gmp99 Privacy Policy

1. Scope and Application

This Privacy Policy applies to all personal data processed by gmp99 in connection with the operation of the gmp99.asia platform, including but not limited to: account registration and management, gameplay and betting activity, payment processing, customer support interactions, and marketing communications where you have provided consent. This Policy applies to all registered players, visitors to the gmp99.asia website, and any other individual whose personal data is processed by gmp99 in connection with our services. By registering an account or continuing to use gmp99, you acknowledge that you have read and understood this Privacy Policy.

2. Data Controller Information

For the purposes of applicable data protection legislation, gmp99 — operating at gmp99.asia — acts as the data controller in respect of personal data collected through the platform. Queries regarding data protection or the exercise of data subject rights should be directed to the gmp99 support team via the contact details provided at the end of this Policy. gmp99 operates under international gaming authority licensing and is subject to data governance requirements imposed under that licensing framework.

3. Personal Data We Collect

3.1 Registration and Identity Data

When you create a gmp99 account, we collect your full legal name, date of birth, residential address, email address, and Malaysian mobile phone number. For identity verification purposes required under our licensing obligations, we may also collect a copy of your Malaysian IC (MyKad) or passport and, where required, a document confirming your residential address.

3.2 Financial and Payment Data

We collect information necessary to process your deposits and withdrawals, including the payment methods you use (such as Touch n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, or card details). gmp99 does not store full card numbers on its own servers — payment card data is tokenised and handled by our certified payment service providers. We retain transaction records including deposit amounts, withdrawal amounts, and transaction timestamps for regulatory and anti-money-laundering compliance purposes.

3.3 Gaming and Betting Activity Data

gmp99 records all gaming and betting activity on your account, including game sessions, bet amounts, outcomes, and balance movements. This data is used for account management, dispute resolution, fraud detection, responsible gaming monitoring, and compliance with regulatory reporting requirements under our licensing obligations.

3.4 Technical and Device Data

When you access gmp99, we automatically collect technical information about your device and connection, including your IP address, device type, operating system, browser type, and session timestamps. This data is used for security monitoring, fraud prevention, and platform optimisation.

3.5 Communications Data

Where you contact gmp99 support via live chat or email, we retain a record of that communication — including the content of the exchange and the contact details you provided — for quality assurance, dispute resolution, and training purposes. Records are retained for a period consistent with our data retention schedule outlined in Section 7 of this Policy.

4. How We Collect Your Data

gmp99 collects personal data through the following primary channels:

• Directly from you — when you register an account, complete identity verification, make a deposit or withdrawal, contact our support team, or participate in a promotion.
• Automatically — through cookies, server logs, and analytics tools when you access the gmp99 platform from any device.
• From third-party service providers — including identity verification agencies, payment processors, and fraud detection services, to supplement the data you provide directly where this is necessary for platform security and regulatory compliance.

5. Purposes and Legal Basis for Processing

gmp99 processes your personal data for the following purposes, each of which rests on a specific legal basis:

• Account creation and management — necessary for the performance of our contract with you as a registered player.
• Identity verification and KYC compliance — required to fulfil our legal obligations under anti-money-laundering regulations and our licensing requirements.
• Payment processing — necessary for the performance of our contract with you in facilitating deposits and withdrawals in MYR.
• Fraud prevention and security monitoring — based on our legitimate interest in maintaining platform integrity and protecting players from account compromise.
• Responsible gaming monitoring — required to fulfil our legal and licensing obligations to identify and support players showing signs of problem gambling.
• Marketing communications — based on your explicit consent, where you have opted in to receiving promotional communications from gmp99. You may withdraw this consent at any time.
• Regulatory reporting — required by our legal obligations under our international gaming authority licensing and any applicable Malaysian legislation.

