GT108 Privacy Policy – Personal Data Protection for Malaysian Players

GT108 collects the personal data necessary to provide you with online entertainment platform services. The type of data collected depends on how you interact with our platform.

Data you provide directly during registration:

• Your full name as it appears on your Malaysian identity card.
• Your MyKad (national identity card) number or passport number, for identity verification (KYC) purposes.
• An active email address you own — used for account communications and notifications.
• An active Malaysian mobile number for two-factor authentication (2FA) and important communications.
• Date of birth to verify that you meet the minimum age requirement of 18 years.
• Current residential address in Malaysia.

Financial & payment data:

• Bank account number for withdrawal purposes via DuitNow or FPX transfer.
• Registered e-wallet details (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay) – GT108 does not store your e-wallet password or PIN.
• Historical records of deposit and withdrawal transactions in MYR for audit and financial control purposes.

Data collected automatically during platform use:

• Your device's IP address and approximate geographical location information (state or city within Malaysia).
• Device type, operating system, and web browser used.
• Platform activity data, including games played, session duration, and betting history — required to support any disputes and for responsible gaming purposes.
• Access and security logs to detect unusual activity or unauthorised access attempts.
• Cookie data and similar tracking technologies (see section 7 for further details).

GT108 uses collected personal data only for lawful and relevant purposes. We do not use your data for anything beyond the scope outlined below without first obtaining your permission.

GT108 processes your personal data on the basis of one or more of the following lawful grounds, depending on the applicable processing purpose:

• Contract performance: Processing is necessary to fulfil the contract between you and GT108 — including managing your account, processing deposits and withdrawals in MYR, and providing access to games and platform services.
• Legal obligation: GT108 is required under applicable law to conduct identity verification (KYC), maintain financial records, and report suspicious activity to the relevant authorities for anti-money laundering purposes.
• Legitimate interests: GT108 has a legitimate interest in detecting and preventing fraud, maintaining platform security, and improving our services — provided these interests do not override your privacy rights.
• Consent: For marketing communications and non-essential cookies, GT108 requires your explicit consent, which may be withdrawn at any time.

GT108 does not sell or rent your personal data to any third party for marketing or commercial purposes. However, in the course of operating the platform, your data may be shared with the following parties under limited and controlled circumstances:

• Payment processors & e-wallets: Required transaction information is shared with payment processors to facilitate deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX (Maybank2u, CIMB Clicks). This sharing is kept to a minimum and limited strictly to the data needed to complete the transaction.
• Game provider: Usernames and certain session data are shared with game providers such as Pragmatic Play, NetEnt, and Evolution to enable access to their games. These providers are bound by strict data protection agreements with GT108.
• Identity verification services: Data required for KYC is shared with licensed and accredited identity verification service providers to confirm the authenticity of a player's identity.
• Statutory authorities: GT108 is required to disclose information to statutory authorities, regulatory bodies, or law enforcement agencies when mandated by law, court order, or a legitimate criminal investigation.
• Professional advisors: Lawyers, accountants, or auditors bound by strict confidentiality obligations may be granted limited access to certain data in the context of providing professional advice to GT108.

Protecting your personal data is a responsibility GT108 takes extremely seriously. We continually invest in security infrastructure and practices to ensure your information remains safe at all times.

• 256-bit SSL encryption for all data in transit between your device and GT108's servers — on par with the security standards used by Malaysia's major financial institutions.
• Encryption of data at rest for all sensitive information stored in GT108's databases.
• Two-factor authentication (2FA) is available for all player accounts and is mandatory for all staff with access to player data.
• Intrusion detection systems (IDS) and layered firewalls that continuously monitor all inbound and outbound traffic across GT108's infrastructure.
• Data segregation — player financial data is stored in an environment separate from operational data, with stricter access controls in place.
• Mandatory cybersecurity training for all GT108 staff who handle player data, conducted every six months.
• Tested incident response procedures to ensure any data breach is identified, contained, and reported promptly and effectively.

GT108 retains your personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy, or as required by applicable law.

Once the retention period expires, your data will be securely deleted or anonymised so it can no longer be linked to you personally. The deletion process follows industry-standard procedures to ensure no unauthorised recovery is possible.

