Privacy Policy GBK808 — Member Personal Data Protection

Welcome to the gbk808 Privacy Policy. This document is published by gbk808 Group (hereinafter referred to as "gbk808", "we", or "the platform") to transparently explain how we manage the personal data of every individual who uses our platform, including registered members, website visitors, and any party that interacts with gbk808 services.

GBK808 takes privacy seriously. We understand that your personal data is a trust placed in us, and we are responsible for protecting it to the highest standard. Every data management decision at GBK808 is made with our members' best interests and security as the top priority.

This Privacy Policy applies to all GBK808 services, including the official website, mobile app, customer support services, VIP programme, marketing campaigns, and all official GBK808 communication channels. In the event of a conflict between this Privacy Policy and any service-specific terms, the service-specific terms shall prevail.

GBK808 collects member personal data through various channels. Below is a summary table of the types of data collected and the purpose of each:

We do not collect sensitive data categories such as medical records, biometric information, or political views unless specifically required by law or a regulatory authority.

GBK808 uses member personal data on valid legal grounds, including contract fulfilment, legitimate platform interests, compliance with legal obligations, and your consent. The following are the primary purposes for which data is used:

• Account Management — Creates, verifies, and manages your member account, including KYC and identity verification processes.
• Transaction Processing — Processes deposits, withdrawals, and all financial transactions securely and accurately.
• Service Provision — Allows you to access all games, promotions, and features on the gbk808 platform.
• Security & Fraud Prevention — Detects and prevents fraudulent activity, money laundering, and security threats.
• Customer Support — Enables us to provide effective assistance when you contact our support team.
• Marketing (with consent) — Sends promotional information, special offers, and relevant platform updates based on your communication preferences.
• Analytics & Improvement — Analyses usage patterns to improve platform performance, user experience, and game offerings.
• Legal Compliance — Fulfils reporting obligations to regulatory authorities and law enforcement when required.

GBK808 will not use your data for any purpose other than those stated above without first obtaining your fresh consent.

GBK808 does not sell member personal data to any party. However, in certain limited circumstances, your data may be shared with the following parties:

• Payment Service Providers — To process your deposits and withdrawals securely. These providers are bound by strict confidentiality agreements.
• Technology & Game Providers — Gaming software companies that provide game content on the gbk808 platform, subject to strict data protection terms.
• Identity Verification Services (KYC) — Specialist providers that assist us in verifying member identities to meet anti-money laundering requirements.
• Regulatory Authorities & Law Enforcement — When required by law, court order, or directive from a competent authority.
• Analytics Providers — Aggregated and anonymised data used to understand platform usage patterns. No personally identifiable data is shared.

All third parties receiving gbk808 member data are required to comply with data protection standards equal to or exceeding those of gbk808. We periodically audit our third-party partners to ensure ongoing compliance.

GBK808 implements comprehensive technical and organisational security measures to protect member personal data from unauthorised access, loss, destruction, or accidental disclosure:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• Data-at-rest encryption for all sensitive information stored in our databases.
• Role-based access control (RBAC) ensures that only authorized personnel can access member data.
• 24/7 continuous security monitoring with automated intrusion detection systems.
• Regular third-party penetration testing by independent parties to identify and address security vulnerabilities.
• Mandatory data security awareness training for all gbk808 staff who handle member data.
• A comprehensive incident response plan to address any data breaches promptly and effectively.

In the event of a data breach that may affect your rights or freedoms, gbk808 will notify you and the relevant authorities within the timeframe prescribed by applicable law.

GBK808 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

• Essential Cookies — Required for core platform functions such as login authentication and session security. These cookies cannot be disabled.
• Performance Cookies — Collects anonymised information about how you use the platform to help us improve performance and user experience.
• Functional Cookies — Remembers your preferences such as language, theme, and display settings to deliver a more personalised experience.
• Marketing Cookies — Used to display relevant offers and promotions based on your interests and usage patterns, subject to your consent.

You can manage your cookie preferences through your web browser settings or via the cookie control panel provided on the GBK808 platform. Please note that disabling certain cookies may affect the functionality or your experience on the platform.

Under Malaysia's Personal Data Protection Act 2010 and relevant international standards, you have the following rights regarding your personal data at GBK808:

To exercise any of the rights above, please contact the gbk808 privacy team via customer support. We will process your request within 30 business days. For complex cases, this period may be extended to 60 days with appropriate notice.

GBK808 retains member personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. The following are our data retention guidelines:

• Active Account Data — Retained for as long as your account remains active on gbk808.
• Post-Account Closure Data — Transaction records and KYC data are retained for a minimum of 7 years after account closure to meet anti-money laundering legal compliance requirements.
• Support Communication Records — Retained for 3 years for quality assurance and dispute resolution purposes.
• Technical Log Data — Retained for 12 months for security and debugging purposes.
• Marketing Data — Deleted within 30 days after you withdraw your marketing consent.

Upon expiry of the stipulated retention period, your personal data will be securely deleted or permanently anonymized so that it can no longer be associated with you.

As part of GBK808's global operations, your personal data may be transferred to and stored in countries other than Malaysia. When this occurs, GBK808 ensures adequate protection is in place through:

• Data transfer agreements compliant with international standards are included in contracts with all data recipients.
• Transfers only to countries with data protection standards equivalent to or exceeding those of Malaysia.
• Use of approved standard contractual clauses to ensure your data remains protected beyond Malaysia's borders.

By using the GBK808 platform, you consent to such data transfers subject to the protections set out in this Privacy Policy.

The gbk808 platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

If we discover that a child's personal data has been collected without proper age verification, we will take immediate action to delete the data and close the account involved. If you believe your child has registered on the gbk808 platform, please contact our support team immediately.

GBK808 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. Any material amendments will be communicated to you via:

• In-platform notifications on gbk808 when you log in.
• Email notification sent to your registered email address.
• Updates the "Last Updated" date at the top of this page.

We encourage you to review this Privacy Policy periodically. Your continued use of the gbk808 platform after any amendments take effect will be considered as your acceptance of the updated policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how gbk808 handles your personal data, please contact our Data Protection Officer (DPO) through the following channels:

• Live Chat — Live support available 24 hours a day, 7 days a week via the chat icon at the bottom-right corner of the gbk808 platform.
• Privacy Email — [email protected]
• Mailing Address — gbk808 Group, Privacy & Data Protection Office, Kuala Lumpur, Malaysia.

We are committed to addressing all privacy inquiries seriously and will respond within 14 business days. If you are not satisfied with our response, you have the right to lodge a complaint with the Malaysia Department of Personal Data Protection or the relevant regulatory authority.

For more information about your rights or how to use the gbk808 platform responsibly, please visit the Responsible Gaming and Terms & Conditions us.