Privacy Policy gempak888 — Our Commitment to Protecting Your Personal Data

Your privacy is our priority. This policy transparently explains how gempak888 collects, uses, and protects every piece of personal information you provide to us — fully in accordance with Malaysia's Personal Data Protection Act (PDPA 2010).

This policy is effective from 1 January 2026  |  Version 2.4

Gempak888 Data Protection
Full compliance with Malaysia PDPA 2010
256-bit SSL encryption on all transactions
No data sharing with third parties
Data access, correction & deletion rights
Round-the-clock 24/7 security monitoring
256-bit SSL Encryption for All Data
PDPA MY Legal Compliance
0 Unauthorised Data Sharing
24/7 Active Security Monitoring

Gempak888's Six Core Privacy Principles

These principles form the foundation of how gempak888 handles every piece of personal data belonging to our Malaysian members.

Purpose-Driven Data Collection

Gempak888 only collects personal data that is strictly necessary to operate our services. We do not gather irrelevant or excessive information. Every piece of data we request has a clear purpose — whether to verify your identity, process MYR transactions or deliver better customer support in Bahasa Malaysia.

Bank-Grade Security

All data stored and transmitted through the gempak888 platform is protected with 256-bit SSL encryption — the same technology used by Malaysia's major banks, including Maybank and CIMB. gempak888 servers are secured by multi-layered firewalls and an intrusion detection system that operates around the clock without interruption.

No Sale of Member Data

Gempak888 has never sold, rented, or transferred members' personal data to any third party for marketing or commercial purposes, and never will. Your data is not a commodity to us — it is a trust you have placed in us, and we protect it with the full weight of that responsibility.

Full Control in Your Hands

As a gempak888 member, you have full rights over your personal data. You may request a copy of your data, request corrections to inaccurate information, or request deletion of your account and all associated data at any time by contacting us at support@gempak888.xyz. These rights are guaranteed under Malaysia's PDPA 2010.

Full Transparency

Gempak888 is committed to being transparent about how we use your data. This Privacy Policy is written in plain, easy-to-understand language – not confusing legalese. We tell you exactly what data we collect, why we need it, and how long we retain it.

Malaysia PDPA Compliance

The gempak888 platform operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). This means every aspect of our data handling — from initial collection to final deletion — meets the requirements of Malaysian federal law, which is legally binding and enforceable in court.

Last updated: 1 January 2026  |  Version 2.4  |  Key changes: Added ShopeePay transaction data handling information and updated activity log retention policy.

Gempak888 ("we", "our platform") respects the privacy of every individual who uses our services. This Privacy Policy clearly explains how we collect, use, store, protect, and in certain circumstances disclose your personal information when you register, log in, and use the gempak888 platform. By using any part of the gempak888 platform, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of our platform.

1Personal Data We Collect

Gempak888 collects personal data from you through several channels – directly when you register or contact us, automatically as you use our platform, and in some cases through legitimate third parties. The following are the categories of data we may collect:

A. Data You Provide Directly:

  • Registration Data: Full name, Malaysian phone number, email address, username and password (stored in encrypted form).
  • Identity Verification Data: Malaysian identity card number (MyKad) or a copy of the identity card, where required for age verification or large withdrawal purposes.
  • Financial Data: Details of the payment methods used — including Touch 'n Go eWallet account numbers, GrabPay, DuitNow, bank account numbers for FPX, Boost, or ShopeePay. gempak888 does not store credit or debit card numbers under any circumstances.
  • Communication Data: The contents of your conversations with the gempak888 customer support team via live chat, WhatsApp, or email.

B. Automatically Collected Data:

  • Technical Data: IP address, browser type, device type, operating system, mobile network operator and screen resolution.
  • Platform Activity Data: Betting records, game history, deposit and withdrawal transaction history, login and logout times, and pages visited within the gempak888 platform.
  • Cookie Data: Information collected via cookies and similar web tracking technologies – described in further detail in Section 7.
Important Note: gempak888 does not collect biometric data (fingerprints, facial recognition), health data, or any other sensitive data beyond what is necessary for the operation of our Sports Betting and casino platform.

2How We Use Your Data

Gempak888 uses the personal data collected solely for the following purposes. We do not use your data for any other purpose without first obtaining your additional consent:

  • Account Management: To create and manage your gempak888 account, verify your identity at login, and ensure your account remains secure.
  • Transaction Processing: Processing deposits and withdrawals in Malaysian Ringgit (RM) via your chosen payment method — Touch 'n Go eWallet, GrabPay, DuitNow, FPX, Boost, or ShopeePay.
  • Betting & Gaming Activity: Recording and settling all sports bets (football, badminton, tennis, EPL and others), Live Casino games, poker and any other games you participate in on gempak888.
  • Customer Support: Handling enquiries, resolving complaints and providing technical assistance in Bahasa Malaysia 24 hours a day.
  • Fraud Prevention: Identifying and preventing fraudulent activity, money laundering, bonus abuse, and violations of gempak888's terms of use.
  • Legal Compliance: Complying with Malaysian legal requirements, including PDPA 2010 and any directives issued by the relevant authorities.
  • Platform Improvements: Analysing aggregated usage patterns (not individual data) to improve gempak888 platform features, performance and user experience.
  • Service Communications: Sending you important notifications related to your account, transactions, policy updates and relevant promotions via SMS or email.

3Legal Basis for Data Processing

In accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), gempak888 processes your personal data on the following legal bases:

  • Consent: By registering a gempak888 account, you give your explicit consent for us to process your data for the purposes stated in this Privacy Policy. You may withdraw your consent at any time by contacting us.
  • Contract Performance: Processing necessary to fulfil the agreement between you and gempak888 – including the processing of bets, deposits, and MYR withdrawals.
  • Legitimate Interests: Processing required for gempak888's legitimate interests — such as fraud prevention and platform security — provided it does not override your privacy rights.
  • Legal Obligation: Processing required to comply with legal obligations applicable to gempak888 under Malaysian law.

4Data Sharing & Disclosure

Gempak888 does not sell, rent or transfer member personal data to third parties for their own commercial purposes. However, there are limited situations where sharing your data is necessary for legitimate operational reasons:

  • Payment Processors: We share the necessary transaction data with payment method providers such as Touch 'n Go eWallet, GrabPay, DuitNow, FPX banks, Boost and ShopeePay solely for the purpose of processing your transactions. These providers are governed by their own privacy policies and security standards.
  • Platform Technology Providers: gempak888's technical infrastructure relies on several certified cloud and game service providers. These providers are only granted access to the data necessary for their technical functions and are strictly prohibited from using it for any other purpose.
  • Legal Authority: gempak888 will disclose personal data to Malaysian law enforcement agencies or courts when required by law, court order, or a lawful authority.
  • Fraud Prevention: In situations involving a serious threat to platform security or suspected criminal activity, we may share relevant information with the appropriate authorities.
Our Commitment: No gempak888 member data is shared with advertising companies, data brokers, or any third-party commercial entity for marketing, profiling, or commercial analytics purposes without your explicit consent.

5Data Security Measures

Gempak888 implements multiple layers of technical and organisational security to protect your personal data from unauthorised access, loss, destruction, or accidental disclosure:

  • 256-bit SSL Encryption: All communications between your browser and gempak888's servers are encrypted using 256-bit TLS/SSL — the same standard used by Malaysian financial institutions and banks.
  • Encrypted Password Storage: Your gempak888 account password is never stored in plain text. We use a strong cryptographic hash function (bcrypt) to store passwords securely.
  • Multi-Layered Firewall: gempak888's server infrastructure is protected by multi-layered firewalls and an Intrusion Detection System (IDS) that monitors network traffic in real time.
  • Employee Access Controls: Access to member personal data within gempak888 is restricted to staff who genuinely require it for their job responsibilities, in accordance with the principle of least privilege.
  • Regular Security Audits: gempak888 conducts regular security audits and penetration testing to identify and patch system vulnerabilities before they can be exploited.
  • Data Backups: Member data is regularly backed up to secure, encrypted locations to ensure rapid data recovery in the event of an unexpected system failure.
While gempak888 takes all reasonable precautions to protect your data, no system can guarantee 100% security in an online environment. You also play an important role in protecting your account by using a strong password and never sharing your login details with anyone.

6Data Retention Period

Gempak888 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by Malaysian law. The following are our data retention guidelines:

Data Type Retention Period Reason
Active Account Data Throughout the active account period Ongoing service operation
MYR Transaction Records 7 years after transaction Malaysian tax & audit legal requirements
Betting & Gaming Records 3 years after last activity Dispute resolution & compliance
Customer Support Log 2 years after resolution Service improvements
Security & Access Logs 1 year Security threat detection
Closed Account Data 3 years after account closure Fraudulent re-registration prevention

Once the relevant retention period has expired, data will be securely deleted or anonymised so that it can no longer be linked to any specific individual.

7Cookies & Web Tracking Technologies

Gempak888 uses cookies and similar web technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit the gempak888 website. We use the following types of cookies:

Session Cookie – Secure login Preference Cookies — Language & display settings Analytics Cookies – Platform performance Security Cookies — Fraud detection
  • Essential Cookies (Required): Required for the core functionality of the gempak888 platform — including login verification, session security and form security. Without these cookies, gempak888 will not function properly.
  • Preference Cookies: Saving your preferences such as display language and gempak888 interface settings so you do not have to reconfigure them each time you log in.
  • Analytics Cookies: Helps us understand how members use the gempak888 platform — which pages are visited most often, average session duration, and where users encounter difficulties. This data is used in aggregate form and is not used to identify individuals.
  • Security Cookie: Helping us detect suspicious activity, unauthorised login attempts, and usage patterns that indicate fraud.

You can manage or disable cookies through your browser settings at any time. Please note, however, that disabling essential cookies may affect the functionality of the gempak888 platform, including your ability to log in to your account.

8Your Rights Under Malaysia's PDPA

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by gempak888:

  • Right to Access: You have the right to request a copy of the personal data we hold about you. Access requests will be processed within 21 working days.
  • Right to Correction: You have the right to request the correction of any personal data that is inaccurate, incomplete, or out of date. gempak888 will update the records within 14 business days.
  • Right to Request Restriction of Processing: Under certain circumstances, you have the right to request that gempak888 stop processing your data for specific purposes — in particular, for direct marketing.
  • Right to Erasure: You may request the deletion of your account and personal data from gempak888's systems, subject to applicable legal retention obligations.
  • Right to Object: You have the right to object to the processing of your data for specific purposes based on gempak888's legitimate interests.
How to Exercise Your Rights: To exercise any of the rights above, contact gempak888's Data Protection Officer by email at support@gempak888.xyz with the subject line "PDPA Request". Please include your full name and registered phone number for identity verification. We will respond within 5 business days.

9Children's & Underage User Privacy

Gempak888 has a zero-tolerance policy against the use of our platform by individuals under 18 years of age. gempak888 is strictly an adults-only platform, and we do not knowingly collect personal data from minors or underage individuals.

If gempak888 determines that personal data has been inadvertently collected from an individual under 18 years of age, we will take immediate steps to delete that data from our systems and close the account in question. Parents or guardians who discover that their child has registered a gempak888 account without their knowledge are encouraged to contact us immediately at support@gempak888.xyz for prompt action.

gempak888 employs a range of technical mechanisms and verification procedures to prevent underage users from registering. That said, parents and guardians play a vital role in monitoring their children's online activities.

10Privacy Policy Amendments

Gempak888 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, updates to Malaysian law, or the introduction of new platform features. When significant amendments are made, we will:

  • Displaying a prominent notice on the gempak888 platform's main page at least 7 days before the amendments take effect.
  • Sending notifications via email to the address registered to your account.
  • Updating the "Last updated" date at the top of this Privacy Policy.

