Data Protection
Gembet is committed to protecting the privacy and personal data security of every Malaysian player. This document clearly explains what we collect, how it is used, and your rights as a Gembet player under Malaysian law.
Our Privacy Commitment
Before reading the full document, here are the six most important things to know about how Gembet handles your data.
Every piece of information transmitted between your device and Gembet's servers — including login credentials, payment details via Touch 'n Go, GrabPay, DuitNow or FPX, and gameplay data — is protected by the same 256-bit SSL encryption used by Malaysia's major banks. No data is transmitted in plain text.
Banking StandardsGembet never sells, rents, or trades players' personal data to any third party for marketing or advertising purposes. Information you provide to Gembet is used solely for platform operations, identity verification, payment processing, and improving our services for Malaysian players.
Privacy GuaranteedGembet's Privacy Policy is built on the foundation of Malaysia's Personal Data Protection Act 2010 (PDPA) — the country's primary data protection legislation. This means your rights as a data subject are recognised and respected by Gembet within a legally binding framework in Malaysia.
PDPA 2010 CompliantYou have the right to access all personal data Gembet holds about you, request corrections where there are errors, and in certain circumstances, request that the data be deleted. You may also withdraw your marketing consent at any time via account settings or by contacting the Gembet support team.
Full Player RightsGembet player data is stored on servers protected by layered access control systems — only authorised staff who require access to carry out their job responsibilities may view that data. Gembet does not retain data longer than necessary for operational and legal compliance purposes.
Restricted & Secure AccessWhile Gembet continually invests in security infrastructure, we acknowledge that no system is 100% impenetrable. In the event of a security breach affecting player data, Gembet is committed to notifying affected players promptly in accordance with PDPA requirements and taking remedial action without delay.
Incident TransparencyThis Privacy Policy is published by Gembet ("we", "us", "Gembet", "the platform"), an online entertainment platform providing casino, Sports Betting, slots, Live Casino and a variety of other games to users in Malaysia. This document explains in detail how Gembet collects, uses, stores, protects, and in certain circumstances, discloses your personal data.
This Privacy Policy applies to all users who access the Gembet website, register an account, make deposits using Malaysian payment methods such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow or FPX, and use any services provided by Gembet whether via web browser or mobile platform.
Legal Basis: Gembet's Privacy Policy is grounded in Malaysia's Personal Data Protection Act 2010 (PDPA). By registering for and using the Gembet platform, you consent to Gembet processing your personal data in accordance with this Privacy Policy. If you do not agree with any provision herein, please discontinue your use of the Gembet platform.
Gembet takes player privacy seriously. We do not view data protection as a mere compliance burden — it is a responsibility we embrace willingly, because we understand how vital trust is in the relationship between an online entertainment platform and its users. Every MYR you deposit at Gembet, every slots or Live Casino session you enjoy, and every Malaysia Super League or EPL football bet you place — all of it involves data we protect to the best of our ability.
Gembet collects only the personal data necessary to provide our services safely and efficiently. Below are the categories of data we collect, along with specific examples:
Registration & Identity Data:
Financial & Transaction Data:
Activity & Gameplay Data:
Technical Data:
Sensitive Data: Gembet does not actively collect data classified as sensitive under PDPA, such as health information, religious beliefs, or political views. Should you voluntarily share such information when communicating with Gembet's support team, it will be handled with the highest level of protection.
Gembet uses collected personal data solely for legitimate purposes directly related to platform operations and players' interests. The primary purposes are:
Account Operations & Identity Verification: Processing new account registrations, verifying player identity (KYC), confirming the minimum age requirement of 21 years is met, and managing ongoing account login and security.
Payment Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX; managing withdrawal requests; verifying that the payment account holder's name matches the Gembet account holder; and maintaining transaction records for compliance and dispute purposes.
Gaming Service Provision: Delivering a personalised and tailored gaming experience based on your play history; managing VIP programmes and related benefits; processing and displaying game statistics; and ensuring the integrity of all slots, Live Casino, and Sports Betting sessions on Gembet.
Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, multiple account usage, the use of bots or automated software, and any breach of Gembet's Terms & Conditions; verifying identity for withdrawal requests; and complying with KYC/AML requirements.
