Gelay88 Privacy Policy – Malaysia Member Data Protection

Welcome to the Gelay88 Privacy Policy. This document is an official statement of how Gelay88 ("we", "platform") collects, uses, stores, protects and discloses the personal data of all users ("you", "member") who access or use our platform in Malaysia.

This policy applies to all information collected through the Gelay88 website at gelay88.best, the Gelay88 mobile app (where available), and all official communication channels including support email and Live Chat. By registering an account or using any Gelay88 service, you are deemed to have read, understood and agreed to this Privacy Policy in full.

Gelay88 complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and all applicable related regulations. We take this responsibility seriously and are committed to protecting the privacy of every member in Malaysia — from Kuala Lumpur, Penang, and Johor Bahru to Kota Kinabalu and Kuching.

Gelay88 collects your personal data through several means — directly when you fill in a registration form or contact our support team, and automatically when you use the platform. The categories of data we may collect are as follows:

We do not collect sensitive personal data such as medical information, political views, religious beliefs, or sexual orientation. Any financial data you provide is processed through secure payment channels and is not stored in plain text within our systems.

Gelay88 only collects and processes your personal data for legitimate, clearly stated purposes. We do not collect data for any purpose unrelated to the services we provide. The primary purposes for processing your data are:

• Account management: Registering, verifying and managing your Gelay88 member account, including the login process and account security.
• Transaction processing: Processes deposits via Touch 'n Go, DuitNow, GrabPay, ShopeePay, Boost and FPX, and withdrawals to your Malaysian bank account or eWallet.
• Identity verification (KYC): Verifies that you are a real individual aged 18 and above, in compliance with licensing requirements and anti-money laundering (AML) laws.
• Security & fraud prevention: Detecting and preventing fraudulent activity, unauthorised access, or misuse of the platform.
• Customer support: Providing relevant and efficient technical assistance and troubleshooting for every member.
• Legal compliance: Complying with legal reporting requirements, including cooperation with relevant authorities where required by law.
• Platform improvements: Analysing usage patterns in aggregate (not at an individual level) to improve the overall user experience.
• Service communications: Sending important notices relating to your account, transactions, or policy changes that directly affect you.

Gelay88 does not use your personal data for third-party advertising profiling, does not sell data to advertisers, and does not use your data for any purpose not stated here without first obtaining your fresh consent.

Gelay88 implements a range of technical and organisational security measures to ensure your personal data is protected at every stage — in transit, in processing and in storage.

Technical security measures implemented:

• 256-bit SSL/TLS Encryption on all communications between your browser/app and Gelay88 servers — the same standard used by online banking in Malaysia.
• Data-at-rest encryption for all personal data stored in our databases.
• Role-based access control (RBAC) — only authorised staff with a specific work purpose may access the relevant data.
• Continuous audit logs for every instance of access to player data, enabling detection and investigation should any suspicious access occur.
• Two-factor authentication (2FA) for all internal access to data management systems.
• 24/7 security monitoring by Gelay88's trained cybersecurity team.
• Penetration testing periodically by independent third parties to identify and address security vulnerabilities.

While we take all reasonable steps to protect your data, no security system is 100% impenetrable. Should a security incident occur that affects your data, Gelay88 is committed to notifying you within 72 hours of becoming aware of the incident, in line with industry best practices.

Gelay88 does not sell, rent or disclose your personal data to any third party for marketing or commercial purposes. This is our absolute commitment and will not change without your explicit prior consent.

However, there are limited situations where Gelay88 may need to share your data with certain third parties in order to deliver our services to you properly:

• Payment providers: Minimum transaction data required is shared with approved payment processors (such as FPX and DuitNow gateways) solely for the purpose of processing deposits and withdrawals. These providers maintain their own privacy policies and security standards.
• Game software provider: Usernames and account IDs (not real names or financial details) may be shared with third-party game providers for the technical purposes of game operation only.
• Legal authorities: Gelay88 is legally required to disclose certain data to the relevant authorities (police, courts, regulatory bodies) where a valid court order or statutory reporting obligation exists.
• Company acquisition or merger: If Gelay88 is involved in any corporate transaction, player data may be transferred as part of the business assets, subject to member notification and equivalent protections.

In all of the above cases, Gelay88 ensures that only the minimum necessary data is shared, and all data recipients are bound by strict data protection agreements.

The Gelay88 platform uses cookies and similar tracking technologies to ensure the platform functions properly and to provide you with a better experience. The types of cookies we use are as follows:

• Essential cookies: Required for core platform functionality, such as maintaining your login session, preventing CSRF attacks, and securing transactions. These cookies cannot be disabled.
• Preference cookies: Saving your preferences, such as your chosen language (Bahasa Melayu) and interface display settings, for a more convenient experience on your next visit.
• Analytics cookies: Helps us understand how members use the platform in aggregate — which pages are visited most, average session duration, and so on. This data cannot be used to identify any individual.
• Security cookies: Detects suspicious usage patterns — such as repeated login attempts from multiple locations — to help prevent unauthorised access to your account.

You can control or disable cookies through your internet browser settings. However, disabling essential cookies may affect the functionality of the Gelay88 platform and may prevent you from logging in or completing transactions normally.

Gelay88 does not use third-party cookies for targeted advertising from any external advertising network.

Under Malaysia's Personal Data Protection Act (PDPA) and the data protection principles we uphold, you have the following rights regarding your personal data held by Gelay88:

Gelay88 retains your personal data only for as long as it is needed for the purposes stated in this Privacy Policy, or for the period required under applicable Malaysian law.

Below is a guide to the data retention periods we follow:

• Active account data: Retained for the duration your account remains active, plus 5 years after account closure, for legal compliance purposes and to resolve any disputes that may arise.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian accounting and tax legislation and anti-money laundering (AML) requirements.
• Customer support communication records: Retained for 3 years from the date of last interaction for service quality and dispute resolution purposes.
• Cookie and technical log data: Retained for 90 days for security purposes and platform performance analytics.
• Identity verification (KYC) data: Retained for 5 years after the last verification date, in line with licensing requirements.

Once the retention period expires or a valid erasure request is received, Gelay88 will securely delete or anonymise the data using appropriate methods. Erasure cannot be carried out for data subject to active legal obligations.

Gelay88 Platform not intended for, and not permitted to be used by individuals under the age of 18. This is a non-negotiable policy under any circumstances.

Gelay88 does not knowingly collect personal data from children or minors. Our registration process includes age verification, and we take proactive steps to confirm the age information provided during the KYC process.

If Gelay88 discovers that we have inadvertently collected personal data from someone under the age of 18, we will take immediate action to:

• Immediate closure of the account in question.
• Deleting all data associated with that account.
• Returning any remaining balance to the original payment method.
• Reporting incidents to the relevant authorities where required by law.

If you are a parent or guardian and believe that your child or dependent has registered a Gelay88 account without authorisation, please contact us immediately at support@gelay88.best for immediate action.

Gelay88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other operational reasons. All amendments will be published on this page with a new "Updated" date.

For amendments that material — meaning changes that materially affect how we use your data or reduce your rights — we will provide sufficient notice via:

• A prominent notice on the Gelay88 platform homepage at least 14 days before the amendment takes effect.
• A notification email to all registered members with an active email address on record.
• Update the version number and date at the top of this document.

Your continued use of the Gelay88 platform after any amendment to the Privacy Policy takes effect will be considered your acceptance of the revised policy. If you do not agree, you have the right to close your account and request deletion of your data.

For any enquiries, concerns or requests relating to this Privacy Policy, please contact Gelay88's Data Privacy Officer via: