GTR88 Privacy Policy – Our Commitment to Protecting the Personal Data of Malaysian Members

01 Introduction & Scope of This Policy

Welcome to the GTR88 Privacy Policy. This document explains in detail how GTR88 ("we", "our platform") collects, uses, stores, protects, and in certain circumstances, shares the personal information you provide when registering for and using the GTR88 platform.

This Privacy Policy applies to all GTR88 platform users, including website visitors, registered members, and anyone who interacts with our platform via the GTR88 website or mobile app. By registering as a member or continuing to use the GTR88 platform, you agree to the collection and use of your personal information as described in this document.

GTR88 operates as an online betting and casino platform offering a wide range of games including slots, live casino, baccarat, roulette, poker, and sports betting covering Malaysia Super League football, EPL, badminton, cricket, e-sports, live matches, and virtual sports. In running all these activities, we necessarily process certain personal information to ensure a safe, fair, and legally compliant experience.

02 Types of Personal Data We Collect

GTR88 collects various types of personal information from our members depending on the nature of their interactions and the services they use. Below are the categories of data we collect:

GTR88 does not collect sensitive categories of personal data such as medical information, political views, or religious beliefs, except in very limited circumstances and with your explicit consent.

03 How GTR88 Uses Your Data

The personal data you provide to GTR88 is used solely for legitimate purposes directly related to the provision of platform services. The following outlines each purpose in detail:

• Account Management: Creating, maintaining, and managing your GTR88 account, including identity verification and age verification.
• Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX Maybank2u, and CIMB Clicks, and managing withdrawals in Malaysian Ringgit (RM).
• Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, and misuse of the GTR88 platform.
• Legal Compliance: Fulfilling KYC (Know Your Customer) and AML (Anti-Money Laundering) compliance obligations as required by regulatory authorities.
• Service Improvement: Analysing usage patterns to improve the gaming experience on GTR88, enhance the interface, and develop new games or features.
• Communications: Sending important account information, security notifications, platform updates, and – with your consent – promotional content and GTR88 bonus offers.
• Customer Support: Resolving enquiries, complaints, and support requests from GTR88 members.
• Responsible Gaming: Monitoring gameplay patterns to identify members who may need support related to problem gambling and providing appropriate assistance.

04 Legal Basis for Data Processing

GTR88 processes your personal data on valid legal bases under Malaysia's Personal Data Protection Act 2010 (PDPA). The bases we rely on are:

• Contract Performance: Processing necessary to provide GTR88 services to you once you have registered and agreed to our Terms & Conditions.
• Consent: In certain cases, such as marketing communications or the use of non-essential cookies, we obtain your explicit consent before processing your data.
• Legitimate Interests: Processing necessary for platform security, fraud prevention, and service improvement purposes, provided these interests do not override your privacy rights.
• Legal Obligations: Processing required to comply with applicable Malaysian law, including KYC and AML obligations.

05 Data Sharing & Disclosure

GTR88 does not sell, rent, or trade members' personal data to any third party for marketing or commercial purposes. However, in the course of operating the platform, we may share certain information with the following parties:

• Payment Service Providers: Required transaction information is shared with approved payment processors such as DuitNow, FPX, and Malaysian eWallet gateway providers to process deposits and withdrawals.
• Game Software Providers: Minimum technical data necessary is shared with third-party game software providers that support the GTR88 games library.
• Identity Verification Service Providers: Identity information is shared with approved third-party KYC service providers for the purpose of verifying new member identities.
• Legal Authorities: GTR88 will disclose personal data to Malaysian authorities or regulatory bodies where required by law, court order, or valid legal process.
• Business Transfer: In the event of a GTR88 merger, acquisition, or asset sale, members' personal data may be transferred as part of that transaction, with appropriate notice provided to members.

