Privacy Policy

This Privacy Policy ("Policy") is published by GD888 Entertainment Ltd ("GD888", "we", "us", or "our"), the operator of the online gaming platform accessible at https://gd888.cam (the "Platform"). It sets out how we collect, use, disclose, store, and protect the personal data of individuals who register for or use the Platform ("Users", "you", or "your").

GD888 serves players across Malaysia — including Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, Johor Bahru, and beyond — and we are committed to handling all personal data entrusted to us with the highest standards of care, transparency, and compliance.

This Policy applies to all personal data collected through the Platform, our customer support channels, marketing communications, and any associated services. It should be read in conjunction with our Terms & Conditions.

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identity card number, email address, phone number, IP address, and financial transaction details.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, or deletion.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this context, GD888 Entertainment Ltd.
• "Data Processor" means a third party that processes Personal Data on behalf of the Data Controller pursuant to a written agreement.
• "Sensitive Data" means a subset of Personal Data warranting heightened protection, including identification documents, financial account information, and data relating to health or vulnerable circumstances.
• "Cookies" means small text files placed on your device by the Platform to store session and preference information.

The Data Controller responsible for your Personal Data is GD888 Entertainment Ltd, the operator of the GD888 Platform. All enquiries relating to the processing of your Personal Data, the exercise of your data rights, or any privacy concerns should be directed to our support team using the contact details provided in Section 15 of this Policy.

Where GD888 engages third-party service providers to process Personal Data on our behalf — such as payment processors, identity verification providers, and fraud detection services — those parties act as Data Processors and are contractually bound to process data only in accordance with our instructions and to maintain appropriate security measures.

GD888 collects Personal Data from you directly (when you register, contact support, or make a transaction) and automatically (through your use of the Platform). The categories of data we collect include:

We do not intentionally collect Sensitive Data beyond what is required for identity verification and regulatory compliance. We do not collect data relating to racial or ethnic origin, political opinions, religious beliefs, or biometric data for identification purposes beyond standard KYC documentation.

GD888 processes your Personal Data for the following purposes:

• Account Management: To create, maintain, and manage your GD888 Account, including processing your registration details, authenticating your identity at login, and maintaining accurate Account records.
• KYC & Regulatory Compliance: To verify your identity, age (confirming you are 21 years or above), and eligibility to use the Platform, and to comply with our anti-money laundering (AML) and Know Your Customer (KYC) obligations.
• Transaction Processing: To process deposits via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, 7-Eleven Cliqq, and USDT TRC20, and to process withdrawal requests to your designated payment methods.
• Customer Support: To respond to your enquiries, resolve disputes, investigate complaints, and provide technical assistance.
• Responsible Gambling: To administer self-exclusion requests, deposit limit settings, cooling-off periods, and to monitor gaming behaviour for signs of problem gambling in accordance with our Responsible Gambling commitments.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover attempts, and other unlawful conduct.
• Platform Improvement: To analyse usage patterns, troubleshoot technical issues, and improve the design and functionality of the Platform for Malaysian users.
• Marketing Communications: To send you promotional offers, bonus notifications, and relevant updates where you have consented to receive such communications. You may opt out at any time.
• Legal Obligations: To comply with applicable laws, regulations, court orders, or requests from authorised regulatory bodies.

GD888 processes your Personal Data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform the contract between GD888 and you — for example, operating your Account, processing deposits, settling withdrawals, and delivering gaming services.
• Legal Obligation: Processing required to comply with applicable law — including AML regulations, KYC requirements, and our gaming licence conditions.
• Legitimate Interests: Processing in pursuit of GD888's legitimate business interests where those interests are not overridden by your fundamental rights — including fraud prevention, Platform security, and service improvement.
• Consent: Processing for which you have provided explicit, informed, and freely given consent — including marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

GD888 does not sell your Personal Data. We share your data only in the following limited circumstances and with appropriate safeguards in place:

• Payment Processors: Financial transaction data is shared with payment service providers — including FPX payment gateway operators, e-wallet providers (Touch 'n Go, Boost, GrabPay), and participating banks (Maybank, CIMB, Public Bank, Hong Leong Bank) — strictly for the purpose of processing your transactions.
• Identity Verification Providers: KYC documentation may be shared with licensed third-party identity verification services to authenticate your identity and confirm age eligibility.
• Fraud Prevention & AML Services: Data may be shared with specialist fraud detection and AML screening providers as required by law or our gaming licence obligations.
• Game Software Providers: Limited gameplay-related data may be shared with our licensed game content providers solely to operate and audit game functionality.
• Regulatory & Law Enforcement Authorities: GD888 will disclose Personal Data to competent authorities when required by applicable law, a valid court order, or a legitimate regulatory request. We will, where permitted by law, notify you of such disclosure.
• Professional Advisers: In limited circumstances, data may be disclosed to our legal advisers, auditors, or insurers under strict obligations of confidentiality.

All third-party Data Processors are required to enter into data processing agreements with GD888 and are permitted to use your data only for the specific purpose for which it was shared.

GD888 retains your Personal Data for as long as is necessary to fulfil the purposes for which it was collected and to comply with our legal and regulatory obligations. Specific retention periods include:

• Account Data: Retained for the duration of your Account and for a minimum of five (5) years following Account closure, in compliance with AML and gaming licence record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of seven (7) years from the date of each transaction, as required by applicable financial regulations.
• KYC Documentation: Retained for the duration of your Account and for a minimum of five (5) years following Account closure.
• Customer Support Records: Retained for three (3) years from the date of the last interaction, or longer where the interaction relates to a dispute or investigation that remains unresolved.
• Marketing Preferences: Retained until you withdraw consent or opt out of marketing communications.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised in accordance with our data disposal procedures.

GD888 implements a range of technical and organisational measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the GD888 Platform.
• Encrypted storage of sensitive Account and financial data at rest.
• Role-based access controls limiting staff access to Personal Data on a strict need-to-know basis.
• Regular penetration testing and vulnerability assessments of Platform infrastructure.
• Two-factor authentication (2FA) options available for User Accounts.
• Incident response procedures for timely detection, containment, and notification of any data breach.

While GD888 takes all reasonable steps to protect your data, no online system is entirely immune to risk. You are responsible for maintaining the security of your Account credentials and notifying GD888 immediately if you suspect unauthorised access to your Account.

GD888 uses cookies and similar tracking technologies (including web beacons and local storage) to operate the Platform, maintain your session, and improve your user experience. The categories of cookies we use are:

• Strictly Necessary Cookies: Essential for the Platform to function. These cookies enable core functionality such as session management, authentication, and security. They cannot be disabled without preventing you from using the Platform.
• Functional Cookies: These cookies remember your preferences — such as language settings and display options — to personalise your experience on return visits.
• Analytical Cookies: These cookies collect anonymised data about how users interact with the Platform, which pages are visited most frequently, and where technical issues occur. This data is used internally to improve Platform performance.
• Marketing Cookies: Where you have consented, these cookies are used to deliver relevant promotional content and track the effectiveness of our marketing activities.

You may manage your cookie preferences through your browser settings. Note that disabling certain categories of cookies may affect your ability to use some features of the Platform. Your consent to non-essential cookies will be requested on your first visit to GD888 and can be updated at any time.

Subject to applicable law and the specific circumstances of your request, you have the following rights in relation to your Personal Data held by GD888:

To exercise any of the above rights, please contact our support team at [email protected]. We will respond to all valid requests within thirty (30) days. In some cases, we may need to verify your identity before processing your request. Please note that certain rights may be limited where our processing is required by law (for example, AML record-keeping obligations).

GD888 does not knowingly collect Personal Data from or provide services to any person under the age of 21. The Platform is strictly for adults aged 21 and above, and we employ age verification as part of our KYC process to enforce this requirement.

If GD888 discovers or is notified that Personal Data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated Account. Any winnings accrued by an underage user will be forfeited.

If you are a parent or guardian and believe that a minor has created a GD888 Account, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

As a global online gaming platform serving users in Malaysia, GD888 may need to transfer your Personal Data to service providers or infrastructure located outside Malaysia. When such transfers occur, GD888 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that applicable in your home jurisdiction.

Safeguards for international transfers may include contractual clauses requiring recipient entities to maintain equivalent data protection standards, and, where applicable, reliance on recognised data transfer frameworks or adequacy decisions issued by competent regulatory authorities.

GD888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform services. When material changes are made, we will update the "Last Updated" date at the top of this page.

We encourage you to review this Policy periodically to stay informed about how GD888 is protecting your Personal Data. Your continued use of the Platform following any update to this Policy constitutes your acknowledgement of the revised terms. If a proposed change materially affects the processing of your data in a way that requires fresh consent, we will seek that consent from you directly.

If you have any questions or concerns about this Privacy Policy, wish to exercise your data rights, or need to report a potential data breach or privacy concern, please contact the GD888 data privacy team using the details below:

For queries unrelated to data privacy — including Account issues, bonuses, and betting rules — please refer to our FAQ or contact our general support team directly.