Privacy Policy Gembet — Malaysia User Data Protection

Gembet ("we", "our platform") takes the responsibility of protecting every user's privacy seriously. This Privacy Policy clearly and transparently explains how we collect, use, store, and protect your personal information when you register, log in, or interact with the gembet platform in any way.

This document applies to all gembet platform users, including those browsing our website, registering a new account, making deposits or withdrawals, participating in promotions, and contacting our customer support team. By using gembet's services, you hereby agree to the terms contained in this Privacy Policy.

We fully comply with the requirements set out in Personal Data Protection Act 2010 (PDPA) Malaysia. If you have any questions about how we handle your data, our contact details can be found at the end of this document.

Gembet only collects information that is genuinely necessary to provide you with a safe, seamless, and responsible service. The information we collect falls into three main categories:

A. Information You Provide Directly

• Identity Information: Full name, date of birth, identification card number or passport number.
• Contact Information: Email address, phone number, and residential address.
• Financial Information: Bank account number, bank name, and digital wallet details for deposit and withdrawal purposes.
• KYC Documents: Copies of your identity card, bank statement, or other supporting documents for identity verification.

B. Automatically Collected Information

• Technical Data: IP address, browser type, operating system, and device language settings.
• Usage Data: Pages visited, games played, session duration, and navigation patterns within the platform.
• Location Data: General geographic location based on IP address for compliance and security purposes.
• Device Data: Device type, unique device identifier, and app version in use.

C. Information from Third Parties

• Payment Processors: Transaction verification and payment status confirmation from financial service providers.
• Verification Agency: Identity verification information from trusted third-party KYC check services.

Every piece of information we collect has a clear and lawful purpose. gembet does not use your data beyond the scope necessary to operate our services properly and securely.

Gembet does not sell your personal information to any third party. However, there are limited situations where we may need to share certain information to ensure the platform operates securely and in compliance with legal requirements:

• Payment Processors: Required transaction information is shared with payment service providers such as FPX, DuitNow, and digital wallets to process your deposits and withdrawals.
• KYC Service Providers: Identity data is shared with recognised third-party identity verification platforms for KYC checks only.
• Statutory Authorities: gembet will disclose information to the authorities where required by law, court order, or official investigation.
• Game Providers: Usernames and account IDs are shared on a limited basis with our licensed game providers for game session management purposes only.

All third parties who receive your information are bound by strict confidentiality agreements and are not permitted to use that data for any purpose other than those specified in their agreement with gembet.

The gembet platform uses cookies and similar tracking technologies to enhance user experience, maintain login session security, and understand how users interact with our platform.

• Essential Cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled.
• Analytics Cookies: Helps us understand how users navigate the platform so we can make continuous improvements. This data is collected anonymously.
• Preference Cookies: Stores your preferences such as language, display layout, and other personal settings within the platform.

Gembet continuously invests in robust cybersecurity infrastructure to ensure your data remains protected at the highest level. The key security measures we implement are as follows:

• 256-bit SSL Encryption: All data transmitted between your device and gembet's servers is fully encrypted using the latest TLS protocols.
• Integrated Secure Servers: Data is stored in certified data centres with strict physical and digital access controls, including CCTV surveillance and biometric access.
• Internal Access Controls: Only authorised personnel have access to user data, and every access is logged for audit purposes.
• Real-Time Monitoring: An active threat detection system operates 24/7 to identify and respond to any suspicious activity immediately.
• Regular Backups: Data is automatically and regularly backed up to ensure service continuity and data recovery in the event of a system failure.

While we take all reasonable measures to protect your data, no security system can be guaranteed to be 100% secure. In the event of a data breach affecting your information, gembet will notify you within 72 hours of the incident being confirmed.

Gembet only retains your personal information for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable laws in Malaysia.

• Active Account Data: Retained for the duration your account is active and for 7 years after account closure for financial compliance purposes.
• Transaction Records: Retained for a minimum of 7 years in line with financial reporting and anti-money laundering (AML) requirements.
• Customer Support Logs: Retained for 3 years for reference and service quality improvement.
• Analytics Data: Anonymised data used for analytics is fully deleted or anonymised after 2 years.

Once the retention period expires or upon your request (subject to legal obligations), your data will be securely deleted using industry-standard deletion methods.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal information we hold about you:

The gembet Platform is exclusively for adult users aged 18 and above. We do not knowingly collect, store, or process any personal information from individuals under the age of 18.

If we discover that we have inadvertently collected information from underage individuals, we will promptly delete all such information and close the relevant account. Parents or guardians who become aware that their child has registered on our platform are encouraged to contact us immediately at [email protected].

The gembet platform may contain links to third-party websites or services in certain contexts, such as game providers or payment processors. Please note that gembet's Privacy Policy not applicable to those third-party websites or services.

Gembet is not responsible for the privacy practices or content of any third-party websites. We recommend reading the privacy policy of each website before providing them with any personal information.

Gembet reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our operational practices, new legal requirements, or advancements in data protection technology.

Whenever material changes are made, we will notify you via an in-platform notification or your registered email at least 7 days before those changes take effect. The "Last Updated" date at the top of this page indicates when this Privacy Policy was last reviewed.

Continued use of the gembet platform after the effective date of any amendment constitutes acceptance of the updated Privacy Policy. If you disagree with any changes, you may choose to close your account.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please do not hesitate to contact us:

• Email: [email protected]
• Live Chat: Available on the platform 24/7 — response within 30 minutes.
• Page FAQ contains answers to the most frequently asked privacy questions.