Privacy Policy

This Privacy Policy ("Policy") sets out the basis on which GempakSlot ("GempakSlot", "we", "us", "our") collects, processes, stores, and discloses personal data obtained from players and visitors ("you", "User", "Player") who access or use the online gaming platform operated at https://gempakslot.cam ("the Platform").

GempakSlot operates in full recognition of applicable data protection and privacy legislation, including the Personal Data Protection Act 2010 (Malaysia) ("PDPA") and any other relevant regulations governing the handling of personal data in jurisdictions from which the Platform is accessed.

By registering an Account, accessing the Platform, or otherwise engaging with GempakSlot's services, you consent to the collection and processing of your personal data as described in this Policy. If you do not consent, please do not use the Platform and do not register an Account.

For the purposes of this Policy, the following terms shall have the meanings assigned to them below:

• "Personal Data" means any information that identifies or can reasonably be used to identify a living individual, including name, identification number, contact details, financial information, and online identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means GempakSlot, the entity that determines the purposes and means of processing Personal Data.
• "Data Processor" means any third-party entity that processes Personal Data on behalf of GempakSlot, under documented instructions.
• "KYC" means Know Your Customer, the identity verification process required before processing withdrawals or in response to regulatory obligations.
• "Cookie" means a small text file stored on your device by the Platform to enable functionality, analytics, and session management.
• "Account" means the registered Player account created by an individual on the Platform.

GempakSlot collects the following categories of Personal Data from Players, where applicable:

GempakSlot does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, health information, or biometric data, unless specifically required by applicable law or regulatory compliance obligations.

GempakSlot collects Personal Data through the following means:

• Direct submission: Information you provide when registering an Account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated technical collection: Data collected automatically when you access the Platform, including server logs, session data, IP addresses, browser fingerprints, and cookies. See Section 11 (Cookies & Tracking) for full details.
• Third-party payment processors: When you deposit or withdraw funds via Malaysian payment channels (including Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, or cryptocurrency networks), relevant transaction data is shared with GempakSlot by those processors.
• Identity verification providers: If GempakSlot engages a third-party KYC or identity verification service, that provider may supply verification results and associated data to GempakSlot.
• Fraud prevention and anti-money laundering systems: GempakSlot may receive risk signals or flags from fraud detection services that monitor Platform activity.

GempakSlot processes Personal Data for the following specific and documented purposes:

• To create, manage, and maintain your registered Account on the Platform.
• To verify your identity and age in accordance with KYC obligations and to comply with applicable regulatory requirements (21+ verification).
• To process deposits, withdrawals, and other financial transactions via your selected Malaysian or international payment method.
• To provide and improve the Platform's functionality, including personalised game recommendations and interface preferences.
• To communicate with you regarding your Account, transactions, promotions, responsible gambling tools, and material changes to this Policy or our Terms.
• To detect, investigate, and prevent fraudulent activity, collusion, money laundering, and other prohibited conduct as defined in our Terms & Conditions.
• To respond to enquiries and support requests submitted via live chat, email, or other channels.
• To comply with legal and regulatory obligations, including anti-money laundering (AML) reporting requirements.
• To analyse Platform usage, session patterns, and game performance for internal business analytics and service improvement.
• To administer and enforce responsible gambling tools, including deposit limits, self-exclusion requests, and account cooling-off periods.

GempakSlot processes Personal Data on the following legal grounds:

• Contractual necessity: Processing required to provide the gaming services you have contracted for, including Account creation, gameplay, and payment processing.
• Legal obligation: Processing required to comply with applicable law, including anti-money laundering regulations, KYC obligations, and mandatory age verification requirements.
• Legitimate interests: Processing necessary for GempakSlot's legitimate business interests, including fraud prevention, Platform security, and operational analytics, where these interests are not overridden by your privacy rights.
• Consent: Where processing is based on your express consent, such as optional marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing based on consent prior to withdrawal.

GempakSlot does not sell, rent, or trade your Personal Data to any third party. We may share your data only in the limited circumstances described below:

• Payment processors and financial institutions: Data necessary to process your deposits and withdrawals is shared with relevant payment providers (e.g., FPX, DuitNow, Touch 'n Go eWallet, Maybank, CIMB, Public Bank, cryptocurrency network operators) under contractual data processing agreements.
• Identity and KYC verification providers: Documents and identity data submitted for KYC purposes may be processed by contracted third-party verification service providers operating under strict confidentiality and security obligations.
• Fraud detection and AML services: Technical and transactional data may be shared with fraud prevention or anti-money laundering compliance tools to identify and prevent prohibited activity.
• Game content providers: Certain gameplay data (such as bet amounts, game session results, and device identifiers) may be transmitted to licensed game providers whose content is hosted on the Platform, for the purpose of game delivery and dispute resolution.
• Legal and regulatory authorities: GempakSlot will disclose Personal Data to competent authorities, law enforcement agencies, or regulatory bodies where required by applicable law or valid legal process.
• Business restructuring: In the event of a merger, acquisition, or business transfer, Personal Data held by GempakSlot may form part of the transferred assets, subject to the same privacy protections described in this Policy.

