GTR88 Privacy Policy – User Data Protection on the Platform

Welcome to the GTR88 Privacy Policy. This document transparently explains how the gtr88 platform manages and protects your personal information while you use our services. We encourage you to read this policy carefully so you fully understand your rights and choices.

By registering and using the gtr88 platform, you agree that your personal information will be processed as described in this privacy policy. If you disagree with any part of this policy, please discontinue use of the platform and contact us to close your account.

1Information We Collect

GTR88 collects your personal information through various channels when you register, use the platform or interact with our support team. The types of information we collect include:

Personal Identity Information:

• Full name as stated on your identity document
• Identity card number (MyKad) or passport for KYC verification
• Date of birth to confirm you meet the minimum age requirement of 18 years
• A valid current residential address in Malaysia
• An active and reachable mobile phone number
• A valid and active email address

Financial Information:

• Bank account number for deposit and withdrawal processing purposes
• Registered e-wallet information (DuitNow, Touch 'n Go, Boost, GrabPay)
• In-platform transaction history, including deposits, withdrawals, and wagering

Technical Information:

• IP address and estimated location information based on IP
• Device type, operating system, and web browser version used
• Login activity logs including time, date, and device used
• Platform usage data such as games played and session duration

2How We Use Your Information

GTR88 uses collected personal information solely for legitimate platform operations and to deliver the best experience to users. The following are the primary uses of your data:

We will not use your data for any purpose not stated here without first obtaining your consent. All data processing is carried out on a "need-to-know" basis — only relevant staff will have access to your information.

3Information Sharing with Third Parties

GTR88 takes an extremely cautious approach when it comes to sharing user information. We does not sell, rent, or trade your personal data to any party for commercial or marketing purposes.

However, there are limited situations where sharing information is necessary and legally permissible:

• Payment providers: Required transaction information is shared with approved payment service providers (DuitNow, FPX, e-wallet) solely to securely process your deposits and withdrawals.
• Legal compliance: GTR88 will disclose information to the relevant authorities when required by Malaysian law, including in financial crime investigations or by court order.
• Technical services: Selected technical infrastructure and cloud computing providers may have limited access to data in the context of system maintenance, subject to strict confidentiality agreements.
• Fraud Prevention: In cases of suspected fraud, relevant information may be shared with other platforms in the industry as a mutual protection measure.

4Cookies & Tracking Technologies

The gtr88 platform uses cookies and similar tracking technologies to enhance your experience and ensure the platform functions seamlessly. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, session verification and security. These cookies cannot be disabled as they are critical to platform operations.
• Performance Cookies: Collects statistical information on how users interact with the platform — for example, the most frequently visited pages and time spent in each section. This data is used in aggregate form and cannot identify individuals.
• Functional Cookies: Saves your preferences such as language, display settings, and login information (if you select "Remember Me") to provide a smoother experience on your next visit.
• Analytics Cookies: Helps us understand overall usage patterns for platform improvement purposes. All analytics data is processed anonymously.

You can manage and delete cookies through your web browser settings. Please note that disabling essential cookies may affect the functionality of the gtr88 platform. For more information on managing cookies in your browser, refer to your browser's help section.

5Data Security & Protection

User data security is the number one priority at gtr88. We continuously invest in the latest security infrastructure to ensure your information is always protected against cyber threats.

The comprehensive security measures we implement include:

• Encryption of data in transit: All communications between your device and gtr88 servers are secured with TLS 1.3 protocol and 256-bit SSL encryption, ensuring no third party can intercept your data during transmission.
• Encryption of stored data: Sensitive information such as passwords is stored in a hashed format that cannot be decrypted, even by gtr88 staff.
• Two-Factor Authentication (2FA): GTR88 offers additional protection through 2FA — every new login from an unrecognised device will require further verification via SMS or email.
• 24/7 Monitoring: Our cybersecurity team monitors platform activity around the clock to detect and respond to any anomalies or intrusion attempts.
• Regular audits: The gtr88 platform undergoes security audits by independent expert teams at least twice a year to identify and address any vulnerabilities.
• Data Segregation: User personal data is stored separately from company operational data with strict access controls based on the principle of least privilege.

6Data Retention Period

GTR88 retains your personal information only for as long as it is needed for the purposes stated in this privacy policy, or as required by applicable Malaysian law.

• Active account data: Retained for as long as your account remains active on the gtr88 platform. This data is continuously updated to reflect the most current information.
• Financial transaction data: Retained for a minimum of 7 years from the transaction date, in line with anti-money laundering (AML) compliance requirements and tax obligations in Malaysia.
• Security logs: Retained for 2 years for fraud investigation and security audit purposes.
• Support communication data: Chat history with the gtr88 support team is retained for 3 years for reference and service improvement purposes.
• Closed account data: After account closure, basic personal information is retained for 5 years to fulfil legal obligations before being permanently deleted.

Once the retention period expires, your data will be securely deleted using methods that ensure no data recovery is possible.

7Your Rights as a User

As a gtr88 platform user based in Malaysia, you have the following rights regarding your personal data under the Personal Data Protection Act 2010 (PDPA):

• Right of Access: You have the right to request a copy of all personal information we hold about you. This request will be processed within 21 working days.
• Right to Rectification: If you find that any information we hold is inaccurate or outdated, you may request a correction and we will update it within 14 days.
• Right to Restriction of Processing: In certain circumstances, you may request that we restrict how we process your data while a dispute or complaint is being resolved.
• Right to Withdraw Consent: For data processing based on your consent (such as marketing communications), you may withdraw that consent at any time without affecting your account operations.
• Right to Object: You may object to the processing of your data for specific purposes such as direct marketing.
• Right to Erasure: Where eligible, you may request the deletion of your personal data. However, some data must be retained to fulfil legal obligations.

To exercise any of the above rights, please contact the gtr88 support team via live chat within the platform. Our team will guide you through the necessary process and respond within the stipulated timeframe.

8Children's Privacy

The gtr88 platform is exclusively for users aged 18 and above only. We do not intentionally collect, process, or store any personal information from individuals under the age of 18.

All users are required to verify their age during the registration process and during KYC. Should gtr88 discover that a child's information has been collected unintentionally, we will:

• Suspend the account in question immediately
• Delete all related data as quickly as possible
• Return any remaining account balance to the verified legal guardian upon confirmation

Parents or guardians who have reason to believe their child has registered on this platform are requested to contact us immediately via gtr88 live chat.

9Changes to This Privacy Policy

GTR88 reserves the right to update or amend this Privacy Policy from time to time in line with changes to legislation, technology or our business operations. Any changes made will be posted on this page with a new update date.

For material changes that involve a significant reduction in your data protection, gtr88 will send a notification to your registered email address at least 14 days before the changes take effect. This gives you sufficient time to review the changes and make an informed decision about your continued use of the platform.

Your continued use of the gtr88 platform after the effective date of any changes constitutes your acceptance of the updated privacy policy. We recommend reviewing this page periodically to stay informed of the latest applicable policy.

10How to Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how gtr88 handles your personal data, our team is always ready to assist you.

Official GTR88 Communication Channels:

• Live Chat: The fastest channel — available 24/7 directly within the gtr88 platform
• Support Email: [email protected] (response within 24 business hours)
• Complaint Form: Available in the "Contact Us" section within your user account

For official complaints relating to data protection that cannot be resolved through the channels above, you have the right to submit a complaint to the Department of Personal Data Protection (JPDP) Malaysia, the relevant regulatory authority in this country.

We are committed to addressing every inquiry and complaint seriously and within a reasonable timeframe. Your satisfaction and trust in gtr88 is our top priority.