Privacy Policy Gempak77 — Your Personal Data Protection

Gempak77 is an online entertainment platform serving users in Malaysia, with a strong commitment to user privacy. This Privacy Policy applies to all individuals who access or use Gempak77's services, including those who browse our website without creating an account.

This policy covers all gempak77 service channels including the official website, Android app, email communications, Live Chat service, and any direct interactions with our support team. This document should be read together with Terms and Conditions us to provide a comprehensive overview of the rights and responsibilities of all parties.

Gempak77 only collects data that is strictly necessary to deliver our platform services safely, efficiently, and responsibly. The following are the categories of data we collect:

All data we collect is used for clear and lawful purposes. gempak77 does not use your data for any purpose other than those stated here without obtaining additional consent from you:

• Account Management: To create, verify, and maintain your user account on the Gempak77 platform.
• Transaction Processing: To process deposits, withdrawals, bonus payments, and any other financial transactions.
• Identity Verification (KYC): To conduct KYC checks as required by law to prevent fraud and money laundering.
• Service Provision: Allows you to access and use all games and features on the Gempak77 platform.
• Customer Support: To handle your complaints, inquiries, and support requests efficiently.
• Platform Security: To detect and prevent fraudulent activity, unauthorized access, and security breaches.
• Legal Compliance: To fulfill relevant legal and regulatory obligations.
• Platform Improvement: To analyze usage patterns in order to improve the platform experience and performance.
• Marketing Communications: To send promotional information and exclusive offers — only to users who have consented to receive such communications.

Under Malaysia's PDPA 2010, gempak77 processes your personal data on the basis of one or more of the following valid legal grounds:

• Consent: You have given explicit consent for the processing of your data for specific purposes, such as marketing communications.
• Contract Performance: Processing is necessary to fulfill the service contract between you and gempak77 — including payment processing and account management.
• Legal Obligation: Processing is necessary to comply with legal obligations applicable to gempak77, including KYC and anti-money laundering requirements.
• Legitimate Interest: Processing is necessary for the legitimate interests of gempak77 or third parties, such as fraud detection and platform security, provided those interests do not override your fundamental rights.

Gempak77 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Your data may be shared only in the following limited situations:

• Service Providers: Trusted third parties that assist us in platform operations — such as payment processors, game software providers, and cloud services — are all bound by strict confidentiality agreements.
• Legal Requirement: When required by court order, regulatory directive, or other legal obligation.
• Fraud Detection: With recognised identity verification and fraud prevention agencies for the purpose of platform and user protection.
• Internal Investigation: In cases where fraudulent activity or a breach of terms is suspected, data may be shared with relevant internal or external investigation teams.

Gempak77 invests seriously in security infrastructure to protect your personal data from unauthorized access, loss, misuse, or disclosure. The technical and organizational measures we employ include:

• 256-bit SSL/TLS Encryption for all data transmitted between your device and gempak77 servers.
• Secure password storage using irreversible hashing algorithms.
• Role-based access control ensuring only authorized personnel can access sensitive data.
• Regular security audits by our internal security team and independent external auditors.
• 24/7 Threat Monitoring using an automated intrusion detection system.
• Encrypted data backups at secure, geographically separated data centers for disaster recovery.

While we take all reasonable steps to protect your data, no security system is 100% perfect. We therefore also encourage you to take protective measures on your own end, such as using a strong password and enabling two-factor authentication (2FA).

Gempak77 retains your personal data only for as long as necessary to fulfill the purposes stated in this Privacy Policy, or as required by law:

• Active Account Data: Retained for the duration your account is active and for a reasonable period after account closure.
• Financial & Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's accounting and tax legislation.
• KYC Records: Retained for a minimum of 6 years from the date of the last business relationship, in line with anti-money laundering requirements.
• Support Communication Logs: Retained for 2 years for quality control and reference purposes.
• Technical Data & Access Logs: Retained for 90 days for security and fraud detection purposes.

Once the applicable retention period has expired, your data will be securely deleted or anonymized from our systems.

Under Malaysia's PDPA 2010, you have certain rights regarding the personal data we hold about you. gempak77 respects and facilitates the exercise of all these rights:

Gempak77 uses cookies and similar tracking technologies to enhance the user experience, analyze platform traffic, and maintain security. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login sessions and account security. These cookies cannot be disabled.
• Performance Cookies: To collect information about how you use the platform to help us improve the user experience. This information is collected anonymously.
• Functional Cookies: Storing your preferences such as language and display settings to provide a more personalized experience.
• Analytics Cookies: Helps us understand overall platform usage patterns for continuous improvement purposes.

You can control and manage cookies through your web browser settings. However, disabling certain cookies may affect the functionality of the gempak77 platform.

Gempak77 is a platform restricted to users aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

If we find that we have inadvertently collected personal data from a child, we will take immediate steps to delete that data and close the relevant account. Parents or guardians who discover their child has registered at gempak77 are advised to contact our support team immediately.

Gempak77 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or business developments. Each new version will be published on this page with a clear update date.

For significant changes, we will endeavour to notify you via in-platform notifications or your registered email. Continued use of the gempak77 platform after any amendment is displayed constitutes acceptance of the latest version of the Privacy Policy.

If you have any questions, concerns, or complaints regarding how Gempak77 handles your personal data, you may contact our privacy and data protection team through the following channels:

If you are not satisfied with our response, you have the right to file a complaint with Malaysia's Personal Data Protection Department (PDPD) or the relevant regulatory authority.