gem55 Official Documents

Gem55 Privacy Policy – Complete Personal Data Protection for Malaysia Members

This document transparently explains how gem55 collect, store, use, and protect your personal data. We respect the privacy of every member and are committed to ensuring your information is handled responsibly, securely, and in compliance with applicable data protection laws in Malaysia.

Last updated: 1 January 2026 Bahasa Melayu (ms-MY)
🔒

Privacy Policy

Your personal data is fully protected at gem55, backed by the highest security standards in the industry.

256-bit SSL Encrypted Data No Data Sales

Gem55's Privacy Commitment to Malaysia Members

Six core principles that form the foundation of how gem55 manages every member's personal data.

Continuous Data Encryption

All personal and financial data you submit to gem55 is protected by 256-bit SSL encryption — the same standard used by Malaysia's leading banking institutions. No information travels between your device and our servers without this protection in place.

No Sale of Data to Third Parties

Gem55 has never sold, rented or disclosed your personal information to any third party for marketing or commercial purposes, and never will — not without your explicit consent. Your data belongs to you, not to us as a commodity to trade.

Data Minimisation

Gem55 only collects data that is genuinely necessary for providing our services, processing transactions, and meeting legal requirements. We do not collect irrelevant or excessive information simply because it is available to collect.

Your Data, Your Control

You have every right to access, correct, transfer, or request the deletion of your personal data held by gem55. The process for exercising these rights is straightforward and can be initiated by contacting our support team.

Appropriate Data Retention Periods

Gem55 retains your personal data only for as long as necessary for the purpose it was collected, or as required under applicable Malaysian law. Once that period expires, the data is disposed of securely and irreversibly.

Immediate Data Breach Notification

In the event of any security incident affecting members' personal data, gem55 is committed to notifying affected members within a reasonable timeframe and taking immediate remedial action to mitigate any potential impact.

Important Note

By using the platform gem55, you acknowledge that you have read and understood this Privacy Policy. Please review this document periodically as it may be updated from time to time. The latest version will always be available on this page with a clear update date.

1Introduction & Scope of Privacy Policy

This Privacy Policy describes the privacy practices of gem55 regarding the collection, use, disclosure, and protection of personal information provided by members and users of our platform. This document applies to all services offered by gem55, including the website, Android and iOS mobile applications, and all our official communication channels.

Gem55 takes our responsibilities under Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection standards seriously. We only collect and process your personal data on a valid legal basis — whether that is your consent, contractual necessity, legitimate interest, or a legal obligation.

The term "personal data" in this document refers to any information that can be used to identify you, directly or indirectly, including your name, phone number, email address, financial information and platform usage data.

2Types of Personal Data We Collect

Gem55 collects your personal data through several channels — directly when you interact with the platform, automatically when you use our services, and in certain cases through authorised third-party sources. The types of data we collect are as follows:

Data Category Examples of Information How It Is Collected
Identity Information Full name, MyKad/passport number, date of birth, gender Registration forms, identity verification
Contact Information Malaysian phone number, email address, residential address Registration form, account profile
Financial Data Payment method details (Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, FPX), transaction records Deposit and withdrawal process
Usage Data Game history, bet types, session duration, game options Automatically during platform use
Technical Data IP address, device type, operating system, browser type, cookie data Automatically via servers and cookies
Communication Data Customer support conversation records, emails, feedback Interactions with the gem55 support team

Gem55 does not collect sensitive data categories such as medical information, political views, religious beliefs, or sexual orientation, except where required by law.

3How Your Personal Data Is Used

Gem55 uses the personal data collected for lawful purposes, limited to the following:

  • Account management — registering accounts, verifying identity, managing profiles and providing access to the platform.
  • Transaction processing — processing deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, Maybank2u, and CIMB Clicks, as well as managing winnings withdrawals.
  • Gaming service provision — allowing you to play slots, Live Casino, virtual sports, poker, e-sports, and all other games available on the gem55 platform.
  • Customer support — responding to enquiries, resolving technical issues, and providing members with the assistance they need.
  • Security and fraud prevention — detecting and preventing fraudulent activity, money laundering, account misuse, and other unlawful conduct.
  • Legal compliance — meeting legal, regulatory, and authority requirements, including KYC (Know Your Customer) and AML (Anti-Money Laundering) obligations.
  • Marketing communications — sending you information about promotions, bonuses and platform updates (with your consent, and you may unsubscribe at any time).
  • Platform improvements — analyzing usage patterns to improve the user experience, test new features, and develop better products.
  • Responsible Gaming — monitoring gameplay patterns to identify signs of problem gambling and providing appropriate support.

gem55 will not use your personal data for any purpose other than those stated above without first obtaining your additional consent.

