Gem55 Privacy Policy – Data Protection for Malaysia Members

Gem55 collects various types of information from members during the registration process and throughout ongoing use of the platform. Understanding what data is collected helps you make more informed decisions about how you use our platform.

Information You Provide Directly:

• Registration Information: Your full name, email address, mobile number, date of birth, and the username you choose when registering a gem55 account.
• Identity Verification Information: Where required for the KYC (Know Your Customer) process, we may request your MyKad identification number, a copy of your identity document, or proof of address such as a utility bill or bank statement.
• Financial Information: Details of the account or e-wallet you use for deposits and withdrawals — including Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow or FPX accounts (Maybank2u, CIMB Clicks). We do not store credit or debit card numbers directly.
• Contact Us: Any messages, complaints, or requests you submit to the gem55 customer support team via live chat, email, or other support channels.

Automatically Collected Information:

• Gaming Data: A complete record of all bets, wins, losses and gaming activity on your gem55 account — including Live Casino games, slots, baccarat, roulette, blackjack and Sports Betting.
• Technical Data: IP address, device type, operating system, browser version, screen resolution and other technical information related to the device you use to access gem55.
• Usage Data: Pages you visit within the gem55 platform, time spent, features used and general navigation patterns across the platform.
• Location Data: General location information based on your IP address. gem55 does not use GPS or precise location data from your device.

Gem55 uses the information collected solely for legitimate purposes necessary to operate the platform. Below is a detailed breakdown of each data use purpose:

• Account Management: Creating, verifying and managing your gem55 account — including the login process, password changes and any associated identity verification.
• Transaction Processing: Processing all deposits through your preferred local Malaysian payment method and handling withdrawal requests to your account or e-wallet accurately and promptly.
• Gaming Services Provision: Giving you full access to everything gem55 has to offer — from Live Casino tables with Malay-speaking dealers and jackpot slots to baccarat, blackjack, football Sports Betting and cricket.
• Fraud Detection & Security: Analysing usage patterns to detect suspicious activity, prevent the use of multiple accounts, and protect the platform and all members from fraud.
• Customer Support: Uses account history and past communications to deliver more effective and personalised customer support to gem55 members.
• Legal Compliance: Fulfilling legal obligations under Malaysia's PDPA and applicable anti-money laundering regulations.
• Platform Communications: Sending you important notifications about your account, terms updates, relevant promotions and technical information related to gem55 services via email or SMS.
• Platform Improvements: Analysing aggregated, anonymised usage data to understand how members interact with the gem55 platform and to drive continuous improvements to the user experience.

Gem55 will not use your data for any purpose beyond those stated above without first obtaining your consent.

Gem55 does not sell or share your personal data with third parties for marketing purposes. However, there are limited circumstances where disclosing data to certain parties is necessary for platform operations:

All third parties that receive data from gem55 are bound by strict confidentiality agreements and may only use that data for the stated purpose. gem55 does not permit any third party to use our members' data for their own marketing purposes.

Gem55 invests heavily in security infrastructure to ensure the personal and financial data of all members is protected at all times. The key security measures we have implemented include:

• 256-bit SSL Encryption: All communications between your web browser or application and gem55's servers are encrypted using TLS 1.3 with 256-bit key strength — the same standard used by leading banking institutions in Malaysia.
• Data-at-Rest Encryption: Sensitive data stored in gem55's databases — including identity verification information and transaction history — is held in encrypted form using robust encryption algorithms.
• Internal Access Controls: Access to member data within gem55's internal systems is strictly limited on a need-to-know basis. All access is logged and continuously monitored by our security team.
• Two-Factor Authentication (2FA): gem55 supports two-factor authentication for member accounts, adding an extra layer of security that protects your account even if your password is compromised.
• Continuous Threat Monitoring: gem55's security monitoring system operates 24 hours a day to detect and respond to any threats or suspicious activity in real time.
• Regular Security Audits: gem55's technical infrastructure undergoes regular independent third-party security audits to identify and address any potential vulnerabilities before they can be exploited.
• Secure Data Backup: Member data is regularly backed up to secure, encrypted storage locations to ensure no data is lost due to unforeseen technical failures.

