Official Document

Gempa99 Privacy Policy – Personal Data Protection for Malaysian Members

Gempa99 takes the privacy of every member in Malaysia seriously. This Privacy Policy clearly sets out how we collect, use, store, and protect your personal data in accordance with the Personal Data Protection Act 2010 (PDPA) Malaysia.

Updated: 1 January 2026 Bahasa Melayu (ms-MY)
PDPA 2010 Compliant
Compliant with Malaysian law
256-bit SSL Encryption
All data is fully protected
Right to Data Access
You have the right to access & correct your data
No Data Sales
Your data is never sold to anyone
Malaysia PDPA Compliant
256-bit SSL Encryption
Data Not Sold
User Rights Protected
24/7 Privacy Support

Gempa99's Commitment to Malaysian Member Privacy

Six core principles that shape how gempa99 handles your personal data responsibly.

Full PDPA 2010 Compliance

All personal data processing at gempa99 is carried out in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. We comply with all data protection principles established under Malaysian law to safeguard the rights of every member.

Data Minimisation

Gempa99 collects only the personal data strictly necessary to operate its services – nothing more. We do not collect data that is irrelevant to the platform's operational needs or that lacks a solid legal basis.

Banking-Grade Data Security

The personal data and financial transactions of all gempa99 members are protected by 256-bit SSL encryption — the same standard used by Maybank2u and CIMB Clicks. Our servers are safeguarded by a multi-layered security system monitored around the clock.

Your Data Is Never Sold

Gempa99 will never sell, rent, or disclose members' personal data to any third party for marketing or commercial purposes. Your data belongs to you, and gempa99 upholds this principle without exception.

Right to Access & Correct Data

As a gempa99 member, you have the right to access, review, and request corrections to your personal data held by the platform. Data access requests may be submitted through gempa99's support channels at any time.

Clear Data Retention Periods

Gempa99 maintains a clear data retention policy – personal data is kept only for as long as necessary for the stated purposes. Data that is no longer required will be securely deleted in accordance with established procedures.

This Privacy Policy explains how gempa99 collects, uses, stores, protects, and shares your personal data. By using the gempa99 platform, you agree to the practices described in this Privacy Policy. Please read it carefully.

This Privacy Policy forms part of the gempa99 Terms & Conditions and applies to all members using the website and services provided through https://gempa99.best. This document is written in Bahasa Melayu for the convenience of Malaysian members.

1 Introduction

Gempa99 is an online casino and digital entertainment platform operating in Malaysia. We recognise that trust is the foundation of a strong relationship between a platform and its members – and that trust starts with responsible, transparent handling of personal data.

This Privacy Policy outlines gempa99's practices regarding the protection of personal data of Malaysian members, in compliance with Personal Data Protection Act 2010 (Malaysia PDPA). We are committed to ensuring that every piece of personal information you entrust to us is handled with the utmost responsibility, confidentiality, and security.

This Privacy Policy applies to all personal information collected by gempa99 when you register an account, make deposits or withdrawals, play games, interact with customer support, or use any other services provided by the gempa99 platform.

2 Personal Data We Collect

Gempa99 collects the personal data required to operate the platform's services safely, fairly, and efficiently. The following are the categories of data we collect:

Personal Identification Information
Full name, identity card number (MyKad), date of birth, gender, and nationality provided at the time of registration.
Contact Information
The email address, mobile phone number, and mailing address you registered with gempa99.
Financial Information
Deposit and withdrawal records, payment methods (DuitNow, Touch 'n Go, GrabPay, etc.), and transaction history in MYR.
Gaming Activity Records
Gaming history, bets placed, wins and losses, and time spent on the gempa99 platform.
Technical & Device Data
IP address, web browser type, device operating system, screen resolution, and related technical information.
Communication Records
Correspondence with customer support via live chat, email, or Telegram, retained for reference and service quality purposes.

gempa99 does not collect sensitive information such as biometric data, medical records, or credit card details directly. All financial transactions are processed through licensed and approved payment providers in Malaysia.

