Gempak999 Privacy Policy – Member Personal Data Protection

1 Introduction

Welcome to the Gempak999 Privacy Policy. This document outlines our commitment to protecting your personal information as a member or user of the Gempak999 platform, accessible at gempak999.vip and through our official mobile app.

Gempak999 operates with a full sense of responsibility for every user's privacy. We understand that your personal information is valuable and sensitive, particularly in the context of an online entertainment platform. As such, we have established strict data management practices in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA).

This Privacy Policy applies to all information collected through our platform, including during the registration process, use of services, financial transactions, and interactions with our customer support team. By using the Gempak999 platform, you agree to the practices described in this Privacy Policy.

2 Types of Data We Collect

Gempak999 collects several categories of personal information to enable us to provide you with a safe, compliant, and high-quality service:

We only collect data that is strictly necessary for the stated purpose. gempak999 does not collect sensitive information such as medical records, political views, or religious beliefs.

3 How We Collect Your Data

Your personal data is collected through several key channels:

• Account Registration: When you complete the registration form on the Gempak999 platform, we collect the information you provide directly, such as your name, email address, and phone number.
• Identity Verification (KYC): During the KYC process, you are required to submit an identity document and proof of address to allow us to securely verify your identity.
• Financial Transactions: Deposit and withdrawal details are collected automatically when you make transactions via supported payment methods such as FPX, DuitNow, or e-wallets.
• Platform Usage: Technical and usage data is collected automatically via cookies, server logs, and other tracking technologies while you use our platform.
• Customer Support Interactions: When you contact our support team via live chat or email, the communication records are retained for quality assurance and issue resolution purposes.
• Trusted Third Parties: In some cases, we may receive additional information about you from authorised third-party identity verification providers to ensure the accuracy of your KYC information.

4 How We Use Your Data

Gempak999 uses the data collected solely for legitimate and reasonable purposes. The following are the primary purposes for which your personal data is used:

• Setting up, managing, and maintaining your account on the gempak999 platform.
• Processing deposits, withdrawals, and all financial transactions securely and accurately.
• Carrying out identity verification (KYC) to comply with anti-money laundering (AML) legal requirements.
• Sending important notifications related to your account, transactions, promotions, and platform updates.
• Detecting, investigating, and preventing fraud, account abuse, and suspicious activity.
• Enhancing the user experience based on usage patterns and feedback received.
• Fulfilling applicable legal obligations and regulatory compliance requirements.
• Conducting internal analysis for service improvement and new product development purposes.
• Providing better customer support by understanding your needs and interaction history.
• Ensuring the platform operates optimally and remains protected against cybersecurity threats.

We will not use your data for third-party marketing purposes without your explicit consent.

5 Data Sharing with Third Parties

Gempak999 does not sell, rent, or trade your personal information to any third party for commercial purposes. However, in certain situations, we may share your information with the following parties:

• Payment Service Providers: Required transaction information is shared with partner banks, e-wallet providers, and payment processors to facilitate secure transactions.
• Identity Verification Providers: KYC information is shared with accredited identity verification services that help us ensure the accuracy of member information.
• Technology Service Providers: We use selected, trusted cloud service providers and technology infrastructure to store and process your data securely.
• Legal Authorities: Gempak999 will disclose required information to government authorities, regulatory bodies, or law enforcement agencies when mandated by law or court order.
• Audit & Compliance: Independent auditors and legal advisors may be granted limited access to data as required for audit, compliance, and professional advisory purposes.

All third parties we engage are required to comply with strict data security standards and are only permitted to use your data for the specific agreed purposes.

6 Data Security

Gempak999 continuously invests in advanced security infrastructure to keep your personal data protected at all times. The security measures we employ include:

• Data encryption in transit using TLS/SSL 256-bit protocols, ensuring all communication between your device and our servers is protected from interception.
• Data encryption at rest — sensitive information such as passwords and financial details is stored in encrypted form using industry-standard encryption algorithms.
• Strict access controls ensure that only authorised staff can access members' personal data, and only to the extent required for their role.
• 24/7 security monitoring to detect any suspicious activity or system intrusion attempts in real time.
• Regular security testing by independent cybersecurity experts to identify and patch any system vulnerabilities.
• Two-factor authentication (2FA) is available for all member accounts as an added layer of protection.
• Structured security incident management — in the event of any data breach, we will notify affected members within the timeframe required by law.

While we take all reasonable steps to protect your data, no system can be guaranteed 100% secure. You also play an important role by keeping your account password confidential.

7 Cookies & Tracking Technologies

Gempak999 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

• Essential Cookies: Required for core platform functions such as login sessions and security. These cookies cannot be disabled.
• Performance Cookies: Helping us understand how users interact with our platform, enabling us to make continuous improvements.
• Functional Cookies: Remembering your preferences such as language and display settings to deliver a more personalised experience.
• Analytics Cookies: Used to analyse aggregated usage patterns to help us better understand user needs.

You can manage or disable cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality of the Gempak999 platform.

8 Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and our privacy policy, you have the following rights regarding your personal data:

• Right of Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: You may request the correction of any inaccurate or outdated personal data.
• Right to Erasure: In certain circumstances, you may request that your personal data be deleted from our systems, subject to applicable legal obligations.
• Right to Object: You may object to the processing of your data for direct marketing purposes at any time.
• Right to Withdraw Consent: You may withdraw consent previously given for certain data processing activities, though this may affect our ability to provide some services.
• Right to be Informed: You have the right to be informed about how your data is used, in clear and plain language.

To exercise any of the above rights, please contact our data protection team. We will process your request within 21 business days of receipt.

9 Data Retention Period

Gempak999 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable law.

• Active account data is retained for the duration of your membership at Gempak999.
• Financial transaction and KYC records are retained for a minimum of 7 years following account closure, in accordance with Malaysia's financial and AML regulatory requirements.
• Customer support communication data is retained for 3 years from the date of the last interaction.
• Technical logs and anonymised analytics data may be retained for a longer period for security and platform improvement purposes.
• Once the retention period expires, your data will be securely deleted or anonymized using methods that ensure the data cannot be recovered.

10 Changes to This Privacy Policy

Gempak999 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. Any significant changes will be communicated to you via:

• In-platform notification on gempak999 upon your next login.
• An email notification to your registered address at least 7 days before the changes take effect.
• Update the "Last Updated" date at the top of this document.

Continued use of the gempak999 platform after changes take effect constitutes your acceptance of the amended Privacy Policy. We encourage you to review this page periodically.

11 Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact Gempak999's Data Protection Officer (DPO) through the following channels:

We are committed to addressing every inquiry or complaint seriously and providing thorough responses within the stipulated timeframe.