6. Disclosure of Personal Data

gmp99 does not sell or rent your personal data to any third party for commercial purposes. We may disclose your personal data to the following categories of recipients, strictly as necessary for the purposes described in this Policy:

• Payment service providers — to process your deposits and withdrawals via Touch n Go eWallet, Boost, FPX, DuitNow, and other supported payment methods.
• Identity verification and KYC providers — to verify your identity as required under our licensing and regulatory obligations.
• Fraud detection and security services — to identify and prevent unauthorised access, money laundering, and other prohibited conduct on the platform.
• Game content providers — game studios and live casino operators may receive necessary session data to operate their games on the gmp99 platform.
• Regulatory authorities and law enforcement — where disclosure is required by law, court order, or the requirements of our international gaming authority licensing.

All third-party service providers with whom gmp99 shares personal data are required to process that data only for the specified purpose, under appropriate contractual data protection obligations, and in accordance with applicable data protection law.

7. Data Retention

gmp99 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods driven by legal and regulatory obligations:

• Account registration and identity verification data: minimum 5 years following account closure, as required under anti-money-laundering regulations applicable under our licensing.
• Transaction and gaming activity records: minimum 5 years from the date of the transaction or gaming session.
• Customer support communications: 2 years from the date of the interaction.
• Marketing consent records: retained for the duration of your marketing subscription plus 1 year following withdrawal of consent.

Where data is no longer required for any legal, regulatory, or operational purpose, gmp99 will securely delete or anonymise it in accordance with our data destruction procedures.

8. Cookies and Tracking Technologies

gmp99 uses cookies and similar tracking technologies to operate and improve the platform. The categories of cookies used by gmp99 are:

• Essential cookies — required for the platform to function correctly, including session management and security functions. These cannot be disabled without affecting platform functionality.
• Analytics cookies — used to understand how players navigate and use the platform, enabling us to identify and resolve usability issues. Data collected is aggregated and anonymised.
• Fraud prevention cookies — used to detect and prevent fraudulent access attempts and identify suspicious device or network patterns.

gmp99 does not use third-party advertising or behavioural tracking cookies. You may manage your cookie preferences through your browser settings; however, disabling essential cookies may affect your ability to use the gmp99 platform.

9. Data Security

gmp99 implements and maintains a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include 256-bit SSL encryption for all data in transit, encryption of sensitive data at rest, access controls restricting personal data access to authorised personnel with a legitimate need, regular security audits and penetration testing of platform infrastructure, and incident response procedures for managing any data breach in accordance with our legal notification obligations. In the event of a data breach affecting your personal data in a manner that poses a risk to your rights, gmp99 will notify affected players in accordance with applicable data protection requirements.

10. Your Rights as a Data Subject

Subject to the applicable data protection legislation governing your relationship with gmp99, you may have the following rights in respect of your personal data:

• Right of access — to request a copy of the personal data gmp99 holds about you.
• Right to rectification — to request correction of inaccurate or incomplete personal data.
• Right to erasure — to request deletion of your personal data in certain circumstances, subject to our legal and regulatory retention obligations.
• Right to restrict processing — to request that gmp99 restrict the processing of your personal data in certain circumstances.
• Right to data portability — to receive your personal data in a structured, machine-readable format in certain circumstances.
• Right to withdraw consent — where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

To exercise any of these rights, please contact the gmp99 support team using the contact details in Section 13. gmp99 will respond to all data subject requests within a reasonable timeframe and in any event within the period required by applicable law. Identity verification may be required before a request is processed.

11. Children and Underage Users

The gmp99 platform is strictly for adults aged 21 years and over. gmp99 does not knowingly collect personal data from individuals under the age of 21. If gmp99 becomes aware that personal data has been collected from a person under 21, that account will be immediately closed and the personal data deleted, subject to any legal retention obligations. Parents or guardians who become aware that a minor has registered a gmp99 account should contact our support team immediately.

12. Changes to This Privacy Policy

gmp99 may update this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or platform features. Where material changes are made, registered players will be notified by email to their registered address. The version number and effective date at the top of this document indicate the current applicable version. We encourage players to review this Privacy Policy periodically. Continued use of the gmp99 platform following notification of an updated Policy constitutes acceptance of the revised terms.

13. How to Contact Us

If you have questions about this Privacy Policy, wish to exercise your data subject rights, or have a concern about how gmp99 processes your personal data, please contact the gmp99 data protection team: