1 Scope of This Policy
This Privacy Policy applies to all individuals who access or use the Gempak Slot, including the official website at gempakslot.win, the Android and iOS mobile apps, and any related services.
By registering an account or continuing to use our platform, you acknowledge that you have read and understood this Privacy Policy and agree to the way we handle your personal data as described herein.
This policy should be read together with the Terms and Conditions our platform containing the full terms and conditions of the service.
In the event of any conflict between a translated version of this policy and the original Bahasa Melayu version, the Bahasa Melayu version shall prevail.
2 Data We Collect
We collect various types of information depending on how you interact with our platform. The following are the main categories of data collected:
| Data Category | Example Information | How It Is Collected |
|---|---|---|
| Personal Identity | Full name, date of birth, MyKad number, gender | Account registration & KYC |
| Contact Information | Email address, phone number, residential address | Registration & profile updates |
| Financial Data | Bank account number, account holder name, transaction records | Deposits & withdrawals |
| Technical Data | IP address, browser type, operating system, device ID | Automatically upon accessing the platform |
| Usage Data | Game records, wagering history, session duration, favourite games | In-platform activity |
| Communication Data | Support chat logs, emails, form feedback | Interactions with our team |
We not collects sensitive information such as biometric data, medical records, or political affiliations unless specifically required by law.
3 How We Use Your Data
The personal data we collect is used for legitimate and transparent purposes. We do not use your data for any purpose other than those stated here:
- Account management — registering, verifying, and maintaining your account.
- Transaction processing — securely processing your deposits, withdrawals, and financial history.
- Identity verification (KYC) — ensuring compliance with anti-money laundering legal requirements.
- Platform security — detecting and preventing fraud, unauthorised access, and account misuse.
- Customer Support — responding to enquiries, resolving issues, and improving services.
- Experience personalisation — delivering personalised game recommendations, promotional offers, and relevant content to you.
- Analytics & improvement — understanding usage patterns to improve platform features and performance.
- Legal compliance — fulfilling applicable reporting and regulatory obligations.
We do not make fully automated decisions that materially affect you without human involvement. Any significant decisions, such as account closures, are reviewed by our team.
4 Legal Basis for Data Processing
Every personal data processing activity we carry out has a valid legal basis under Malaysia's Personal Data Protection Act 2010 (PDPA):
- Consent — you provide explicit consent when registering and using the platform.
- Contract — processing is necessary to fulfil the service agreement between you and us.
- Legal obligation — we are required to retain certain records for tax compliance, anti-money laundering, and other regulatory requirements.
- Legitimate interest — we process certain data to protect platform security, prevent fraud, and improve our services.
5 Data Sharing with Third Parties
Gempak Slot does not sell or rent your personal data to any party. However, in the following limited circumstances, data may be shared:
- Payment service providers — to securely process your deposits and withdrawals through legitimate banking channels and e-wallets.
- Identity verification service providers — recognised third parties engaged to assist with KYC processes in accordance with legal requirements.
- Platform technology providers — including cloud and hosting service providers bound by strict confidentiality agreements with us.
- Relevant authorities — when required by law, court order, or direction from a legitimate regulatory authority.
- Game providers — the minimum data required to run a gaming session is shared with game providers registered with us.
All third parties that receive your data are bound by strict confidentiality and data protection agreements. They are only permitted to use your data for the purposes that have been agreed upon.
6 Data Security
Gempak Slot continuously invests in security infrastructure to ensure your data is always protected. The security measures we implement include:
- Data encryption in transit using TLS 1.3 and SSL 256-bit protocols.
- Encryption of data at rest on servers to AES-256 standards.
- Role-based access control (RBAC) ensuring only authorised staff can access sensitive data.
- 24/7 security monitoring by an in-house cybersecurity team.
- Regular security audits by independent third parties.
- Clear and prompt data breach notification procedures in the event of an incident.
While we employ the best security measures, no system is completely impenetrable. You are also responsible for ensuring your account password is strong and not shared with anyone.
7 Cookies & Tracking Technologies
Platform Gempak Slot uses cookies and similar tracking technologies to enhance the user experience and analyse usage patterns. The types of cookies we use:
| Cookie Types | Purpose | Duration |
|---|---|---|
| Essential Cookies | Maintaining login sessions, security, and core platform functionality | Session only |
| Preference Cookies | Saving your language preference, theme, and display settings | 1 year |
| Analytics Cookies | Understanding how users interact with the platform for improvement purposes | 90 days |
| Security Cookies | Detecting suspicious activity and preventing unauthorised access | 30 days |
You can manage and delete cookies through your browser settings. However, disabling essential cookies may affect certain platform functions. Analytics and marketing cookies can be declined without affecting core functionality.
8 Your Rights Under the PDPA
As a data subject, you have the following rights regarding the personal data we hold about you:
Right of Access
You have the right to request a copy of the personal data we hold about you at any time.
Right to Rectification
You may request correction of inaccurate or incomplete data via your account settings or support.
Right to Erasure
You may request deletion of your personal data, subject to applicable legal retention obligations.
Right to Object
You may opt out of the processing of your data for direct marketing purposes at any time.
Right to Portability
You have the right to receive your data in a machine-readable format for transfer to another platform.
Right to Restriction
You may request a restriction on the processing of your data in certain circumstances while awaiting dispute resolution.
To exercise any of the above rights, contact our support team via live chat or our official email. We will process your request within 14 business days.
9 Cross-Border Data Transfers
In operating a global platform, your data may be processed or stored on servers located outside Malaysia. When this occurs, we ensure protection equivalent to or greater than that required under Malaysia's PDPA applies to your data through:
- Internationally recognised standard data transfer agreements.
- Periodic security assessments of all infrastructure partner providers.
- Ensuring that the recipient country has equivalent data protection laws, or that we implement adequate contractual safeguards.
10 Data Retention Period
We retain your personal data only for as long as necessary for the stated purpose or as required by law. The general retention period guidelines are as follows:
- Active account data — retained for the duration your account is active and up to 7 years after account closure for legal compliance purposes.
- Financial transaction records — retained for 7 years in accordance with tax and anti-money laundering legal requirements.
- Support communication logs — retained for 3 years for reference and dispute resolution purposes.
- Anonymised analytics data — may be retained longer as it contains no personally identifiable information.
Once the retention period expires, your data will be permanently deleted or anonymised so it can no longer be linked to you.
11 Privacy Policy Amendments
Gempak Slot reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new platform features.
When we make material changes, we will:
- Updating the "Last Updated" date at the top of this document.
- Displaying a clear notice on the platform's home page at least 7 days before the amendment takes effect.
- Sending email notifications to all registered members for significant amendments.
Continued use of the platform after an amendment takes effect will be considered acceptance of the revised terms. If you do not agree with the amendment, you have the right to close your account and request data deletion in accordance with the established process.
12 Contact Us
If you have any questions, concerns, or wish to exercise your rights regarding your personal data, our Data Privacy Officer team Gempak Slot can be reached via:
We are committed to responding to all privacy-related enquiries within 5 business days. For more complex data rights requests, processing may take up to 14 business days.
Useful links related to our platform's policies:
- Terms and Conditions — the full terms of platform use.
- Responsible Gaming — responsible gambling tools and support resources.
- FAQ — answers to frequently asked questions.