Gk9my Privacy Policy – Player Data Protection in Malaysia

01Introduction & Scope of This Policy

Gk9my is committed to protecting the privacy of all its users. This Privacy Policy is built to comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in personal data management. It applies to all users who access the gk9my.top website, the gk9my mobile app, and all services operating under the gk9my brand.

For gk9my, privacy is more than a legal obligation — it is the foundation of trust we have built with players since the platform launched. Malaysian players who use gk9my for Malaysia Super League football betting, live casino, lottery, slots, and e-sports deserve to know exactly what happens to their personal information.

This Privacy Policy should be read in conjunction with gk9my's Terms & Conditions, available on the Terms & Conditions us. In the event of any conflict between these two documents on privacy-related matters, this Privacy Policy shall prevail.

02Types of Personal Data Collected

Gk9my collects your personal data through several channels depending on how you interact with the platform. The categories of data we collect are as follows:

Account Registration Data:

• Full name as shown on your Malaysian identity card or passport
• Malaysian identity card number (MyKad) or passport number for KYC purposes
• Date of birth for minimum age verification (18 years and above)
• An active Malaysian mobile phone number
• A valid email address
• Password (stored in an unreadable hashed format)

Financial & Transaction Data:

• Account numbers or e-wallet IDs for payment methods used, including Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX
• Deposit and withdrawal history including date, time, amount in MYR, and transaction status
• Betting and gaming history — including game type, amounts wagered, results, and relevant balances

Technical & Usage Data:

• IP address and approximate location information derived from IP
• Device type, operating system, and browser version
• In-platform activity logs, including session duration, pages visited, and features used
• Cookie data and related tracking technologies as described in Section 08

Communication Data:

• Live Chat session transcripts with the gk9my customer service team
• Email correspondence with the gk9my support or complaints team
• Feedback and surveys you voluntarily submit to gk9my

03How Your Personal Data Is Used

Gk9my uses the personal data collected for the following purposes:

• Account Operations: Creating and managing your gk9my account, verifying your identity at login, processing deposits and withdrawals, and crediting winnings to your account.
• KYC & AML Compliance: Meeting Know Your Customer (KYC) requirements and anti-money laundering (AML) obligations as mandated by Malaysian law.
• Platform Security: Detecting and preventing fraud, unauthorised access, account misuse, and suspicious activity on the gk9my platform.
• Service Improvement: Analysing how players use the platform to identify areas for improvement, refine the interface, and enhance the overall gk9my experience.
• Service Communications: Sending transaction notifications, winning alerts, important account updates, policy notices, and other necessary service communications.
• Targeted Marketing: With your consent, sending you information about relevant gk9my promotions, bonuses, and new offers based on your gaming activity and preferences — you may withdraw this consent at any time via your account notification settings.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of at-risk betting behaviour, and providing appropriate assistance or control tools through gk9my's responsible gaming programme.
• Legal Compliance: Meeting reporting obligations, cooperating with investigations by lawful authorities, and complying with court orders or directives from relevant regulatory bodies.

04Legal Basis for Data Processing

Every instance of personal data processing by gk9my has a valid legal basis under Malaysia's PDPA 2010. The bases we rely on are as follows:

• Contract Performance: Processing required to fulfil the agreement between you and gk9my — including account operations, financial transaction processing, and the provision of gaming services.
• Legal Obligations: Processing required to comply with applicable Malaysian laws and regulations — including KYC requirements, AML obligations, and reporting to relevant authorities.
• Legitimate Interests: Processing for the purposes of platform security, fraud prevention, and service quality improvement — where the interests of gk9my and its players do not override individuals' right to privacy.
• Consent: For targeted marketing and preference-based purposes — you may grant or withdraw this consent at any time through your account settings or by contacting us directly.

05Sharing Data with Third Parties

Gk9my does not sell or trade players' personal data to third parties. However, we may share data in the following limited and specific circumstances:

Operational Service Providers: gk9my works with trusted service providers who assist in operating the platform — including cloud infrastructure providers, payment processors for Malaysian e-wallets, live casino software providers, and identity verification system providers. All these providers are bound by strict confidentiality agreements and are only permitted to process your data for purposes specified by gk9my.

Legal Authorities: gk9my may be required to disclose personal data to Malaysian authorities when requested through valid legal procedures — including court orders, law enforcement investigations, or reporting requirements from relevant regulatory bodies.

gk9my's Rights Protection: Where necessary to protect gk9my's legitimate interests, prevent fraud, or defend legal claims, relevant data may be shared with legal counsel or parties involved in legal proceedings.

06Data Security Measures

Gk9my continually invests in security infrastructure to protect players' personal data. Our technical and organisational security measures include:

• 256-bit SSL Encryption: All communications between your device and gk9my's servers are encrypted using TLS 1.3 with 256-bit key length — the highest standard used in digital banking.
• Data Encryption at Rest: All sensitive data stored in gk9my's databases is encrypted at rest using AES-256, including identity card information, payment account numbers, and transaction history.
• Layered Access Controls: Access to player data within gk9my's systems is restricted to staff who genuinely need it for their roles, governed by role-based access controls and full audit logs for every access event.
• 24/7 Security Monitoring: Automated monitoring systems operate around the clock to detect and respond to suspicious activity, unauthorised access attempts, and cyberattacks.
• Regular Penetration Testing: gk9my conducts regular independent security testing to identify and address vulnerabilities before they can be exploited.
• Hashed Password: gk9my account passwords are never stored in plain text — they are stored as cryptographic hashes using the bcrypt algorithm, which cannot be reversed.

