy should be read alongside our Terms & Conditions, which govern the overall use of the gempak33 platform and form part of the same legal framework applicable to your membership.

02 Data Controller

For the purposes of applicable data protection legislation, gempak33.org is the data controller responsible for the personal data collected through this platform. As data controller, gempak33 determines the purposes for which and the means by which personal data is processed.

All data protection queries, subject access requests, and complaints may be directed to the gempak33 Data Protection contact via the support channels listed in Section 13 of this Policy.

03 Personal Data We Collect

gempak33 collects personal data in the following categories, depending on how you interact with the platform:

gempak33 does not collect special categories of sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where directly relevant to responsible gaming assessments conducted at a member's request.

04 How gempak33 Uses Your Personal Data

gempak33 uses the personal data we collect for the following purposes:

• Account management: Creating, maintaining, and administering your gempak33 member account, including authentication and session management.
• Service delivery: Enabling access to all gempak33 gaming services — sportsbook, live casino, slots, fisher games, and mix parlay — and personalising the platform experience.
• Payment processing: Processing deposits and withdrawals via TnG eWallet, Boost, Maybank FPX, CIMB, Public Bank, and other supported payment channels.
• Identity verification (KYC): Verifying member identity and age (21+) in compliance with Know Your Customer requirements prior to processing withdrawals.
• Fraud prevention and AML compliance: Detecting, investigating, and preventing fraudulent activity, money laundering, and other prohibited conduct on the platform.
• Responsible gaming: Monitoring behavioural patterns to identify members who may be experiencing problem gambling indicators, and providing appropriate intervention tools.
• Customer support: Responding to queries, complaints, and support requests submitted through the gempak33 live chat and email channels.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to members who have opted in to marketing communications. You may opt out at any time.
• Legal and regulatory compliance: Fulfilling obligations imposed by applicable laws, regulatory bodies, and financial intelligence units, including reporting obligations.
• Platform improvement: Analysing aggregated, anonymised usage data to improve platform performance, game offerings, and user experience.

05 Legal Basis for Processing

gempak33 processes your personal data on the following legal bases under applicable data protection law:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions you accepted upon registration — including account management, payment processing, and service delivery.
• Legal obligation: Processing required to comply with KYC, AML, and other regulatory obligations applicable to gempak33's operations.
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where our interests do not override your fundamental rights.
• Consent: Processing for marketing communications, where you have provided explicit opt-in consent. This consent may be withdrawn at any time without affecting the lawfulness of prior processing.

06 Data Sharing with Third Parties

gempak33 does not sell your personal data. We share personal data with third parties only in the following circumstances:

• Payment processors: TnG eWallet, Boost, Maybank, CIMB, Public Bank, Visa/Mastercard networks, and cryptocurrency processing providers — solely to facilitate deposits and withdrawals.
• KYC and identity verification providers: Third-party identity verification services used to verify member age and identity as required by our KYC obligations.
• Fraud prevention and AML services: Specialist providers that assist gempak33 in detecting suspicious activity and meeting Anti-Money Laundering compliance requirements.
• Game studio providers: Certified game studios whose titles are hosted on the gempak33 platform may receive anonymised gameplay data for game performance purposes. No personally identifying data is shared with game studios.
• Regulatory and law enforcement authorities: Where required by law, court order, or request from a competent regulatory or financial intelligence authority.
• Successors in business: In the event of a merger, acquisition, or asset sale, member data may be transferred to the acquiring entity subject to equivalent data protection obligations.

07 Data Retention

gempak33 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including compliance with legal, regulatory, and accounting requirements. The following general retention periods apply:

• Active account data: Retained for the duration of the membership and for a period of five (5) years following account closure, to fulfil regulatory and audit obligations.
• Financial transaction records: Retained for a minimum of seven (7) years from the date of the transaction, in compliance with financial record-keeping requirements.
• KYC and identity documents: Retained for five (5) years from account closure or the date the verification was completed, whichever is later.
• Marketing preferences and communications: Retained until you withdraw consent or request deletion, after which they are deleted within 30 days.
• Technical and log data: Retained for up to 12 months for security and fraud detection purposes, then deleted or anonymised.

At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where anonymisation is applied, the resulting data is no longer personal data and may be retained indefinitely for statistical purposes.

08 Your Data Rights

As a gempak33 member, you have the following rights in respect of your personal data:

• Right of access: You may request a copy of the personal data gempak33 holds about you at any time.
• Right to rectification: You may request correction of inaccurate or incomplete personal data held in your gempak33 account.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our retention obligations under applicable law.
• Right to restrict processing: You may request that gempak33 restricts processing of your personal data in certain circumstances, such as while a dispute is being investigated.
• Right to data portability: You may request your personal data in a structured, commonly used, machine-readable format for transfer to another service provider.
• Right to object: You may object to processing based on legitimate interests, including direct marketing communications, at any time.
• Right to withdraw consent: Where processing is based on consent (e.g., marketing emails), you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact gempak33 support via live chat (available 24/7 inside your account) or by email at [email protected]. We will respond to verified requests within 30 days. Identity verification may be required before requests are processed.

09 Cookies & Tracking Technologies

gempak33 uses cookies and similar tracking technologies on gempak33.org for the following purposes:

• Strictly necessary cookies: Required for the platform to function, including session authentication, security tokens, and load balancing. These cannot be disabled without breaking core platform functionality.
• Performance and analytics cookies: Used to understand how members navigate the platform, which games are most accessed, and where technical errors occur. Data collected is aggregated and anonymised.
• Fraud detection cookies: Used to identify unusual access patterns and protect member accounts from unauthorised access attempts.

gempak33 does not use third-party advertising or social media tracking cookies. We do not participate in any cross-site tracking networks or retargeting advertising programmes.

Most browsers allow you to manage or delete cookies through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the gempak33 platform, including logging in to your account.

10 Children, Minors & Age Restriction

gempak33 employs age verification controls during the registration process and enforces KYC identity checks before processing any withdrawals. Parents and guardians who suspect a minor has registered on gempak33 should contact our support team immediately via live chat so the account can be reviewed and closed promptly.

11 Data Security Measures

gempak33 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• TLS 1.3 encryption for all data transmitted between your device and gempak33 servers.
• Bcrypt password hashing — gempak33 does not store plaintext passwords under any circumstances.
• Payment card data is not stored on gempak33 servers — all card transactions are processed directly by certified payment gateways under PCI-DSS compliance frameworks.
• Role-based access controls limiting staff access to personal data to those with a legitimate operational need.
• Regular security audits and penetration testing of the gempak33 platform infrastructure.
• Incident response procedures to detect, contain, and notify affected members of data breaches within the timeframes required by applicable law.

While gempak33 takes all reasonable precautions to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your login credentials and for securing your own devices. Report any suspected account compromise immediately via gempak33 live support.

12 Changes to This Privacy Policy

gempak33 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered members via email or an in-platform notification.

Your continued use of the gempak33 platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. We encourage you to review this page periodically to stay informed of how gempak33 handles your personal data.

13 Contact & Data Requests

For all privacy-related enquiries, subject access requests, or data deletion requests, please contact the gempak33 Data Protection team through the following channels:

• Live Chat: Available 24/7 inside your gempak33 account dashboard — the fastest way to reach our team.
• Email: [email protected] — for formal written requests, include "Privacy Request" in your subject line.

gempak33 will acknowledge all formal data protection requests within 3 business days and will respond in full within 30 days of receipt. Complex or high-volume requests may require up to an additional 30-day extension, in which case you will be informed of the extension and the reasons for it.