Gaspol168 Privacy Policy – Data Protection & Member Privacy in Malaysia

This Privacy Policy is published by Gaspol168 ("we", "platform", or "Company") and applies to all users of the gaspol168.my website, including visitors, registered members, and any individual who interacts with our services in any capacity.

We understand that privacy is a serious matter — especially when it involves an online entertainment platform that handles personal information and financial transactions. Many Malaysian users are increasingly conscious of how their data is used in this digital age, and we fully respect those concerns. That is precisely why we have taken the time to write this policy in a way that is easy to understand and transparent.

This policy outlines the types of data we collect, why we need it, who can access it, how long we retain it, and what rights you have over that data. Gaspol168 is committed to ensuring all data processing is carried out responsibly, securely, and in line with industry best practices.

Gaspol168 only collects data that is genuinely necessary to provide quality service to our members. We do not collect excessive or irrelevant data. The following are the categories of data we collect:

Your personal data is collected by Gaspol168 through several different channels, depending on how you interact with our platform:

• Registration Form: When you register a Gaspol168 account, you provide basic information such as your name, Malaysian phone number, date of birth, and password. This is the minimum data required to create a secure and verified account.
• Financial Transactions: When you make a deposit via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, or FPX (Maybank2u, CIMB Clicks), our system records the transaction information required to process the payment and maintain accurate financial records.
• Platform Usage: When you use our platform — playing slots, placing bets on Malaysia Super League matches or BWF badminton, or interacting with live table games — our systems automatically record that activity for account management and security purposes.
• Customer Support: When you contact our support team via Live Chat or email, those conversations are recorded to ensure we can deliver consistent service and resolve issues efficiently.
• Cookies & Tracking Technologies: Our website uses cookies and similar technologies to remember your preferences, maintain the security of your login session, and understand how users interact with our platform. Further details are explained in Section 9.
• Identity Verification (KYC): In certain situations, such as processing withdrawals above a specified threshold or when additional verification is required, we may request a copy of a valid government-issued ID such as a Malaysian identity card.

Gaspol168 uses your personal data only for legitimate and relevant purposes. We do not use your data for any purpose not disclosed to you without your prior consent. The primary purposes for which data is used are as follows:

• Account Management: To create, maintain, and protect your Gaspol168 account — including identity verification, password resets, and account information updates.
• Transaction Processing: To process your deposits and withdrawals accurately and securely using your preferred Malaysian payment method.
• Bonus & Promotion Management: To ensure you accurately and automatically receive the bonuses and promotions you are entitled to — including the Welcome Bonus, weekly cashback, daily reload, and VIP offers.
• Security & Fraud Prevention: To detect and prevent unauthorised access, fraud, money laundering, and other illegal activities that could compromise the platform or our member community.
• Customer Support: To enable the Gaspol168 support team to assist you effectively whenever you encounter any issues or have enquiries about your account.
• Responsible Gambling: To monitor gaming patterns and provide appropriate assistance or control tools to members who may need responsible gaming support.
• Platform Improvements: To understand how users interact with our platform and make improvements that enhance the overall experience for all members.
• Legal Compliance: To comply with applicable legal and regulatory requirements, including financial record retention and anti-money laundering obligations.

Gaspol168 does not sell, rent, or trade members' personal data to any third party for commercial purposes. This is our absolute commitment. However, there are limited situations where we need to share certain information with other parties for normal platform operations:

• Payment Providers: To process your transactions, the necessary information is shared with payment providers such as Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX. This sharing is limited strictly to data required to complete the transaction and is subject to each provider's own privacy policy.
• Game Providers: The Gaspol168 platform uses software from third-party game providers such as Evolution Gaming, Pragmatic Play, PG Soft, and others. Some game data may be processed by these providers to run the games, but this is limited to the technical data required and does not include your financial information or full identity details.
• Legal Authority: gaspol168 will disclose information to the relevant authorities (such as the police, courts, or financial regulatory bodies) when required by valid law or court order. We will notify you of any such disclosure unless prohibited from doing so by law.
• Security & Anti-Fraud Services: We may engage third-party services that specialise in fraud detection and cybersecurity to protect our platform and members. These providers are bound by strict confidentiality agreements.

Gaspol168 invests seriously in data security infrastructure to ensure your information is always protected. The following are the key technical and operational measures we have in place:

• 256-bit SSL Encryption: All communication between your browser or app and gaspol168's servers is protected using Transport Layer Security (TLS) encryption with a 256-bit key — the same standard used by leading Malaysian banks and financial institutions.
• Data Encryption at Rest: Personal and financial data stored in our databases is also encrypted at rest, meaning that even if someone were to gain unauthorised access to the physical server, the data cannot be read without the encryption key.
• Strict Access Controls: Access to members' personal data within Gaspol168's internal systems is restricted to staff who genuinely require it to carry out their duties. All access is automatically audited and logged.
• Two-Factor Authentication (2FA): For member accounts, we encourage the use of two-factor authentication as an additional layer of security. For Gaspol168's internal systems, 2FA is mandatory for all staff accessing member data.
• 24/7 Monitoring: Our security systems continuously monitor platform activity to detect any anomalies or suspicious access attempts — including login attempts from unfamiliar locations or devices.
• Periodic Penetration Testing: We conduct regular security testing to identify and close any vulnerabilities before they can be exploited by malicious parties.

Gaspol168 does not retain your personal data for longer than necessary. Retention periods vary depending on the type of data and the relevant legal requirements:

• Active Account Data: For as long as your gaspol168 account remains active, we retain all information necessary to manage your account effectively. This includes profile information, transaction history, and game records.
• Financial Transaction Records: In accordance with Malaysian legal requirements on anti-money laundering and financial record-keeping, transaction records are retained for a minimum of 5 years from the transaction date, even after an account is closed.
• Customer Support Records: Customer support communication logs are retained for 2 years to allow us to resolve any disputes or follow-up enquiries that may arise.
• Security Log Data: Technical and security logs are retained for 12 months for security investigation and fraud detection purposes.
• After Account Closure: When your account is voluntarily closed, personal data that is not required for legal purposes will be deleted or anonymised within 90 days of closure, unless a legal requirement mandates longer retention.

As a Gaspol168 member, you have several important rights regarding your personal data. We respect these rights and make it easy for you to exercise them: