Privacy Policy gd888

1 Introduction and Scope of This Policy

This Privacy Policy is issued by gd888 (hereinafter referred to as "we", "the platform" or "gd888") and applies to all users who register, browse or use any part of the gd888 platform, including the website https://gd888.wine and any related applications or services operated by gd888.

This policy explains the types of information we collect, the purposes for collecting it, how we store and protect that information, and the rights you have regarding your personal data. Any material changes to this policy will be communicated through a clear notice on the platform, and your continued use after the date of those changes will be taken as your acceptance of the updated version of the policy.

2 Information We Collect

In operating the platform and meeting international licensing requirements, gd888 collects several categories of personal information from players. This collection is necessary to ensure account security, process payments and comply with relevant legal obligations.

The categories of information we collect include:

• Identity information: full name, date of birth, identity card number (MyKad), nationality and gender
• Contact information: email address, mobile phone number and residential address
• Financial information: e-wallet account details (Touch 'n Go, Boost), DuitNow information, FPX details, and deposit and withdrawal records
• Gaming activity information: betting history, win and loss records, session duration and game preferences
• Technical information: IP address, device type, operating system, browser used and cookie data
• Communications: correspondence with our customer support team via live chat or email

3 Purposes for Using Personal Information

gd888 uses the personal information collected solely for legitimate and necessary purposes in operating a responsible online gaming platform. We will not use your data for unrelated purposes without obtaining your consent first.

The main purposes for which we use your data are as follows:

• Verifying the identity and age of players to meet licensing requirements (21+ age verification)
• Processing deposits and withdrawals via Touch 'n Go eWallet, DuitNow, FPX, Boost and cryptocurrency
• Managing and maintaining player accounts and providing ongoing services
• Detecting and preventing fraud, money laundering and other illegal activities
• Complying with legal requirements, international licensing regulations and directions from relevant authorities
• Sending notifications regarding accounts, bonus promotions and service updates
• Improving platform functionality and the user experience based on anonymised data analysis
• Providing effective customer support in Malay and English

4 Legal Basis for Data Processing

Every processing of personal data carried out by gd888 is based on at least one valid legal ground. Those grounds are:

• Contract: processing is necessary to carry out the agreement you entered into with us at account registration
• Legal obligation: processing is necessary for us to comply with applicable legal obligations, including anti-money laundering requirements
• Legitimate interests: we process data to prevent fraud and ensure the security of the platform
• Consent: for certain marketing communications, we will ask for your explicit consent and you have the right to withdraw it at any time

You may ask our support team about the specific legal basis we rely on for any particular processing activity that relates to you.

5 Disclosure to Third Parties

gd888 respects the confidentiality of your personal information. However, in certain situations we may need to share your information with selected third parties. Such disclosure is done carefully and only when genuinely necessary.

Third parties that may receive your information include:

• Payment service providers that process your deposits and withdrawals (such as e-wallet operators and FPX banks)
• Identity verification service providers that assist us in carrying out Know Your Customer (KYC) procedures
• Game providers that need to verify gaming transactions to ensure game integrity
• Regulatory authorities, law enforcement or government bodies when required by law
• Technical service providers such as cloud infrastructure providers responsible for storing data securely

All third parties that receive your personal information are required to comply with strict data security standards and to use that information only for agreed purposes. gd888 does not sell your personal information to any party for marketing purposes.

6 Data Retention Period

gd888 retains your personal information only for as long as necessary to fulfil the purpose for which it was collected, or for the period required by law and licensing obligations. In general:

• Active account records are retained for the duration that the account remains active
• Financial transaction records are retained for at least the minimum period required by anti-money laundering regulations
• Customer support communication data is retained for a reasonable period for reference and quality control purposes
• After account closure, certain data may be retained for a period set by legal obligations

Once the retention period ends, your data will be deleted or anonymised securely in accordance with industry standard procedures.

7 Your Rights as a Data Subject

As a gd888 player and data subject, you have certain rights regarding your personal information. gd888 respects and facilitates the exercise of these rights. They include:

• Right of access: you may request a copy of the personal information we hold about you
• Right to rectification: you may request correction of any information that is inaccurate or incomplete
• Right to erasure: in certain circumstances, you may request that your personal information be deleted
• Right to restrict processing: you may request that we limit how we process your data in certain situations
• Right to object: you may object to the processing of your data where it is based on legitimate interests
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time

8 Cookies and Tracking Technologies

gd888 uses cookies and similar tracking technologies to improve your experience on our platform. Cookies are small text files stored on your device when you browse our website.

Types of cookies we use:

• Essential cookies: required for basic website functions such as login authentication and session security — cannot be disabled
• Performance cookies: collect anonymous data about how users interact with the website to help us improve its performance
• Functional cookies: store your preferences such as language settings and display options to make your visit more comfortable
• Analytics cookies: help us understand user behaviour in aggregate for product improvement purposes

You can manage or disable cookies through your browser settings. However, disabling essential cookies may affect certain platform functions.

9 Data Security and Protective Measures

gd888 implements various appropriate technical and organisational measures to protect your personal information from unauthorised access, accidental disclosure, modification or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and our servers
• Password storage using strong hashing algorithms — we do not store passwords in plain text
• Strict role-based access controls for our internal staff
• Security audits and penetration testing conducted on a regular basis
• Continuous system monitoring to detect suspicious activity or unauthorised access attempts
• A clear incident response procedure in the event of a data breach

Although we take all reasonable steps, no security system is completely foolproof. You are also responsible for keeping your account password confidential and not sharing your login details with any other party.

10 Amendments to This Privacy Policy

gd888 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our operational practices, new legal requirements, or improvements in how we protect your data.

Any material amendments will be communicated to players via a prominent notice on the website or by email to your registered account at least seven days before the changes take effect. Your continued use of the gd888 platform after the effective date of such amendments will be considered your acceptance of the updated version of the Privacy Policy.

We encourage you to review this page periodically to stay informed about how we manage your personal information. The date of the most recent update will always be displayed at the top of this document.