Gem55 Privacy Policy –
Personal Data Protection for Malaysia Players

01Introduction

Gem55 ("we", "Platform", "gem55") values the privacy of every individual who uses our platform. This Privacy Policy clearly explains how we collect, use, store, disclose, and protect your personal information when you use the websites, mobile apps, and services provided by gem55.

This document forms part of the binding agreement between you and gem55 and should be read together with Terms and Conditions By using the gem55 platform, you agree to the practices described in this Privacy Policy.

02Personal Data We Collect

Gem55 collects various types of personal information depending on your interactions with our platform. Below is a summary of the data types we collect:

Data marked "Required" is necessary to manage your account and process your transactions. Failure to provide required data may limit our ability to deliver our services in full.

03How We Collect Data

Gem55 collects your personal information through the following methods:

• Account registration — information you provide directly when opening a gem55 account.
• KYC Verification — identity documents and information submitted during the identity verification process.
• Financial transactions — details collected when you make a deposit or withdrawal.
• Platform usage — data automatically generated as you browse and interact with the gem55 platform.
• Devices and technology — technical information collected through cookies, tracking pixels, and similar technologies.
• Support communication — information you share when interacting with the gem55 customer support team.
• Third-party sources — in certain cases, we may receive information from licensed identity verification providers or compliance bodies.

04Purpose of Personal Data Use

Gem55 uses collected personal data for legitimate and limited purposes as follows:

• Account management — creating, verifying, and managing your player account on the gem55 platform.
• Transaction processing — processing deposits, withdrawals, and payment verification securely and efficiently.
• Legal compliance — fulfilling compliance obligations including Anti-Money Laundering (AML) and Know Your Customer (KYC) procedures.
• Platform security — detecting, investigating, and preventing fraud, hacking, and other illegal activities.
• Service improvement — analyzing usage patterns to improve the user experience, platform performance, and game offerings.
• Communication — sending important notifications related to your account, transactions, security updates, and promotional information (with your consent).
• Customer support — providing assistance and resolving inquiries or complaints submitted by players.

05Data Sharing and Disclosure

Gem55 does not sell players' personal data to any third party. However, in certain limited situations, we may share your data with the following parties:

• Technical service providers — companies that help us operate the platform, including cloud service providers, payment processors, and gaming software providers. All such parties are bound by strict confidentiality agreements.
• Law enforcement agencies — when required by law, court order, or direction from a legitimate authority.
• Compliance and regulatory bodies — to licensed bodies involved in AML compliance and identity verification where necessary.
• Identity verification providers — third-party companies that assist us in verifying player identity during the KYC process.

If gem55 is involved in any merger, acquisition, or asset sale, players' personal data may be transferred as part of the business assets. Players will be notified in advance via email or an in-platform notice should this occur.

06Data Security

Gem55 implements multiple layers of technical and organizational security measures to protect your personal data from unauthorized access, loss, destruction, or accidental disclosure.

• 256-bit SSL Encryption — all data transmitted between your device and gem55 servers is protected with industry-grade encryption.
• Strict access controls — only authorized personnel may access players' personal data, and only for required purposes.
• 24/7 Monitoring — continuous monitoring systems detect and respond to any security threats or suspicious activity.
• Regular security audits — gem55 conducts regular penetration testing and security audits to ensure our infrastructure remains robust.
• Two-factor authentication (2FA) — players are encouraged to enable 2FA to add an extra layer of protection to their account.
• Secure data backup — data is regularly backed up and stored in a secure location to ensure service continuity.

07Cookies and Tracking Technologies

Gem55 uses cookies and similar tracking technologies to enhance the user experience, analyze platform traffic, and deliver relevant content. The following are the types of cookies we use:

• Essential cookies — required for core platform functions such as login authentication and session security. These cookies cannot be disabled.
• Performance cookies — gathering information on how players use the platform to help us improve performance and the user experience.
• Functional cookies — saving your preferences such as language, display settings, and game preferences so you do not need to reset them each time you log in.
• Analytical cookies — helps us understand aggregate usage patterns for platform improvement purposes.

You can manage or disable cookies through your browser settings. Please note that disabling essential cookies may affect the functionality of the gem55 platform.

08Your Rights Regarding Personal Data

As a gem55 player, you have the following rights regarding your personal data under Malaysia's PDPA:

To exercise any of the above rights, please contact the gem55 customer support team. We will process your request within 14 business days. In complex cases, this period may be extended to up to 30 business days, with written notice provided to you.

09Data Retention Period

Gem55 retains your personal data only for as long as necessary to fulfill the purposes stated in this Privacy Policy or as required by applicable law.

• Active account data — retained for the duration your account is active and for a reasonable period after account closure.
• Financial transaction records — retained for a minimum of seven (7) years in accordance with anti-money laundering and financial reporting legal requirements.
• KYC Documents — retained for a minimum of five (5) years from the date of verification or account closure, whichever is later.
• Activity and security logs — retained for two (2) years for security audit and fraud investigation purposes.
• Customer support communication — retained for three (3) years for reference and service quality improvement.

10Child Protection

The gem55 platform is intended for individuals aged 18 and above only. We do not knowingly collect personal data from anyone under the age of 18.

11Amendments to the Privacy Policy

Gem55 reserves the right to amend or update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or service improvements.

• Any material amendments will be communicated to players via their registered email or through a prominent notice on the gem55 platform.
• The "Last Updated" date at the top of this document will be revised whenever an amendment is made.
• Continued use of the gem55 platform after any amendments are published constitutes acceptance of the updated Privacy Policy.
• We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

12Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how gem55 handles your personal data, please contact us through the following channels:

Our Data Protection Officer team will respond to your enquiry within 3–5 business days. For urgent matters relating to account security, please use the Live Chat within the gem55 platform for immediate assistance.

You may also refer to FAQ page for answers to frequently asked questions about privacy and data security.