4Data Sharing with Third Parties

Gem55 does not sell or rent your personal data to any party. However, in the course of operating the platform, we may share your personal data with a limited set of third-party categories as follows:

  • Payment service providers — eWallet providers (Touch 'n Go, GrabPay, Boost, ShopeePay), DuitNow, and banks that process FPX transactions (Maybank, CIMB) require the necessary transaction information to process your deposits and withdrawals.
  • Game providers — companies such as Evolution Gaming, Pragmatic Play, and Microgaming that supply games to the gem55 platform may receive the game session information required to operate their games.
  • Technical service providers — companies that provide the cloud infrastructure, cybersecurity, analytics, and technical support required to operate the gem55 platform.
  • Legal authorities — law enforcement agencies, courts, or regulatory bodies where required by law or a valid court order.

All third parties that receive data from gem55 are bound by strict data protection agreements and are only permitted to use that data for the purposes specified in those agreements. gem55 is responsible for ensuring these third parties uphold data protection standards consistent with our own policy.

Key Things to Know

Gem55 does not share your personal data with advertisers, data brokers, third-party marketing companies, or any entity that does not have a direct service relationship with the gem55 platform's operations.

5gem55 Data Security Measures

Gem55 implements multiple layers of technical and organisational security to protect your personal data against unauthorised access, loss, alteration, or inadvertent disclosure:

  • 256-bit SSL Encryption for all data in transit between your device and gem55's servers.
  • Encryption of data at rest — sensitive data stored on our servers is encrypted using industry-grade encryption algorithms.
  • Role-based access control — only gem55 staff who require access to specific data to carry out their duties are permitted to do so.
  • 24/7 security monitoring — an automated monitoring system that continuously detects unusual activity or suspicious access attempts.
  • Regular penetration testing — security audits and penetration testing are conducted regularly by independent security experts to identify and address potential vulnerabilities.
  • Staff training — all gem55 staff who handle personal data undergo regular data protection training.

However, no security system is 100% foolproof. gem55 is committed to taking immediate action should any security incident occur that affects our members' data.

6Cookies, Tracking Technologies & Analytics

The gem55 platform uses cookies and similar tracking technologies to enhance the user experience and analyse usage patterns. The types of cookies we use are:

  • Essential cookies (required) — required for the platform to function properly, including maintaining your login session and enabling basic navigation. Cannot be disabled without affecting platform functionality.
  • Performance cookies — collects anonymised information about how users interact with the platform to help us improve the user experience. No personally identifiable data is collected through these cookies.
  • Functional cookies — remembering your preferences such as language, region and display settings to deliver a more personalised experience.
  • Analytics cookies — helping us understand how members use the gem55 platform, which pages are visited most often and where users encounter difficulties.

You can manage cookie settings through your web browser or mobile app. Please note that disabling certain cookies may affect the functionality of some parts of the gem55 platform. More information on managing cookies is available in your browser settings.

7Your Personal Data Rights

As a gem55 member residing in Malaysia, you have the following rights regarding the personal data we hold about you:

Access Rights

Request a copy of the personal data we hold about you at any time.

Right to Rectification

Request the correction of any inaccurate or incomplete data we hold about you.

Right to Erasure

Request the deletion of your personal data, subject to our legal obligations.

Right to Object

Object to the processing of your data for specific purposes such as direct marketing.

Right to Portability

Receive your data in a structured, machine-readable format for portability.

Right to Restriction

Request a restriction on the processing of your data in certain circumstances provided for by law.

To exercise any of the rights above, please contact gem55's data protection team by email at support@gem55.best or via live chat. gem55 will process your request within 30 business days. In certain cases requiring additional identity verification or involving complex data, this period may be extended with appropriate notice provided to you.

8Data Retention & International Data Transfers

Gem55 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or for as long as required under applicable Malaysian law:

  • Active account data — retained for the duration your account remains active on the gem55 platform, plus any additional period required after account closure to fulfil audit and legal obligations.
  • Financial transaction records — retained for a minimum of 7 years after a transaction occurs, in accordance with Malaysian financial legislation.
  • Support communication records — retained for 3 years for reference and service improvement purposes.
  • Technical log data — retained for a maximum of 12 months before being automatically deleted.

In the course of its operations, your data may be processed by servers located outside Malaysia. Any such international data transfer is carried out with adequate contractual safeguards to ensure your data continues to be protected in accordance with the standards of this Privacy Policy.

When data is no longer needed, gem55 disposes of it securely — digital data is permanently deleted using procedures that ensure it cannot be recovered by any party.

9Protection of Minors & Vulnerable Individuals

Gem55 services are intended for individuals aged 21 and above only. gem55 does not knowingly collect personal data from minors. Should we discover that personal data belonging to a minor has been collected without our knowledge, we will take immediate steps to delete that data and close the relevant account.

Parents or guardians who discover that their minor child has registered or attempted to register on the gem55 platform are strongly encouraged to contact us immediately at support@gem55.best. gem55 will address the matter promptly and responsibly.

10Amendments to This Privacy Policy

Gem55 reserves the right to amend this Privacy Policy from time to time to reflect changes in our privacy practices, applicable data protection laws, or the way we operate our services.

For significant amendments, gem55 will notify members through:

  • A notification email will be sent to the email address registered to your account.
  • In-platform notification when you log in after an amendment takes effect.
  • A clear update notice at the top of this Privacy Policy page.

Your continued use of the gem55 platform after the amended Privacy Policy takes effect will be considered your acceptance of the revised terms. You are encouraged to review this page periodically to stay informed of gem55's latest privacy practices.

11Contact Us – gem55 Data Protection Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how gem55 handles your personal data, please contact us through the following channels:

Contact the gem55 Privacy Team
Data Protection Email
support@gem55.best
Live Chat
Available 24 hours a day, 7 days a week within the gem55 platform
Response Time
Privacy enquiries answered within 5 business days; data rights requests within 30 days
Support Language
Bahasa Melayu and English

Gem55 Security Layers for Your Data

Personal data protection at gem55 is not just a policy — it is an active, multi-layered system that operates around the clock.

Layer 1 – Transmission Encryption

All data transmitted between your device and gem55's servers is encrypted using TLS 1.3 with AES-256 encryption. This means that even if someone were to intercept the data in transit, they would be unable to read its contents.

Layer 2 – Database Encryption

Sensitive data stored in gem55's databases — including identity and financial information — is encrypted at rest. Even if the database were accessed without authorisation, the stored data cannot be read without the correct encryption key.

Layer 3 – Internal Access Controls

Access to members' personal data within gem55 is governed by a strict need-to-know principle. Only staff who require access to specific data to carry out their duties are permitted — and every instance of access is logged for audit purposes.

Layer 4 – Real-Time Threat Monitoring

Gem55's SIEM (Security Information and Event Management) system monitors all activity across our infrastructure in real time. Any suspicious patterns — including unauthorized access attempts or data exfiltration — are automatically detected and blocked.

Layer 5 – Regular Security Testing

Gem55 conducts regular penetration testing and comprehensive security audits with the assistance of accredited independent cybersecurity firms. Any vulnerabilities identified are addressed on a priority basis according to risk level.

Layer 6 – Data Backup & Recovery

Gem55 member data is automatically and regularly backed up to secure, geographically separate locations to ensure service continuity even in disaster scenarios. Data recovery procedures are tested periodically to verify their effectiveness.

Your Privacy Is gem55's Priority — Not Just a Document

In today's digital world, privacy is often taken for granted — until something goes wrong. At gem55, we take a fundamentally different approach. Protecting our members' personal data is not merely a checkbox on a compliance list. It is a core value that shapes every design decision, every technology choice, and every operational procedure we put in place.

When you register at gem55, you are entrusting us with fairly sensitive information — your name, phone number, eWallet account details, and financial transaction records. We take that trust seriously. Whenever gem55's technology team develops a new feature or the operations team updates an internal procedure, the first question asked is: how does this affect the privacy and security of our members' data?

Malaysia has the Personal Data Protection Act 2010 (PDPA), which sets the minimum standards for data protection within the country. gem55 fully compliant with the PDPA — and in many respects goes beyond its minimum requirements. We believe legal compliance is a starting point, not a destination. Global data protection standards continue to evolve, and gem55 is committed to remaining at the forefront of industry best practices.

One concern that frequently troubles online casino players in Malaysia is the security of their financial information. When you make a deposit via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay or FPX banking via Maybank2u and CIMB Clicks, those transactions are conducted through fully encrypted channels. gem55 does not store your complete eWallet or banking account details — we only retain the information necessary to process payments and meet compliance requirements.

Your gaming records — the types of games you play, amounts wagered, and session durations — are collected and used by gem55 for several purposes, all of which benefit you as a member. First, they allow us to identify gaming patterns that may indicate signs of problem gambling and provide appropriate support as part of our responsible gaming programme. Second, they help us improve the overall gaming experience by understanding which games resonate most with the gem55 Malaysia community. Third, they are required to accurately manage your bonuses and promotions.

Regarding the use of cookies and tracking technologies — gem55 uses cookies primarily to ensure the platform functions correctly and to understand how members interact with our interface. We do not use aggressive third-party cookies to build a personal profile of you or track your activity outside the gem55 platform. Every cookie we use has a clearly defined purpose and expiry period.

In matters of law enforcement, gem55 will cooperate fully with the relevant Malaysian authorities upon receiving requests that are lawful under Malaysian law. This includes the relevant KYC (Know Your Customer) and AML (Anti-Money Laundering) authorities. However, we do not disclose member data to any government body without a valid court order or proper warrant, except in emergency situations where human life and safety are at risk.

Your right to access, correct, or delete your personal data is a genuine right at gem55 — not just empty promises buried in a policy document. The process for exercising these rights is straightforward, and our Malay-speaking data protection team is ready to guide you every step of the way. Reach us by email at support@gem55.best or via our 24-hour live chat to begin any privacy rights request.

In summary, privacy at gem55 is a genuine commitment, not just text in a document. We invest in best-in-class security technology, we train our staff on data protection, we conduct regular audits of our privacy practices, and we give you meaningful control over your own personal data. This is part of our promise to every gem55 member across Malaysia — to deliver a digital entertainment experience that is not only enjoyable, but safe and responsible in every respect.

FAQs – gem55 Privacy Policy

No. gem55 does not sell, rent, or share your personal data with any advertisers, data brokers, or third-party marketing companies. Your data is only shared with parties that have a direct service relationship with gem55's operations — such as payment providers who process your transactions and game providers who supply games on our platform. All such data sharing is conducted under strict data protection agreements.

To request a copy of your personal data (a data subject access request), please send an email to support@gem55.best with the subject line "Personal Data Access Request". Please include your full name and registered phone number for identity verification. gem55 will process your request within 30 business days and deliver the data in a structured, readable format. No charges apply for the first request made within any 12-month period.

When you close your gem55 account, your active personal data will be deactivated and will no longer be used for operational or marketing purposes. However, certain records — particularly financial transaction records — may need to be retained for a period stipulated under Malaysian law (typically 7 years) for compliance and audit purposes. Once the mandatory retention period ends, the data is permanently deleted using secure disposal procedures.

Yes. You can opt out of marketing communications from gem55 at any time by clicking the "Unsubscribe" link found at the bottom of any promotional email, or by contacting the gem55 support team via live chat or email to update your communication preferences. Please note that opting out of promotional emails does not stop important transactional emails such as deposit confirmations, withdrawal notifications, and account security alerts.

In the event of a security incident that confirms or indicates a likely compromise of members' personal data, gem55 will take the following steps: (1) contain the incident as quickly as possible to prevent further data exposure; (2) assess the scope and severity of the incident; (3) notify affected members via email and/or in-platform notification within a reasonable timeframe, with details on what occurred, what data may have been affected, and steps you can take to protect yourself; (4) report to the relevant authorities in accordance with our legal obligations. We encourage all members to enable two-factor authentication as an additional layer of protection.

Yes. gem55 fully complies with Malaysia's Personal Data Protection Act 2010 (PDPA), the primary legislation governing the processing of personal data in the context of commercial transactions in Malaysia. Our compliance covers all seven PDPA principles — the General Principle, Notice and Choice Principle, Disclosure Principle, Security Principle, Retention Principle, Data Integrity Principle, and Access Principle. We regularly review our privacy practices to ensure ongoing compliance with the PDPA and any amendments or new regulations that come into force.
Responsible Gaming & Related Policies at gem55

Privacy and data security are part of gem55's broader commitment to Malaysian members. Alongside data protection, we also provide a full suite of responsible gaming tools — deposit limits, loss limits, session limits, and self-exclusion options — to ensure a safe and controlled gaming experience for all.

For more information, please read Terms & Conditions and Responsible Gaming Guide ours.

Ready to Play on a Platform That Protects Your Privacy?

Gem55 keeps your personal data fully protected at every step. Register today and enjoy a safe, fair, and responsible online casino experience alongside more than 150,000 Malaysian members.

Bahasa Melayu