Privacy Policy – gtb88 Malaysia Online Casino

1Introduction

This Privacy Policy ("Policy") is issued by gtb88 ("gtb88", "we", "us", "our") and applies to all personal data collected from individuals ("Member", "User", "you") who register an account, visit, or interact with the gtb88 online casino and sports betting platform accessible at gtb88.win and all associated interfaces.

gtb88 is committed to handling your personal data responsibly, in accordance with applicable data protection laws and internationally recognised privacy standards. We understand that our Members trust us with sensitive personal and financial information, and we take that responsibility seriously.

By creating a gtb88 account or continuing to use the gtb88 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree, you should discontinue use of the platform and contact support to initiate account closure.

2Data Controller

For the purposes of applicable data protection legislation, gtb88 acts as the data controller in respect of personal data collected through the gtb88 platform. As the data controller, gtb88 determines the purposes and means by which your personal data is processed.

Where gtb88 engages third-party service providers who process personal data on our behalf (for example, payment processors, fraud prevention services, and game software providers), such parties act as data processors and are contractually bound to process data only in accordance with gtb88's documented instructions and in a manner consistent with this Policy.

If you have any questions about data controllership, how your data is being processed, or wish to exercise any of your data subject rights, please contact us using the details set out in Section 15 of this Policy.

3Personal Data We Collect

gtb88 collects the following categories of personal data in connection with your use of the platform:

• Identity Data: Full legal name, date of birth, nationality, and government-issued identification details (such as MyKad or passport number) collected during account registration or KYC verification.
• Contact Data: Registered email address, mobile telephone number, and correspondence address.
• Financial Data: Payment method details (e-wallet account references, bank account information for FPX and bank transfer transactions), deposit history, withdrawal history, and current account balance. Note: gtb88 does not store full card numbers or CVV codes.
• Account Data: Username, account creation date, login timestamps, session durations, game history, wagering records, bonus redemption history, and communication preferences.
• Technical Data: IP address, browser type and version, operating system, device identifiers, geolocation data (at the country/region level), and referring URL.
• Usage Data: Information about how you navigate and interact with the gtb88 platform, including pages visited, features accessed, and time spent on specific game categories.
• Communications Data: Records of your correspondence with gtb88 customer support, including live chat transcripts, email exchanges, and support ticket histories.
• Responsible Gaming Data: Deposit limit settings, session time preferences, self-exclusion status, and any problem gambling disclosures made to gtb88 support.

4How We Collect Your Data

gtb88 collects personal data through the following channels and mechanisms:

• Direct Submission: Data you provide voluntarily when completing the registration form, updating your account profile, submitting KYC documents, making deposits or withdrawal requests, or contacting customer support.
• Automated Technologies: Data collected automatically when you access the platform, including cookies, web beacons, pixel tags, log files, and similar tracking technologies. This includes technical and usage data as defined in Section 3.
• Third-Party Sources: In certain circumstances, gtb88 may receive data about you from third-party sources including payment service providers (for transaction verification), fraud prevention agencies, and identity verification services used during KYC processing.
• Game Activity: Gameplay data including bet amounts, game outcomes, session start and end times, and feature activations is recorded automatically as part of normal platform operation and is required for transaction integrity and dispute resolution.

5How We Use Your Personal Data

gtb88 uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and administer your gtb88 member account, including processing deposits, withdrawals, and bonus allocations.
• Identity Verification (KYC): To verify your identity and age in compliance with responsible gaming obligations and to prevent the use of the platform by minors or prohibited persons.
• Service Delivery: To provide access to all gtb88 products including Slots, Live Casino, Sportsbook, Poker Online, and Fisher Game, and to ensure these services function correctly across your devices.
• Customer Support: To respond to your queries, resolve disputes, process complaints, and provide general member assistance via live chat and email.
• Fraud Prevention & Security: To detect and prevent fraudulent activity, money laundering, bonus abuse, multi-accounting, and other prohibited conduct as defined in the Terms & Conditions.
• Regulatory Compliance: To fulfil our obligations under applicable gaming regulations, anti-money laundering (AML) requirements, and responsible gaming standards, including maintaining transaction records for the legally required retention periods.
• Responsible Gaming: To administer deposit limits, session timers, self-exclusion requests, and other responsible gaming tools requested by or applied to your account.
• Platform Improvement: To analyse aggregated usage data for the purpose of improving the gtb88 platform, optimising game library curation, and enhancing the overall member experience.
• Communications: To send you transactional communications (account alerts, deposit confirmations, withdrawal notifications) and, where you have consented, promotional communications about gtb88 offers and new game launches.

6Legal Basis for Processing

gtb88 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our contractual obligations to you under the Terms & Conditions — including account creation, financial transaction processing, and game service delivery.
• Legal Obligation: Processing required to comply with applicable laws, including AML regulations, KYC requirements, and data retention mandates imposed by licensing authorities.
• Legitimate Interests: Processing necessary for gtb88's legitimate business interests, including fraud prevention, security monitoring, and platform improvement, provided such interests are not overridden by your privacy rights.
• Consent: Processing based on your explicit consent, including marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7Data Sharing & Disclosure

gtb88 does not sell, rent, or trade your personal data to any third party. We may share your data only in the following limited circumstances:

• Service Providers: Third-party processors engaged by gtb88 to support platform operations, including payment processors (e.g., Touch 'n Go eWallet, Boost, DuitNow, FPX providers), game software providers (e.g., Evolution Gaming, Pragmatic Play, PG Soft), fraud detection services, and cloud infrastructure providers. All such processors are bound by data processing agreements.
• KYC & Verification Partners: Identity verification and age verification service providers engaged to process KYC submissions on gtb88's behalf.
• Regulatory Authorities: Gaming licensing authorities, financial intelligence units, and other governmental bodies when required by applicable law, court order, or regulatory directive.
• Corporate Transactions: In the event of a merger, acquisition, or sale of assets involving the gtb88 business, personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations.

gtb88 will not disclose your personal data to any other party without your prior written consent, except as required by law.

