Gem55 takes your privacy seriously. This document clearly explains what data we collect, why it is collected, how it is used and protected, and the rights you hold as a gem55 member under Malaysia's Personal Data Protection Act 2010 (PDPA).
Six core principles that define how gem55 handles the personal data of Malaysian members.
All data transmitted between your device and gem55 servers is protected by 256-bit SSL encryption — the same banking-grade security technology used by Malaysia's leading financial institutions. This covers your login credentials, payment details, and transaction history.
Gem55 has never sold, rented, or traded members' personal information to any third party for marketing or commercial purposes — and never will. Your data belongs to you, not to us.
Gem55's Privacy Policy is designed and enforced in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). We conduct regular compliance reviews to ensure our practices remain aligned with current legislation.
As a gem55 member, you have the right to access, update, correct, or request the deletion of your personal data at any time. Requests are processed within 14 working days and no fee is charged for reasonable requests.
Gem55 collects only the data genuinely required to deliver our services — nothing more. We operate on a data minimisation principle, where every type of data collected has a clear and legitimate purpose.
In the event of any security incident affecting members' personal data, gem55 is committed to notifying the affected members and relevant authorities within the timeframe prescribed by Malaysian law.
This Privacy Policy explains how gem55 ("We", "Platform") collects, uses, stores, and protects your personal information ("Personal Data") when you use the gem55.biz platform and related services. By registering for or using gem55's services, you agree to the terms of this Privacy Policy. Please read it carefully — if anything is unclear, contact us at support@gem55.biz.
Gem55 is an online entertainment and betting platform operating in Malaysia. We operate under the domain gem55.biz and offer services covering Sports Betting (Malaysia Super League, EPL, BWF badminton, e-sports, and more), Live Casino, slot games, live matches with in-play betting, and a VIP Rewards programme.
This Privacy Policy applies to all users of the gem55 platform, including visitors browsing the website without a registered account, active registered members using the services, and former members whose accounts have been terminated.
This Policy is to be read together with gem55 Terms & Conditions and both documents together form the complete agreement between you and gem55 regarding your use of the platform and the handling of your data.
Gem55 collects the following categories of personal data from members and platform users:
| Data Category | Example Information | Required / Optional |
|---|---|---|
| Personal Identity | Full name, identification card number (MyKad), date of birth, gender | Required |
| Contact Information | Malaysian phone number, email address, residential address | Required |
| Financial Details | Bank account number, e-wallet account name (TNG, GrabPay, DuitNow), deposit and withdrawal history in RM | Required |
| Account Data | Username, password (stored in hashed form), login history, devices used | Required |
| Gaming Activity Data | Betting history, games played, accumulated VIP points, win and loss records | Required |
| Technical Data | IP address, browser type, operating system, device information, cookie data | Automatic |
| Communication Data | Records of conversations with customer support, emails sent to gem55, and feedback provided | Where applicable |
Gem55 collects your personal data through several distinct channels:
Gem55 uses the personal data collected for the following purposes, all of which are directly related to the delivery of platform services:
Gem55 does not sell or transfer your personal data to third parties for marketing purposes. However, in the course of operating the platform, gem55 may share data with a limited set of third-party categories as outlined below, and strictly for the stated purposes:
All third parties granted access to gem55 data are bound by data processing agreements that require them to maintain the confidentiality and security of that information, and prohibit its use for any purpose beyond what has been authorised.
Gem55 implements multiple layers of technical and organisational safeguards to protect the personal data of our members:
While gem55 takes all reasonable steps to protect your data, no online security system can guarantee 100% protection under all circumstances. Members also play an important role in keeping their accounts secure by using strong passwords, not sharing login credentials, and reporting any suspicious activity to gem55 immediately.
The gem55 platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. The following types of cookies are used:
| Cookie Types | Purpose | Status |
|---|---|---|
| Essential Cookies | Enabling core platform functions such as login, account sessions, and security. Without these cookies, the platform cannot function properly. | |
| Performance Cookies | Collecting information on how users interact with the platform to help gem55 improve performance and experience — all data is anonymised. | |
| Functional Cookies | Remembering your preferences such as language, display theme, and personal settings to improve ease of use. | |
| Security Cookies | Helping to detect fraudulent activity, unauthorised access, and suspicious usage patterns to keep your account secure. |
You can manage your cookie preferences through your web browser. Please note that disabling essential cookies may affect the functionality of the gem55 platform. gem55 not uses third-party cookies for targeted advertising or to track you outside the gem55.biz platform.
Gem55 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following are our data retention guidelines:
Once the retention period expires, personal data will be securely deleted or anonymised so that it can no longer be linked to your identity. The deletion process follows the secure erasure procedures established by gem55.
Under Malaysia's PDPA 2010, you have the following rights regarding personal data held by gem55. gem55 respects and facilitates the exercise of all these rights:
You have the right to request a copy of the personal data we hold about you. Requests will be processed within 14 business days.
You may request corrections to inaccurate or incomplete personal data through your account settings or by contacting support.
Under certain circumstances, you may request the deletion of your personal data, subject to any applicable legal retention obligations.
You have the right to object to the processing of your personal data for specific purposes, including unsolicited marketing communications.
In certain circumstances, you may request that the processing of your data be restricted while your request or complaint is being resolved.
You may request a copy of your personal data in a machine-readable format for transfer purposes, where this is technically practicable.
To exercise any of the above rights, submit a written request to support@gem55.biz with the subject line "Personal Data Rights Request". Please include your full name, gem55 account number, and the specific right you wish to exercise. gem55 will verify your identity before processing any data-related request.
Gem55 services are strictly for individuals aged 18 and above. gem55 does not knowingly collect personal data from anyone under the age of 18.
If gem55 discovers that personal data belonging to someone under the age of 18 has been collected inadvertently, we will promptly take steps to delete that data and close the account in question. Parents or guardians who believe their underage child has registered for or used the gem55 platform should contact us immediately at support@gem55.biz.
Gem55 reserves the right to update this Privacy Policy from time to time to reflect changes in our privacy practices, applicable laws, or the services we offer.
When significant amendments are made, gem55 will:
Continued use of the gem55 platform after the effective date of any Privacy Policy amendment constitutes acceptance of the revised terms. We encourage you to review this Privacy Policy periodically.
For any enquiries, concerns, or requests relating to this Privacy Policy or the handling of your personal data by gem55, please contact us through the following channels:
Gem55 is committed to responding to all privacy-related enquiries within 72 hours on business days. For formal data rights requests (access, rectification, deletion), the response time is within 14 business days as required under Malaysia's PDPA.
For most online platforms, a Privacy Policy exists because it has to — because the law requires it. You know the type: 20 pages of legal jargon designed so that nobody actually reads it, full of clauses that allow the platform to do almost anything with your data as long as they can claim it is "to improve user experience". gem55 takes a different approach because we believe member trust is the most valuable asset we have — and trust cannot be bought; it must be earned through consistent action.
When you register with gem55 and provide your Malaysian identity card number, bank account details, or phone number to receive an OTP — you are entrusting gem55 with deeply personal information. We understand the weight of that trust. Your MyKad number is not just a number — it is your identity. The bank account you register for DuitNow or Maybank2u is the gateway to your hard-earned money. The email address you use is your personal line of communication. We never lose sight of how sensitive this information truly is.
This is why gem55 invests seriously in data security infrastructure. 256-bit SSL encryption is not just a badge we display on our website — it is the actual technology that protects every exchange of data between your phone or computer and gem55's servers. This certification is independently audited annually by qualified cybersecurity firms. Your password is never stored in plain text — it is stored as a one-way hash, meaning that even if gem55's servers were accessed by an unauthorised party, your actual password would remain unknown to them.
On the use of data for marketing purposes, gem55 follows a straightforward principle: we will only contact you about matters relevant to the gem55 services you use. If you are an active football bettor on the Malaysia Super League and EPL, you may receive notifications about related football promotions or upcoming matches of interest. We will not, however, sell your email address to insurance companies, banks, or any third party. This is not merely a policy — it is a personal commitment upheld by the gem55 leadership team.
Regarding your rights as a data subject under Malaysia's PDPA 2010, gem55 does not make this process difficult or burdensome. If you would like to know what data we hold about you, send an email to support@gem55.biz and we will provide a report within 14 working days. If any information is inaccurate, you can update it yourself via your account settings or contact us for assistance. If you wish to delete your account and all associated data, we will action this subject to legal retention requirements we cannot override — such as financial transaction records, which must be kept for 7 years under Malaysian law.
One thing many users are unaware of is how cookies and tracking actually work. gem55 only uses cookies essential to the platform's functionality, along with a few performance cookies to help us identify areas for improvement. We do not use cross-site tracking technologies to build advertising profiles about you. When you close your gem55 tab, you will not suddenly start seeing gem55 ads on your social media feed — because we do not use that kind of third-party marketing cookie.
At its core, privacy at gem55 comes down to one fundamental principle: respect. We respect that you have chosen to trust us with your personal information when you use the gem55 platform for online entertainment and betting in Malaysia. We uphold that trust not simply because PDPA 2010 requires it, but because it is the right way to operate as a responsible business. If you have any questions or concerns about how gem55 handles your data, our door is always open — reach our team via 24/7 live chat or email us at support@gem55.biz.
Answers to the most frequently asked questions about privacy and data protection at gem55.
Please also read the other official documents that complement this Privacy Policy.
Gem55's Bahasa Malaysia-speaking support team is available 24/7. We are committed to responding to all privacy-related enquiries within 72 hours.
Contact us: support@gem55.biz