GGBet Malaysia Privacy Policy –
Your Data, Our Responsibility

GGBet Malaysia ("we", "Platform", "GGBet") takes the privacy and personal data protection of all users seriously. We understand that entrusting personal information to any online platform is not a matter to be taken lightly, and we fully respect that trust.

This Privacy Policy is drafted in accordance with applicable data protection laws and international best practices in the personal data protection industry. We are committed to ensuring that the information you share with us is handled with full transparency, integrity, and due care.

As a responsible online casino platform, GGBet has strict compliance obligations to the regulatory body that issued our operating licence. This means every decision regarding the handling of your personal data is made not only on the basis of best practices, but also in accordance with binding regulatory requirements.

GGBet only collects personal data that is strictly necessary to deliver platform services effectively, comply with regulatory requirements, and ensure the safety of all users. The data we collect includes the following categories:

We do not collect or store sensitive information unrelated to platform operations, such as biometric data, medical records, political views, or religious beliefs.

Every piece of personal data we collect is used purposefully and limited to legitimate needs. GGBet will not use your data for unrelated purposes without obtaining your consent beforehand. The following are the primary purposes for which your personal data is used:

• Identity Verification: Carrying out KYC processes to meet regulatory requirements and prevent money laundering and fraud.
• Account Management: Creating, maintaining, and protecting your player account, including account recovery where required.
• Transaction Processing: Processing deposits, withdrawals, and bonus payments securely and efficiently.
• Customer Support: Processing and resolving your inquiries, complaints, and technical support requests.
• Platform Security: Detecting and preventing fraud, hacking, and other security threats.
• Responsible Gaming: Monitoring usage patterns to identify signs of problem gambling and offer appropriate support.
• Service Communications: Sending important account-related notifications, promotions you have subscribed to, and policy updates.
• Platform Improvement: Analysing usage patterns to enhance the overall user experience and platform performance.

GGBet processes your personal data on one or more of the following valid legal bases:

• Contract Performance: Processing required to provide the platform services you have requested, including account management and payment processing.
• Legal Obligation: Processing required to fulfil regulatory obligations such as KYC requirements, anti-money laundering measures, and financial reporting.
• Legitimate Interest: Processing for platform security purposes, fraud prevention, and service improvements that do not affect your fundamental rights.
• Consent: For optional marketing communications and non-essential cookies — you may withdraw your consent at any time.

GGBet does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. However, we do share your data with selected third parties in the following limited circumstances:

• Payment Service Providers: Payment processors and financial institutions required to handle your deposits and withdrawals securely.
• Verification Service Providers: KYC companies and background check services that help us verify player identities in accordance with regulatory requirements.
• Game Software Providers: Game developers providing casino content – only the minimum data required for game operations is shared.
• Regulatory & Law Enforcement Bodies: When required by law, court order, or the directive of a competent regulatory authority.
• Technical Infrastructure Providers: Cloud computing and server hosting services used to securely store and manage platform data.

All third parties we engage are subject to strict data processing agreements and are required to maintain security measures that meet or exceed GGBet's own security standards.

The security of your personal data is GGBet's top priority. We implement multiple layers of technical and organisational safeguards to protect your information from unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL Encryption: All data transmitted between your browser and GGBet's servers is protected by the highest level of encryption — the same standard used by major banks.
• Static Data Encryption: Sensitive data stored in our databases, including financial information and identity documents, is encrypted using AES-256 algorithms.
• Two-Factor Authentication (2FA): 2FA options are available for all player accounts to add an extra layer of protection during login.
• Continuous Monitoring: 24/7 security monitoring detects and alerts on any suspicious activity or unauthorised access attempts.
• PCI DSS Compliance: The handling of payment card information complies with the strict Payment Card Industry Data Security Standard (PCI DSS).
• Regular Security Audits: Independent security assessments and penetration testing are conducted regularly to identify and address any system vulnerabilities.

While we take all reasonable precautions, no security system can be guaranteed 100% immune to all threats. You also play an important role in keeping your account secure by using a strong password and not sharing your login credentials.

GGBet retains your personal data only for as long as necessary to fulfil the original purpose of collection or as required by law. Our data retention guidelines are as follows:

• Active Account Data: Retained for the duration your account remains active and in use.
• After Account Closure: Core data is retained for a minimum of 5 years after account closure to meet regulatory compliance and legal obligations.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with financial reporting and tax requirements.
• Security Logs: Retained for 12 months for security investigation and digital forensics purposes.
• Marketing Data (with consent): Retained until you withdraw consent or request deletion.

When data is no longer required, we ensure its secure destruction through irreversible deletion methods or anonymisation so that it can no longer be linked to you as an individual.

As a data subject, you have clearly defined rights regarding the personal data we hold about you. GGBet is committed to facilitating the exercise of these rights promptly and without unnecessary obstacles:

GGBet uses cookies and similar tracking technologies to enhance the user experience, maintain platform security, and understand how players interact with our website. The types of cookies we use include:

• Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled without affecting platform functionality.
• Preference Cookies: Saving your personal settings such as preferred language and display configuration for a consistent experience.
• Analytics Cookies: Helping us understand how users navigate the platform so we can improve its design and content. This data is collected in aggregate form and does not identify individuals.
• Security Cookies: Helping to detect and prevent fraudulent activity and unauthorised access to player accounts.

You can manage cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality and user experience of the platform.

The GGBet platform may contain links or references to third-party websites or services in certain contexts. This Privacy Policy applies solely to the GGBet platform and does not cover the privacy practices of any third parties.

GGBet is not responsible for the content, privacy policies, or security practices of any third-party websites. We encourage you to read and understand the privacy policy of every website you visit outside the GGBet platform.

The GGBet platform is strictly for individuals aged 18 and above. We do not knowingly collect or store any personal data from anyone under the age of 18.

Should we determine that personal data of a minor has been collected without our knowledge, we will take immediate steps to delete that data and close the relevant account. Parents or guardians who become aware that a child in their care has registered on our platform without permission are encouraged to contact us immediately.

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, you may contact the GGBet privacy team through the following channels:

• Privacy Email: [email protected]
• Live Chat: Available 24/7 via the chat icon on the platform
• FAQ: Visit FAQ page us for an immediate response

We are committed to responding to all privacy-related inquiries within 72 business hours. For more complex requests such as data access or erasure applications, we will notify you of a more precise processing timeframe upon receipt of your request.