Privacy Policy

This Privacy Policy ("Policy") is published by Gemilang44 ("we", "us", "our"), the operator of the online casino and sports betting platform accessible at gemilang44.cam ("Platform"). It sets out how Gemilang44 collects, uses, discloses, stores, and protects personal data provided by or generated about individuals ("you", "User", "Player") who register for or interact with the Platform.

Gemilang44 operates under international online gaming licensing and takes its obligations with respect to personal data seriously. This Policy has been drafted in compliance with the data protection principles applicable under our licensing framework and reflects widely accepted international standards including those set out in the General Data Protection Regulation (GDPR) and Malaysia's Personal Data Protection Act 2010 (PDPA), where applicable.

This Policy should be read alongside our Terms & Conditions, which govern the overall relationship between Gemilang44 and Platform users.

For the purposes of this Policy, the following terms shall have the meanings set out below:

• "Personal Data" means any information that relates to an identified or identifiable natural person — including name, email address, identification number, payment details, IP address, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, deletion, or any combination thereof.
• "Controller" means Gemilang44, as the entity that determines the purposes and means of processing Personal Data collected through the Platform.
• "Processor" means any third party that processes Personal Data on behalf of Gemilang44 under a data processing agreement — for example, payment processors, identity verification providers, and hosting infrastructure providers.
• "Consent" means a freely given, specific, informed, and unambiguous indication of agreement by a User to the processing of their Personal Data for a defined purpose.
• "Data Subject" means any living individual whose Personal Data is processed under this Policy — i.e., registered Players and Platform visitors.
• "KYC Data" means identity verification documents and information collected during the Know Your Customer process, including copies of government-issued identification, proof of address, and selfie photographs.
• "Technical Data" means automatically collected data including IP address, browser type and version, operating system, device model, session timestamps, and page interaction logs.

Gemilang44 collects Personal Data through several channels. The categories of data collected are described in the table below:

We do not knowingly collect Personal Data from individuals under the age of 21. Where we identify that data has been submitted by an underage individual, all associated data will be deleted and the account will be closed.

Gemilang44 processes Personal Data for the following specific purposes:

1. Account Registration and Management: To create, maintain, and administer your Account, process your login credentials securely, and communicate important account-related notices;
2. Identity Verification (KYC): To verify your identity and age (21+) in compliance with our licensing obligations and anti-money laundering (AML) requirements before processing withdrawal requests;
3. Payment Processing: To facilitate deposits and withdrawals via your chosen payment methods — including DuitNow, FPX, Maybank, CIMB, Public Bank, Touch 'n Go eWallet, Boost, GrabPay, and cryptocurrency channels — and to maintain accurate financial records;
4. Game and Betting Operations: To record and process your gaming activity, calculate outcomes, apply bonus terms, and maintain an accurate wagering history;
5. Fraud Prevention and AML Compliance: To detect, investigate, and prevent fraud, money laundering, account abuse, multi-accounting, and other prohibited conduct through automated and manual review processes;
6. Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance through our live chat, WhatsApp, and email support channels;
7. Responsible Gambling: To administer voluntary self-exclusion, deposit limit, and cooling-off requests, and to monitor for behavioural indicators of problem gambling;
8. Marketing and Promotions: To send you promotional communications about bonuses, new games, and events, where you have provided consent or where we have a legitimate interest to do so — subject always to your opt-out rights;
9. Platform Improvement: To analyse usage patterns, diagnose technical issues, and improve the performance and user experience of the Platform;
10. Legal and Regulatory Compliance: To fulfil our obligations under applicable licensing conditions, respond to lawful requests from competent authorities, and enforce our Terms & Conditions.

Gemilang44 processes Personal Data only where a valid lawful basis exists. The applicable legal bases for each processing activity are as follows:

• Contractual Necessity: Processing required to perform our contract with you (the Terms & Conditions), including account management, payment processing, game operation, and support services;
• Legal Obligation: Processing required to comply with applicable laws and licensing conditions, including KYC/AML obligations and responses to lawful authority requests;
• Legitimate Interests: Processing for fraud prevention, platform security, analytics, and service improvement — where these interests are not overridden by your privacy interests;
• Consent: Processing for direct marketing communications — you may withdraw consent at any time by contacting our support team or using the opt-out mechanism in any marketing communication.

Gemilang44 does not sell Personal Data to third parties. We share Personal Data only in the circumstances described below, and only to the extent necessary for the stated purpose:

• Payment Processors: We share Financial Data and Identity Data with payment service providers (including those facilitating DuitNow, FPX, and e-wallet transactions) to process deposits and withdrawals. These providers act as independent data controllers in respect of their own processing activities;
• Identity Verification Providers: KYC Data is shared with licensed identity verification partners for the purpose of confirming your identity and age in compliance with our licensing obligations;
• Gaming Platform Providers: Aggregated and pseudonymised gaming activity data may be shared with game studios and aggregators to facilitate game delivery, dispute resolution, and RNG certification;
• Infrastructure and Hosting Providers: Technical Data and Account Data are stored on servers operated by contracted hosting and cloud infrastructure providers under data processing agreements;
• Fraud Prevention and AML Services: Transaction and behavioural data may be shared with specialist fraud detection and financial crime prevention service providers;
• Regulatory and Law Enforcement Authorities: We will disclose Personal Data to competent authorities where required by law, court order, or our licensing obligations — including in connection with AML investigations or age verification requirements;
• Professional Advisers: Personal Data may be disclosed to our legal advisers, auditors, and accountants on a strictly confidential basis where required for professional services.