3 Purposes of Personal Data Processing

Gempa99 only processes your personal data for purposes that are clear, lawful, and directly related to the operation of the platform and the delivery of services to you. The following are the primary purposes for which gempa99 processes data:

  • Identity Verification & KYC: Verifying your identity at registration and prior to processing withdrawals to ensure account security and comply with anti-money laundering legal requirements.
  • Account Management: Creating, maintaining, and managing your gempa99 account, including processing deposits, withdrawals, and the management of bonuses and VIP programmes.
  • Provision of Gaming Services: Enabling you to access and play all games available on gempa99, including slots, Live Casino, blackjack, jackpot, and Sports Betting.
  • Customer Support: Handling enquiries, complaints, and support requests submitted to the gempa99 support team.
  • Security & Fraud Prevention: Detecting and preventing fraudulent activity, multiple account usage, money laundering, and any other misuse of the gempa99 platform.
  • Service Communications: Sending you important notifications regarding your account, transactions, terms updates, promotions, and other relevant service information.
  • Platform Improvements: Analysing aggregate usage patterns to improve the performance, security, and user experience of the gempa99 platform.
  • Legal Compliance: To fulfill the legal and regulatory obligations applicable to gempa99 as an online entertainment platform in Malaysia.

4 Legal Basis for Data Processing

Under the Personal Data Protection Act 2010 (Malaysia PDPA), gempa99 processes your personal data on the following legal bases:

  • Consent: By registering an account and agreeing to the Terms & Conditions and this Privacy Policy, you grant gempa99 consent to process your personal data. You may withdraw this consent at any time by contacting us, though doing so may affect your ability to continue using the gempa99 platform.
  • Contract Performance: Data processing is required to fulfill the agreement between you and gempa99 – including processing bets, financial transactions, and managing your account.
  • Legitimate Interest: gempa99 processes data for legitimate interests such as fraud prevention, platform security, and service improvement, provided these interests do not override your fundamental rights.
  • Legal Obligation: Certain data processing is required to comply with legal obligations applicable to gempa99 in Malaysia.

gempa99 will not process your personal data for any purposes beyond those stated in this Privacy Policy without first obtaining your renewed consent.

5 Sharing & Disclosure of Personal Data

Gempa99 does not sell, rent or disclose member personal data to third parties for marketing purposes. Your data is only shared in limited situations with clear justification, as follows:

  • Payment Service Providers: Required transaction information is shared with licensed payment providers in Malaysia — DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, Maybank2u, and CIMB Clicks — solely for the purpose of processing your deposits and withdrawals.
  • Game Providers: Required session information is shared with licensed game providers such as Evolution Gaming and Pragmatic Play to enable you to play their games on the gempa99 platform.
  • Identity Verification Provider: Identity verification documents (KYC) may be processed through licensed third-party verification providers that comply with stringent security standards.
  • Legal Authorities: gempa99 may be required to disclose certain information to Malaysian authorities when compelled by a court order or applicable law.
  • Technical Services: Technical infrastructure providers and cloud service providers engaged by gempa99 may have limited access to data solely for system maintenance purposes, subject to strict confidentiality agreements.

All third parties who receive personal data of gempa99 members are bound by data protection agreements that require them to handle such information to security and confidentiality standards equal to or higher than those of gempa99 itself.

6 Personal Data Security

Gempa99 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, loss, or destruction:

  • 256-bit SSL Encryption: All communications between your device and gempa99's servers are protected by Transport Layer Security (TLS) encryption — the same industry standard used by Malaysia's leading banking institutions.
  • Layered Access Controls: Access to gempa99 members' personal data is restricted to staff who genuinely require it to carry out their duties, based on the principle of least privilege.
  • 24/7 Security Monitoring: gempa99's security systems are monitored around the clock to detect and respond to any threats or suspicious activity in a timely manner.
  • Regular Security Audits: Independent security audits are conducted periodically by external audit firms to assess the effectiveness of the data protection measures in place.
  • Secure Data Backup: Data is regularly backed up to secure locations to ensure service continuity and data recovery in the event of any technical incident.
  • Staff Training: All gempa99 staff who handle personal data undergo regular data protection training to ensure awareness of and compliance with the established privacy policy.

While gempa99 takes all reasonable steps to protect your data, no security system is entirely infallible. You are also responsible for keeping your account password secure and not sharing it with anyone.