While gem55 implements all reasonable security measures, no system can guarantee absolute 100% security in a digital environment. You also play an important role in keeping your account secure — ensure your password is strong and unique, never shared with anyone, and updated regularly.

Gem55 uses cookies and similar tracking technologies to enhance your experience on our platform. Below is an overview of the types of cookies we use and their purposes:

• Essential Cookies: These cookies are required for the core functionality of the gem55 platform and cannot be disabled. They are used to maintain your login session, remember your language preference, and store basic security settings. Without these cookies, the gem55 platform will not function properly.
• Performance Cookies: Used to collect information about how visitors use the gem55 platform — including which pages are visited most frequently, error messages received, and more. All information is collected anonymously and used solely to improve platform performance.
• Functional Cookies: Allows the gem55 platform to remember your preferences, such as your username, preferred language, and display settings. This enables us to deliver a more personalised experience for your convenience.
• Analytics Cookies: gem55 uses analytics data to understand overall platform usage patterns for product development purposes. All analytics data is processed in aggregate form and is not used to identify any individual.

You can manage cookie usage through your browser settings. However, disabling certain cookies may affect the functionality of the gem55 platform. For guidance on managing cookies in your browser, please refer to your browser's help documentation.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and gem55's privacy policy, you have the following rights regarding your personal data held by us:

• Access Rights: You have the right to request and obtain a copy of the personal data gem55 holds about you. This request can be made through the account settings page or by contacting support@gem55.xyz. gem55 will process such requests within 14 business days.
• Right to Rectification: If you believe any personal data held by gem55 is inaccurate or incomplete, you have the right to request a correction. Basic details such as your phone number and email address can be updated directly from your account settings.
• Right to Erasure: You may request that gem55 delete your personal data in certain circumstances — particularly when it is no longer needed for the purpose it was originally collected. However, gem55 may be required to retain certain data for periods prescribed under Malaysian law.
• Right to Object to Processing: You have the right to object to the processing of your personal data for specific purposes, particularly for direct marketing. You may opt out of receiving marketing communications at any time via the unsubscribe link in our emails.
• Right to Data Portability: You have the right to receive your personal data in a machine-readable format for transfer to another service provider should you choose to do so.
• Right to Withdraw Consent: Where the processing of your data is based on consent you have provided, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the validity of any processing carried out prior to the withdrawal.

To exercise any of the above rights, you may contact the gem55 privacy team by email at support@gem55.xyz clearly stating your request. We will process it within a reasonable timeframe and keep you informed of the action taken.

Gem55 retains members' personal data only for as long as necessary for the purposes set out in this Privacy Policy, or as required by applicable Malaysian law. The following are general guidelines on data retention periods:

• Active Account Data: For as long as your account remains active with gem55, your core personal data will be retained to ensure uninterrupted account operation.
• Financial Transaction Records: Deposit, withdrawal and betting history records are retained for a minimum of seven years from the date of the relevant transaction, in line with Malaysian financial and anti-money laundering legal requirements.
• Support Communication Logs: All communications between you and the gem55 support team are retained for three years from the date of last contact, for reference and dispute resolution purposes.
• Closed Account Data: When your account is closed, gem55 will delete or anonymise personal data that is no longer required for legal or operational purposes within 90 days of the closure date, unless it is needed for an active investigation.
• Technical Data & Logs: Technical logs and platform usage data are typically retained for 12 months before being automatically deleted or anonymised.

If you have any questions, concerns or requests regarding gem55's Privacy Policy or how we handle your personal data, we encourage you to reach out to us directly. Our team is ready to provide clear, detailed explanations in Bahasa Melayu.

You can reach the gem55 privacy team through the following channels:

• Email: support@gem55.xyz — for privacy-related enquiries, please include "Privacy Enquiry" in your email subject line so it can be directed to the right team promptly.
• Live Chat: Available directly on the gem55 platform, 24 hours a day, 7 days a week. This is the fastest way to get an immediate response to any urgent privacy concerns.

Gem55 is committed to responding to all privacy-related enquiries within 3 business days. For more complex data deletion or correction requests, the process may take up to 14 business days depending on the complexity of the request and the identity verification requirements involved.

If you believe gem55 has not adequately addressed your privacy concerns, you have the right to lodge a complaint with the relevant data protection authority in Malaysia in accordance with the established procedures.