Gd888 Privacy Policy – Malaysia Member Personal Data Protection

1Introduction

Gd888 ("we", "our", or "the platform") is an online slot entertainment platform operator committed to protecting the privacy and security of the personal information of all our members in Malaysia. We understand that your trust in us to safeguard your personal data is not something to be taken lightly.

This Privacy Policy is drafted to give you a clear and transparent overview of:

• The types of personal information we collect from you and how it is collected.
• The purposes for which gd888 uses your personal information.
• Who the information may be shared with and under what circumstances.
• The security measures we take to protect your data.
• Your rights regarding the personal data we hold.

This Privacy Policy should be read together with Terms and Conditions gd888 and Responsible Gaming Policy us, all of which together form the entire agreement between you and the gd888 platform.

2Data We Collect

Gd888 collects various types of information from you to provide a safe, efficient, and personalized service. Below is a summary of the data we collect:

We do not collect sensitive data such as your health information, religious beliefs, sexual orientation, or political views. Should there be any need to collect additional data, you will be notified in advance and asked to provide explicit consent.

3How We Use Your Data

Gd888 uses collected personal information solely for lawful and transparent purposes. The following are the primary purposes for which your data is used:

• Identity Verification & KYC: To verify your identity in compliance with anti-money laundering (AML) and know your customer (KYC) legal requirements mandated by applicable financial regulations.
• Service Provision: To process account registration, manage deposits and withdrawals, and enable you to access all games and features on the gd888 platform.
• Security & Fraud Prevention: To identify and prevent fraudulent activity, multi-accounting, money laundering, or any misuse of the platform that harms other members.
• Customer Support: To process complaints, respond to enquiries, and provide effective and timely technical assistance.
• Platform Communications: To send important account-related notifications, security updates, promotional information (with your consent), and policy changes that affect you.
• Platform Improvements: To analyze aggregated usage patterns in order to improve the user experience, enhance the interface, and develop more useful new features.
• Responsible Gaming: To monitor gameplay patterns and identify early signs of problem gambling so we can offer timely and appropriate assistance.
• Legal Compliance: To meet the reporting and compliance obligations required by applicable laws and regulations in the relevant jurisdiction.

4Data Sharing

Gd888 does not sell or rent your personal data to any party. However, in certain limited situations, we may need to share your information with the following parties:

• Payment Service Providers: Required transaction information is shared with payment processors such as DuitNow, FPX, Touch 'n Go, and other e-wallet providers solely to securely process your deposits and withdrawals.
• Game Providers: Minimum technical data required is shared with third-party game providers operating within the gd888 platform to ensure a smooth and fair gaming experience.
• Relevant Authorities: gd888 will disclose required information to government authorities, law enforcement, or regulatory bodies when mandated by law or a valid court order.
• Technical Service Providers: Companies that assist us with server hosting, cybersecurity, and platform analytics may have limited access to data for strictly technical purposes, subject to strict confidentiality agreements.

All third parties that share data with gd888 are bound by legally enforceable data protection agreements and are required to handle your information to the same high security standards we uphold.

5Data Security

Gd888 continuously invests in the latest security infrastructure to protect your personal data from unauthorized access, disclosure, alteration, or destruction. The key security measures we employ include:

• 256-bit SSL/TLS encryption for all communications between your browser and our servers.
• Database-level data encryption for stored sensitive information.
• Role-based access control (RBAC) ensuring only authorised staff can access specific data.
• Periodic independent third-party security audits to identify and address system vulnerabilities.
• Intrusion detection systems (IDS) and web application firewalls (WAF) operating 24/7.
• Two-factor authentication (2FA) for all gd888 internal administrative access.
• Regular data backup procedures to ensure service continuity in emergency situations.

While we take all reasonable steps to protect your data, no digital security system can be guaranteed 100% secure. You also play an important role by keeping your account password confidential and not sharing your login details with anyone.

