Privacy Policy GT128 –
Your Personal Data Protection in Malaysia

This Privacy Policy applies to all individuals who register an account, use the services or access the online casino platform GT128 via the gt128.my website and all associated subdomains. This covers all activities you carry out on the platform — from initial registration, making deposits, playing slots, Live Casino, jackpot lottery and Sports Betting, through to the withdrawal of winnings.

GT128 acts as a data controller under Malaysia's Personal Data Protection Act 2010 (PDPA). This means we determine the purposes and means of processing your personal data, and we are responsible for ensuring that such processing is lawful, transparent and secure. We never collect personal data beyond what is required for the legitimate purposes clearly stated in this Privacy Policy.

GT128 collects several categories of personal data necessary to provide our services to you safely and efficiently. The following are the types of data we collect:

• Identity Data: Full name, identity card number (MyKad), date of birth and gender. This data is required for identity verification and KYC (Know Your Customer) compliance.
• Contact Data: An active Malaysian mobile number and email address. This information is used for account-related communications, winning notifications and customer support.
• Financial Data: Payment method details, including Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow or FPX (Maybank2u, CIMB Clicks) account information. GT128 does not store credit card numbers directly — all processing is handled by authorised payment providers.
• Transaction Data: A record of all deposits, withdrawals and financial transactions in your account, including dates, times, amounts and payment methods.
• Gaming Data: Your gaming activity record at GT128, including games played, total bets, wins, losses and time spent playing.
• Technical Data: IP address, device type, web browser used, operating system, and login session information. This data is collected automatically for security and platform improvement purposes.
• Usage Data: Information about how you interact with the GT128 platform — pages visited, features used and navigation patterns that help us improve the user experience.

GT128 collects your personal data through several distinct channels, each with a specific and legitimate purpose:

• Registration Form: When you register a new account at GT128, you actively provide the identity and contact information required to open and manage your account.
• KYC Process: During identity verification for your first withdrawal or large withdrawal amounts, you will be asked to submit a copy of your MyKad and proof of your payment method.
• Financial Transactions: Each time you make a deposit via Touch 'n Go, DuitNow, GrabPay or FPX, transaction data is automatically collected by GT128's systems and the relevant payment provider.
• Gaming Activity: Gaming data is collected automatically by GT128's server systems each time you play slots, Live Casino, Lucky Powerball or any other game on the platform.
• Cookie Technology: GT128 uses cookies and similar tracking technologies to collect technical and usage data that helps improve platform performance and user experience.
• Support Communications: When you contact the GT128 support team via live chat or email, the data you provide during that session is also collected for record-keeping and service improvement purposes.

GT128 uses the personal data collected for the following legitimate and clearly stated purposes. We do not use your data for any purpose not listed here without obtaining your fresh consent:

• Account Management: To open, manage and maintain your GT128 account, including identity verification, password resets and profile updates.
• Payment Processing: To process your deposits and withdrawals via your chosen local Malaysian payment method, safely and efficiently.
• Gaming Services Provision: To give you access to all games on GT128, including slots, Live Casino, Lucky Powerball, EPL and Malaysia Super League football betting, and e-sports.
• Legal Compliance: To fulfil GT128's legal obligations, including KYC requirements, anti-money laundering (AML) compliance, and reporting to the relevant authorities in Malaysia when required.
• Platform Security: To detect and prevent fraud, account misuse, hacking attempts and any activity that violates GT128's Terms & Conditions.
• Customer Support: To process and respond to enquiries, complaints and support requests you submit to the GT128 support team.
• Account-Related Communications: To send you important account-related notifications such as deposit confirmations, winning notifications, security alerts and material updates to our terms.
• Platform Improvements: To analyse usage patterns and user behaviour in aggregate (without identifying individuals) for the purpose of improving the user experience and GT128 platform features.
• Marketing Communications: To send you promotional information, bonus offers and GT128 news — subject to your marketing consent, which may be withdrawn at any time.

GT128 does not sell, rent or disclose your personal data to third parties for marketing or commercial purposes without your explicit consent. However, there are specific situations where data sharing is necessary and legally permitted:

• Payment Providers: Required financial data is shared with your chosen payment provider — such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and bank processors via FPX — solely for the purpose of processing your deposit and withdrawal transactions. All such providers are bound by strict confidentiality agreements with GT128.
• Game Software Providers: Third-party game providers that supply slots, live casino and other games on the GT128 platform may receive the minimum technical data required to run those games. These providers are selected based on strict security and privacy standards.
• Malaysian Authorities: GT128 will disclose your personal data to Malaysian government or law enforcement authorities when required by law, a valid court order or applicable law enforcement obligations.
• Auditors & Legal Consultants: Professionals engaged by GT128 for audit, legal compliance or internal investigation purposes may access the necessary data, subject to binding professional confidentiality agreements.

