Privacy Policy gem188 — Your Data Protection

When you register and use the gem188 platform, we collect several categories of information to provide you with a safe, seamless, and high-quality service. This data collection is necessary to ensure the platform operates properly and complies with applicable legal requirements.

The following are the types of information we collect:

Information may also be collected automatically via cookies and tracking technologies when you browse the gem188 platform. This includes session data, language preferences, and usage patterns that help us continually improve your overall experience.

Gem188 uses collected information solely for purposes related to delivering platform services to you. We do not use your data for unrelated purposes or in any way that could harm your interests.

• Processing account registration and verifying your identity through a standard KYC process.
• Processing deposits, withdrawals, and all financial transactions securely and accurately.
• Detecting and preventing fraudulent activity, money laundering, and platform abuse.
• Sending important notifications related to your account, active promotions, and platform updates.
• Providing effective customer support and resolving any complaints promptly.
• Improving platform features based on usage patterns and user feedback.
• Complying with legal obligations and applicable reporting requirements.

Any use of your data for direct marketing purposes will only be carried out with your explicit consent. You may withdraw this consent at any time by contacting our support team or through the account settings on the gem188 platform.

Gem188 does not sell or rent your personal data to any third party. However, there are limited situations where we need to share certain information with trusted parties to enable the smooth operation of the platform.

• Payment Providers: DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay — to securely process your financial transactions.
• KYC Service Providers: A third-party identity verification platform that helps us validate the information you provide.
• Technology Service Providers: Companies that provide server infrastructure, cloud services, and technical support for the gem188 platform.
• Statutory Authorities: When required by law or a valid court order, we will disclose the necessary information to the relevant authorities.

In the event of a company merger, acquisition, or asset transfer, user data may be transferred to the new entity. Should this occur, users will be notified in advance and will have the option to delete their account if they do not agree to the new terms.

Your data security is gem188's highest priority. We continuously invest in the latest security technologies and practices to ensure your information is always protected against increasingly sophisticated cyber threats.

• 256-bit SSL/TLS encryption for all data transferred between your device and gem188 servers.
• At-rest encryption for all information stored in our databases.
• Role-based access control (RBAC) ensuring only authorized staff can access sensitive data.
• Continuous 24/7 security monitoring with an automated intrusion detection system.
• Regular security audits by independent third parties to assess and improve our security posture.
• Regular data backups with fully tested disaster recovery procedures.

You also play an important role in keeping your data secure. Use a strong, unique password, enable two-factor authentication (2FA), and never share your login credentials with anyone, including anyone claiming to be gem188 staff.

Gem188 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you browse our website.

We do not use cookies for third-party advertising purposes or to track your activity on other websites outside the gem188 platform. Our use of cookies is limited solely to the operational needs and improvement of our own platform.

Gem188 respects your rights over your personal data. Below are the rights you hold and how to exercise them through our platform.

Gem188 retains your personal data only for as long as it is necessary for the purposes stated in this privacy policy, or as required by applicable law. We maintain a clear and consistent data retention policy for each category of information.

• Active account data is retained for as long as your account remains active and for 5 years after account closure for compliance purposes.
• Financial transaction records are retained for a minimum of 7 years in accordance with accounting and anti-money laundering legal requirements.
• Customer support communication logs are retained for 2 years for reference and service improvement purposes.
• Technical data and security logs are retained for 12 months for security incident investigation purposes if required.
• Analytics cookie data is automatically deleted according to the retention period set for each cookie type.

When data is no longer needed, gem188 will securely delete or de-identify it using methods that ensure the information cannot be recovered. This deletion process is carried out regularly and systematically according to a set schedule.

Gem188 reserves the right to update or amend this privacy policy at any time to reflect changes in our practices, legal requirements, or service improvements. The date of the most recent update will always be displayed at the top of this document.

• Material amendments will be communicated via in-platform notifications on gem188 or to the email address registered with your account.
• Continued use of the platform after the effective date of any amendments constitutes acceptance of the updated policy.
• If you disagree with any amendments made, you have the right to close your account and request data deletion in accordance with the procedures outlined in Section 6.

This privacy policy is written in Bahasa Melayu. In the event of any discrepancy in translations to other languages, the Bahasa Melayu version shall prevail and serve as the definitive reference for all purposes.