8Cookies & Tracking Technologies

The gtb88 platform uses cookies and similar tracking technologies to optimise your experience and support platform operations. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for the platform to function correctly — including session management, login authentication, and security features. These cannot be disabled without breaking core platform functionality.
• Performance Cookies: Used to analyse how Members navigate the gtb88 platform, which pages are most visited, and where errors occur. Data collected is aggregated and anonymised.
• Functional Cookies: Remember your preferences such as language settings, last-used payment method, and game display preferences.
• Marketing Cookies: Used with your consent to measure the effectiveness of promotional campaigns and to serve relevant gtb88 promotions. These are not used to serve advertisements for third-party products.

You can manage cookie preferences through your browser settings. Disabling performance or functional cookies may affect platform usability. Disabling strictly necessary cookies will prevent login and core platform access.

9Data Retention

gtb88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law, whichever is the longer period. The following general retention principles apply:

• Active Accounts: Personal data associated with an active gtb88 account is retained for the duration of the account's existence plus the legally required post-closure retention period.
• Closed Accounts: Following account closure, gtb88 retains transaction records, KYC documents, and account activity data for a minimum of five (5) years to satisfy AML record-keeping obligations and to handle any post-closure disputes.
• Self-Excluded Accounts: Data associated with self-excluded accounts is retained for the full duration of the self-exclusion period to prevent re-registration, and for the applicable post-exclusion retention period thereafter.
• Communications Data: Customer support correspondence is retained for three (3) years from the date of the last interaction, unless a longer period is required for ongoing regulatory or legal proceedings.
• Marketing Data: Data processed on the basis of consent for marketing purposes is deleted upon withdrawal of consent, subject to minimum legal retention requirements.

10Data Security

gtb88 implements technical and organisational security measures proportionate to the risks associated with processing personal data on a financial gaming platform. Our security framework includes:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and our servers.
• Encryption at rest for sensitive data categories including identity documents and financial records.
• Role-based access controls ensuring that staff access to personal data is limited to what is necessary for their specific function.
• Regular penetration testing and security audits conducted by independent third-party security specialists.
• Multi-factor authentication requirements for internal system access.
• Incident response procedures for data breach identification, containment, and notification in accordance with applicable regulatory requirements.

11Your Data Subject Rights

Subject to applicable law, you have the following rights with respect to your personal data held by gtb88:

• Right of Access: You have the right to request a copy of the personal data gtb88 holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data. Basic profile data (email address, phone number) can be updated directly in Account Settings; corrections to identity data require contacting support.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data in certain circumstances — for example, where data is no longer necessary for the purpose it was collected. This right is subject to limitations where retention is required by law (e.g., AML record-keeping).
• Right to Restriction of Processing: You may request that gtb88 restrict processing of your personal data in specified circumstances, such as while the accuracy of data is being contested.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller where technically feasible.
• Right to Object: You have the right to object to processing of your personal data carried out on the basis of legitimate interests, including profiling for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact the gtb88 Data Privacy team as described in Section 15. gtb88 will respond to data subject requests within 30 days of receipt, subject to identity verification.

12Children's Privacy

The gtb88 platform is strictly intended for adults aged 21 years and over. gtb88 does not knowingly collect, process, or store personal data from individuals under the age of 21. Age declaration is required at the point of registration, and gtb88 reserves the right to require documentary proof of age at any time.

If gtb88 becomes aware that personal data has been collected from an individual under 21, we will immediately suspend the relevant account, delete the data to the extent permitted by law, and report the matter to the relevant responsible gaming authority where required.

Parents and guardians who believe their minor child has registered on the gtb88 platform should contact our support team immediately with verification of the minor's age so that the account can be closed and data purged.

13International Data Transfers

gtb88's primary server infrastructure is designed to serve Malaysian players. However, some of our third-party service providers — including game software studios and fraud detection services — may process data in jurisdictions outside Malaysia.

Where personal data is transferred internationally, gtb88 ensures that appropriate safeguards are in place, including contractual data processing agreements that impose data protection obligations equivalent to those described in this Policy. We do not transfer personal data to jurisdictions that lack adequate data protection frameworks without implementing appropriate compensating controls.

14Updates to This Privacy Policy

gtb88 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will provide notice via email to your registered address and/or display a prominent notice on the gtb88 platform upon your next login.

The effective date of the current version of this Policy is displayed at the top of this page. We encourage Members to review this Policy periodically. Continued use of the gtb88 platform following the publication of an updated Policy constitutes acceptance of the revised terms.

If any update materially reduces your rights under this Policy, you will be given a reasonable opportunity to object before the changes take effect.

15Contact & Data Privacy Enquiries

For any questions, concerns, or requests related to this Privacy Policy or your personal data, please contact the gtb88 Data Privacy team through the following channels:

• Live Chat: Available 24/7 from your logged-in gtb88 account dashboard — the fastest channel for general support queries.
• Email: [email protected]
• Response Time: Data subject rights requests are acknowledged within 3 business days and resolved within 30 days, subject to identity verification. General privacy queries are typically addressed within one business day.

When submitting a data subject rights request, please include your registered username and email address so we can verify your identity before processing the request. gtb88 may request additional verification in cases where identity cannot be confirmed from the information provided.

gtb88 is committed to resolving privacy concerns through direct engagement. If you are not satisfied with our response to a privacy complaint, you have the right to refer the matter to the relevant data protection authority or the licensing authority responsible for gtb88's gaming operations.