Gempak9 takes the protection of every member's personal data seriously. This document clearly and transparently explains how we collect, use, store, and protect your information when you use our online betting platform in Malaysia.
Six data protection principles we uphold every day
Full Compliance with Malaysia PDPA 2010
Gempak9 operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). All data processing is carried out on a sound legal basis with complete documentation.
Banking-Grade 256-bit SSL Encryption
All data transmitted between your device and gempak9's servers is encrypted with 256-bit SSL – the same standard used by Maybank and CIMB to protect their customers' financial information.
Your Data Is Never Sold to Third Parties
Gempak9 has never and will never sell, rent, or share your personal data with any third party for marketing purposes without your express written consent.
Secure & Limited Data Retention
Your data is stored on servers protected by strict access controls. Only authorised personnel may access user data, and all access is logged and audited regularly.
Full Control in Your Hands
You have the full right to access, correct, transfer or request deletion of your personal data at any time through your gempak9 account or by contacting our team.
Opting Out of Marketing Communications
You can stop receiving promotional emails or marketing notifications from gempak9 at any time, easily through your account settings or the unsubscribe link in any email.
Table of Contents
Welcome to the gempak9 Privacy Policy. This document transparently explains how Gempak9 (operating at gempak9.bet) collect, process, store and protect your personal data as a user or prospective user of our online betting platform.
Gempak9 is committed to respecting and protecting the privacy of all our members in Malaysia. We understand that your trust is our most valuable asset, and we take this responsibility seriously. This Privacy Policy is designed to give you a clear and comprehensive understanding of how we manage your data.
This policy applies to all users of the gempak9 platform, including website visitors, registered members, mobile app users and anyone who interacts with our services through any channel. It covers all activities on our platform – from EPL and Malaysia Super League football betting, slots, Live Casino, blackjack and badminton to cricket and lottery.
Note: By using the Gempak9 platform, you acknowledge that you have read and understood this Privacy Policy. Please also read Terms & Conditions which is a supplementary document to this policy.
Gempak9 collects your personal data through several means – directly from you, automatically when you use the platform, and in certain cases, from legitimate third-party sources. The categories of data we collect are as follows:
| Data Category | Specific Examples | Collection Methods |
|---|---|---|
| Identity Data | Full name, Malaysian Identity Card number, date of birth, gender | Registration |
| Contact Data | Email address, Malaysian phone number, residential address | Registration |
| Financial Data | Touch 'n Go account number, DuitNow, GrabPay, FPX, MYR transaction history | Transactions |
| Technical Data | IP address, browser type, operating system, device used | Automatic |
| Usage Data | Betting history, games played, session duration, preferences | Automatic |
| Communications Data | Live chat history, support emails, feedback, complaints | Interactions |
| KYC Data | Copy of ID, proof of address documents, proof of source of funds | Verification |
Data We Do Not Collect: gempak9 does not collect sensitive data such as your medical information, political views, religious beliefs or sexual orientation. Data that is not relevant to the provision of our services is never collected.
Gempak9 uses your personal data responsibly and only for the purposes stated below. We will not use your data for any other purpose without first obtaining your fresh consent:
Gempak9 processes your personal data on valid legal grounds under Malaysia's Personal Data Protection Act 2010 (PDPA). The basis we rely on depends on the type of processing being carried out:
Gempak9 does not sell, rent, or trade your personal data to any third party for marketing purposes. However, under the following limited circumstances, your data may be shared:
Payment Service Providers: To process your financial transactions, we share the necessary information with approved payment processors such as Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, and FPX banking providers. These processors are bound by strict confidentiality agreements.
Legal Authority: We may be required to disclose your data to Malaysian authorities — such as Bank Negara Malaysia, the police, or the courts — if mandated by a court order or applicable law.
Support Service Provider: Technology providers, cloud service companies, and audit firms that assist us in operating the Gempak9 platform. All such parties are bound by strict data processing agreements and are audited on a regular basis.
gempak9 will not share your data with third-party marketing companies, social media platforms or data brokers without your explicit consent. Any disclosure not covered here requires your prior written consent.
Gempak9 implements multiple layers of technical and organisational security to protect your personal data from unauthorised access, alteration, disclosure, or destruction:
While we take all reasonable steps to protect your data, no system is 100% secure. We encourage you to take your own security precautions, such as using a strong password and not sharing your login credentials.
Gempak9 does not retain your personal data longer than necessary for the purposes outlined in this Privacy Policy, or as required by Malaysian law. The following are general data retention guidelines:
When data is no longer needed, Gempak9 will delete or anonymise it using secure, irreversible procedures.
Under Malaysia's Personal Data Protection Act 2010, you have a range of rights regarding the personal data we hold about you. Gempak9 is committed to making it easy for you to exercise these rights:
You have the right to request a copy of the personal data we hold about you. We will provide this information in a readable format within 30 days of your request.
If any of your personal data is inaccurate or incomplete, you may request a correction via your Gempak9 account profile settings or by contacting our team directly.
You may request the deletion of your personal data under certain circumstances. Please note that we may need to retain certain data for legal compliance reasons even after a deletion request.
You may object to the processing of your data for specific purposes, particularly for direct marketing. Once you object, we will cease processing for that purpose immediately.
You may request your personal data in a structured, machine-readable format (such as CSV or JSON) for transfer to another service provider where applicable.
For processing based on your consent (such as marketing emails), you may withdraw that consent at any time without affecting your access to Gempak9's core services.
To exercise any of the above rights, please contact the gempak9 Privacy Officer at privacy@gempak9.bet. We will respond within 30 business days.
Gempak9 uses cookies and similar tracking technologies to enhance the user experience and analyse platform performance. Below are the types of cookies we use and the controls available to you:
You may also manage cookies through your browser settings. However, disabling certain cookies may affect the functionality of the gempak9 platform.
Gempak9 has a strict zero-tolerance policy on underage use of the platform. Our platform is exclusively for users aged 18 and above.
We do not knowingly collect, store, or process the personal data of children under the age of 18. Should we discover that a minor's personal data has been collected without our knowledge, we will take immediate action to delete that data and close the associated account.
If you are a parent or guardian and suspect that your child who is under age has registered on Gempak9, please contact us immediately at privacy@gempak9.bet so we can take prompt action.
In the course of operating the gempak9 platform, your personal data may be processed or stored on servers located outside Malaysia. However, gempak9 ensures that any such data transfers are carried out with adequate safeguards:
Gempak9 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements or service improvements. Whenever this Privacy Policy is materially changed, we will:
Your continued use of the gempak9 platform after being notified of any changes will be taken as acceptance of the updated terms. We encourage you to review this Privacy Policy periodically.
Gempak9 has appointed a Data Protection Officer (DPO) responsible for ensuring our compliance with Malaysia's PDPA and this Privacy Policy. For any privacy-related enquiries, concerns, or requests, please contact:
If you are not satisfied with our response to your privacy enquiry, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant data supervisory authority.
This Privacy Policy was last updated on 1 January 2026 and is effective as of that date.
We take your privacy seriously – 256-bit SSL encryption, Malaysia PDPA compliance, no data selling and full control in your hands. Join over 500,000 members who trust gempak9 for a safe and enjoyable online betting experience in Malaysia.