🔒 Your personal data is protected by 256-bit SSL — your privacy is Gembet's priority 🛡️ Gembet does not sell player data — no sharing without your consent 💳 Deposit via Touch 'n Go, DuitNow, GrabPay — safe & processed within 1–3 minutes! 🎁 Welcome Bonus up to RM1,500 — for new Gembet members only! ⚽ Malaysia Super League, EPL & badminton — all available at Gembet 24/7 ✅ Over 500,000 Malaysian players trust Gembet — sign up today! 🔒 Your personal data is protected by 256-bit SSL — your privacy is Gembet's priority 🛡️ Gembet does not sell player data — no sharing without your consent 💳 Deposit via Touch 'n Go, DuitNow, GrabPay — safe & processed within 1–3 minutes! 🎁 Welcome Bonus up to RM1,500 — for new Gembet members only! ⚽ Malaysia Super League, EPL & badminton — all available at Gembet 24/7 ✅ Over 500,000 Malaysian players trust Gembet — sign up today!
🔒 UPDATED: JANUARY 2026

Gembet Privacy Policy – How We Protect the Personal Data of Malaysian Players

At Gembet, your privacy is more than a legal obligation — it is our moral responsibility to every Malaysian player who entrusts their personal information to our platform. This document clearly sets out what we collect, why we need it and how we protect it.

Last updated: 1 January 2026
🔒

Gembet's Privacy Commitment to Malaysian Players

Six core principles that guide how Gembet handles your personal data.

Bank-Grade 256-bit SSL Encryption

All data transmitted between your device and Gembet's servers is protected by 256-bit SSL encryption — the same security standard used by Maybank, CIMB, and Malaysia's major banks. No one can intercept or read your data while it is in transit.

No Sale of Data to Third Parties

Gembet has never and will never sell, rent, or share your personal data with any third party for marketing or commercial purposes without your prior written consent. Your data remains solely under Gembet's control.

Secure Servers & Restricted Access

Gembet player data is stored in a tightly controlled server environment with access restricted strictly to staff who require it to perform their operational duties. All access is logged and continuously monitored.

Full Transparency on Data Usage

We use your data only for the purposes set out in this Privacy Policy — there is no hidden or undisclosed use. You have the right to know exactly what data we hold about you at any time.

Right of Access, Correction & Deletion of Data

Every Gembet player has the right to request a copy of their personal data, ask for corrections to inaccurate data, or request deletion under certain circumstances. These requests are processed within 14 business days.

Compliance with the Malaysian Personal Data Protection Act

Gembet operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). We take our legal responsibilities seriously in ensuring that player data is handled lawfully, fairly, and transparently.

Important Note: By registering for and using the Gembet platform, you agree to the collection and use of your personal information as described in this Privacy Policy. Please read this document carefully before using our services.

1 Introduction & Scope of Privacy Policy

This Privacy Policy ("Policy") describes how Gembet ("we", "our platform") collects, uses, discloses, and protects your personal information when you use the gembet.cash website and all related services we provide to players in Malaysia.

Gembet is fully committed to protecting the privacy of our players. This is more than a legal document — it is our promise to over 500,000 registered members who trust us with their personal information. Every decision about how we handle data is made with our players' best interests and wellbeing at the forefront.

This Policy applies to all information you provide to us when registering an account, making deposits or withdrawals via Touch 'n Go, DuitNow, GrabPay, or other Malaysian payment methods, placing bets or playing casino games on Gembet, contacting our support team, or browsing our website in general.

We encourage you to read this document in full. If any section is unclear, feel free to reach out to the Gembet support team via Live Chat or email — we're happy to explain everything in Bahasa Malaysia.

2 Types of Personal Data We Collect

Gembet only collects data that is genuinely necessary to provide our services safely and effectively. We do not collect excessive information that has no bearing on the platform's operational purposes.