Communications & Customer Support: Sending transaction notifications, account updates, security alerts, and important operational information related to Gembet. With your consent, we also send promotional content, bonus offers, and Gembet-related announcements that may interest you.
Marketing: You may withdraw consent to receive marketing communications from Gembet at any time via the "unsubscribe" link in our emails, the notification settings in your Gembet account, or by contacting support@gembet-jit.com. Withdrawing marketing consent does not affect Gembet's ability to send you important operational communications related to your account.
Gembet does not sell, rent, or trade players' personal data to third parties for marketing purposes. However, there are limited circumstances where data may need to be shared with other parties to enable Gembet to deliver its services:
Technology Service Providers: Certified game providers such as Evolution Gaming and Pragmatic Play may receive session data necessary to deliver their games. All such providers are bound by strict data protection agreements and are not permitted to use Gembet player data for any purpose other than delivering their services to Gembet.
Payment Processors: Payment providers used to process deposits and withdrawals (such as FPX processors, Touch 'n Go gateway, or GrabPay) receive the transaction information required to complete each payment. All payment processors operate under Malaysia's strict regulatory framework.
Legal Compliance & Authorities: Gembet may be required to disclose data to Malaysian law enforcement authorities or regulatory bodies if mandated by law, court order, or official investigation. In such cases, Gembet will endeavour to notify the relevant player unless prohibited from doing so by law.
KYC & AML Agents: Third-party identity verification providers engaged to process KYC (Know Your Customer) and AML (Anti-Money Laundering) checks receive only the information necessary for verification purposes.
Data Sharing Guarantee: Every third party that receives Gembet player data is bound by a legally enforceable data processing agreement requiring them to protect that data to a standard equal to or exceeding Gembet's own. Gembet does not share data with any party that lacks an adequate data protection agreement.
Gembet continually invests in security infrastructure to ensure Malaysian players' personal data is protected at every stage — in transit, in processing, and in storage. Key security measures we have implemented include:
Important — Your Responsibilities: While Gembet takes all reasonable steps to protect your data, account security also depends on your own actions. Use a strong, unique password for your Gembet account, enable two-factor authentication, never share your login credentials with anyone, and always log out after your session — especially on shared devices.
Gembet retains players' personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required by Malaysian law. The following are retention period guidelines for key data categories:
Once the relevant retention period has expired, Gembet will securely delete or anonymise your personal data. Data that has been fully anonymised — and can no longer be used to identify you — may be retained for analytics and platform improvement purposes.
As a Gembet player and data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have several important rights regarding your personal data. Gembet respects and facilitates the exercise of these rights:
You have the right to request a copy of the personal data Gembet holds about you. Gembet will provide this information within 21 days of receiving a valid request. The first request is free of charge; subsequent requests within a 12-month period may be subject to a nominal fee.
If personal data Gembet holds about you is inaccurate, incomplete, or outdated, you have the right to request a correction. Contact Gembet support with the relevant supporting evidence and we will update your records within 14 business days.
Under certain circumstances, you may request the deletion of your personal data. However, Gembet may be required to retain certain data for AML/KYC legal compliance even after a deletion request is made. We will clearly explain what can and cannot be deleted, and why.
You have the right to object to the processing of your data for direct marketing purposes at any time. Contact Gembet or use the unsubscribe link in our marketing emails. Once an objection is received, Gembet will stop using your data for marketing purposes within 10 business days.
Where Gembet processes data based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the validity of any processing carried out prior to withdrawal, nor does it affect the operational functions of your Gembet account.
If you believe that Gembet has not handled your personal data in accordance with the PDPA 2010, you have the right to lodge a complaint with the Malaysian Personal Data Protection Commissioner. We encourage you to contact us first so that we may attempt to resolve your concerns directly.
To exercise any of the rights above, contact the Gembet Privacy Officer at support@gembet-jit.com with the subject line "PDPA Rights Request". We will verify your identity before processing the request.
The Gembet website uses cookies — small text files stored on your device — and similar tracking technologies to enhance user experience, maintain account security, and understand how Malaysian players use our platform. The following are the categories of cookies we use:
You can manage your cookie settings through your web browser. Most modern browsers offer detailed controls to accept, reject, or delete cookies from specific websites. Please note that disabling essential cookies will affect your ability to use the Gembet platform fully.