06 GTR88 Data Security Measures

GTR88 implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL Encryption: All data transmitted between your device and GTR88 servers is encrypted using 256-bit SSL protocol — the same security technology used by Malaysia's major financial institutions and banks.
• Encryption of Stored Data: Sensitive data including financial information and account passwords is stored in encrypted form within GTR88's databases.
• Internal Access Controls: Access to members' personal data within GTR88 is strictly limited to staff on a need-to-know basis.
• 24/7 Security Monitoring: GTR88 systems are continuously monitored to detect any unusual activity or intrusion attempts.
• Two-Factor Authentication (2FA): GTR88 offers 2FA to all members as an added layer of account security.
• Periodic Security Assessments: GTR88 conducts regular penetration testing and security audits by independent security experts to ensure data protection systems remain current.

While GTR88 takes all reasonable steps to protect your data, no security system can guarantee 100% protection against all cyber threats. You also play an important role by using a strong password and not sharing your GTR88 account information with anyone.

07 Data Retention Periods

GTR88 retains your personal data only for as long as necessary to fulfil the purposes outlined in this policy, or as required by Malaysian law. General data retention periods are as follows:

• Active Account Data: Retained for the duration that your account remains active and in use on the GTR88 platform.
• Financial Transaction Data: Records of all deposits, withdrawals, and transactions in MYR are retained for a minimum of 7 years for compliance with Malaysian legal and accounting requirements.
• KYC Data: Identity verification documents are retained for a minimum of 5 years after the account termination date for AML compliance requirements.
• Communication Records: Customer support logs and communication records are retained for 2 years after the last interaction.
• Technical Data: Access logs and technical data are retained for 12 months for security and troubleshooting purposes.

Once the retention period has ended and there is no legal requirement to keep the data longer, your personal data will be securely deleted or anonymised using methods that ensure it cannot be recovered.

08 Your Rights Under Malaysia's PDPA

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding the personal data GTR88 holds about you. These rights include:

To exercise any of the rights listed above, please submit a written request to GTR88 by email at support@gtr88.click or via the platform's live chat. GTR88 will respond to all valid requests within the timeframe prescribed by applicable law.

09 Cookies & Tracking Technologies

The GTR88 platform uses cookies and similar tracking technologies to enhance the user experience and platform security. Cookies are small text files stored on your device when you visit the GTR88 website.

• Essential Cookies: Required for core GTR88 platform functions such as login, session security, and language preferences. These cookies cannot be disabled.
• Performance Cookies: Collecting information on how visitors use the GTR88 platform to help us identify and resolve performance issues.
• Functional Cookies: Saving your preferences such as favourite game types and display settings to provide a more personalised experience on GTR88.
• Analytics Cookies: Used to understand how members interact with the various sections of the GTR88 platform for the purpose of continuous improvement.

You can manage your cookie settings through your web browser settings. However, disabling certain cookies may affect the functionality of the GTR88 platform and your gaming experience.

10 Cross-Border Data Transfers

In the course of its operations, GTR88 may need to transfer your personal data to servers or systems located outside Malaysia, particularly in the context of cloud services and international gaming software providers.

When your data is transferred outside Malaysia, GTR88 ensures adequate protections are in place through:

• Standard data transfer agreements that comply with Malaysia's PDPA requirements.
• Verification that the recipient country has data protection laws equivalent to or stricter than those in Malaysia.
• Implementation of appropriate technical and contractual security measures to protect data during transfer.

11 Children & Minors

The GTR88 platform is strictly for individuals aged 18 years and above. GTR88 does not knowingly collect or process personal data from individuals under the age of 18.

If GTR88 becomes aware that personal data of a minor has been collected without appropriate parental or guardian verification, we will take immediate steps to delete that information and terminate the relevant account.

If you believe a minor has registered or is using the GTR88 platform, please contact us immediately at support@gtr88.click.

12 Privacy Policy Amendments

GTR88 reserves the right to amend or update this Privacy Policy at any time to reflect changes in our data processing practices, new legal requirements, or service improvements. All amendments will be published on this page with a new "Updated" date.

For significant amendments that materially affect your privacy rights, GTR88 will endeavor to notify members via email or in-platform notification on GTR88 at least 14 days before the changes take effect.

Continued use of the GTR88 platform after the effective date of any amendments constitutes your acceptance of the revised Privacy Policy. We recommend reviewing this page periodically.