7 Data Retention Period

Gempa99 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy or as required by applicable Malaysian law.

gempa99 Data Retention Principles:

  • Active Account Data: For as long as your account remains active with gempa99, your personal data will be retained to ensure uninterrupted and comprehensive delivery of services.
  • Data After Account Closure: When an account is closed at your request, gempa99 will retain the minimum personal data required for a specified period to comply with legal obligations, resolve outstanding disputes, or prevent fraud.
  • Financial Transaction Records: Financial transaction records are retained for the period required under Malaysia's financial reporting and anti-money laundering laws.
  • Data That Is Not Required: When personal data is no longer needed and there is no legal obligation to retain it, it will be securely deleted or anonymised in accordance with our established data deletion procedures.

For enquiries about the specific retention period for your personal data, please contact the gempa99 support team by email at support@gempa99.best.

8 Your Rights as a Data Subject

Under the Personal Data Protection Act 2010 (Malaysia PDPA), you as a gempa99 member have the following rights regarding your personal data:

Right to Data Access

You have the right to request a copy of the personal data held by gempa99. We will process your request within a reasonable timeframe.

Right to Data Correction

If your personal data held by gempa99 is inaccurate or outdated, you have the right to request an immediate correction at no charge.

Right to Withdraw Consent

You may withdraw your consent to data processing at any time. Please note that this may affect your ability to use certain gempa99 services.

Right to Object to Processing

You have the right to object to the processing of your personal data for specific purposes, subject to the legal basis of the processing in question.

Right to Data Erasure

Under certain circumstances, you may request the deletion of your personal data from gempa99's systems, subject to applicable legal retention obligations.

Right to Lodge a Complaint with the Authorities

If you are dissatisfied with how gempa99 handles your personal data, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia.

To exercise any of the above rights, please contact the gempa99 support team via email at support@gempa99.best stating the type of request and your account details. We will process your request within 14 business days.

9 Cookies & Tracking Technologies

Gempa99 uses cookies and similar tracking technologies to enhance your experience on the platform and ensure that essential functions operate correctly.

Types of Cookies Used by gempa99:

  • Essential Cookies: Required for core gempa99 platform functions such as login authentication, session management and account security. These cookies cannot be disabled without affecting platform functionality.
  • Performance Cookies: Gathering information on how visitors use the gempa99 platform – pages visited, time spent, and errors encountered – for service improvement purposes. All data is collected in aggregate and does not identify individuals.
  • Functional Cookies: Saves your preferences such as language, font size and display settings to streamline your experience on gempa99 on future visits.

You can manage your cookie settings through your web browser settings. However, disabling certain cookies may affect your experience on the gempa99 platform. For more information on managing cookies in your browser, please refer to your browser's documentation.

10 Protection of Children & Minors

Gempa99 strictly prohibits individuals under the age of 21 from registering or using this platform. We do not knowingly collect personal data from minors.

Should gempa99 discover that personal data of an individual under the age of 21 has been collected without valid knowledge or consent, we will take the following steps immediately:

  • Closing the account in question immediately
  • Deleting all associated personal data from our systems
  • Returning any remaining account balance to the original payment method
  • Reporting incidents to the relevant authorities where required

If you suspect that someone under the age of 21 has registered on gempa99, please notify us by email at support@gempa99.best. We will investigate and take appropriate action promptly.

11 Amendments to the Privacy Policy

Gempa99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements or relevant technological developments.

When material amendments are made to this Privacy Policy, gempa99 will notify members through one or more of the following channels: a prominent notice on the gempa99 homepage, an email to your registered address, or an in-platform notification. The "Updated" date at the top of this document will be revised to reflect the latest version.

Your continued use of the gempa99 platform after the effective date of any Privacy Policy amendment constitutes your acceptance of the revised policy. It is your responsibility to review this Privacy Policy periodically.

If you do not agree with any amendments to this Privacy Policy, please discontinue use of the platform and contact us to close your account. We will process your account closure request within a reasonable timeframe.

12 Contact Us Regarding Privacy

For any enquiries, concerns, or requests relating to gempa99's Privacy Policy or your personal data, please reach out to us through the following channels:

Privacy Email
support@gempa99.best – for data access requests, corrections or deletion of personal data.
24/7 Live Chat
General enquiries regarding privacy and data security. Response within 2 minutes.
Telegram
Casual privacy-related communication. Full support available in Bahasa Melayu.