Identity Information
  • Full name (as per MyKad)
  • An active Malaysian phone number
  • Date of birth (for age verification)
  • National identification number (MyKad) — only when required for verification
  • Residential address in Malaysia
Financial Information
  • Malaysian bank account number (for withdrawals)
  • EWallet account name (Touch 'n Go, GrabPay, Boost, ShopeePay)
  • Registered DuitNow user ID
  • Deposit and withdrawal history in MYR
  • Transaction records for AML compliance
Gaming Activity Data
  • Sports betting history (football, badminton, e-sports)
  • Casino game records (slots, baccarat, roulette)
  • Net winnings and losses
  • Bonuses claimed and rollover status
  • Gaming session duration and timing
Technical & Device Data
  • IP address and general location (state within Malaysia)
  • Device type and operating system
  • Web browser type and version
  • Access logs and system error logs
  • Cookie and session data (see Section 6)

2.1 How Data Is Collected

We collect your data through several means: directly when you complete a registration form or contact our support team; automatically through our systems as you use the platform; and via authorised third parties such as Malaysian payment providers when you make a deposit or withdrawal.

3 Purposes for Using Personal Data

Gembet uses the personal data we collect solely for legitimate, clearly stated purposes. Below is a full list of how your data is used on our platform:

3.1 Account Management & Services

  • Creating and managing your Gembet account, including a secure login process.
  • Processing deposits and withdrawals in MYR (RM) via your preferred local payment methods.
  • Automatically crediting your welcome bonus and other promotions to your account.
  • Providing customer support in Bahasa Malaysia whenever you contact us.

3.2 Security & Compliance

  • Identity and age verification (18 years and above) at registration and prior to withdrawal processing.
  • Detecting and preventing fraud, bonus abuse, money laundering and other unlawful activities.
  • Complying with the requirements of the Personal Data Protection Act 2010 and applicable anti-money laundering (AML) regulations.
  • Maintaining transaction records for audit and investigative purposes where required.

3.3 Platform Improvements & Communications

  • Analysing platform usage patterns to improve the user experience — such as enhancing navigation, speed, and mobile usability.
  • Sending important notifications regarding your account, updates to our terms, or security-related information.
  • To inform you about promotions and bonus offers that may interest you (you may opt out of marketing communications at any time).
  • To support responsible gaming programmes — monitoring play patterns to identify players who may need assistance.

Gembet does not use your data for automated decision-making that materially affects your rights without human review. All significant decisions — such as account closures or withdrawal suspensions — are manually reviewed by our team.

4 Third-Party Data Sharing & Disclosure

Gembet does not sell, rent or share your personal data with third parties for their own marketing purposes. This is an absolute, non-negotiable commitment. That said, there are limited circumstances where we may need to share certain information:

Third Parties Data Shared Purpose
Payment Providers (Touch 'n Go, GrabPay, DuitNow, FPX) Name, phone number, transaction amounts in RM Processing your deposits & withdrawals
Game Providers (Pragmatic Play, PG Soft, etc.) Anonymised player ID, game history Operating casino games & verifying jackpots
IT & Security Service Providers System logs and technical data with no direct personal identifiers Maintaining platform security & performance
Legal Authorities Information lawfully requested via court order Compliance with Malaysian law where required

All third parties working with Gembet are required to comply with strict data protection standards and are prohibited from using your data for any purpose beyond the scope of the services they provide to us.

Remember: Gembet will never ask for your account password via email, WhatsApp, or any other channel. If you receive such a request claiming to be from Gembet, it is a fraudulent attempt. Please report it to our support team immediately.

5 Data Security Measures at Gembet

Protecting the personal data of Gembet players is a responsibility we take very seriously. We continually invest in the latest security technologies and procedures to ensure your data remains safe at all times.

5.1 Technical Security

  • 256-bit SSL Encryption: All communications between your device and Gembet's servers are encrypted using the latest TLS 1.3 protocol with 256-bit key length.
  • Stored Data Encryption: Sensitive data such as financial information and identity verification documents are encrypted at rest on our servers.
  • Two-Factor Authentication (2FA): Gembet login is secured with OTP via your registered Malaysian phone number as an added layer of security.
  • Regular Vulnerability Scanning: Our cybersecurity team conducts regular penetration testing to identify and patch vulnerabilities before they can be exploited.

5.2 Operational Security

  • Access to player data is restricted to Gembet staff who genuinely require it to perform their duties, in accordance with the principle of least privilege.
  • All database access is automatically logged and monitored. Any unusual access activity will trigger an immediate alert to our security team.
  • Gembet staff undergo regular cybersecurity and data protection training.
  • A comprehensive security incident response procedure is in place to ensure that any data breach is identified, addressed, and reported promptly.

5.3 Steps in the Event of a Data Breach

In the unlikely event of a data breach affecting your personal information, Gembet is committed to notifying you within a reasonable timeframe via email or in-platform notification, and will take all necessary steps to contain the damage and prevent recurrence.

6 Cookies, Tracking Technologies & Analytics

The Gembet website uses cookies and similar tracking technologies to keep the platform running smoothly, enhance the user experience, and help us understand how players interact with our site.

6.1 Types of Cookies We Use

Session Cookies (Required) Login Authentication Cookie Usage Analytics Cookies User Preference Cookies Security & Fraud Prevention Cookies Platform Performance Cookies

6.2 Strictly Necessary Cookies (Cannot Be Disabled)

Session and authentication cookies are required for the Gembet platform to function. They store your login state during an active session so you are not asked to log in again every few minutes, and they enable security features such as detecting suspicious concurrent sessions. Without these cookies, you will not be able to use the Gembet platform.

6.3 Analytics & Performance Cookies

We use internal analytics tools to understand how players use the Gembet platform — which pages are visited most frequently, how long gaming sessions last, and where players encounter difficulties. This information is used solely to improve the platform and does not contain data that can directly identify any individual.

6.4 Managing Cookies

You can manage cookie settings through your web browser. Most browsers allow you to view, delete or block cookies. However, disabling essential cookies will affect the functionality of the Gembet platform and may prevent you from logging in or completing transactions.

7 Your Rights Regarding Personal Data

As a Gembet player based in Malaysia, you have certain rights regarding your personal data under the Personal Data Protection Act 2010 and our internal policies. We respect and facilitate the exercise of these rights.

Right of Data Access

You have the right to request a copy of all personal data Gembet holds about you. Requests will be processed within 14 business days, and the data will be provided in a readable format.

Right to Data Rectification

If any personal data held about you in Gembet's systems is inaccurate or out of date, you have the right to request a correction. You can update most profile information directly in your account settings.

Right to Data Erasure

Under certain circumstances, you have the right to request the deletion of your personal data. This is subject to our obligation to retain certain records for legal and compliance purposes that cannot be waived.

Right to Opt Out of Marketing

You may opt out of all marketing communications from Gembet at any time by updating your notification settings in your account or by contacting our support team.

Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format and to transfer it to another party where required under circumstances permitted by law.

Right to Restrict Processing

In certain circumstances, you may request that Gembet restrict the processing of your data — for example, while we are investigating your dispute regarding the accuracy of the data we hold.

To exercise any of the rights above, please contact the Gembet support team by email at support@gembet.cash stating your request clearly. We will respond within 14 business days. In some cases, we may require identity verification before processing your request to ensure security.

8 Data Retention Period

Gembet does not retain your personal data for longer than is necessary for the stated purposes or as required by law. The following are general guidelines for our retention periods:

  • Active Account Data: For as long as your Gembet account remains active, we retain all relevant data to ensure uninterrupted access to our services.
  • Financial Transaction Records: Records of deposits, withdrawals, and financial activity in MYR are retained for 7 years after the transaction date, in line with Malaysia's financial compliance and anti-money laundering (AML) requirements.
  • Gaming Data (Sports, Casino, E-Sports): Betting and game history is retained for 5 years for dispute resolution and audit purposes.
  • Support Communication Records: Conversation records with the Gembet support team are retained for 3 years for quality control and complaint resolution purposes.
  • After Account Closure: When your account is closed, we will retain the minimum data necessary to fulfil our legal obligations, after which it will be permanently deleted or anonymised.

9 Protection of Minors

Gembet services are strictly limited to individuals aged 18 and above. We do not knowingly collect or process personal data from minors.

If you believe that someone under the age of 18 has registered an account on Gembet using false information, please notify us immediately at support@gembet.cash. We will investigate and close the account, and delete all associated data without delay.

A Note for Parents: If you discover that your child has been using the Gembet platform without your knowledge, please contact us immediately. We take the protection of minors seriously and will work with you fully to resolve the matter.

10 Cross-Border Data Transfers

In the course of our operations, your personal data may be processed or stored by service providers operating outside Malaysia — for example, international casino game providers or cloud server infrastructure.

In all such cases, Gembet ensures that:

  • Data transfers only take place with parties that uphold data protection standards equivalent to or higher than those required in Malaysia.
  • Data processing agreements covering strict data protection obligations are in place with all third parties involved.
  • All foreign service providers that handle Gembet player data undergo regular security reviews by our team.
  • Sensitive financial data related to MYR transactions is always processed in an environment that complies with international payment security standards (PCI DSS).

