GDL 88 Privacy Policy – Personal Data Protection for Malaysian Players

GDL 88 genuinely cares about the privacy of every member who trusts our platform. We understand that choosing to register with an online gaming platform requires a high level of trust — confidence that your information will be handled with the utmost care.

This Privacy Policy is written with the intention of giving you a clear and honest picture of how we manage your data. We do not want you guessing what happens to your information — we want you to know exactly where it goes, in plain language you can understand.

This policy applies to all services provided by GDL 88 including the website at gdl88.top, the GDL 88 mobile app, and all our official communication channels including customer support via live chat and email. This Policy also forms part of GDL 88 Terms & Conditions and should be read together.

GDL 88 only collects data that is genuinely necessary to provide a safe, fair and legally compliant service. The data we collect falls into three main categories:

A. Data You Provide Directly to Us

• Full name as stated on your official Malaysian identity document.
• An active Malaysian phone number.
• Email address (if provided during registration or updated at a later date).
• Date of birth for age verification.
• Malaysian Identity Card or equivalent identity document for the KYC (identity verification) process.
• Financial account information related to your chosen payment method — such as your Touch 'n Go eWallet account number, GrabPay ID, FPX Maybank2u or CIMB Clicks account number, and similar details — collected only to the extent necessary to process deposits and withdrawals in MYR.
• Any other information you voluntarily provide when dealing with our customer support team.

B. Automatically Collected Data

• The IP address of the device you use to access GDL 88.
• The type and version of web browser or mobile application used.
• Your device's operating system.
• The date, time and duration of each login session.
• Pages visited, buttons clicked, and general navigation patterns within the platform.
• Game performance data required to ensure the integrity and fairness of every round or bet.
• Transaction data including deposit amounts via DuitNow or Boost, withdrawal times, game types played, and records of wins and losses.

C. Data from Third-Party Sources

• In certain cases, GDL 88 may receive identity verification information from qualified KYC service providers to authenticate the identity documents you have submitted.
• Payment verification information from the e-wallet or bank provider you use, to confirm the authenticity of transactions.
• Data from regulatory bodies or authorities where required by law.

Every piece of data we collect has a clear and legitimate purpose. GDL 88 uses your personal information for the following purposes:

GDL 88 not using your data to make automated decisions that have a significant impact on you without human involvement, except for real-time fraud detection which is a security requirement for all members. You have the right to request a human review of any automated decision that affects your account.

GDL 88 does not sell, rent, or transfer your personal data to any third party for their own marketing purposes. However, there are limited circumstances where we may need to share certain data:

Approved Service Providers

We work with trusted service providers that help us operate our platform. These include:

• Payment processors: Touch 'n Go eWallet, GrabPay, DuitNow, FPX, Boost and ShopeePay service providers receive the transaction information required to process your deposits and withdrawals in MYR.
• KYC Provider: Identity verification companies that assist us in authenticating the documents submitted by new members.
• Technology infrastructure provider: Cloud computing and hosting services that securely store our platform data.
• Security software provider: Cybersecurity firms that assist us in detecting and preventing fraud and intrusions.

All such service providers are required to sign data protection agreements stipulating that they may only use your data for the specific purposes agreed upon with GDL 88.

Legal Requirements

GDL 88 may be required to disclose your data to the relevant authorities where mandated by applicable law, including police investigations, court orders, or official requests from regulatory bodies. In such cases, we will disclose only the minimum information necessary.

GDL 88 continually invests in security infrastructure to protect your data. The technical security measures we implement include:

• 256-bit SSL/TLS Encryption: All communications between your device and GDL 88's servers are encrypted using the same protocol employed by Malaysia's leading online banking institutions.
• Data encryption at rest: Sensitive data stored in our databases, including identity information and financial details, is encrypted using robust encryption algorithms.
• Role-based access control: GDL 88 staff can only access the data required for their specific role. Access to sensitive data requires multi-level authorisation.
• Intrusion detection system: Round-the-clock real-time monitoring to detect and block any unauthorised access attempts.
• Regular security audits: Penetration testing and security audits are conducted periodically by independent parties.
• Two-factor authentication: Two-factor authentication is available for members who want to add an extra layer of security to their account.

Even with all these measures in place, no system can be guaranteed 100% secure. We encourage you to play your part by using a strong password, keeping your login credentials private, and reporting any suspicious activity to us immediately.

GDL 88 retains your personal data only for as long as necessary to fulfil the purposes outlined in this Policy, or as required by applicable law. The following are our general data retention guidelines:

• Active account data: Retained for the duration your account remains active, and for any period thereafter as required by law.
• Financial transaction records: Retained for a minimum of 7 years in accordance with applicable financial and anti-money laundering legal requirements.
• Support communication logs: Retained for 3 years for reference and dispute resolution purposes.
• Access and security log data: Retained for 12 months for security incident investigation purposes should any occur.
• Marketing data (with your consent): Retained until you withdraw consent or close your account.

When data is no longer needed and there is no legal obligation to retain it, GDL 88 will delete or anonymise it in a secure manner.

GDL 88 uses cookies and similar tracking technologies to enhance your experience on our platform. The types of cookies we use:

• Essential cookies: Required for core platform functions such as maintaining your login session and ensuring transaction security. These cookies cannot be disabled without affecting platform functionality.
• Performance cookies: Collects information about how you use GDL 88 – which pages you visit most frequently, page load times and any errors encountered. This helps us continuously improve the platform.
• Functional cookies: Remembering your preferences such as language, display settings and favourite game selections to provide a more personalised experience.
• Security cookies: Helps identify and prevent fraudulent activity by detecting unusual usage patterns.

You can manage your cookie settings through your web browser. However, disabling certain cookies may limit the functionality of the GDL 88 platform. Please note that essential cookies cannot be disabled without affecting the core security and functionality of your account.

As a member GDL 88 and individuals whose personal data we hold, you have the following rights regarding your data. We are committed to making it straightforward to exercise these rights:

GDL 88 is a gaming platform strictly for adults aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. If you believe that someone under 18 has registered on our platform, please notify us immediately at support@gdl88.top.

If we discover that we have collected data from a minor without knowledge, we will take immediate steps to delete that data and close the account in question. GDL 88 applies an age verification process during registration to prevent sign-ups by underage individuals.

The GDL 88 platform may contain links to third-party websites or services in certain contexts. This Privacy Policy applies solely to the GDL 88 platform and does not cover the privacy practices of those third-party websites or services.

GDL 88 is not responsible for the content, privacy policies, or practices of any third-party websites you may access via links within our platform. We recommend reading the privacy policy of each website you visit independently to understand how they handle your data.

GDL 88 reserves the right to modify this Privacy Policy from time to time to reflect changes in our practices, the technologies we use, or evolving legal requirements. Any material changes will be published on this page with an updated "Last Updated" date.

For changes deemed significant and materially affecting your rights, GDL 88 will endeavour to provide advance notice via in-platform notifications or an email to the address you registered with. Your continued use of the GDL 88 platform after changes are published will be considered your acceptance of the updated policy.

We encourage you to check this page periodically to stay informed of GDL 88's latest privacy practices. Previous versions of the Privacy Policy are available upon request from our support team.