In the course of providing Gembet's services, certain data may need to be transferred or processed outside Malaysia — for example, when interacting with international game provider systems such as Evolution Gaming or Pragmatic Play, which operate server infrastructure across multiple global locations.
When cross-border data transfers occur, Gembet ensures that recipients outside Malaysia are bound by contractual agreements requiring data protection standards equivalent to those under the Malaysian PDPA. Gembet only works with providers that maintain transparent and accountable privacy and security policies.
Protection Guarantee: Even where data is processed outside Malaysia, the level of protection afforded to your personal data remains unchanged. Your rights as a Gembet player under PDPA 2010 are fully preserved regardless of where data is technically processed.
Gembet is an adult entertainment platform restricted to individuals aged 21 and above only. Gembet does not knowingly collect, store, or process personal data belonging to minors. The Gembet registration process requires age verification, and we reserve the right to request identity verification documents to confirm age eligibility at any time.
If Gembet discovers that personal data belonging to an individual under the age of 21 has been collected without valid knowledge or consent, we will take immediate steps to delete that data and close the account in question. Parents or guardians who believe their child has registered a Gembet account without authorisation are advised to contact support@gembet-jit.com immediately.
Gembet reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, updates to Malaysian law, or improvements in how we communicate privacy information to players.
When significant changes are made — particularly those that materially affect how your data is collected, used, or shared — Gembet will notify active players via their registered email and in-platform notifications at least 14 days before the changes take effect. It is your responsibility to review this page periodically.
The "Updated" date at the top of this page indicates when the most recent changes were made. Your continued use of the Gembet platform after the effective date of any amendments will be considered acceptance of the updated Privacy Policy.
For any enquiries, concerns, or requests relating to this Privacy Policy or how Gembet handles your personal data, please contact our Privacy Officer through the following channels:
We are committed to providing a meaningful response within 10 business days for all privacy-related enquiries. For formal data rights requests (access, correction, deletion), processing may take up to 21 days depending on the complexity of the request.
This Privacy Policy is written and published in Malay as the official version for the Malaysian market. It is specifically drafted for Malaysian players using the Gembet platform and reflects local legal requirements under PDPA 2010.
Personal Data Protection Commissioner: If you are not satisfied with how Gembet has handled your privacy request after contacting us, you have the right to lodge a complaint with the Malaysian Personal Data Protection Commissioner through their official channels.
Privacy Commitment
Privacy at Gembet is not just a document — it is how we operate every day.
Gembet complies with Malaysia's Personal Data Protection Act 2010 (PDPA) as a baseline standard — and strives to go beyond the minimum legal requirements in our day-to-day data handling practices.
The 256-bit SSL encryption used by Gembet is the same technology employed by Maybank, CIMB, and other major Malaysian banks to secure online banking transactions. When you make a deposit via FPX or DuitNow on Gembet, bank-grade security is guaranteed.
Gembet has a dedicated privacy officer responsible for ensuring that data handling practices comply with the PDPA and for processing Malaysian players' data rights requests promptly and thoroughly.
Gembet collects only the data genuinely necessary for platform operations — we do not collect data in excess "just in case". Every category of data we collect has a clear and justifiable purpose.
Gembet's Privacy Policy is written in plain, straightforward language — not buried under confusing legal jargon. We believe every Malaysian player deserves to fully understand how their data is used, no law degree required.
Gembet has a comprehensive security incident response plan in place. Should any incident affecting player data occur, our procedures ensure that affected players and the relevant authorities are notified within the timeframe stipulated by PDPA, without undue delay.
Quick Reference
This table provides a concise overview of the data collected, its purpose, and the applicable retention period.
Frequently Asked Questions
This Privacy Policy should be read together with Terms & Conditions Gembet governing the overall terms of use for the platform, and Responsible Gaming which outlines the controls available to players. For general questions about the Gembet platform, visit Frequently Asked Questions us. For specific privacy enquiries or PDPA rights requests, reach us at support@gembet-jit.com — our team is available to assist in Malay 24/7.
Create a free Gembet account with full confidence that your privacy and data security are protected. Minimum deposit of RM30 via Touch 'n Go or DuitNow — fast, safe, and fully encrypted.