Privacy Policy GK88 – Malaysian Member Data Protection

This Privacy Policy is published by GK88 and applies to all individuals who access or use the GK88 platform via gk88-vip.net or the GK88 mobile app. At GK88, we understand that trust is the foundation of our relationship with every member — and that trust cannot exist without full transparency about how we handle your personal information.

For GK88, privacy is not merely a legal requirement — it is a core value we uphold seriously. Many GK88 members entrust us with sensitive personal information, including identity details and financial information related to payment methods such as Touch 'n Go, GrabPay, DuitNow, and FPX. We take this responsibility very seriously and have robust systems and procedures in place to safeguard all information you entrust to us.

This Privacy Policy details what information we collect, why we need it, how we use it, who it is shared with, how it is protected, how long it is retained, and what rights you have over that data. If any part is unclear, please contact us at support@gk88-vip.net — we are happy to provide further clarification in Bahasa Malaysia.

GK88 collects personal data through two main channels: information you provide directly to us, and information collected automatically when you use our platform. Below is a full breakdown of the types of data we collect:

Information you provide directly:

• Registration information: Full name, Malaysian identity card number (MyKad), date of birth, email address, Malaysian mobile number, and preferred username.
• Profile information: Malaysian residential address, language preferences, and gaming preference information.
• Identity verification information (KYC): MyKad copy, facial verification selfie, and any supporting documents requested during the KYC process.
• Financial information: Details of the payment method used (Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, FPX, Maybank2u, or CIMB Clicks), along with deposit and withdrawal transaction history.
• Communicating with us: Live chat conversation records, emails to our support team, and any complaints or feedback you have submitted.

Information collected automatically:

• Technical data: IP address, web browser type and version, device operating system, screen resolution, and device identifier.
• Usage data: Pages visited, time spent in each section of the platform, games played, bet amounts, and general usage patterns.
• Location data: General location based on IP address for the purpose of verifying that you are in Malaysia while using the platform.
• Cookie data: Session information, stored platform preferences, and analytics data collected via cookies — see Section 7 for further details.

GK88 uses collected personal data solely for legitimate, clearly stated purposes. We do not use your data for any other purpose without obtaining fresh consent from you. The following are the primary purposes for which GK88 members' personal data is used:

• Account management: Creating and maintaining your gk88 account, processing your registration, and enabling you to log in securely.
• Identity verification (KYC): Verifying that you meet the minimum age requirement of 18 and that you are who you claim to be — this is a mandatory regulatory requirement for gambling platforms.
• Payment processing: Processing deposits via Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, or FPX, and processing withdrawal of winnings to your Malaysian e-wallet or bank account.
• Gaming services provision: Gives you full access to all GK88 games — slots, Sports Betting on Malaysia Super League and EPL, Live Casino, lottery, badminton, and e-sports — while keeping a record of your game history and account balance.
• Security & fraud prevention: Detects and prevents unauthorized access, identity fraud, bonus abuse, duplicate accounts, and other prohibited activities that violate GK88's terms.
• Legal compliance: Meeting Malaysian legal requirements, including the PDPA, anti-money laundering (AML) obligations, and directives from relevant authorities.
• Service communications: Sending important notifications about your account, game or lottery results, withdrawal status, and security alerts.
• Marketing (with consent): Sending information about GK88 promotions, new bonuses, slot tournaments, and special offers — only if you have consented to receive marketing communications, and you may opt out at any time.
• Platform improvement: Analyzes aggregated usage patterns to understand how members use GK88 and drive ongoing improvements to the platform.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), GK88 requires a valid legal basis for each type of personal data processing. Below are the legal bases we rely on:

• Contract: Processing necessary to fulfil the service agreement between you and GK88 — this covers account management, processing deposit and withdrawal payments via your chosen Malaysian payment method, and providing access to games.
• Legal obligations: Processing required to comply with applicable Malaysian law — including KYC requirements, anti-money laundering (AML) obligations, and any directives from regulatory authorities.
• Legitimate interests: Processing for security and fraud prevention purposes, detection of duplicate accounts, and platform analytics that help us deliver a better service — provided these interests do not override your fundamental privacy rights.
• Consent: For marketing communications and non-essential cookies — we will ask for your explicit consent and will respect your decision to withdraw it at any time.

When we process your personal data on the basis of legitimate interests, we always assess whether those interests are reasonable and do not cause any undue harm to your privacy or individual rights.

GK88 does not sell, rent, or trade members' personal data to any party. However, there are limited situations where GK88 may need to share your information with certain parties for legitimate operational purposes:

• Payment service providers: Payment gateway providers that process your transactions — such as the technical operators behind Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, or FPX — receive the information necessary to complete those transactions. They are bound by strict data protection agreements.
• Game software providers: Game providers that supply slots, live casino, and other games on the GK88 platform may receive session data necessary for game operation. This data is kept to the minimum required and does not include your personal financial information.
• Identity verification services: Third-party KYC service providers we engage to verify member identity during the account verification process. They are bound by strict confidentiality agreements.
• Malaysian authorities: Law enforcement authorities, regulatory bodies, or courts in Malaysia where we are required to do so by law, court order, or valid legal process. GK88 will not disclose your data to authorities outside Malaysia without a solid legal basis.
• Business transfers: Should GK88 be involved in any merger, acquisition, or asset sale, member data may be transferred to the new entity, provided that an equivalent or stricter privacy policy is upheld and members are notified in advance.

GK88 implements comprehensive technical and organisational security measures to protect members' personal data against unauthorised access, alteration, disclosure, or destruction. Key security measures we have in place include:

• Data encryption: All data in transit is protected with 256-bit SSL/TLS encryption. Sensitive data at rest, such as financial details and KYC information, is also encrypted within our databases.
• Internal access controls: Access to members' personal data within GK88's systems is restricted to staff who need it to carry out their responsibilities. All access is logged and monitored.
• Internal two-factor authentication: All GK88 staff who access systems containing member data are required to use two-factor authentication when logging in to those systems.
• Regular security audits: GK88 conducts regular security audits and penetration testing to identify and address any vulnerabilities in our systems before they can be exploited.
• 24-hour monitoring: GK88's security team monitors all system activity around the clock to detect any suspicious or unusual behavior that may indicate an unauthorized access attempt.

Data retention period:

• Active account data is retained for the duration of your active membership with gk88 and for 7 years following account closure, in line with Malaysian legal requirements on financial records and anti-money laundering.
• Transaction logs and game records are retained for a minimum of 5 years for regulatory compliance and dispute resolution purposes.
• Customer support communication records are retained for 3 years after the last interaction.
• Anonymised analytics data that cannot be linked to any specific individual may be retained for a longer period for platform improvement purposes.

In the event of any data security breach that may affect your rights or freedoms, GK88 will notify you within a reasonable timeframe in accordance with the requirements set out under applicable Malaysian law.

The GK88 platform uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and gather analytical insights into how the platform is used. The types of cookies we use are as follows:

You can manage your cookie preferences through your web browser. Most modern browsers allow you to view, delete, or block cookies from specific websites. Please note that blocking essential cookies may affect your ability to log in and use the GK88 platform fully. For guidance on managing cookies in your browser, please refer to your browser's official documentation.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data held by GK88. GK88 respects and facilitates the exercise of these rights:

GK88 has a zero-tolerance policy towards underage participation on our platform. The GK88 platform is strictly for individuals aged 18 and above. We do not knowingly collect, process, or store any personal data from individuals under the age of 18.

As part of the registration process, gk88 requires date of birth verification and, in most cases, identity verification via MyKad to confirm age eligibility. Our KYC process is specifically designed to detect and prevent underage registrations.

If GK88 discovers that personal data of an individual under 18 has been collected without our knowledge — for example, through false information provided during registration — we will promptly delete that data, close the account in question, and take appropriate action. If you are a parent or guardian and believe your child has registered a GK88 account, please contact us immediately at support@gk88-vip.net for urgent assistance.

GK88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements, or new technologies we adopt. When significant changes are made, we will:

• Posting a clear notice of the changes on this page along with the updated amendment date.
• Sending email notifications to all active GK88 members at least 14 days before changes take effect.
• In certain cases requiring active consent, we may ask you to confirm your agreement to the updated policy before continuing to use the platform.

Continued use of the gk88 platform after the effective date of any Privacy Policy amendment will be considered your acceptance of the updated policy. We recommend reviewing this page periodically to stay informed of how gk88 handles your personal data.

Previous versions of this Privacy Policy are available upon request by emailing support@gk88-vip.net, should you need them for reference.

If you have any questions, concerns, or requests regarding this Privacy Policy or how GK88 handles your personal data, please contact us through the following channels:

• Email: support@gk88-vip.net — use the subject line "Privacy Enquiry" to ensure your message reaches the right team promptly.
• Live Chat: Available 24/7 within the gk88 platform — for general privacy enquiries that require an immediate response.

We are committed to responding to all privacy-related enquiries within 5 business days and formal privacy rights requests within 21 working days. Our privacy team is fluent in Bahasa Malaysia and fully understands the Malaysian legal context — no language barriers when it matters most.

If you are not satisfied with GK88's response to your privacy inquiry or complaint, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia as established under the PDPA 2010.