Data Protected Updated 2026

Privacy Policy GMP99 — Our Commitment to Protecting Your Personal Data

Your privacy is GMP99's top priority. This document transparently explains how we collect, use, store, and protect the personal information of every member on our platform in Malaysia.

Effective Date: 1 January 2026
GMP99's Six Pillars of Data Protection

GMP99's privacy policy is built on six solid principles that ensure your personal data remains under proper and secure control at all times.

End-to-End Data Encryption

All personal data transmitted between your device and GMP99's servers is protected by 256-bit SSL encryption. No third party can intercept or read your information while in transit.

Data Minimisation Principle

GMP99 only collects data that is genuinely necessary for the platform's operations. We do not collect excessive information and will not request sensitive data that is irrelevant to our services.

No Data Selling

GMP99 has never sold and will never sell members' personal data to third parties for marketing or commercial purposes. Your data belongs to you — it is not a business asset of ours.

Malaysia PDPA Compliance

GMP99's privacy policy fully complies with Malaysia's Personal Data Protection Act (PDPA) 2010. We are committed to ensuring that every aspect of our data handling practices meets local legal requirements.

Full Member Control

You have the right to access, correct, or request deletion of your personal data at any time. GMP99 provides a straightforward and responsive channel for all personal data-related requests.

Secure & Regular Storage

Member data is stored on servers protected by strict access controls, intrusion detection systems, and regular backups. Data that is no longer needed is disposed of in a safe and responsible manner.

Subject Summary
Data Controller GMP99 (gmp99.vin)
Applicable Laws Malaysia PDPA 2010
Sale of Data to Third Parties Never done
Encryption 256-bit SSL for all connections
Minimum Age 21 years old
Contact the Privacy Officer [email protected]
1

Introduction & Scope of This Policy

This Privacy Policy explains how GMP99 ("we", "Platform") manages personal information collected from you when using the platform at gmp99.vin, the GMP99 mobile app, and all related services. We take member privacy seriously and are committed to protecting your personal data in accordance with Malaysia's Personal Data Protection Act (PDPA) 2010.

By registering or continuing to use the GMP99 platform, you agree to the data collection and usage practices described in this document. If you disagree with any part of this policy, please discontinue use of our services and contact us to request deletion of your data if applicable.

This Privacy Policy applies solely to the GMP99 platform. Any external links, where present, are subject to their own separate privacy policies.

2

Types of Personal Data We Collect

GMP99 collects your personal data through several methods — directly from you during registration, automatically during platform use, and in some cases through legitimate third parties such as payment providers. Below are the categories of data we collect:

Identity and Contact Data

  • Full name as shown on your official identification document.
  • IC or passport number (for KYC purposes).
  • Date of birth to verify age eligibility.
  • Active email address for account communications.
  • Mobile phone number for two-factor authentication and notifications.
  • Residential address for legal compliance purposes.

Financial Data

  • Bank account details for deposit and withdrawal purposes (bank name, account number).
  • Deposit and withdrawal transaction records.
  • E-wallet details such as Touch 'n Go or GrabPay linked to your account.

Technical and Usage Data

  • IP address and general geolocation data.
  • Device type, operating system, and web browser version.
  • Login and logout activity logs.
  • Game records and betting history for support and audit purposes.
  • Cookie data and session identifiers for an improved user experience.

GMP99 does not store credit or debit card information directly. All card payments are processed by third-party payment providers that comply with PCI DSS standards.

3

How We Use Your Data

GMP99 uses your personal data only for lawful purposes that we have clearly stated. We will not use your data for any other purpose without first obtaining your consent.

  • Account Management: Create and maintain your account, including identity verification through the required KYC process.
  • Transaction Processing: Process fund deposits and withdrawals securely and accurately via your chosen payment method.
  • Service Provision: Provide access to games, promotions, and all features of the GMP99 platform.
  • Communications: Send account-related notifications, transaction confirmations, and important service updates.
  • Security & Fraud Prevention: Detect and investigate suspicious activity to protect you and the platform.
  • Legal Compliance: Fulfil our obligations under PDPA and other applicable laws.
  • Platform Improvements: Analyse usage patterns in aggregate (not individually) to improve the user experience.
  • Responsible Gaming: Monitoring gameplay patterns to identify members who may need responsible gaming support.
4

Data Sharing with Third Parties

GMP99 does not sell, rent, or disclose your personal data to third parties for marketing purposes without your consent. However, in the course of operating the platform, we may share limited data with the following parties:

  • Payment Providers: Financial data required to process transactions is passed to licensed payment providers that comply with PCI DSS.
  • KYC Service Providers: Identity data is shared with approved third-party identity verification providers for compliance purposes.
  • Game Providers: Minimum information required to run a game session may be shared with third-party game providers integrated with our platform.
  • Authorities: GMP99 will disclose personal data to the relevant authorities if required to do so by law, court order, or a valid official investigation.