In some cases, GempakSlot's data processors and service providers may be located outside Malaysia. Where Personal Data is transferred to a jurisdiction outside Malaysia, GempakSlot ensures that appropriate safeguards are in place to protect such data, including contractual clauses that impose data protection obligations equivalent to those applicable in Malaysia under the PDPA.

GempakSlot will not transfer your Personal Data to a country or territory outside Malaysia unless that transfer is necessary for the performance of the services you have contracted for, required by applicable law, or made with your explicit consent.

GempakSlot retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention periods apply:

• Active Account data: Retained for the duration of your Account's active status on the Platform.
• Closed Account data: Retained for a minimum of five (5) years following account closure, in compliance with anti-money laundering and financial record-keeping obligations.
• KYC documentation: Retained for a minimum of five (5) years from the date of submission or last transaction, whichever is later.
• Transaction records: Retained for a minimum of seven (7) years for financial compliance and audit purposes.
• Support communications: Retained for up to three (3) years from the date of the last correspondence.
• Technical and log data: Retained for up to twelve (12) months for security monitoring and fraud detection purposes.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that prevents re-identification.

GempakSlot employs a range of technical and organisational measures to protect your Personal Data against unauthorised access, loss, disclosure, alteration, or destruction. These measures include, but are not limited to:

• Transport Layer Security (TLS) and SSL encryption for all data transmitted between your device and the Platform.
• AES-256 encryption for Personal Data and sensitive financial information stored at rest.
• Role-based access controls ensuring that only authorised personnel can access Personal Data, based on the principle of least privilege.
• Audit logging and monitoring of all access to systems containing Personal Data.
• Regular security assessments, vulnerability scans, and penetration testing of Platform infrastructure.
• Two-factor authentication (2FA) available for all Player Accounts and mandatory for internal staff access to data systems.
• Incident response procedures for detecting, containing, and notifying affected parties of any confirmed Personal Data breach.

11.1 What Are Cookies

Cookies are small text files stored on your device by a website to enable functionality, remember preferences, and collect usage data. GempakSlot uses cookies and similar technologies (such as web beacons and local storage) to operate and improve the Platform.

11.2 Types of Cookies We Use

• Strictly necessary cookies: Required for the Platform to function. These cannot be disabled. They include session authentication tokens, security cookies, and load-balancing cookies.
• Functional cookies: Store your preferences such as language selection, display settings, and game history visibility. Disabling these may affect Platform functionality.
• Analytics cookies: Collect anonymised data about how players use the Platform — pages visited, session duration, click patterns — to help us improve the experience. No personally identifiable information is collected via analytics cookies.
• Security cookies: Used to detect and prevent fraudulent activity, protect against session hijacking, and enforce Account integrity.

11.3 Managing Cookies

You may configure your browser to refuse or delete cookies. Note that disabling strictly necessary cookies will prevent you from logging into and using the Platform. Instructions for managing cookies in popular browsers (Chrome, Firefox, Safari, Edge) are available in each browser's help documentation.

Subject to applicable law and certain limited exceptions, you have the following rights in respect of the Personal Data GempakSlot holds about you:

• Right of Access: You may request a copy of the Personal Data we hold about you. We will provide this within 30 days of a verified request.
• Right to Rectification: If any Personal Data we hold is inaccurate or incomplete, you have the right to request that we correct it. You may also update most Account information directly via your Account dashboard.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to GempakSlot's legal retention obligations. We cannot erase data where retention is required by law (e.g., AML records).
• Right to Restrict Processing: In certain circumstances, you may request that we restrict the processing of your data — for example, while the accuracy of data you have contested is being verified.
• Right to Data Portability: Where technically feasible and legally applicable, you may request a structured, machine-readable copy of Personal Data you have provided to us.
• Right to Object: You have the right to object to processing of your Personal Data where such processing is based on GempakSlot's legitimate interests. We will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please submit your request to [email protected] with the subject line "Data Rights Request". We may require identity verification before processing your request. All requests will be acknowledged within 5 business days and actioned within 30 days.

If you believe that GempakSlot has inadvertently collected Personal Data from a person under the age of 21, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

GempakSlot reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. When material changes are made, we will notify registered Players via email or a prominent notice on the Platform before the changes take effect.

The "Last updated" date at the top of this Policy will always reflect the date of the most recent revision. We recommend that you review this Policy periodically. Continued use of the Platform after the effective date of any revision constitutes your acceptance of the updated Policy.

For any questions, concerns, or requests relating to this Privacy Policy or your Personal Data, please contact GempakSlot through the following channels: