GBK808 Privacy Policy – Personal Data Protection for Malaysia Members

In this Privacy Policy, the following terms carry the meanings stated unless the context requires otherwise:

• "GBK808", "We", "Platform" — refers to the online entertainment platform operating under the domain gbk808.click and all services provided through it.
• "Member", "You" — refers to any individual who has registered an account or used any GBK808 service.
• "Personal Data" — any information that can identify you directly or indirectly, including your name, phone number, email address, IP address, and financial information.
• "Processing" — any operation carried out on personal data, including collection, storage, use, disclosure, transfer, or deletion.
• "PDPA" — The Personal Data Protection Act 2010 (Act 709) of Malaysia, which governs the collection and processing of personal data in Malaysia.
• "Third Party" — any entity other than GBK808 and its members, including game software providers, payment processors, and technical support service providers.

GBK808 collects various categories of personal data depending on how you interact with our platform. The table below provides a clear overview of the types of data we collect and the purpose of each category:

We collect your personal data through several different channels. Understanding these channels allows you to make more informed decisions about the information you share with us.

• Account Registration: When you complete the registration form on GBK808, you directly provide information such as your name, phone number, email address, and the password you choose.
• Identity Verification (KYC): During the KYC process required before your first withdrawal, or when requested by our security team, you may be asked to upload verification documents such as a copy of your MyKad or passport.
• Financial Transactions: When you make a deposit or withdrawal using Touch 'n Go eWallet, GrabPay, DuitNow, FPX, Boost, ShopeePay, Maybank2u, or CIMB Clicks, we receive transaction confirmations containing basic payment information.
• Platform Usage: Our system automatically records platform activity, including games played, bets placed, session times, and technical device data, for security and service improvement purposes.
• Support Communications: Every interaction via live chat, email to support@gbk808.click, or any other communication channel with our team is recorded for reference and service quality improvement.
• Cookies and Tracking Technologies: The GBK808 platform uses cookies to store login preferences, session data, and basic analytics information to ensure a smoother user experience. Further details are explained in Section 8.

GBK808 only processes your personal data for legitimate and necessary purposes. We do not use your data beyond the scope stated below without first obtaining your additional consent.

• Account Management: Creating, verifying, and managing your GBK808 account, including processing logins, profile updates, and password management.
• Transaction Processing: Securely processes deposits and withdrawals in MYR, including identity verification to ensure payments reach the correct recipient.
• Service Delivery: Grants access to all GBK808 games and services, including slots, live casino, poker, Malaysia Super League and EPL sports betting, roulette, and e-sports.
• Security & Fraud: Detect and prevent fraudulent activity, money laundering, bot usage, collusion, and other violations of our terms of use that could compromise the integrity of the platform.
• Customer Support: Providing technical support and account troubleshooting, as well as resolving any complaints or enquiries efficiently.
• Responsible Gaming: Monitoring gaming patterns to identify signs of problem gambling and providing appropriate assistance or protective limits to members who need them.
• Legal Compliance: Meeting the legal obligations and regulatory compliance requirements applicable to GBK808's platform operations, including KYC and AML (Anti-Money Laundering) requirements.
• Marketing Communications: Send you information about GBK808 promotions, bonuses, and new offers that may interest you — provided you have given consent to receive such communications. You may unsubscribe at any time.

GBK808 does not sell, rent, or disclose your personal data to third parties for commercial purposes. However, there are limited situations where data sharing is necessary to enable our platform to function properly.

• Game Provider: Game software providers such as Evolution Gaming, Pragmatic Play, and Microgaming may receive basic session data required to operate the games. This does not include sensitive financial information.
• Payment Processor: Payment service providers such as Touch 'n Go, GrabPay, DuitNow, and FPX receive only the minimum transaction data required to process your deposits and withdrawals.
• Technical Service Provider: Companies providing cloud infrastructure, hosting, and cybersecurity services may process your data as part of their technical operations, subject to strict data protection agreements.
• Legal Authorities: GBK808 will disclose required data to the relevant authorities when mandated to do so by Malaysian law or a valid court order.

The security of your data is GBK808's top priority. We implement multiple layers of technical and organisational protection to keep your data safe from unauthorised access, loss, or misuse.