All third parties working with us are bound by confidentiality agreements and are only permitted to use your data for the specific agreed purposes. We are not responsible for the privacy practices of third parties that are outside our control.

5

Data Security Measures

GMP99 invests seriously in security infrastructure to protect your personal data from unauthorized access, loss, or misuse. Our security measures include:

  • 256-bit SSL encryption for all data transmitted between your browser and our servers.
  • Passwords stored using one-way hashing algorithms that cannot be decrypted.
  • Multi-layer access control for servers storing member data.
  • Regular security vulnerability scans by our internal security team and external audits.
  • An intrusion detection system that monitors suspicious activity in real time.
  • Regularly encrypted data backups stored at separate locations.

While we take all reasonable steps to protect your data, no security system can guarantee one hundred percent protection. We encourage you to use a strong password, enable two-factor authentication, and contact us immediately if you suspect any suspicious activity on your account.

6

Cookies & Tracking Technologies

GMP99 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use

  • Essential Cookies: Required for core platform functions such as login session management. Cannot be disabled.
  • Performance Cookies: Helps us understand how users interact with the platform for improvement purposes. Data is collected in aggregate and anonymised form.
  • Functional Cookies: Save your preferences such as language and display settings for your convenience.

You can manage your cookie settings through your web browser settings. Disabling certain cookies may affect the functionality of parts of our platform. Essential cookies cannot be disabled as they are required for the platform's basic operations.

7

Your Rights Regarding Personal Data

Under Malaysia's PDPA 2010 and GMP99's privacy policy, you have the following rights regarding the personal data we hold about you:

Right to Access

Request a copy of the personal data we hold about you.

Right to Rectification

Correct inaccurate or incomplete personal data.

Right to Erasure

Request deletion of your personal data subject to legal requirements.

Right to Object

Object to the processing of your data for specific purposes such as marketing.

Right to Portability

Receive your data in a machine-readable format for portability.

Right to Restriction

Request restriction of data processing in certain legally permitted situations.

To exercise any of the above rights, contact the gmp99 Privacy Officer by email at [email protected] or via our customer support live chat. We will process your request within 30 business days from the date of receipt.

8

Data Retention Period

GMP99 retains your personal data only for as long as necessary for the purposes stated in this policy or as required by applicable law. Below are the general retention period guidelines we follow:

  • Active account data: Retained for the lifetime of your GMP99 membership.
  • KYC data and identity documents: Retained for a minimum of 5 years after account closure for anti-money laundering compliance purposes.
  • Financial transaction records: Retained for 7 years in accordance with Malaysian legal requirements.
  • Technical and activity logs: Retained for 90 days before being automatically deleted.
  • Support communication data: Retained for 2 years for reference and service quality purposes.

Once the retention period expires, your personal data will be securely disposed of using methods that ensure the data cannot be recovered.

9

Child Protection

The GMP99 platform is not intended for individuals under the age of 21. We do not knowingly collect personal data from underage children or minors. Should we discover that we have collected data from an underage individual, we will take immediate action to delete that data and close the account in question.

If you become aware that someone under the age of 21 has registered an account at GMP99, please contact us immediately at [email protected] so we can take the appropriate action.

10

Privacy Policy Amendments

GMP99 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the way we handle personal data. The "Updated" date at the top of this page will always reflect the latest version of the policy.

For significant amendments, we will notify members via in-platform notifications or their registered email. Continued use of the gmp99 platform after amendments take effect will be considered acceptance of the updated policy. We encourage you to review this page periodically.

11

Contact Our Privacy Officer

If you have any questions, concerns, or wish to exercise your privacy rights, our team is ready to assist. GMP99 has a dedicated Data Protection Officer appointed to handle all member privacy matters.

  • Privacy Officer Email: [email protected] (please copy and paste into your email client)
  • Live Chat: Available 24/7 via the chat icon on the gmp99 platform
  • FAQ: Visit our FAQ page for answers to frequently asked privacy-related questions

We are committed to responding to all privacy-related inquiries within 14 business days. For more complex cases involving data deletion or transfer, the processing period is up to 30 business days.

If you are not satisfied with how GMP99 has handled your privacy complaint, you have the right to refer the matter to the Personal Data Protection Commissioner of Malaysia.

Your Data Is Safe with GMP99

Join over 500,000 members who have trusted GMP99 to keep their data safe and their gaming experience secure in Malaysia.

Bahasa Melayu