Privacy Policy

This Privacy Policy ("Policy") is published by gk9my ("we", "us", "our"), the operator of the online gaming platform located at https://gk9my.cam ("Platform"). This Policy applies to all persons who access or use the Platform, including registered players, visitors, and prospective users ("you", "your").

We are committed to handling personal data responsibly and transparently. This Policy sets out the categories of personal data we collect, the purposes for which that data is processed, the legal bases upon which we rely, the circumstances under which data may be shared, and the rights available to you regarding your personal information.

By registering an account on gk9my, accessing the Platform, or otherwise providing us with your personal information, you acknowledge that you have read and understood this Policy and consent to the processing of your data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform immediately.

In this Policy, the following definitions apply:

gk9my collects personal data across several categories depending on the nature of your interaction with the Platform. The following table summarises the primary categories of data we process:

We collect personal data through the following means:

• Direct Provision: Information you provide voluntarily when registering an account, completing KYC verification, submitting a support request, or participating in a promotion.
• Automated Collection: Technical and usage data collected automatically when you access the Platform, via cookies, server logs, and similar tracking technologies.
• Payment Processors: Transaction confirmations and payment references passed to us by third-party payment service providers (including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, and cryptocurrency network confirmations).
• Third-Party Game Providers: Game session data, including bet history and RTP statistics, provided by our licensed game content partners whose software runs on the Platform.
• Identity Verification Services: Where we engage third-party KYC or anti-fraud service providers, data may be verified against databases they maintain in accordance with applicable law.

gk9my processes personal data for the following purposes, each supported by a corresponding legal basis:

gk9my does not sell, rent, or trade personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of third parties only where strictly necessary and for the purposes set out in this Policy:

• Payment Service Providers: Transaction data shared with providers such as Touch 'n Go eWallet, Boost, DuitNow/FPX processing partners, participating Malaysian banks (Maybank, CIMB, Public Bank, Hong Leong Bank), and cryptocurrency network processors solely to facilitate deposits and withdrawals.
• KYC & Identity Verification Partners: Identity documents shared with licensed verification service providers to fulfil our legal obligation to verify the age and identity of players.
• Game Content Providers: Session identifiers and bet data shared with licensed game software providers operating games on the Platform, limited to what is technically necessary to run each game session.
• IT Infrastructure & Security Providers: Technical service providers who host, maintain, and secure the Platform's infrastructure. All such providers are contractually obligated to process personal data only on our instructions.
• Regulatory & Law Enforcement Authorities: We will disclose personal data to competent regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law, regulatory instruction, or court order.
• Professional Advisers: Legal counsel, auditors, and compliance advisers engaged by gk9my may access personal data on a strictly confidential, need-to-know basis.

gk9my retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and registration data: Retained for the duration of your active Account and for a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping obligations.
• KYC documents: Retained for a minimum of five (5) years following the end of the business relationship, as required by financial crime prevention regulations.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Support communications: Retained for three (3) years from the date of the final communication in each case, or longer if required for dispute resolution or regulatory purposes.
• Technical and usage data: Typically retained for up to thirteen (13) months in aggregated or pseudonymised form for analytics purposes.
• Marketing consent records: Retained for the duration of the consent and for a reasonable period thereafter as evidence of that consent.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised data (from which no individual can be identified) may be retained indefinitely for statistical analysis.

gk9my implements a comprehensive set of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data in transit between your device and the Platform;
• Encryption of sensitive data at rest on secured servers with restricted physical and logical access;
• Password hashing using industry-standard algorithms — gk9my staff cannot read your plaintext password;
• Role-based access controls limiting staff access to personal data to a strict need-to-know basis;
• Regular security audits, penetration testing, and vulnerability assessments of Platform infrastructure;
• Multi-factor authentication requirements for internal administrative access;
• Automated fraud and anomaly detection systems operating continuously.

Notwithstanding these measures, no method of data transmission over the internet is completely secure. You play a role in security too: use a strong, unique password for your gk9my Account and do not share your login credentials with anyone. If you suspect unauthorised access to your Account, contact our support team immediately via live chat.

gk9my uses cookies and similar technologies (including web beacons and local storage objects) to operate the Platform, remember your preferences, and analyse usage patterns. Cookies we use fall into the following categories:

You may manage your cookie preferences through your browser settings. Most modern browsers allow you to refuse cookies or alert you when a cookie is being placed. Disabling non-essential cookies will not affect your ability to use the core functionality of gk9my, but may affect certain personalisation features.

As a Data Subject, you hold the following rights in respect of your personal data held by gk9my. You may exercise these rights at any time by contacting our support team via live chat or email at [email protected]:

We will respond to all rights requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further sixty (60) days, in which case we will notify you of the extension and the reason for the delay. There is no charge for exercising your rights unless requests are manifestly unfounded or excessive, in which case we reserve the right to charge a reasonable administrative fee.

gk9my is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the KYC process for all players seeking to make a withdrawal from the Platform.

If we become aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete that information and close the associated Account. If you believe that a minor has registered an Account on gk9my, please notify us immediately via our 24/7 live chat or by email at [email protected].

Due to the global nature of our technology infrastructure, your personal data may be transferred to, stored in, or processed in countries outside Malaysia. This may include jurisdictions where data protection laws differ from those in force in Malaysia.

Where such transfers occur, gk9my ensures that appropriate safeguards are in place to protect your personal data. These safeguards may include the use of standard contractual clauses, data processing agreements with equivalent protections, or transfers to countries recognised as providing an adequate level of data protection.

By using the Platform, you acknowledge and consent to transfers of your personal data on the basis described in this section. If you have concerns about international data transfers, please contact our support team.

gk9my reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or regulatory requirements. When material changes are made, we will update the Effective Date shown at the top of this page.

For significant changes that materially affect how your personal data is processed, we will make reasonable efforts to notify registered players via the email address associated with their Account or through a notice displayed prominently on the Platform prior to the changes taking effect.

Your continued use of the Platform following the posting of any amendment constitutes acceptance of the updated Privacy Policy. We encourage you to review this Policy periodically to stay informed about how we protect your information.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which gk9my handles your personal data, please contact our Data Privacy team through the following channels:

• 24/7 Live Chat: Available directly on the Platform — this is the fastest way to raise a privacy concern or data rights request.
• Email: [email protected] — please include "Privacy Request" in the subject line for routing to the appropriate team. Responses typically within 24–48 hours.

If you are not satisfied with our response to a privacy concern, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction.

For responsible gambling concerns, self-exclusion requests, or issues related to your Account's gambling activity, please visit our Responsible Gambling page.