Gemilang44 retains Personal Data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal, regulatory, or licensing obligations. The key retention periods applicable to different categories of data are set out below:

• Account and Identity Data: Retained for the duration of your Account and for a minimum of five (5) years following Account closure, in compliance with AML record-keeping obligations under our licensing framework;
• KYC Documents: Retained for a minimum of five (5) years following Account closure or the date of the relevant transaction, as required by applicable AML regulations;
• Financial and Transaction Records: Retained for a minimum of five (5) years following the date of the transaction;
• Gaming and Betting Logs: Retained for a minimum of three (3) years for dispute resolution and regulatory audit purposes;
• Communications Data: Support correspondence retained for two (2) years; dispute-related correspondence retained for five (5) years;
• Technical and Log Data: Typically retained for thirteen (13) months for security and platform diagnostics purposes.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.

Gemilang44 implements a range of technical and organisational security measures to protect Personal Data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption in Transit: All data transmitted between your device and our Platform is encrypted using TLS 1.2 or higher (256-bit SSL encryption);
• Encryption at Rest: Sensitive data including passwords (stored only as cryptographic hashes) and financial records are encrypted in our databases;
• Access Controls: Access to Personal Data is restricted to authorised Gemilang44 personnel and contracted Processors on a strict need-to-know basis, enforced through role-based access control systems;
• Two-Factor Authentication: Available for all Player Accounts to provide an additional layer of protection against unauthorised access;
• Penetration Testing and Security Audits: Our infrastructure and application security are subject to periodic independent security assessments;
• Incident Response: Gemilang44 maintains a formal data breach incident response procedure, including notification processes consistent with applicable regulatory requirements.

Notwithstanding the above measures, no security system is entirely impenetrable. While we take every reasonable precaution to protect your Personal Data, we cannot guarantee absolute security. We encourage all Players to use strong, unique passwords and to enable two-factor authentication on their Accounts.

The Gemilang44 Platform uses cookies and similar tracking technologies to enhance your browsing experience, maintain session state, prevent fraud, and analyse platform usage. The categories of cookies used are as follows:

• Strictly Necessary Cookies: Essential to the operation of the Platform — including session management, authentication, and security functions. These cookies cannot be disabled without impairing core Platform functionality;
• Functional Cookies: Used to remember your preferences, such as language settings and display preferences, to personalise your experience;
• Analytics Cookies: Used to collect anonymised or pseudonymised data about how users interact with the Platform — including page views, session duration, and navigation paths — to help us understand and improve Platform performance;
• Security Cookies: Used to detect and prevent fraudulent activity, including unusual login patterns and multi-account behaviour.

You may control cookie settings through your browser settings. Please note that disabling certain categories of cookies may limit your ability to use some features of the Platform. Gemilang44 does not use third-party advertising cookies or behavioural tracking cookies for cross-site advertising purposes.

Subject to applicable law and our licensing obligations, you have the following rights in respect of your Personal Data held by Gemilang44:

To exercise any of the above rights, please contact our support team via live chat or email at [email protected] (plain text — not a clickable link). We will respond within 30 days of receipt of a valid request. We may require identity verification before fulfilling any request.

Age verification is enforced at the point of first withdrawal through our mandatory KYC process. Where Gemilang44 discovers or has reasonable grounds to suspect that Personal Data has been submitted by, or that an Account is being used by, an individual under 21 years of age, the Account will be immediately suspended, all associated data will be reviewed and deleted to the extent possible, and any deposited funds will be returned to the originating payment source.

Parents and guardians concerned about underage access to online gambling are encouraged to use parental control software and filtering tools available through their internet service provider or device operating system to restrict access to gambling websites.

Given the international nature of Gemilang44's operations and infrastructure, Personal Data may be transferred to and processed in countries outside Malaysia. This includes countries where our hosting infrastructure, payment processors, and identity verification providers are based.

Where such transfers occur, Gemilang44 ensures that appropriate safeguards are in place to protect Personal Data, including the use of contractual protections (such as data processing agreements containing standard contractual clauses) and, where applicable, reliance on adequacy decisions or equivalent transfer mechanisms.

By using the Platform, you acknowledge and consent to your Personal Data being transferred internationally as described in this Policy. If you have questions about the specific safeguards applicable to any transfer, please contact us using the details in Section 14.

Gemilang44 reserves the right to update or amend this Privacy Policy at any time. Where material changes are made — such as changes to the purposes for which we process your data or the third parties with whom we share it — we will notify registered Players via the email address associated with their Account at least seven (7) days before the changes take effect, where reasonably practicable.

The "Last Updated" date displayed at the top of this page indicates when the current version of the Policy was published. We recommend that you review this Policy periodically to stay informed of any changes. Your continued use of the Platform following the publication of an updated Policy constitutes your acceptance of the revised terms.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by Gemilang44, please contact us through the following channels:

• Live Chat: Available 24/7 directly on the Platform. Our support agents can handle data enquiries in English, Bahasa Melayu, and Mandarin. Average response time 3–5 minutes.
• Email: [email protected] (plain text — not a clickable link). For privacy-specific enquiries, please include the subject line "Privacy Request" to ensure prompt routing. We aim to respond within 24 hours on business days and within 30 days for formal data subject rights requests.

Where you are unsatisfied with our response to a data-related request or complaint, you may have the right to escalate your concern to the relevant data protection supervisory authority in your jurisdiction.