Privacy Policy

This Privacy Policy (the "Policy") describes how gempak9 (referred to as "gempak9", "we", "us" or "our"), operator of the website located at https://gempak9.cam (the "Site"), collects, processes, stores and discloses personal information relating to individuals (each a "User" or "you") who access or use the Site and its associated services.

This Policy forms part of the overall legal framework governing your use of the Site, which includes the Terms and Conditions and any supplementary policies published on the Site. By registering for an account, making a deposit, placing a wager or otherwise using the Site, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data in the manner set out herein.

gempak9 is committed to protecting the privacy of all users, including Malaysian residents. We recognise the importance of personal data security and operate the Site with appropriate safeguards in place to protect the information entrusted to us.

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies, or could reasonably identify, a natural person, directly or indirectly.
• "Processing" means any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, disclosure, erasure or destruction.
• "Controller" means gempak9 in its capacity as the entity that determines the purposes and means of processing personal data.
• "Data Subject" means any identified or identifiable natural person whose personal data is processed by gempak9.
• "KYC" (Know Your Customer) means the identity and verification process through which we confirm the identity, age and address of users.
• "Cookies" means small data files placed on a user's device by a website for the purposes of session management, analytics or personalisation.
• "Third Party" means any natural or legal person other than the User or gempak9 that may receive or process personal data in connection with gempak9's services.

gempak9 may collect the following categories of personal data, depending on the nature of your interaction with the Site:

3.1 Registration and Account Data

• Full legal name, date of birth and gender.
• Residential address, including city (such as Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya or Shah Alam), state and postcode.
• Email address, phone number and chosen username.
• Account preferences, communication settings and language selection.

3.2 Identity Verification (KYC) Data

• Copies of government-issued identity documents, such as a Malaysian National Identity Card, driving licence or passport.
• Proof of residential address, such as a utility bill or bank statement dated within three months.
• Selfie photographs taken for identity confirmation purposes.

3.3 Financial and Transaction Data

• Deposit and withdrawal transaction records, including amounts in MYR, timestamps and payment method references.
• Details of payment instruments used, such as DuitNow reference identifiers, FPX transaction codes, or e-wallet account references linked to Touch 'n Go eWallet, Boost or GrabPay.
• Wagering history, game activity logs and bonus redemption records.

3.4 Technical and Usage Data

• IP address, browser type, operating system and device identifiers.
• Session logs, page visit sequences, click patterns and interaction timestamps.
• Cookie and tracking data as described in Section 9.

3.5 Communications Data

• Records of correspondence with gempak9 support, including support ticket content, email exchanges and live chat transcripts.
• Feedback, complaint submissions and survey responses.

gempak9 uses personal data for the following purposes:

• To create, administer and maintain your Account and verify your identity in compliance with applicable regulatory requirements.
• To process deposits, withdrawals and wagers and to maintain accurate transaction records.
• To carry out KYC verification and ongoing anti-fraud and anti-money laundering screening.
• To provide customer support and respond to queries, complaints and account requests.
• To communicate account notices, security alerts, policy updates and, where opted in, promotional communications.
• To monitor for prohibited conduct, including bonus abuse, multi-accounting and other activities in breach of the Terms and Conditions.
• To operate responsible gambling tools, including deposit limits, loss limits and self-exclusion mechanisms.
• To improve the Site's performance, content and user experience through anonymised analytics and testing.
• To comply with applicable legal, regulatory and tax obligations.

Where applicable privacy frameworks require a stated legal basis for the processing of personal data, gempak9 relies on the following grounds:

• Contractual necessity: Processing required to create and manage your Account, process transactions and deliver the services described in the Terms and Conditions.
• Legal obligation: Processing required to comply with applicable anti-money laundering legislation, identity verification requirements, tax reporting obligations and requests from competent regulatory authorities.
• Legitimate interests: Processing carried out for fraud prevention, security monitoring, responsible gambling enforcement and improvements to the Site's services, where such interests are not overridden by the rights and interests of Data Subjects.
• Consent: Processing of optional data categories and the sending of promotional communications, where consent has been freely given and may be withdrawn at any time without affecting the lawfulness of prior processing.

gempak9 may share personal data with the following categories of recipients, where necessary and proportionate to the stated purposes:

• Payment processors and banking partners: Entities facilitating MYR transactions via DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay or cryptocurrency networks, where applicable.
• Identity verification providers: Third-party KYC services engaged to validate identity documents and conduct age and address checks.
• Game content providers: Licensed game studios and sports data providers that supply the games and markets accessible on the Site, who may receive session and wager data necessary for game delivery.
• Technology infrastructure providers: Cloud hosting, data storage, communications and cybersecurity vendors operating under appropriate data processing agreements.
• Regulatory and law-enforcement authorities: Competent governmental, regulatory, tax or law-enforcement bodies where disclosure is required by applicable law, court order or regulatory direction.
• Fraud prevention and AML screening services: Specialist third-party services engaged to detect, investigate and prevent fraudulent account activity and financial crime.