Continued use of the gempak888 platform after the effective date of any amendment constitutes acceptance of the latest version of the Privacy Policy. If you do not agree with the changes made, you have the right to close your account before the amendment takes effect.

11Contact Us – Privacy Enquiries

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way gempak888 handles your personal data, please reach out to our Data Protection Officer through the following channels:

  • Email: support@gempak888.xyz (subject: "Privacy Enquiry" or "PDPA Request")
  • Live Chat: Available directly on the gempak888 platform, 24 hours a day, 7 days a week in Bahasa Malaysia.
  • WhatsApp: The gempak888 support WhatsApp number is listed under the Customer Support section of the platform.
Response Time: Privacy-related enquiries will be responded to within 5 working days. Formal PDPA requests (access, correction, deletion) will be processed within 21 working days from the date a complete request is received.

Gempak888 Data Security Layers

Multiple layers of protection keeping your data secure at all times on the gempak888 platform.

SSL 256-bit

All data is transmitted in encrypted form — making it impossible for third parties to intercept while in transit between your device and gempak888's servers.

Multi-Layered Firewall

Gempak888's server infrastructure is protected by multi-layered firewalls that block malicious traffic before it can reach our data servers.

24/7 Monitoring

Gempak888's automated monitoring system oversees all network and platform activity around the clock to detect security anomalies in real time.

Password Hash

Your password is never stored in plain text. gempak888 uses the highly robust bcrypt cryptographic hash function for all member passwords.

Your Rights as a gempak888 Member

Malaysia PDPA 2010 grants you these rights — and gempak888 fully respects each and every one of them.

Right to Access Data

Request a complete copy of all personal data gempak888 holds about you. Processed within 21 working days.

Right to Correction

Request corrections to any inaccurate, incomplete or outdated data held in your gempak888 account records.

Right to Erasure

Request the deletion of your account and personal data, subject to applicable legal retention obligations.

Right to Restrict Processing

Request that gempak888 stop processing your data for direct marketing purposes at any time.

Right to Object

Object to the processing of your data for specific purposes based on gempak888's legitimate interests, where you have reasonable grounds to do so.

Right to Withdraw Consent

Withdraw your consent to data processing at any time, without affecting the validity of any processing that took place prior to withdrawal.

Your Privacy Is Our Responsibility – gempak888's Commitment to Every Member in Malaysia

In today's digital age, personal data has become one of the most valuable assets an individual holds. Every time you register on an online platform, you are entrusting a part of your digital identity to that company — and that trust should never be taken lightly. gempak888 fully understands the weight of this responsibility, which is why protecting our members' personal data is not merely a legal obligation for us, but a core value that guides every decision we make.

Malaysia has clear data protection legislation in the form of the Personal Data Protection Act 2010 (PDPA), and gempak888 complies with it in full. Unlike some online platforms that claim compliance while still operating behind confusing privacy policies, gempak888 strives to set the highest standard in the industry when it comes to transparency and accountability. We want every gempak888 member — whether from Kuala Lumpur, Johor Bahru, Kota Kinabalu, or anywhere else in Malaysia — to know exactly what happens to their data.

When you register a gempak888 account and start using the platform to bet on Malaysia Super League football matches, BWF badminton tournaments, EPL fixtures, or Live Casino games, various types of data are naturally generated – from deposit transaction records made via Touch 'n Go eWallet or GrabPay, to your betting history and gaming activity patterns. This data is essential for us to run gempak888's services effectively. Without it, we would be unable to process your winnings withdrawal within 3–5 minutes, resolve betting disputes fairly, or provide effective customer support in Bahasa Malaysia.

