Data Protection

Privacy Policy GMP88

At GMP88, your privacy is our priority. This document transparently explains how we collect, use, store, and protect your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Last Updated: 1 January 2026
Our Commitment

Why Your Data Safe With Us

Gmp88 invests in best-in-class security infrastructure to ensure every player's personal data remains protected at all times.

256-bit SSL Encryption

All data transmitted between your device and gmp88 servers is protected with military-grade 256-bit SSL encryption. Every piece of personal information and financial transaction is fully encrypted in transit.

Malaysia PDPA Compliance

Gmp88 operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). Your data is processed lawfully, transparently, and solely for the stated purposes — no misuse of any kind.

No Sale of Data to Third Parties

Your personal data is never sold, rented, or shared with advertisers or any third party for marketing purposes. You registered with GMP88, not with an external marketing company.

Secure Data Storage

All data is stored on servers protected by multi-layered firewalls, strict access controls, and 24/7 monitoring. Regular data backups are performed to ensure continuity of service.

Two-Factor Authentication (2FA)

Gmp88 supports two-factor authentication for all player accounts. This additional security layer ensures that only you can access your account, even if your password becomes known to others.

Full Player Control Rights

You have the right to access, correct, delete, or withdraw consent for the use of your personal data at any time. GMP88 respects your rights as a data owner and will process your request within 14 business days.

Important Notice

This Privacy Policy describes GMP88's data collection and processing practices. By using the GMP88 platform, you agree to the terms set out in this document. Please read it carefully before registering an account.

1. Personal Information We Collect

Gmp88 collects your personal information when you register an account, use our services, or interact with our platform. We only collect data that is genuinely necessary for the stated purposes and never collect more than what is required.

1.1 Information You Provide Directly

  • Registration information — full name, date of birth, phone number, email address and username
  • Identity verification information (KYC) — copy of MyKad or passport, proof of current address and other supporting documents
  • Financial information — bank account details, e-wallet numbers (TNG, GrabPay, Boost) registered for deposits and withdrawals
  • Support communications — any messages, complaints or requests you submit to our support team

1.2 Information Collected Automatically

  • Technical data — IP address, device type, operating system, browser type, and screen resolution
  • Usage data — pages visited, session duration, in-game actions, and settings preferences
  • Transaction data — records of all deposits, withdrawals, wagering and wins in your account
  • Location data — approximate location based on IP address for geo-compliance purposes
Note

Gmp88 does not collect biometric data such as fingerprints or facial recognition. All KYC documents submitted are stored in encrypted format and accessible only by authorised staff for verification purposes.

Data Category Example Primary Purpose
Identity Data Name, MyKad, Date of Birth KYC verification, legal compliance
Contact Data Email, Phone Number Account communications, notifications
Financial Data Bank Account, e-Wallet Payment processing
Technical Data IP, Device, Browser Security, fraud prevention
Usage Data Wagering Records, Sessions Service improvement

2. How We Use Your Personal Data

The personal data we collect is used solely for the legitimate purposes stated below. GMP88 will not use your data for any other purpose without prior notice and your consent.

  • Account Management — creating, maintaining and securing your player account on the gmp88 platform
  • Transaction processing — processing deposits via DuitNow, FPX, Touch 'n Go, GrabPay and Boost, and managing your winnings withdrawals
  • Identity Verification — verifying your age and identity as part of the mandatory KYC process
  • Fraud prevention — detecting and preventing fraudulent activity, money laundering, and unauthorised access to your account
  • Customer Support — providing assistance and resolving any issues you encounter on the platform
  • Regulatory compliance — fulfilling the legal and regulatory obligations applicable to gmp88 operations
  • Service communications — sending important notifications regarding your account, transactions and service updates
  • Platform improvement — analysing usage patterns to improve the gaming experience and platform performance
  • Responsible gaming — monitoring betting patterns to identify players who may need support

3. Legal Basis for Data Processing

Gmp88 processes your personal data on one or more lawful bases recognised under Malaysia's PDPA:

  • Your consent — you have given explicit consent for data processing when registering a gmp88 account
  • Contract performance — processing is necessary to fulfil the service agreement between you and gmp88
  • Legal obligation — gmp88 is legally required to process certain data for anti-money laundering (AML) compliance and KYC purposes
  • Legitimate interest — gmp88 has a legitimate interest in processing data for platform security and fraud prevention

4. Data Sharing With Third Parties

Gmp88 takes a highly cautious approach to personal data sharing. Your data not sold to any third party for marketing purposes. However, there are limited situations where data sharing is necessary:

4.1 Trusted Service Providers

We share data with third-party service providers who assist us in operating the platform, subject to strict confidentiality agreements:

  • Payment providers — financial institutions and payment gateways that process your deposits and withdrawals
  • Game providers — gaming software company providing slot titles and casino games on the gmp88 platform
  • Identity Verification Services — third-party KYC platform that assists us in verifying identity documents
  • Hosting & Cloud Services — server infrastructure provider that securely stores platform data

4.2 Legally Required Disclosures

Gmp88 may be required to disclose your personal data to authorities if mandated by a court order, regulatory directive, or applicable legal obligation. In such situations, we will endeavour to notify you in advance unless prohibited by law.

Security Alerts

Gmp88 never sells or rents your personal data to advertisers, data brokers, or marketing companies. If you receive unsolicited marketing communications claiming to be from gmp88, please report them to us as they may be fraudulent attempts by irresponsible third parties.

5. Data Retention and Deletion Period

Gmp88 retains your personal data only for as long as necessary for the original purpose of collection or as required by law. General retention schedules are as follows:

  • Active account data — retained for the duration your account is active plus 7 years after account closure (PDPA and AML requirements)
  • Financial Transaction Records — retained for a minimum of 7 years in accordance with Malaysian legal requirements
  • KYC Documents — retained for 5 years after the business relationship ends or as required by applicable law
  • Support communication logs — retained for 2 years for complaint resolution reference
  • Cookie and analytics data — session data is deleted within 90 days; anonymised aggregate data may be retained longer

When data is no longer required, it will be securely deleted or anonymised using industry-recognised methods. You may request early deletion of your data subject to applicable legal retention obligations.

6. Cookies and Tracking Technologies

The gmp88 platform uses cookies and similar tracking technologies to enhance user experience, ensure account security, and understand how our platform is used. Below are the types of cookies we use:

6.1 Essential Cookies

These cookies are required for the platform's core functionality and cannot be disabled. They include login session cookies, CSRF security tokens, and language preference settings. Without these cookies, the platform will not function properly.

6.2 Performance and Analytics Cookies

These cookies help us understand how players interact with our platform, which pages are most popular, and where technical issues may exist. Data collected is aggregated and does not directly identify individuals.

6.3 Preference Cookies

These cookies remember your preferences and settings — such as preferred language, display theme, and game preferences — so you don't have to reset them every time you log in to the gmp88 platform.

You can manage cookie settings through your web browser. However, disabling essential cookies may affect platform functionality. For more information on managing cookies, refer to your web browser's help documentation.

7. Your Rights Under PDPA

As a data subject under Malaysia's PDPA, you have the following rights regarding your personal data held by gmp88. We are committed to respecting and facilitating the exercise of these rights.

1

Right of Access

You have the right to request a copy of the personal data we hold about you. GMP88 will provide this information within 21 business days from the date your request is received.

2

Right to Rectification

You have the right to request correction of inaccurate or outdated data. You may also update certain personal information directly through your account settings.

3

Right to Erasure

You may request deletion of your personal data when it is no longer required, subject to applicable legal retention obligations.

4

Right to Withdraw Consent

You may withdraw consent for data processing at any time. Withdrawal of consent does not affect the validity of processing carried out prior to withdrawal.

5

Right to Object

You have the right to object to the processing of your personal data for specific purposes, including direct marketing, by contacting our privacy team.

6

Right to Data Portability

You have the right to receive your personal data in a machine-readable format for transfer to another service provider where applicable.

How to Exercise Your Rights

To exercise any of the above rights, contact gmp88's Data Privacy Officer at [email protected] with the subject line "Data Rights Request — [Request Type]". We will acknowledge your request within 3 business days and resolve it within 14 business days.

