gemsbet Privacy Policy

1. Data Controller

The data controller responsible for the personal data processed under this Privacy Policy is the operator of the gemsbet platform ("gemsbet", "we", "us", "our"), which operates gemsbet.org under an international online gaming licence. References to "you" and "your" mean any individual who accesses, registers on, or uses the gemsbet platform.

This Privacy Policy applies to all personal data collected through the gemsbet platform, including data collected via the website interface, account registration, customer support interactions, payment processing, and KYC verification procedures. By registering a gemsbet account or using the Platform, you acknowledge that you have read and understood this Privacy Policy.

2. Personal Data We Collect

2.1 Registration and Account Data

When you register a gemsbet account, we collect the following personal data:

• Full legal name
• Date of birth (for age verification purposes — minimum age 21)
• Residential address
• Email address
• Mobile telephone number
• Username and encrypted password
• Preferred currency (MYR for Malaysian players)

2.2 Identity Verification (KYC) Data

To comply with our licensing obligations and anti-money laundering requirements, gemsbet collects the following identity documents:

• Copy of government-issued photo identification (Malaysian IC / MyKad, passport, or equivalent)
• Proof of residential address (utility bill, bank statement, or equivalent document dated within 3 months)
• Source of funds documentation (where required for enhanced due diligence)
• Selfie or liveness verification image (where required)

2.3 Financial and Transaction Data

We collect data related to deposits and withdrawals, including:

• Payment method identifiers (e.g., masked bank account or e-wallet reference — not full card or account numbers)
• Transaction amounts, timestamps, and reference numbers
• Deposit and withdrawal history
• Bonus and promotion redemption records

2.4 Gaming Activity Data

gemsbet records all gaming and betting activity associated with your Account, including game sessions, wager amounts, game outcomes, and betting history. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory reporting.

2.5 Technical and Usage Data

When you access the gemsbet platform, we automatically collect certain technical data, including:

• IP address and approximate geographic location (country/region level)
• Device type, operating system, and browser version
• Session duration and navigation patterns within the platform
• Login timestamps and login attempt records
• Referring URL (the page from which you arrived at gemsbet.org)

2.6 Communications Data

If you contact gemsbet's customer support team via Live Chat or email, we retain records of those communications, including the content of your messages and our responses, for quality assurance, dispute resolution, and regulatory purposes.

3. How We Use Your Personal Data

gemsbet uses the personal data it collects for the following purposes:

Purpose	Data Used
Account registration and management	Registration data, login credentials
Identity verification and KYC compliance	KYC documents, date of birth, address
Processing deposits and withdrawals	Financial data, payment method identifiers
Providing casino, sportsbook, poker, and slots services	Gaming activity data, account data
Fraud prevention and security monitoring	Technical data, transaction data, login records
Anti-money laundering and regulatory compliance	KYC data, transaction data, gaming activity
Responsible gaming monitoring and intervention	Gaming activity, deposit history, session data
Customer support and dispute resolution	Communications data, account data, gaming history
Platform performance and technical improvement	Technical and usage data (aggregated and anonymised)
Direct marketing communications (with consent)	Email address, communication preferences

gemsbet does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review, except where required by law or our licensing framework.

4. Legal Basis for Processing

gemsbet processes your personal data under the following legal bases:

• Contractual necessity: Processing required to provide the gemsbet platform services under the Terms and Conditions you accepted at registration (account management, payment processing, game provision).
• Legal obligation: Processing required to comply with gemsbet's licensing obligations, KYC requirements, anti-money laundering laws, and regulatory reporting duties.
• Legitimate interests: Processing for fraud prevention, security monitoring, platform improvement, and responsible gaming monitoring, where these interests are not overridden by your fundamental rights.
• Consent: Processing for direct marketing communications. You may withdraw this consent at any time by contacting our support team or using the unsubscribe mechanism in any marketing message.

5. Sharing Your Personal Data

gemsbet does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only in the following circumstances and only to the extent necessary:

5.1 Service Providers

We share data with trusted third-party service providers who assist us in operating the platform, including: payment processors and e-wallet providers (Touch 'n Go, Boost, DuitNow, Maybank, CIMB, and others); KYC identity verification technology providers; game suppliers (Evolution Gaming, Pragmatic Play, Asia Gaming, and others); IT infrastructure and cloud hosting providers; and fraud detection and security services. All service providers are bound by data processing agreements and are required to process data only on gemsbet's instructions and in compliance with applicable data protection standards.

5.2 Regulatory and Legal Disclosure

gemsbet may disclose personal data to regulatory authorities, licensing bodies, law enforcement agencies, or courts where required by applicable law, court order, or regulatory directive. We will notify you of such disclosure where legally permitted to do so.

5.3 Corporate Transactions

In the event of a merger, acquisition, reorganisation, or sale of all or part of gemsbet's business, personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material change to this Privacy Policy that results from it.

6. International Data Transfers

gemsbet operates internationally and your personal data may be transferred to and processed in countries outside Malaysia. Where such transfers occur, gemsbet ensures that appropriate safeguards are in place to protect your data, including contractual clauses consistent with applicable international data transfer standards. In selecting service providers who process data outside Malaysia, gemsbet gives preference to providers operating in jurisdictions with recognised data protection frameworks.

