gemsbet Privacy Policy

1 Introduction

gemsbet is committed to protecting the privacy and personal data of every player who registers and uses our platform. This Privacy Policy is intended to clearly explain, in plain language, the personal information we collect from Malaysian players and site visitors, the purposes for which that information is used, and the rights you hold in respect of your personal data.

We handle personal data responsibly and in compliance with applicable data protection laws. If you are not comfortable with any aspect of how gemsbet processes your personal data as described in this Policy, please do not register an Account or use the Platform.

2 Data Controller

For the purposes of applicable data protection legislation, the data controller responsible for the personal data collected through the gemsbet Platform is gemsbet (referred to throughout this Policy as "gemsbet", "we", "us", or "our").

If you have questions about how your personal data is handled, you may contact us at any time via the contact details provided in Section 16 of this Policy.

3 Personal Data We Collect

gemsbet collects the following categories of personal data in connection with your use of the Platform:

4 How We Collect Your Data

gemsbet collects personal data through the following means:

• Direct collection: Information you provide when registering an Account, completing KYC verification, making a deposit or withdrawal, contacting support, or interacting with any feature of the gemsbet Platform.
• Automated collection: Technical and usage data collected automatically when you access or use the Platform, including via cookies, server logs, and similar tracking technologies.
• Third-party sources: Identity verification data from KYC service providers; fraud and risk data from anti-fraud screening services; payment processing data from payment partners including FPX, Touch 'n Go eWallet, Boost, and GrabPay operators.

5 How We Use Your Personal Data

gemsbet uses the personal data we collect for the following purposes:

• To create, manage, and maintain your gemsbet Account, including processing your registration, verifying your identity, and administering your MYR wallet.
• To process deposits and withdrawals through your chosen payment methods, and to comply with applicable anti-money laundering and counter-terrorism financing requirements.
• To operate and personalise your experience on the gemsbet Platform, including presenting relevant odds, promotions, and game recommendations.
• To detect, investigate, and prevent fraud, Prohibited Conduct, and any security threats to the Platform or its users.
• To monitor for responsible gaming indicators and to communicate with you regarding responsible gaming tools and resources where appropriate.
• To provide customer support and resolve complaints, disputes, or technical issues relating to your Account or the Platform.
• To comply with gemsbet's legal and regulatory obligations, including responding to lawful requests from regulatory authorities or law enforcement.
• To send you account-related communications, including transaction confirmations, security alerts, and updates to platform terms or policies.
• With your consent, to send promotional communications about gemsbet offers, bonuses, and events. You may withdraw marketing consent at any time by contacting gemsbet support.

6 Legal Basis for Processing

gemsbet processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the gemsbet Terms & Conditions and to provide the services you have requested, including operating your Account, processing transactions, and providing customer support.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering legislation, tax reporting obligations, and responses to lawful regulatory or law enforcement requests.
• Legitimate interests: Processing necessary for the legitimate interests of gemsbet, including fraud prevention, platform security, responsible gaming monitoring, and platform improvement — where those interests are not overridden by your data protection rights.
• Consent: Processing based on your express consent, including marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

7 Sharing Your Personal Data

gemsbet does not sell your personal data. We may share your personal data with the following categories of third parties, strictly for the purposes described in this Policy:

• Payment processors and e-wallet operators: Including FPX, Maybank, CIMB, Public Bank, Touch 'n Go eWallet, Boost, and GrabPay, for the purpose of processing deposits and withdrawals.
• KYC and identity verification providers: Third-party services that assist gemsbet in verifying the identity, age, and source of funds of registered players in compliance with applicable regulations.
• Game providers: Licensed game studios and live casino providers whose games are made available on the gemsbet Platform, who may receive session and game data necessary to operate the games.
• IT and platform service providers: Cloud hosting, data storage, analytics, and cybersecurity service providers engaged by gemsbet under strict data processing agreements.
• Regulatory authorities and law enforcement: Where gemsbet is legally required or permitted to disclose personal data to a government body, regulatory authority, or law enforcement agency.

