G168 Privacy Policy – Malaysia Member Personal Data Protection

01 Introduction

Welcome to g168 – Malaysia's leading online gaming platform. We understand that your trust is our most valuable asset, and that trust begins with transparency about how we handle your personal information.

This Privacy Policy explains in detail how g168 collects, uses, stores, processes, and protects your personal data when you use our platform, website, mobile app, and any services we offer. It also outlines your rights as a user and how you can manage your privacy preferences.

By registering an account or continuing to use the g168 platform, you agree to the terms set out in this Privacy Policy. We encourage you to read this document carefully and contact our support team if you have any questions.

02 Types of Personal Data We Collect

G168 only collects personal data that is genuinely necessary to provide you with a safe, legally compliant, and high-quality service. The following are the categories of data we collect:

03 How We Collect Your Data

Your personal data is collected through several transparent and controlled channels. We only collect information when there is a clear and legitimate need:

• Account Registration: When you register a new account at g168, you will be required to complete a registration form with basic information such as your name, email, and phone number.
• KYC Verification Process: To comply with anti-money laundering (AML) legal requirements, we collect identity verification documents such as a copy of your MyKad and proof of address.
• Financial Transactions: Bank account details and transaction records are collected automatically when you make a deposit or withdrawal.
• Platform Usage: Technical and usage data is collected automatically via cookies, server logs, and similar tracking technologies as you browse and use our platform.
• Support Communications: When you contact our customer support team via Live Chat or email, those conversations may be recorded for quality and training purposes.
• Referral & Promotions Program: When you participate in promotions or referral programs, additional information related to that participation may be collected.

04 Purpose of Using Your Personal Data

G168 uses your personal data solely for legitimate and necessary purposes. The following are the primary purposes for which your data is used:

• Creating and managing your account and processing registrations securely and accurately.
• Processing deposits, withdrawals and all financial transactions promptly and efficiently.
• Performing identity verification (KYC) to comply with anti-money laundering legal requirements in force in Malaysia.
• Providing responsive and effective customer support and resolving any complaints or disputes.
• Sending important notifications related to your account, policy changes, eligible promotions and security updates.
• Detecting and preventing fraud, platform abuse, duplicate accounts and other suspicious activity.
• Enhancing the user experience through aggregated and anonymised data analysis for product and service improvements.
• Complying with legal obligations, court orders or requirements from relevant regulatory authorities.

05 Data Sharing with Third Parties

G168 understands how important your trust is, and we take an extremely careful approach to data sharing. We never sells your personal data to any party. However, in certain limited situations, we need to share your data with the following parties:

• Payment Service Providers: Transaction information that must be shared with FPX, DuitNow, Touch 'n Go eWallet, GrabPay and ShopeePay to process your payments securely.
• Game Providers: Minimum game data necessary to deliver a smooth gaming experience from our licensed game providers.
• Identity Verification Providers: Data required for the KYC process is shared with certified third-party identity verification service providers.
• Relevant Authorities: We are legally required to disclose certain information to authorities such as Bank Negara Malaysia, the Royal Malaysia Police (PDRM), or the courts when lawfully requested.
• Auditors and Legal Advisors: In the context of compliance audits, legal claims, or internal investigations, auditors or legal advisors bound by professional confidentiality obligations may access certain data.

All third parties with whom we share data are bound by strict data protection agreements and are required to process your data solely for the stated purposes.

06 Data Security Measures

The security of your data is a responsibility we take extremely seriously. g168 implements multiple layers of technical and organisational security controls to protect your personal data from unauthorised access, loss, destruction or disclosure:

• Data Encryption in Transit: All communications between your device and g168 servers are encrypted using TLS 1.3 protocol with AES-256-bit encryption — the standard used by leading financial institutions worldwide.
• Data Encryption at Rest: Sensitive data stored in our databases, including authentication information and identity documents, is encrypted at rest using the strongest encryption algorithms.
• Layered Access Control: A role-based access control (RBAC) system ensures that g168 staff can only access data necessary for their specific duties. All access is logged and monitored.
• Continuous Threat Monitoring: Intrusion detection and prevention systems (IDS/IPS) along with 24/7 security monitoring enable us to detect and respond to cyber threats promptly.
• Regular Security Audits: We conduct regular penetration testing and independent security audits to identify and address any vulnerabilities before they can be exploited.
• Staff Training: All g168 staff undergo regular security awareness and data privacy training to ensure best practices are upheld at every level of the organisation.