One of the most common concerns among online platform users in Malaysia is the possibility of their data being shared or sold to third parties for advertising or marketing purposes. gempak888 wishes to state this clearly: we do not and will never sell or rent our members' personal data to any advertising company, data broker or other commercial entity. If you receive third-party advertisements for other products or services after registering with gempak888 — this is not a result of gempak888 sharing your data. Such ads likely originate from your online activity on other platforms or third-party algorithms that operate entirely independently of gempak888.

On the technical side, gempak888 continually invests in the latest cybersecurity infrastructure. 256-bit SSL encryption ensures that all data moving between your phone or computer and gempak888's servers cannot be intercepted or read by any third party. The multi-layered firewall we use is more than a standard firewall — it is a multi-tier protection system that monitors every data packet entering and leaving gempak888's infrastructure in real time. Our security monitoring system operates 24 hours a day, 365 days a year without interruption.

One aspect rarely discussed in the context of online platform privacy is the privacy of financial transaction data. When you make a deposit to your gempak888 account using DuitNow or FPX via Maybank2u, the transaction details must be processed through the payment provider's systems. gempak888 only receives the minimum information required to verify the payment — we do not store your full bank account number or any other sensitive details that are unnecessary. The transaction data retained by gempak888 is strictly what is needed for your account records and to comply with financial record-keeping requirements under Malaysian law.

Gempak888 would like to emphasise that data security is a shared responsibility. On our end, we invest in the best security technologies and comply with all applicable Malaysian legal requirements. On your end as a member, the most important steps you can take are using a strong, unique password for your gempak888 account, never sharing your login credentials with anyone, and promptly notifying the gempak888 support team if you suspect any suspicious activity on your account. Together, we can ensure that your experience on gempak888 remains safe, enjoyable, and free from privacy concerns for all members in Malaysia.

Frequently Asked Questions – gempak888 Privacy Policy

Answers to the most frequently asked questions about privacy and data protection at gempak888.

No. gempak888 does not sell, rent, or transfer members' personal data to any advertising companies, data brokers, or third-party commercial entities for marketing purposes. Your data is used solely by gempak888 for platform operational purposes – account management, MYR transaction processing, customer support, and fraud prevention. We comply with Malaysia's Personal Data Protection Act 2010 (PDPA), which prohibits the use of personal data for purposes not consented to by the data owner.

To request a copy of your personal data from gempak888, send an email to support@gempak888.xyz with the subject line "PDPA Data Access Request". In your email, include your full name, the phone number registered to your gempak888 account, and a description of the data you are requesting (for example, all account data, transaction records from a specific date, or betting history). We will verify your identity before processing the request. Complete data access requests will be fulfilled within 21 business days. No fee is charged for the first request within any 12-month period.

When you close your gempak888 account, your personal data is not immediately deleted from all our systems. This is because gempak888 has legal obligations under Malaysian law to retain certain financial records for a prescribed period — for example, MYR transaction records must be kept for 7 years for tax audit purposes. However, your account will be deactivated and you will no longer receive any marketing communications from gempak888 after closure. Once the applicable retention period has expired, your data will be securely deleted or anonymised. If you would like to know exactly what data is still retained after account closure, please send your enquiry to support@gempak888.xyz.

gempak888 does not store your full bank card numbers, complete digital wallet account numbers, or banking passwords in our systems. When you make a deposit via Touch 'n Go eWallet, GrabPay, DuitNow, FPX (Maybank2u / CIMB Clicks), Boost, or ShopeePay, the transaction is processed directly through that provider's secure payment gateway. gempak888 only receives a confirmation of the successful transaction and the RM amount processed — not your sensitive financial account details. This is the same standard security practice used by leading e-commerce platforms in Malaysia.

Related Policy Pages

Also read other policy documents related to your use of the gempak888 platform.

Your Data Is Safe with Gempak888 — Register Today!

Over 50,000 members in Malaysia trust gempak888 with their data. 256-bit SSL, PDPA compliant, and zero data sharing — the highest level of security for the best experience.

Register for Free – Safe & Secure
Already have an account? Log in here

Free registration · SSL 256-bit · Malaysia PDPA · No data sharing · 18+

Bahasa Melayu