All third parties with whom gemsbet shares personal data are subject to contractual obligations of confidentiality and are prohibited from using your data for any purpose beyond that for which it was shared.

8 International Data Transfers

gemsbet's principal operations are focused on Malaysian players. Where personal data is processed or stored on servers or by service providers located outside Malaysia, gemsbet ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections applicable in Malaysia, including through contractual data protection clauses with third-party processors.

9 Data Retention

gemsbet retains your personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, accounting, and reporting obligations. As a general guide:

• Account and identity data is retained for the duration of your Account and for a minimum of five (5) years after Account closure, as required by applicable anti-money laundering regulations.
• Transaction records are retained for a minimum of five (5) years from the date of the transaction.
• Customer support communications are retained for up to three (3) years from the date of the interaction.
• Technical and usage data collected via cookies and logs is generally retained for no longer than thirteen (13) months.

After the applicable retention period expires, personal data is securely deleted or anonymised in accordance with gemsbet's data destruction procedures.

10 Cookies & Tracking Technologies

gemsbet uses cookies and similar tracking technologies to operate, secure, and improve the Platform. The types of cookies used by gemsbet include:

• Strictly necessary cookies: Required for the Platform to function correctly, including maintaining your login session, remembering your language preferences, and providing security features.
• Analytics cookies: Used to collect aggregated, anonymised data on how players use the gemsbet Platform, enabling us to identify areas for improvement.
• Functional cookies: Used to remember your preferences and personalise your experience on gemsbet, such as your preferred sports and game categories.

You can manage or disable cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the gemsbet Platform. gemsbet does not use advertising or retargeting cookies to serve you third-party advertisements.

11 Security

gemsbet implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the gemsbet Platform.
• Secure, access-controlled data storage with encryption at rest for sensitive personal and financial data.
• Multi-factor authentication for internal administrative access to systems containing personal data.
• Regular security audits, penetration testing, and vulnerability assessments.
• Staff training on data protection and information security policies.

While gemsbet takes all reasonable precautions, no internet-based system is completely immune from security risks. You are responsible for maintaining the security of your own Account credentials. In the event of a data breach that poses a risk to your rights and freedoms, gemsbet will notify you in accordance with its obligations under applicable law.

12 Your Data Protection Rights

Subject to applicable law, you have the following rights in relation to your personal data held by gemsbet:

• Right of access: You may request a copy of the personal data gemsbet holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where we no longer have a legal basis to retain it, subject to our regulatory retention obligations.
• Right to restriction: You may request that we restrict the processing of your personal data in certain circumstances.
• Right to object: You may object to processing of your personal data where we rely on legitimate interests as the legal basis, and where your interests override ours.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, contact gemsbet's support team via live chat or by emailing support at gemsbet.net. We will respond to verified requests within 30 days.

13 Children & Minors

The gemsbet Platform is strictly for users aged 21 and above. gemsbet does not knowingly collect personal data from persons under the age of 21. If we become aware that personal data has been collected from an underage individual, we will immediately suspend the associated Account and delete the data. If you believe a minor has registered on gemsbet, please contact us immediately.

14 Third-Party Links

The gemsbet Platform may reference third-party services such as payment providers (Touch 'n Go eWallet, Boost, FPX, GrabPay) or responsible gaming organisations. If you navigate to any third-party website or service, please be aware that those services operate under their own privacy policies, which gemsbet has no control over or responsibility for. We encourage you to review the privacy policies of any third-party services you use in connection with your gemsbet Account.

15 Changes to This Privacy Policy

gemsbet reserves the right to amend this Privacy Policy at any time. Where material changes are made, we will notify you via email or a notice on the Platform before the changes take effect. Your continued use of the gemsbet Platform following the effective date of an updated Privacy Policy constitutes your acceptance of the revised terms. The "Last Updated" date at the top of this page indicates when the current version of this Policy was published.

16 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or how gemsbet handles your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 on gemsbet.net — average response under 5 minutes.
• Email: support at gemsbet.net
• Support Languages: English, Bahasa Malaysia, Mandarin, Tamil