Privacy Policy Gampak99 – Personal Data Protection for Malaysian Players

1. Introduction & Scope of This Policy

This Privacy Policy ("Policy") describes the personal data collection, use, storage, and protection practices of Gampak99, which operates an online entertainment platform at the website gampak99.best. This policy applies to all users and players who access or use any Gampak99 services, including online casino, Sports Betting, and digital games.

By registering an account or using Gampak99's services, you agree to the collection and use of your information in accordance with this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our platform and contact us with any further enquiries.

Gampak99 is the data controller for all personal information you provide to us. We are committed to handling your personal data responsibly, transparently, and in accordance with the standards set out under Malaysia's Personal Data Protection Act 2010 (PDPA).

2. Personal Data We Collect

2.1 Data You Provide Directly

Gampak99 collects the following personal data directly from you during the registration process, while you use the platform, and through communications with our team:

2.2 Automatically Collected Data

In addition to data you provide directly, Gampak99 also collects certain data automatically when you use our platform:

• Device Data: Device type, operating system, phone model, and screen resolution
• Connection Data: IP address, web browser type and version, internet service provider (ISP)
• Usage Data: Pages visited, games played, session duration, login and logout times
• Transaction Data: Deposit, withdrawal, betting, and winnings history within the platform
• Location Data: General location information derived from your IP address (state/city) for compliance and security purposes

3. Purpose of Data Collection

Gampak99 collects and uses your personal data solely for the following legitimate and stated purposes:

• Account Management: Creating, managing, and maintaining your player account on the Gampak99 platform
• Payment Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, CIMB Clicks, and withdrawals to verified accounts
• Identity Verification (KYC): Fulfilling legal obligations for age and identity verification to prevent fraud and comply with anti-money laundering regulations
• Platform Security: Detecting and preventing fraud, bot usage, bonus abuse, and suspicious activity
• Customer Support: Providing assistance and resolving player enquiries or complaints
• Platform Enhancements: Analysing usage patterns to improve the user experience, game performance, and platform features
• Service Communications: Sending important notifications about your account, transactions, policy changes, or security-related information
• Legal Compliance: Meeting reporting and compliance obligations to relevant authorities in Malaysia when required

4. Data Sharing with Third Parties

4.1 Core Principle: No Data Selling

Gampak99 does not sell, rent, or commercialise players' personal data to any third party for marketing or commercial purposes. This is a core commitment that remains unchanged.

4.2 Permitted Sharing

In the following limited circumstances, gampak99 may share your personal data with trusted third parties:

• Game Providers: Usernames and game session data are shared with licensed game providers such as Pragmatic Play, Evolution Gaming, and PG Soft solely for the purpose of delivering games to you. These providers are bound by strict data confidentiality agreements.
• Payment Processors: Required transaction information is shared with Malaysian payment processors, including DuitNow, FPX, and e-wallet operators, for the purpose of processing your deposits and withdrawals.
• Legal Authorities: gampak99 will disclose personal data to Malaysian authorities when required to do so by law, court order, or a lawful request from law enforcement.
• Technical Service Providers: Technical infrastructure providers involved in operating the platform (such as cloud computing services) that have signed strict data processing agreements with us.

4.3 Sharing with Your Consent

Outside of the situations described above, Gampak99 will only share your personal data with third parties where you have given clear and explicit consent beforehand.

5. Security & Data Protection

Gampak99 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction:

5.1 Technical Security

• 256-Bit SSL Encryption: All data communications between your browser and Gampak99's servers are encrypted using the latest TLS protocol with AES-256 encryption
• Stored Data Encryption: Sensitive personal data, including financial information, is encrypted at rest within our databases
• Internal Access Controls: Access to player personal data within Gampak99's systems is restricted to staff with a legitimate operational need, based on the principle of least privilege
• Security Monitoring: Our systems are continuously monitored for suspicious activity or unauthorised access attempts
• Security Audits: Regular security audits are conducted by independent parties to ensure our data protection standards remain current

5.2 Response to Data Breaches

In the event of a data security breach that poses a risk to your rights and freedoms, Gampak99 is committed to notifying affected players within a reasonable timeframe in accordance with applicable legal requirements. Notifications will be sent to your registered email address and via in-platform notifications.