GT128 continuously invests in best-in-class security infrastructure to ensure your personal data is protected at all times. The following are the key security measures we implement:

• 256-bit SSL Encryption: All communications between your device and GT128's servers are protected by industry-standard 256-bit SSL/TLS encryption — the same standard used by Malaysia's leading banks. This ensures that data in transit cannot be intercepted or read by unauthorised parties.
• Database Protection: Members' personal and financial data is stored in databases protected by multi-layered access controls, encryption of data at rest, and strict network segregation from public-facing systems.
• Two-Factor Authentication (2FA): GT128 supports two-factor authentication for account login, adding an extra layer of protection to ensure that only you can access your account, even if your password is compromised.
• 24/7 Security Monitoring: GT128's automated monitoring system operates around the clock to detect suspicious activity, unauthorised login attempts or anomalies in account usage patterns, and to take preventive action immediately.
• Regular Security Audits: GT128 undergoes independent security audits conducted by qualified third parties on a regular basis to identify and address any system vulnerabilities before they can be exploited.
• Staff Training: All GT128 staff with access to user data undergo rigorous data protection training and are bound by legally enforceable confidentiality agreements.

GT128 retains your personal data only for as long as it is needed for the purposes set out in this Privacy Policy, or as required by applicable Malaysian law.

• Active Account Data: For as long as your account remains active at GT128, we retain all relevant personal data to ensure smooth and secure account operation.
• After Account Closure: After your account is closed, GT128 retains your personal data for a minimum period of 7 years to meet legal requirements relating to financial compliance, fraud prevention and potential legal claims. This is a legal obligation under Malaysian law, not a matter of choice.
• Financial Transaction Data: Records of all financial transactions, including deposits and withdrawals via Touch 'n Go, DuitNow, GrabPay and others, are retained for 7 years in accordance with Malaysia's financial and tax legal requirements.
• Security Log Data: Security logs and system access records are retained for a shorter period — typically 1 to 2 years — unless there is a requirement to retain them longer for specific investigation purposes.
• Data Deletion: Once the required retention period has elapsed, GT128 will securely delete or anonymise your personal data using procedures that ensure the data cannot be recovered or re-identified.

Platform GT128 uses cookies and similar tracking technologies to enhance your experience and ensure the platform functions correctly. Cookies are small text files stored on your device when you visit our website.

• Essential Cookies: These cookies are essential for the GT128 platform to function properly. They store your login session information and basic preferences, allowing you to use platform features without having to log in repeatedly. These cookies cannot be disabled.
• Performance Cookies: These cookies gather information about how users interact with the GT128 platform — which pages are visited most frequently, time spent and any technical errors encountered. This data is used in aggregated form to improve platform performance.
• Functional Cookies: These cookies store your preferences such as language, display theme and other settings that personalise your experience on the GT128 platform.
• Managing Cookies: You can manage or delete cookies at any time through your web browser settings. Please note that disabling certain cookies may affect the functionality of some features on the GT128 platform.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have specific rights regarding your personal data held by GT128. We fully respect these rights and provide straightforward channels for you to exercise them:

• Right of Access: You have the right to request a copy of the personal data we hold about you. GT128 will process such requests within 14 business days.
• Right to Rectification: If the personal data we hold about you is inaccurate, outdated or incomplete, you have the right to request a correction. You may update basic information directly through your GT128 account portal, or contact support for more complex amendments.
• Right to Deletion: Under certain circumstances permitted by law, you may request the deletion of your personal data. Please note that such requests may not be fulfilled in full if GT128 has a legal obligation to retain the data in question.
• Right to Object to Marketing: You have the right to opt out of receiving marketing communications from GT128 at any time by clicking the "unsubscribe" link in any marketing email or by contacting us directly.
• Right to Withdraw Consent: Where processing of your data is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing that took place prior to the withdrawal.
• Right to Lodge a Complaint: If you believe that GT128 has processed your personal data incorrectly or in violation of the PDPA, you have the right to lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia.

To exercise any of the rights above, please contact us at [email protected] clearly stating the type of request you are making.

GT128 is a platform exclusively for individuals aged 18 and above. We do not knowingly collect or process personal data of anyone under the age of 18.

• All account registrations require confirmation that the user is aged 18 or above, and our KYC process verifies this through identity document checks.
• Should GT128 discover that we have unknowingly collected data from individuals under the age of 18, we will take immediate steps to delete that data and close the account in question.
• If you become aware that a minor is using the GT128 platform or has provided us with their personal data, please contact us immediately at [email protected] so that we can take the appropriate action.

GT128 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements or platform improvements.

• Amendment Notice: Members will be notified of any material amendments to this Privacy Policy via their registered email or an in-platform GT128 notification at least 7 days before the changes take effect. Non-material amendments or clarifications may be updated without specific notice.
• Periodic Review: We encourage you to review this Privacy Policy periodically to stay informed about how we manage your data. The date of the most recent update is always displayed at the top of this document.
• Continued Use: Your continued use of the GT128 platform after any amendments to the Privacy Policy take effect will be considered acceptance of the latest version of that Privacy Policy.

If you have any questions, concerns or requests regarding this Privacy Policy or the way GT128 handles your personal data, please do not hesitate to reach us through the following channels:

• Privacy Email: [email protected] — please include "Privacy Enquiry" in your email subject line to ensure it is handled by the right team.
• Live Chat: Use the live chat feature within the GT128 platform, available 24 hours a day, 7 days a week. Our team will ensure your privacy query is handled appropriately.
• Response Time: GT128 is committed to responding to all privacy-related enquiries within 3 business days, and to processing data rights requests within 14 business days.