8. Data Security Measures

Gmp88 implements a range of technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Measures we have in place include:

  • Data Encryption in Transit — all communications between your device and gmp88 servers are protected by TLS 1.3 protocol and 256-bit SSL encryption
  • Encryption of Stored Data — sensitive data such as financial information and KYC documents are encrypted at rest using AES-256 algorithms
  • Role-based access control — gmp88 staff may only access data required for their specific role; all access is logged and monitored
  • Two-Factor Authentication — all internal staff accounts accessing data systems require 2FA; players are also encouraged to enable 2FA
  • Regular security audits — gmp88 conducts regular penetration testing and security audits by independent third-party experts
  • Real-time threat monitoring — SIEM system monitors suspicious activity 24/7 with automated incident response

8.1 Security Incident Response

In the event of a data breach affecting your personal data, gmp88 is committed to notifying you within 72 hours after we become aware of the incident, in line with international best practices. The notification will include details of the incident, the data affected, actions already taken, and steps you can take to protect yourself.

9. Changes to This Privacy Policy

Gmp88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform improvements. When material changes are made, we will:

  • Updating the "Last Updated" date at the top of this page
  • Sending a notification to your registered email address if the changes are significant
  • Displaying a prominent notice on the gmp88 platform for a minimum of 30 days

We encourage you to review this page periodically. Continued use of the gmp88 platform following any amendments will be considered acceptance of the updated policy. If you do not agree with the changes made, you may close your account and request data deletion in accordance with the procedure outlined in Section 7.

10. Contact Our Data Privacy Officer

If you have any questions, concerns, or complaints regarding how gmp88 handles your personal data, or to exercise any of your data rights, please contact our Data Privacy Officer (DPO):

  • Email: [email protected]
  • Email subject: "Privacy Policy Enquiries" or "Data Rights Requests"
  • Response time: 3 business days for verification; 14 business days for settlement
  • Live support: 24/7 live chat via the gmp88 platform

You also have the right to lodge a complaint with the Malaysia Department of Personal Data Protection if you believe GMP88 has not complied with PDPA. However, we encourage you to contact us first, as we will make every effort to resolve any issues promptly and fairly.

This Privacy Policy applies in conjunction with Terms and Conditions gmp88 and Responsible Gaming Policy ours, each of which forms part of the overall agreement between you and gmp88.

FAQ

Frequently Asked Questions About gmp88 Privacy

No, absolutely not. gmp88 never sells, rents, or distributes your personal data to advertisers, data brokers, or any third party for marketing purposes. Your data is only shared with service providers who help us operate the platform, and all such third parties are bound by strict confidentiality agreements.

Retention periods vary by data type. Active account data is retained for the duration your account is active plus 7 years after closure to meet Malaysia's AML legal requirements. Financial transaction records are kept for a minimum of 7 years, KYC documents are retained for 5 years after the business relationship ends, and support communication logs are kept for 2 years only.

Yes, you may request the deletion of your personal data by contacting our privacy team at [email protected]. However, certain data may need to be retained for a specified period to fulfil legal obligations such as Malaysia's AML and tax requirements. We will inform you which data can be deleted immediately and which must be retained, along with the applicable retention period.

Upon account closure, gmp88 will retain your personal data for the period required by Malaysian law — typically 7 years for financial and transaction records. Once the mandatory retention period expires, your data will be securely deleted or fully anonymised. You will not receive any marketing communications after your account is closed.

Your financial information is protected by multiple layers of security. All transactions are secured with 256-bit SSL encryption in transit. Stored financial data is encrypted with AES-256. We do not store full credit card details — only tokens authorised by the payment processor. Our real-time fraud monitoring system automatically detects and blocks any suspicious activity.
Trusted Platform

Ready to Play With Safe & Secure?

Create your GMP88 account today and enjoy a safe, fair, and transparent gaming experience. Your privacy is our priority — your data is protected with top-tier encryption and full PDPA compliance.

256-bit SSL PDPA Compliant Secure 2FA 24/7 Support

By registering, you agree to the Terms & Conditions and Privacy Policy ours.

Bahasa Melayu