6Cookies & Tracking Technologies

Gd888 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

The types of cookies we use are as follows:

• Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled without directly affecting platform functionality.
• Performance Cookies: Collects anonymised information about how you use our platform to help us identify areas that need improvement.
• Functional Cookies: Saves your personal preferences such as language and display settings so you do not need to reconfigure them each time you log in.
• Analytics Cookies: Helps us understand aggregate usage patterns to plan the development of new features that are more useful to members.

You can manage or disable cookies through your browser settings at any time. Please note that disabling essential cookies may affect the functionality and security of your experience on the gd888 platform.

7Your Rights

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable data protection laws, you have the following rights regarding the personal data we hold:

To exercise any of the above rights, you may contact the gd888 data protection team through the support channels available on the platform. We will process your request within 14 business days. For more complex cases, this period may be extended to up to 30 days, with notice provided to you.

Please note that some of these rights may be subject to certain exceptions, particularly where data processing is required to fulfil legal obligations or for legitimate public interest purposes.

8Cross-Border Data Transfers

As the gd888 platform operates on global technology infrastructure, your personal data may be transferred to and stored on servers located outside Malaysia. gd888 ensures that any such data transfers are carried out with adequate safeguards through the following mechanisms:

• Data transfer agreements compliant with internationally recognised data protection standards.
• Selection of infrastructure partners with internationally recognised security certifications such as ISO 27001 and SOC 2.
• Standard contractual clauses binding data recipients to protection standards equivalent to Malaysia's PDPA.
• Regular audits of infrastructure partners' compliance with established data protection standards.

Gd888 prioritizes the use of regional data centers where possible to minimize cross-border data transfer requirements and reduce access latency for users in Malaysia.

9Data Retention

Gd888 retains your personal data only for as long as necessary to fulfill the purposes stated in this Privacy Policy or as required by law. The specific data retention periods are as follows:

• Active Account Data: Retained throughout the period your account is active and for up to 7 years after account closure to meet financial record-keeping and AML compliance requirements.
• Transaction Records: Retained for a minimum of 7 years from the transaction date as required by Malaysian financial legislation.
• Communication Records: Customer support logs and communications are retained for 3 years for complaint resolution and service improvement purposes.
• Technical & Log Data: System access logs and technical data are retained for 12 months for security and incident investigation purposes.
• Marketing Data: Retained until you withdraw your consent to receive marketing communications.

When data is no longer required for any permitted purpose, it will be securely deleted or anonymised using industry-standard deletion procedures, ensuring it cannot be recovered.

10Third-Party Websites

The gd888 platform may from time to time contain links or references to third-party websites or services, particularly those related to payment providers or game providers. This Privacy Policy applies to the gd888 platform only.

Gd888 is not responsible for the privacy practices or content of those third-party websites. We encourage you to read the privacy policy of each website you visit separately, as their standards and practices may differ from ours.

If you access third-party payment services through the gd888 platform, your financial interactions with those providers are governed by their own terms and privacy policies, over which we have no control.

11Privacy Policy Changes

Gd888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, new legal requirements, or improvements in how we protect your data. The "Last Updated" date at the top of this page will be updated each time a change is made.

For material changes, we will provide you with clear notice through:

• In-platform notification on gd888 upon your next login.
• An email notification to the address registered in your account, at least 14 days before the changes take effect.
• A visible banner or notification pop-up on the platform's main page.

Your continued use of the gd888 platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you disagree with the changes made, you have the right to close your account and request deletion of your personal data in accordance with the procedure set out in Section 7.

12Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how gd888 handles your personal data, please contact our Data Protection Officer through the following channels:

• Live Chat: 24/7 support channels available directly within the gd888 platform – the fastest way to get a response.
• Email: [email protected] – for written enquiries requiring an official record.
• Help Center: Visit page FAQ us for answers to the most frequently asked questions about privacy and account security.

We are committed to responding to all privacy-related enquiries within 3 business days. For more complex formal complaints regarding PDPA rights, the full response period is up to 14 business days.