By using the gemsbet platform, you acknowledge that your data may be processed outside Malaysia as described in this policy.

7. Data Retention

gemsbet retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods required under our licensing and legal obligations:

• Account data and gaming history: Retained for a minimum of 5 years following account closure, as required under anti-money laundering regulations applicable to our licence.
• KYC and identity verification documents: Retained for a minimum of 5 years following the end of the business relationship.
• Financial transaction records: Retained for a minimum of 5 years following the date of each transaction.
• Customer support communications: Retained for up to 3 years following the resolution of the relevant matter, unless a longer period is required by law or an ongoing dispute.
• Technical and usage data: Retained in aggregated and anonymised form indefinitely for platform analytics; individual-level technical data retained for up to 12 months.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised. Requests for early deletion are considered subject to overriding legal or regulatory obligations that may require retention.

8. Cookies and Tracking Technologies

gemsbet uses cookies and similar tracking technologies on the platform. The following categories of cookies are deployed:

• Strictly necessary cookies: Required for platform functionality, including login session management, account authentication, and security token validation. These cookies cannot be disabled without impairing platform functionality.
• Performance cookies: Collect anonymised data about how players use the platform (pages visited, session duration, error occurrences). Used to improve platform performance and user experience.
• Fraud prevention and security cookies: Used to detect and prevent fraudulent activity, including multiple account detection and unusual login pattern identification.

gemsbet does not deploy third-party advertising or cross-site tracking cookies on its platform. You may configure your browser to refuse cookies or to alert you when cookies are being set, but note that refusing strictly necessary cookies will prevent you from logging in to the gemsbet platform.

9. Your Data Protection Rights

Subject to applicable law and any overriding legal obligations, you have the following rights in respect of your personal data held by gemsbet:

• Right of access: You may request a copy of the personal data gemsbet holds about you and information about how it is being used.
• Right to rectification: You may request correction of inaccurate or incomplete personal data. Some data can be corrected directly in your Account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention requirements.
• Right to restrict processing: You may request that gemsbet restrict the processing of your data in certain circumstances, for example while a rectification request is under review.
• Right to data portability: Where processing is based on consent or contractual necessity, you may request a copy of your data in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on consent (for example, direct marketing), you may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to object: You may object to processing carried out on the basis of legitimate interests. gemsbet will consider your objection and cease processing unless there are compelling legitimate grounds that override your interests.

To exercise any of these rights, please contact gemsbet via Live Chat or email at [email protected]. We will respond to all valid requests within 30 days. We may need to verify your identity before processing your request.

10. Children's Privacy

The gemsbet platform is strictly for adults aged 21 years and above. gemsbet does not knowingly collect or process personal data from individuals under the age of 21. Age verification is performed during registration and as part of the KYC process. If gemsbet becomes aware that personal data has been collected from a person under 21 years of age, it will promptly close the relevant account, delete or anonymise the associated data, and refund any deposits made to the original payment method.

If you believe that a minor has registered a gemsbet account or that gemsbet has inadvertently collected data from a person under 21, please notify us immediately via Live Chat.

11. Security Measures

gemsbet implements a range of technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include:

• 256-bit TLS/SSL encryption of all data in transit between your device and gemsbet's servers
• Encryption of sensitive data fields (including passwords and identity documents) at rest
• Access controls restricting personal data access to authorised personnel on a need-to-know basis
• Regular security assessments and penetration testing of the platform infrastructure
• Audit logging of all access to personal data held in gemsbet's systems
• Multi-factor authentication for administrative access to systems containing personal data
• Incident response procedures for the detection, management, and notification of personal data breaches

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, gemsbet will notify you and the relevant supervisory authority as required by applicable law, within the timeframes stipulated by that law.

12. Third-Party Services and Links

The gemsbet platform integrates third-party services including game providers, payment processors, and KYC verification tools. These providers operate under their own privacy policies and data processing terms. gemsbet has contractual data processing agreements in place with all third-party processors to ensure they handle data in compliance with applicable standards. However, gemsbet is not responsible for the independent data practices of third-party providers beyond its contractual requirements.

The gemsbet platform does not contain links to external third-party websites beyond what is necessary for payment processing and game loading. Where any integration with a third-party service involves the transfer of your personal data, this is described in Section 5 above.

13. Amendments to This Privacy Policy

gemsbet reserves the right to update or amend this Privacy Policy at any time. The "Last Updated" date at the top of this page indicates the date of the most recent revision. Where changes are material, gemsbet will notify registered players by email or in-Account notification prior to the changes taking effect. Your continued use of the gemsbet platform following notification of amended Privacy Policy terms constitutes your acknowledgment of the revised policy. If you do not agree to any amendment, you should cease using the platform and request Account closure.

14. Contact and Data Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or gemsbet's data practices, please contact us through the following channels:

• Live Chat: Available 24/7 from any page on the gemsbet platform — the fastest channel for data access and correction requests.
• Email: [email protected] — for formal data rights requests, please include "Privacy Request" in the subject line along with your registered username.

gemsbet is committed to resolving privacy concerns promptly and transparently. If you are not satisfied with our response to a privacy concern, you have the right to escalate the matter to the relevant supervisory authority or regulatory body under gemsbet's applicable licensing jurisdiction.