GT108 uses cookies and similar technologies to enhance your experience on our platform. Below are the types of cookies we use and their purposes:

• Essential cookies (required): These cookies are essential for the basic functionality of the GT108 platform – including maintaining your login session, remembering language preferences, and ensuring session security. They cannot be disabled and do not collect any personally identifiable data.
• Performance & analytics cookies: Helps GT108 understand how players use our platform – which pages are most visited, navigation issues encountered, and areas for improvement. All data collected is aggregated and anonymised.
• Functional cookies: Remembering your preferences such as favourite game types, display settings, and notification choices to deliver a more personalised experience on your next visit.
• Security cookies: Used to identify fraudulent activity and ensure the security of your login session. These cookies are active during your session and expire upon logout.

You can manage your cookie settings through your web browser. Disabling certain cookies may affect the functionality of the GT108 platform. For more details on the cookies used and how to control them, please contact the GT108 support team.

As a GT108 player, you have the following rights regarding your personal data. GT108 is committed to respecting and facilitating the exercise of these rights in an effective manner and without undue charges.

• Right of access: You have the right to request a copy of all personal data GT108 holds about you. Requests will be processed within 30 days of receipt.
• Right to rectification: If any of your personal data is inaccurate or out of date, you have the right to request that GT108 correct it. Corrections to basic account information can be made directly through your account settings.
• Right to erasure: Under certain circumstances, you have the right to request that GT108 erase your personal data. This right is not absolute — GT108 may need to retain certain data to fulfil legal obligations or contractual requirements.
• Right to restriction of processing: You have the right to request that GT108 restrict the processing of your data under certain circumstances, such as while you are disputing the accuracy of your data or while a dispute regarding its use is ongoing.
• Right to data portability: You have the right to receive the personal data you have provided to GT108 in a structured, machine-readable format, and to transfer it to another service provider should you choose to do so.
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes at any time, without needing to provide any justification. Objections to processing based on legitimate interests may also be raised.
• Right to withdraw consent: Where data processing is based on your consent, you have the right to withdraw that consent at any time without affecting the validity of any processing carried out prior to the withdrawal.

The GT108 platform is strictly for individuals aged 18 and above. GT108 does not knowingly collect or process the personal data of anyone under the age of 18, under any circumstances.

• GT108's registration process requires date of birth verification, and any applicant found to be under 18 years of age will be rejected immediately.
• If GT108 discovers that personal data belonging to underage minors has been collected inadvertently, we will take immediate steps to delete that data and close the affected account.
• Parents or guardians who believe their child has registered a GT108 account without authorisation are urged to contact our support team immediately at privacy@gt108.run for prompt action.

In the course of platform operations, your personal data may be transferred to and stored on servers located outside Malaysia. GT108 ensures that all such data transfers are carried out with adequate safeguards in place.

• GT108 only transfers personal data to countries or entities that provide a level of data protection equivalent to or higher than the standards applicable in Malaysia.
• Strict data processing agreements are signed with all third-party processors who receive Malaysian player data, ensuring consistent protection regardless of where processing takes place.
• For enquiries about international data transfers or to obtain information about the safeguards in place, contact the GT108 privacy team at privacy@gt108.run.

GT108 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. You will be notified of any material changes.

• Material changes to this Privacy Policy will be communicated via email to the address registered on your account and through in-platform notifications, at least 14 days before taking effect.
• Continued use of the GT108 platform after the effective date of any amendments constitutes acceptance of the updated Privacy Policy.
• Where an amendment requires your renewed consent (for example, for a new processing purpose), GT108 will actively seek that consent before proceeding with the processing.
• The latest version of this Privacy Policy is always available on this page (gt108.run/privacy-policy). The date of the most recent update is shown at the top of this document.

If you have any enquiries, concerns, or complaints regarding how GT108 handles your personal data, we encourage you to reach out to us directly. GT108's privacy team is dedicated to addressing every enquiry seriously and in a timely manner.

• Privacy email: privacy@gt108.run – for specific enquiries about personal data, data rights requests, or privacy complaints. Response time: within 5 business days.
• General support email: support@gt108.run – for general account enquiries, including privacy-related matters that require prompt action.
• Live chat: Available on the GT108 platform 24/7 in Bahasa Melayu for immediate account and privacy-related enquiries.
• Registered office: GT108, gt108.run – for official written communications regarding data rights or formal complaints.

If you are not satisfied with GT108's response to your privacy query after contacting us, you have the right to lodge a complaint with the relevant data protection authority under the jurisdiction where you reside in Malaysia.