We are committed to responding to all privacy-related enquiries within 14 working days. For more serious complaints or if you are unsatisfied with our response, you have the right to submit a complaint to the Department of Personal Data Protection Malaysia (JPDP).

Why Data Privacy Is an Absolute Priority at gempa99

How gempa99 protects the personal data of over 500,000 Malaysian members

When you register an account with gempa99, you entrust us with highly sensitive personal information — your full name, MyKad number, phone number, email address and financial details. gempa99 does not take this trust lightly. This platform is built on the principle that privacy is not merely a legal compliance requirement, but a fundamental right of every user — one that must be fully respected and protected.

Malaysia has a robust legal framework for data protection through the Personal Data Protection Act 2010 (PDPA). This legislation sets out seven key principles that all entities processing personal data in Malaysia must comply with: the General Principle, the Notice and Choice Principle, the Disclosure Principle, the Security Principle, the Retention Principle, the Data Integrity Principle, and the Access Principle. gempa99 is committed to upholding all seven principles — not merely in technical and procedural terms, but in the true spirit intended by the legislators.

For Malaysian players, the security of financial information is one of the most critical aspects of privacy. When you make a deposit via Touch 'n Go eWallet, GrabPay, DuitNow, or any other local Malaysian payment method, your transaction details are transmitted through channels protected by 256-bit SSL encryption. gempa99 does not store your full account or digital wallet details — only the information necessary to record transactions and verify account ownership. This means that even in the unlikely event of a security incident, your exposure of financial data remains extremely limited.

Many Malaysian players ask whether their gaming records — such as slots betting history, blackjack game records or Malaysia Super League betting records — are shared with other parties. The answer is no. Your gaming activity data on gempa99 is used solely to grant you access to games, calculate bonuses and VIP rebates you are entitled to, resolve any disputes that arise and detect suspicious activity that may indicate account abuse. This data is not shared with any third party for marketing, commercial analytics or any other purpose beyond the platform's operational requirements.

Cookies and tracking technologies are a common concern among Malaysian internet users who are increasingly aware of their digital privacy. At gempa99, we use cookies for three core purposes only: keeping your login session secure, saving your display preferences, and analysing platform performance in aggregate. We do not use third-party tracking cookies to build an advertising profile of you or to track your activity outside of the gempa99 website.

Gempa99's enforcement of the 21-and-above age requirement also carries an important privacy dimension. The identity verification (KYC) process we conduct not only ensures that players meet the age requirement, but also protects users' identities from being misused. When you submit a copy of your MyKad or other identity verification document, that information is processed through a secure system accessible only to specifically authorised personnel.

The rights to access and correct data are the two rights most commonly exercised by gempa99 members. If you would like to know what personal data we hold about you, or if you find any inaccurate information in your account, you may contact our support team by email at support@gempa99.best. Data access requests will be processed within 14 business days, and correction requests will be resolved promptly once your identity has been verified. No charges apply for data access or correction requests.

Finally, gempa99 wishes to make clear that this Privacy Policy is not merely a legal document written to satisfy compliance requirements. It is a statement of our commitment to every Malaysian member who entrusts their personal data to this platform. We understand that privacy is fundamental to feeling safe and comfortable when using an online platform, and we will continue to invest in the infrastructure, procedures, and training necessary to ensure your personal data is always protected in the manner you deserve.

Gempa99 Data Protection Commitment

The gempa99 Privacy Policy is drafted in accordance with Personal Data Protection Act 2010 (PDPA) Malaysia. Your personal data is used solely for platform operations, processing transactions in Malaysian Ringgit (RM) and account management. gempa99 does not sell your data to any third party.

All financial transactions are protected by 256-bit SSL encryption. For privacy-related enquiries or to exercise your data access rights, contact us at support@gempa99.best.

Read also Terms & Conditions gempa99 for a full overview of the platform's terms of use.

Your Data is Safe at gempa99 – Register with Confidence Today

Join over 500,000 Malaysian members who play on gempa99 with full confidence that their personal data is protected to the highest industry standards and in accordance with Malaysian law.

Bahasa Melayu