Despite all these security measures, no digital system can be guaranteed 100% secure. You also play an important role in keeping your account safe — please use a strong password, never share your login credentials, and contact us immediately if you suspect any suspicious activity on your gk9my account.

07Data Retention Period

Gk9my retains your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required by Malaysian law. Our data retention guidelines are as follows:

• Active Account Data: Retained for the duration your account remains active and for the post-termination period specified under applicable laws.
• Financial Transaction History: Retained for a minimum of 7 years from the date of the transaction, in line with financial record-keeping requirements under Malaysian law.
• KYC Data: Retained for a minimum of 5 years after the business relationship ends, in line with applicable AML requirements.
• Customer Support Communication Logs: Retained for 2 years from the date of communication for reference and dispute resolution purposes.
• Marketing Data: Retained until you withdraw consent or request deletion, whichever comes first.

Once the retention period expires and there is no longer a legal or operational need to keep the data, it will be securely deleted or irreversibly anonymised.

08Cookies & Tracking Technologies

Gk9my uses cookies and similar tracking technologies to enhance your experience on the platform. The types of cookies we use are:

• Strictly Necessary Cookies: Required for core gk9my platform functionality — including login session authentication, security, and language preferences. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collects information on how players use the platform — most frequently visited pages, response times, and technical issues. This data helps us improve gk9my's performance. All data collected by these cookies is aggregated and does not identify individuals.
• Functional Cookies: Saving your preferences such as display settings, last-used betting limits, and other configurations to provide a more personalised experience on the gk9my platform.
• Analytics Cookies: Helps us understand overall platform usage patterns to make better product decisions. Analytics data is processed in aggregate form without identifying individual users.

You can manage your cookie preferences through your browser settings. However, disabling certain cookies may affect your experience on the gk9my platform. For more information on managing cookies, please refer to your browser's help documentation.

09Your Rights Regarding Personal Data

Under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data held by gk9my:

• Right of Access: You have the right to request a copy of the personal data we hold about you. gk9my will process such requests within 21 calendar days.
• Right to Rectification: You have the right to request correction of any inaccurate or outdated personal data. For basic details such as phone number and email address, you can make corrections yourself through your gk9my account settings.
• Right to Erasure: Under certain circumstances, you have the right to request the deletion of your personal data — subject to data retention requirements mandated under Malaysian law as outlined in Section 07.
• Right to Object: You have the right to object to the processing of your data for direct marketing purposes at any time by updating your notification preferences in your gk9my account settings.
• Right to Portability: You have the right to receive your personal data in a structured, machine-readable format for the purpose of transferring it to another platform, applicable to data you have directly provided to gk9my.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the validity of any processing that took place prior to withdrawal.

To exercise any of the rights above, please contact gk9my's Privacy Officer by email at privacy@gk9my.top, stating the right you wish to exercise and sufficient information to verify your identity. Requests will be processed within 21 calendar days of receipt.

10Cross-Border Data Transfers

In the course of platform operations, some of your data may be processed or stored outside Malaysia — primarily through gk9my's cloud infrastructure and technical service providers operating across the Asia Pacific region.

When your personal data is transferred outside Malaysia, gk9my ensures equivalent protection is in place through the following mechanisms: binding data processing agreements with overseas service providers, standard data protection clauses requiring a level of protection equivalent to Malaysia's PDPA, and selection of providers operating in jurisdictions with recognised data protection legislation.

Gk9my gives priority to providers located within the Asian region to minimise cross-border data transfer requirements and ensure that Malaysian player data remains as close as possible to Malaysian legal jurisdiction.

11Children's Privacy

The gk9my platform is strictly for users aged 18 and above. gk9my does not knowingly collect personal data from individuals under the age of 18. If you are a parent or guardian who believes your underage child has provided personal information to gk9my, please contact us immediately at privacy@gk9my.top.

If we discover that personal data has been collected from a minor without proper parental or guardian consent verification, we will take immediate steps to delete that data and terminate the associated account.

12Amendments to This Privacy Policy

Gk9my reserves the right to amend this Privacy Policy from time to time to reflect changes in our privacy practices, updated legal requirements, or changes to platform operations. When we make material amendments to this Privacy Policy, we will notify you through:

• Email notifications sent to the address registered in your gk9my account
• A prominent notice within the gk9my platform upon your next login
• Update the "Last Updated" date at the top of this page

Your continued use of the gk9my platform after any amendments take effect will be taken as your acceptance of the revised Privacy Policy. If you do not agree with the changes made, you should stop using the platform and may request account closure and the removal of your personal data in accordance with the procedure set out in Section 09.

13Contact the gk9my Privacy Officer

For any enquiries, concerns, or requests relating to this Privacy Policy or your personal data, please contact gk9my's Privacy Officer through the following channels:

• Privacy Email: privacy@gk9my.top (response within 3–5 business days)
• General Support Email: support@gk9my.top
• Live Chat: Available on the gk9my platform, 24 hours a day, 7 days a week

If you are not satisfied with how gk9my has handled your privacy complaint after contacting us, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (PDPD), the authority responsible for overseeing PDPA compliance in Malaysia.