6. Cookies & Tracking Technologies

Gampak99 uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device when you visit our website.

6.1 Types of Cookies We Use

• Essential Cookies: Required for core platform functions such as login authentication and session management. Without these cookies, the platform cannot function properly. These cookies cannot be disabled.
• Preference Cookies: Saving your preferences and settings — such as language and display theme — to ensure a better experience on your next visit.
• Analytics Cookies: Helps us understand how players use the platform for improvement purposes. Data is collected in aggregate form without individual identification.
• Security Cookies: Used to detect suspicious activity, protect against fraud, and maintain the security of your session.

6.2 Cookie Controls

You can manage and delete cookies through your web browser settings. However, disabling certain cookies may affect the functionality of the Gampak99 platform. For information on how to manage cookies across different browsers, please refer to your browser's help documentation.

7. Your Rights as a Player

As a Gampak99 player and data subject under Malaysia's PDPA, you have the following rights regarding the personal data we hold about you:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of any personal data we hold that is inaccurate or incomplete
• Right to Erasure: Request the deletion of your personal data under certain circumstances (subject to our legal obligations to retain specific records)
• Right to Restrict Processing: Request that we restrict how we process your personal data under certain circumstances
• Right to Object: Object to the processing of your personal data for direct marketing purposes
• Right to Withdraw Consent: Withdraw consent you have previously given for data processing at any time, although this does not affect the validity of processing carried out prior to withdrawal

To exercise any of the rights above, please contact us by email at support@gampak99.best, clearly stating your request. We will process your request within 30 days. In some cases, we may need to verify your identity before processing any data-related request.

8. Data Retention & Deletion

Gampak99 retains your personal data for as long as necessary to fulfil the purposes for which it was collected as described in this Policy, or for the period required under applicable Malaysian law, whichever is longer.

8.1 Standard Retention Periods

• Active Account Data: For the duration of your active Gampak99 account, plus a minimum of 5 years after account closure for legal compliance purposes
• Financial Transaction Records: Minimum 7 years from the transaction date, as required under Malaysian financial laws
• KYC Records & Identity Verification: Minimum 5 years from the date of verification or account closure
• Customer Support Communication Logs: 2 years from the date of last interaction
• Analytics Data: Aggregated usage data that cannot be individually identified may be retained for a longer period for platform analytics purposes

8.2 Deletion After Retention Period

Once the applicable retention period has elapsed, your personal data will be securely deleted or anonymised in a manner that ensures it can no longer be re-identified. The deletion process follows standard information security procedures.

9. Cross-Border Data Transfers

In operating the Gampak99 platform, some of your personal data may be transferred to or stored on servers located outside Malaysia, particularly in connection with licensed international game providers and the platform's technical infrastructure.

Gampak99 ensures that any cross-border data transfers only take place where adequate protections are in place, including:

• Data processing agreements that require recipients to uphold data protection standards equivalent to Malaysia's PDPA
• Use of transfers to countries recognised as having adequate data protection laws
• Verified contractual protection mechanisms to safeguard your privacy rights

10. Policy Amendments & Contact Us

Gampak99 reserves the right to amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or platform developments. Significant amendments will be communicated to registered players via in-platform notifications or by email to the address registered on your account at least 14 days before the changes take effect.

Continued use of the Gampak99 platform after the effective date of any amendment constitutes acceptance of the revised policy. The latest version of this Privacy Policy will always be available on this page.

If you have any questions or concerns, or wish to exercise your privacy rights, please contact Gampak99's Data Privacy Officer through the following channels:

• Email: support@gampak99.best (please state "Data Privacy Inquiry" in the email subject line)
• Live Chat: Available 24/7 on the gampak99.best platform — select the "Privacy & Data" category
• WhatsApp: Available after logging in to your Gampak99 account

We are committed to responding to all data privacy enquiries within 5 business days. For more complex data deletion or access requests, the process may take up to 30 days depending on the complexity of the request.