07 Data Retention Period

G168 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or for as long as required by applicable Malaysian law.

• Active Account Data: For as long as your account remains active and has not been closed, your personal data will be retained to allow you to fully use g168 services.
• Data After Account Closure: After account closure, we retain your personal data for a minimum of 7 years in compliance with Malaysia's AML/CFT legal requirements and tax reporting obligations.
• Transaction Records: All financial transaction records are retained for 7 years from the date of the relevant transaction, in compliance with Malaysia's banking and financial legal requirements.
• Communication Logs: Customer support communication recordings and logs are retained for 2 years for quality assurance, training, and dispute resolution purposes.
• Technical Data: Technical logs and aggregated usage data are retained for 12 months before being deleted or converted to fully anonymised format.

Once the retention period expires and there is no legal requirement to retain the data, g168 will securely delete or destroy your personal data using industry-recognised methods.

08 Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by g168:

09 Cookies and Tracking Technologies

G168 uses cookies and similar tracking technologies to enhance the user experience, analyse platform performance, and ensure security features function correctly. Cookies are small text files stored on your device when you browse our website.

• Essential Cookies: Required for core platform functions such as login sessions, security, and transaction integrity. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting aggregated and anonymised data on how users interact with our platform to help us improve the overall user experience.
• Functional Cookies: Storing user preferences such as language, display settings and accessibility options to deliver a more personalised experience.
• Analytics Cookies: Used to understand usage patterns and analyse platform traffic for the purpose of continuous product improvement.

You can manage cookie settings through your web browser preferences. However, disabling essential cookies may affect the functionality and security of your experience on the g168 platform.

10 Third-Party Links and Services

The g168 platform may include integrations with third-party services such as game providers, payment providers, and analytics tools. Each provider operates under their own privacy policy, and g168 is not responsible for the privacy practices of these third parties.

All third-party providers working with g168 have undergone rigorous security and privacy screening. We share only the minimum data necessary for specific purposes, and every provider is bound by a data processing agreement that mandates protection standards equivalent to our own.

11 Child Protection

G168 is an adult gaming platform intended exclusively for individuals aged 18 and above. We do not intentionally collect, process, or store any personal data from individuals under the age of 18.

If we discover that personal data of a child (minor) has been collected without valid parental or guardian consent, we will take immediate steps to delete that data from our systems. Parents or guardians with concerns about this matter may contact us directly for prompt action.

12 Amendments to This Privacy Policy

G168 reserves the right to amend, update, or replace this Privacy Policy at any time to reflect changes in our practices, updated legal requirements, or service improvements. Any material amendments will be communicated to you through:

• In-app or platform notifications from g168 when you next log in.
• A notification email will be sent to your registered email address at least 14 days before the amendments take effect.
• Updates to this Privacy Policy page will be indicated by a new "Updated" date shown at the top of the document.

Your continued use of the g168 platform after the effective date of any amendment will be deemed as your acceptance of the updated terms. If you do not agree with the amendments, you have the right to close your account by contacting our support team.

We encourage you to review this page regularly to stay informed about how we protect your personal information. Archived versions of previous Privacy Policies are available upon request.

13 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how g168 handles your personal data, our team is ready to assist you:

We are committed to resolving every enquiry and complaint fairly and promptly. If you feel we have not addressed your concern to your satisfaction, you have the right to file a complaint with Malaysia's Department of Personal Data Protection (JPDP) through their official channels.