Privacy Policy Gemilang77

Gemilang77 collects your personal information through several methods — directly when you register or complete your profile, automatically as you use the platform, and occasionally through authorised third parties such as payment providers.

Information you provide directly:

• Full name as it appears on your official identification document
• Date of birth and gender
• Email address and mobile phone number
• Current residential address
• Bank account details for withdrawal purposes
• KYC documents including a copy of your identity card or passport

Information collected automatically:

• IP address and device information used
• Web browser type and operating system
• In-platform history of game activity and transactions
• Login session time and duration
• Cookie data and similar tracking technologies

Collected data is used for lawful and transparent purposes. Below is a summary table for your easy reference:

We do not use your data for automated decision-making that significantly affects your rights or interests without human involvement.

Gemilang77 does not sell, rent, or disclose your personal data to third parties for marketing purposes. However, there are specific situations where data sharing is necessary and permitted:

• Payment providers: DuitNow, FPX, Touch 'n Go, GrabPay, and Boost receive the transaction information necessary to process your deposits and withdrawals. They are subject to their respective privacy policies.
• Game providers: Limited account information is shared with third-party game providers solely for the technical purpose of game delivery.
• Legal authorities: Gemilang77 will disclose information when required by law, court order, or a valid request from an authorised enforcement agency.
• Audit and security services: Third parties contracted for security or compliance audits may access required data under strict confidentiality agreements.

Gemilang77 implements multiple layers of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction.

Technical measures we implement:

• 256-bit SSL/TLS encryption for all data transmission between your browser and our servers
• Encryption of sensitive data in the database, including passwords hashed using the bcrypt algorithm
• Two-factor authentication (2FA) for account access
• Real-time monitoring of suspicious activity with an automated intrusion detection system
• Regular penetration testing by independent security experts
• Encrypted data backups stored at separate locations

Organisational measures we practise:

• Role-based access control — staff can only access data required for their specific duties
• Regular data security awareness training for all staff
• A clear incident response procedure in the event of a data breach

Gemilang77 uses cookies and similar tracking technologies to enhance the user experience, analyse usage patterns, and ensure platform security. Cookies are small text files stored on your device when you visit our platform.

Types of cookies we use:

• Essential cookies: Required for core platform functions such as login sessions and security. Cannot be disabled.
• Performance cookies: Helps us understand how users interact with the platform so we can improve it. Data is collected in aggregate and anonymised form.
• Functional cookies: Storing your preferences such as language and display settings to enhance your browsing experience.

You can manage cookie settings through your web browser. However, disabling certain cookies may affect the functionality of some parts of the gemilang77 platform.

Gemilang77 retains your personal data only for as long as necessary for the stated purposes or as required under Malaysian law. Below is a general guide to retention periods:

• Active account data: Retained for the duration your account is active and for a reasonable period after account closure.
• Financial transaction records: Retained for a minimum of seven years in line with Malaysia's tax and financial legal requirements.
• KYC Documents: Retained for a minimum of five years from the date of verification or account closure.
• Support communication logs: Retained for three years for reference and dispute resolution purposes.
• Usage data and system logs: Retained for 12 months for security and platform improvement purposes.

When data is no longer needed, it is securely deleted or anonymised in accordance with industry-standard procedures.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and our own policy, you have the following rights regarding your personal data at gemilang77:

Gemilang77 is a platform restricted to users aged 18 and above. We do not knowingly collect or process personal data of individuals under the age of 18.

If we discover or are notified that we have collected data from someone under the age of 18, the account in question will be closed immediately and all associated data will be deleted without delay.

Parents or guardians who discover their child has registered on this platform are requested to contact our support team immediately so that appropriate action can be taken.

Gemilang77 reserves the right to update or amend this privacy policy from time to time to reflect changes in our practices, legal requirements, or new platform features.

When significant changes are made, we will:

• Updating the "Last Updated" date at the top of this document
• Sending a notification email to all registered users
• Displaying a clear notice on the platform at least 14 days before changes take effect

Continued use of the gemilang77 platform after a privacy policy change takes effect constitutes acceptance of that change. If you do not agree, please close your account before the effective date.

If you have any questions, concerns, or requests regarding this privacy policy or how we handle your personal data, please contact our team through the following channels:

• Live Chat: Available 24/7 directly within the gemilang77 platform — the fastest way to get a response
• Email: [email protected]

We are committed to responding to all privacy-related inquiries within 3 business days. For formal requests concerning personal data rights, the processing period is up to 14 business days.