All third-party recipients are required to handle personal data in accordance with applicable data protection standards and are contractually prohibited from using such data for their own independent purposes beyond what is necessary to deliver the specified services.

gempak9 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or for as long as required to comply with applicable legal, regulatory or contractual obligations. The following general principles apply:

• Account and transaction records may be retained for a minimum period following account closure, in compliance with applicable anti-money laundering and financial record-keeping requirements.
• KYC documentation may be retained for the duration of the account relationship and for a defined period thereafter, subject to regulatory requirements.
• Support correspondence and complaint records are retained for a reasonable period to manage ongoing queries and legal obligations.
• Technical logs and analytics data are periodically reviewed and deleted or anonymised on a rolling basis.

When personal data is no longer required, gempak9 will securely delete or irreversibly anonymise it in accordance with industry-standard procedures.

gempak9 maintains a range of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, alteration and disclosure. These include:

• Encrypted transmission of data via HTTPS across all areas of the Site.
• Access controls and role-based permissions restricting internal access to personal data on a need-to-know basis.
• Regular security assessments and vulnerability reviews of Site infrastructure.
• Secure storage practices for sensitive documents, including KYC files.
• Incident detection and response procedures to address potential data breaches promptly.

Users are reminded that no online system can guarantee absolute security. You are responsible for maintaining the confidentiality of your own Account credentials and should notify gempak9 immediately if you suspect any unauthorised access to your Account.

gempak9 uses cookies and similar tracking technologies on the Site for the following purposes:

• Strictly necessary cookies: Required for the basic functioning of the Site, including session management and security. These cannot be disabled without affecting Site functionality.
• Performance and analytics cookies: Used to collect anonymised information about how users navigate and interact with the Site, enabling us to improve content and usability.
• Functional cookies: Used to remember preferences such as language settings, display options and session state across visits.
• Targeting and marketing cookies: Used, with consent, to deliver relevant promotional communications and to measure the effectiveness of marketing activity.

You may adjust your cookie preferences through your browser settings at any time. Disabling certain cookies may affect your ability to use specific features of the Site. Continued use of the Site following the display of any applicable cookie consent notice constitutes acceptance of the use of cookies in accordance with this section.

Subject to applicable law and the conditions set out below, you may exercise the following rights in relation to your personal data held by gempak9. Requests should be submitted in writing to the support email address provided in Section 14.

gempak9 will respond to valid requests within a reasonable timeframe. Identity verification may be required before processing rights requests. Certain rights may be limited where legal retention obligations or the rights of third parties apply.

The gempak9 Site and all associated services are intended exclusively for individuals aged 21 and above. gempak9 does not knowingly collect personal data from persons under the age of 21. Where we reasonably suspect or become aware that a user is below the minimum age, we will take immediate steps to restrict access, close the relevant Account and, where feasible, delete any personal data collected in connection with that Account.

If you become aware that a minor has provided personal data to gempak9 without appropriate parental or guardian consent, please notify us promptly through the contact details in Section 14 so that appropriate action can be taken.

As gempak9 operates with the assistance of technology infrastructure and service providers that may be located outside Malaysia, personal data may be transferred to and processed in countries other than your country of residence. Where such transfers occur, gempak9 takes reasonable steps to ensure that appropriate safeguards are in place to protect the security and confidentiality of personal data in accordance with applicable data protection standards.

By using the Site, you acknowledge and accept that your personal data may be transferred, stored and processed in jurisdictions other than Malaysia. gempak9 will apply consistent internal data handling standards regardless of where processing takes place.

gempak9 reserves the right to update or modify this Privacy Policy at any time. Material changes will be communicated to users through a prominent notice on the Site, and the "last reviewed" date at the top of this page will be updated accordingly. Users are encouraged to review this Policy periodically.

Continued use of the Site following the publication of a revised Privacy Policy constitutes acceptance of the updated terms. If you do not agree to any changes, please cease use of the Site and contact our support team to request account closure.

If you have any questions, concerns or requests relating to this Privacy Policy, including the exercise of any of your data rights, please contact the gempak9 support team. We aim to respond to all privacy-related enquiries promptly.

Support email (displayed as plain text only — not a clickable link):

[email protected]

Our support team is available 24 hours a day and will endeavour to provide an initial response within 10 minutes. For complex rights requests, additional time may be required to verify identity and process the request fully.