gdl88 Privacy Policy

Introduction

This Privacy Policy governs the collection, use, storage and disclosure of personal information by gdl88 in connection with its website and any associated account services. gdl88 is an English-language casino and sports betting information platform principally serving Malaysian adults.

The policy applies to all users who access gdl88, regardless of whether they hold a registered account. Where a user is located in Malaysia, relevant provisions of the Personal Data Protection Act 2010 (PDPA) and associated regulations inform our approach to personal data handling.

Definitions

"Personal data" means any information that identifies, or could reasonably be used to identify, a natural person, whether alone or in combination with other data. "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, correction and deletion.

"User" or "you" means the person accessing or using gdl88. "Account" means a registered user profile. "Payment provider" means a bank, e-wallet operator or transfer network, including Maybank, CIMB, Public Bank, Hong Leong, Touch'n Go eWallet, Boost, GrabPay, DuitNow and FPX.

Data Controller

gdl88 acts as the data controller in respect of personal information collected through its website and account systems. Questions about data handling should be directed to the website email address shown at the end of this policy. That address is displayed as plain text and is not a clickable link.

Data We Collect

The categories of personal data gdl88 may collect include, but are not limited to, the following:

How We Collect Personal Data

gdl88 collects personal data through three main channels. First, information provided directly by a user during registration, account management, KYC submission, a support inquiry or any other voluntary interaction with the platform.

Second, information generated automatically during visit, such as IP address, device identifiers and browsing behaviour, collected through server logs and first-party analytics tools.

Third, information received from payment providers and financial institutions, such as Maybank, CIMB, Public Bank or Touch 'n Go eWallet, when a transaction is processed. That information is limited to what is necessary for the payment to be completed and verified.

Purposes and Legal Basis for Processing

gdl88 processes personal data for the following specific purposes:

• Account administration: creating, maintaining and managing a registered user account.
• Identity verification: confirming a user is aged 21 or above, holds the stated identity and is entitled to use the service.
• Payment processing: receiving MYR deposits, processing withdrawal requests and preventing fraudulent transactions.
• Security and fraud prevention: detecting account misuse, duplicate registrations, money laundering indicators and unauthorised access.
• Legal and regulatory compliance: fulfilling obligations under applicable law, responding to lawful authority requests and maintaining required records.
• Responsible gambling controls: applying deposit limits, self-exclusion flags and age-related restrictions.
• Customer support: responding to account, payment or technical inquiries submitted by a user.
• Service improvement: analysing aggregated usage patterns to improve navigation and content for Malaysian users.

Data Sharing and Disclosure

gdl88 does not sell personal data. Data may be shared only in the following circumstances:

• Payment providers: information required to process a deposit or withdrawal via Maybank, CIMB, Public Bank, Hong Leong, GrabPay, Boost, Touch 'n Go eWallet, DuitNow or FPX.
• Identity verification services: a KYC or anti-fraud provider engaged to assist with document checks.
• Legal authorities: where required by a court order, regulator, law enforcement request or applicable law.
• Service providers: hosting, security and analytics providers acting under confidentiality obligations and processing data only as directed by gdl88.

Where data is shared with a third party, gdl88 takes reasonable steps to ensure that those parties apply appropriate security and confidentiality standards.

International Data Transfers

Some technical service providers used by gdl88, such as cloud hosting or analytics platforms, may process data in countries other than Malaysia. Where an international transfer occurs, gdl88 applies contractual safeguards and restricts transferred data to what is strictly necessary for the service function.

Users with questions about specific transfer destinations may contact gdl88 using the website email displayed on this page.

Data Retention

Personal data is retained only for as long as necessary to fulfil the purpose for which it was collected. After that period, data is deleted or anonymised unless a longer retention period is required by:

• Applicable financial and transaction record-keeping obligations;
• Anti-money laundering and regulatory compliance requirements;
• Ongoing dispute resolution, legal proceedings or regulatory investigations;
• A self-exclusion or account restriction that requires a record to remain active.

Transaction records involving MYR payments may be retained for a period consistent with Malaysian financial regulations. Account data for inactive users may be reviewed periodically against retention criteria.

Security Measures

gdl88 applies reasonable technical and organisational measures to protect personal data from unauthorised access, loss, misuse, alteration or destruction. These measures include:

• HTTPS encryption for all data transmitted between a user's browser and the gdl88 website;
• Access controls that restrict personal data to authorised personnel with legitimate operational need;
• Storage security practices designed to protect document uploads, account credentials and payment references;
• Regular review of security processes and provider arrangements.

Users are responsible for protecting their own account credentials, one-time passwords and device access. Identity documents should never be sent through unsecured chat platforms or unencrypted email. Notify gdl88 using the website email if unauthorised access to your account is suspected.

User Rights

Malaysian users may have rights in relation to their personal data under applicable law, including the Personal Data Protection Act 2010. These rights may include:

Cookies and Tracking Technologies

gdl88 may use first-party cookies and similar technologies to maintain session state, remember user preferences and collect aggregated usage statistics. These technologies do not identify a specific individual by name but may constitute personal data when combined with other information.

Most browsers allow users to manage or delete cookies through their settings. Disabling certain cookies may affect the functionality of the gdl88 website. Third-party advertising or tracking cookies from unrelated services are not intentionally loaded through the gdl88 website.

Minors and Age Verification

gdl88 is intended exclusively for persons aged 21 and above. gdl88 does not knowingly collect or retain personal data from individuals under that age. Where reasonable grounds exist to believe that a user is under 21, their account access will be suspended pending identity and age verification.

If a parent or guardian believes that a minor has submitted personal information to gdl88, they should contact gdl88 using the website email so that appropriate action can be taken promptly.

Policy Changes and Updates

gdl88 may update this Privacy Policy to reflect changes in data processing practices, applicable law, payment provider arrangements or platform services. The revised effective date will be displayed at the top of this page whenever a material change is made.

Continued use of gdl88 after a policy update constitutes acceptance of the revised provisions where permitted by applicable law. Users who do not accept a material change should cease using gdl88 and may request account closure by contacting the website email.

Contact and Data Inquiries

Questions about this Privacy Policy, data correction requests, objections to processing or any other data-related inquiry should be submitted to the gdl88 website email address shown below. Do not include a password, one-time password, complete card number or unredacted identity document number in your message.

gdl88 will acknowledge a data inquiry within a reasonable timeframe and may ask for identity confirmation before releasing or modifying personal data. Responses are provided in English.