11 Privacy Policy Amendments

Gembet reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or improvements to how our platform operates.

For material amendments — those that significantly affect your rights or how we use your data — we will notify you at least 14 days before the amendments take effect, via in-platform notifications or by contacting the email address or phone number registered with Gembet.

The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. Your continued use of the Gembet platform after any amendments take effect constitutes your acceptance of the revised policy.

We encourage you to revisit this page regularly — at least every few months — so you always know how we're protecting your personal data.

12 Contact Us About Data Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or how Gembet handles your personal data, our team is ready to assist you in Bahasa Malaysia through the following channels:

  • Live Chat: Available 24/7 at gembet.cash — the fastest way to get a response. Typically within 5 minutes.
  • Privacy Email: support@gembet.cash — for more formal written requests such as data access or deletion requests. We aim to respond within 14 business days.

When contacting us regarding privacy, please clearly state that your request relates to Privacy Policy or personal data so it can be routed to the relevant team more quickly.

Gembet takes every privacy enquiry seriously and will respond clearly, accurately, and in Bahasa Malaysia. You do not need to use formal legal language to raise a query — just ask in everyday Bahasa Malaysia and we will understand.

FAQ – Data Privacy at Gembet

The most frequently asked questions by Malaysian players about how Gembet handles their personal data.

Absolutely not. Gembet does not share, sell, or rent your phone number, bank account details, or any personal information to other companies for their marketing purposes. Your phone number is used solely for OTP verification during login, sending important account-related notifications, and customer support communications. Your bank account or eWallet details are used exclusively to process your withdrawals and are not stored or shared beyond what is necessary for that transaction. If you receive a call or message claiming to be from Gembet for marketing purposes or asking for your personal information, it is most likely a scam — please report it to us.

Gembet only requests your MyKad number in specific circumstances that require identity verification — typically for withdrawals exceeding a certain threshold or when our security system detects activity that warrants additional verification. When you submit your MyKad details, they are immediately encrypted using AES-256 encryption before being stored in our database. Access to this information is strictly limited — only members of Gembet's compliance and security teams with a legitimate operational need may access it, and every access is automatically logged. We do not retain a physical copy of your MyKad and do not share your MyKad number with third parties except where required by Malaysian law.

Yes, you may request the deletion of your personal data after closing your Gembet account. However, certain categories of data are required to be retained for a specified period even after a deletion request — in particular, financial transaction records must be kept for 7 years to comply with Malaysia's Anti-Money Laundering Act (AMLA), as well as records relating to any ongoing investigations. For all data not subject to these legal retention requirements, Gembet will delete or anonymise your data within 60 days of receiving a valid deletion request. You may submit a data deletion request to support@gembet.cash with the subject line "DATA DELETION REQUEST".

Yes, Gembet monitors your betting activity — but only for the purposes stated in this Privacy Policy. First, for security and compliance: our systems detect unusual betting patterns that may indicate fraud, bonus abuse or money laundering. Second, for our responsible gaming programme: we monitor gameplay patterns to identify players who may need support related to problem gambling — this is part of our commitment to player wellbeing. Third, for product improvement: anonymised usage data is used to understand which football, e-sports, slots and casino games are most popular among Malaysian players so we can enhance our offering. We do not use your activity data to sell to advertisers or unrelated third parties.

If you suspect your Gembet account has been accessed without your authorisation, take immediate action in the following order: First, change your account password straight away via the account settings page. Second, contact the Gembet support team via 24/7 Live Chat and report that you suspect unauthorised access — our team can temporarily freeze your account for investigation if needed. Third, review your account login history and transaction records to identify any activity you did not carry out. Fourth, if you use the same password for Gembet and other services, change those passwords as well. Gembet's security team will investigate and provide you with a full report within 24 hours. If any unauthorised transactions can be substantiated, we will take appropriate action to protect your interests.
256-bit SSL
Encrypted Data
No Data Sales
BM Support 24x7
PDPA MY Compliance
Independent Audit

Your Data is Safe with Gembet — Register with Confidence

Over 500,000 Malaysian players have trusted Gembet with their personal information. Our platform is secured with the latest technology so you can focus on what matters — enjoying your favourite football, casino, e-sports and slots games.

Bahasa Melayu