• Data Encryption in Transit: All communications between your browser or app and GBK808's servers are protected by 256-bit TLS/SSL encryption — the same level of encryption used by Malaysia's leading banking institutions.
• Data Encryption at Rest: Sensitive data stored in our databases — including passwords (which are hashed) and financial information — is encrypted using current industry-recognised encryption algorithms.
• Access Control: Only GBK808 staff who require access to specific data to perform their authorised duties are permitted to access that data. A "least privilege" principle is enforced at all levels.
• 24/7 Security Monitoring: Our automated monitoring system detects suspicious activity and unauthorised access attempts in real time, with immediate alerts sent to our security team.
• Retention Period: Active account data is retained for as long as your account remains active. Following account closure, we retain necessary records for the period required by law (typically 7 years for financial records) before securely disposing of the data.
• Incident Response Plan: GBK808 has a tested security incident response plan in place. In the event of a data breach affecting member information, we will notify affected members within the timeframe required under the PDPA.

As a data subject under Malaysia's PDPA 2010, you have the following rights regarding your personal data held by GBK808. All requests to exercise these rights may be submitted by email to support@gbk808.click or via the platform's live chat.

To exercise any of the rights above, please contact us at support@gbk808.click clearly stating your request along with sufficient identifying information. We may need to verify your identity before processing the request in order to safeguard your data.

GBK808 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

• Essential Cookies (Cannot Be Disabled): These cookies are essential for the platform's core operations — including login session management, security features, and language preference memory. Without them, the platform cannot function properly.
• Performance & Analytics Cookies: We use internal analytics to understand platform usage patterns in aggregate — such as the most frequently visited pages and sources of technical errors. This helps us improve the GBK808 platform for all users.
• Optional Cookies (Functional): These cookies store your preferences such as your selected language, poker table display size, or other personal settings to ensure a more comfortable experience during your gaming sessions.
• Managing Cookies: You can manage or delete cookies through your web browser settings at any time. However, disabling essential cookies may affect platform functionality. For specific instructions, please refer to your browser's documentation.

GBK808 is an online entertainment platform restricted to individuals aged 18 years and above only. We do not knowingly collect, store, or process the personal data of any individual under the age of 18.

Should we discover that data belonging to an individual under the age of 18 has been collected without our knowledge — possibly because the individual provided inaccurate information during registration — we will take immediate action as follows:

• Closing the account in question immediately upon verification.
• Delete all personal data associated with that account from our systems.
• Refund any deposits made, after deducting any bonuses that have been utilised.

If you are a parent or guardian and believe that your child or ward who is a minor has registered on GBK808, please contact us immediately at support@gbk808.click with relevant supporting documentation. We will handle the matter promptly and with the utmost sensitivity.

The GBK808 platform integrates services from third-party providers such as game suppliers and payment processors to deliver a complete experience for members. Here is what you should know about our third-party relationships from a privacy perspective:

• When you use games from providers such as Evolution Gaming or Pragmatic Play on the GBK808 platform, you may also be subject to those providers' privacy policies for data processed directly by their software.
• When you make a deposit or withdrawal via Touch 'n Go, GrabPay, DuitNow, or any other payment method, your transaction information is also processed by the respective service provider in accordance with their own privacy policies.
• GBK808 is not responsible for the privacy practices of third parties operating outside our platform. We encourage you to read the privacy policies of any providers you use to fully understand how your data is handled.

In certain circumstances, your personal data may be transferred to servers or processing facilities located outside Malaysia — for example, when game providers or cloud infrastructure we use operate from international locations.

All cross-border data transfers carried out by GBK808 comply with the requirements of Section 129 of Malaysia's PDPA 2010. This means we only transfer data to countries or regions with a level of data protection equivalent to Malaysia's, or where adequate contractual safeguards are in place.

We ensure that every data recipient outside Malaysia we engage with is bound by strict data protection obligations through valid and enforceable data processing agreements.

GBK808 takes every privacy-related enquiry and complaint seriously. If you have any concerns, questions, or wish to exercise any of your rights regarding personal data, please contact us through the following channels: