Privacy Policy
gaspol168

This Privacy Policy ("Policy") is published by gaspol168 ("the Platform", "we", "us", "our") and governs the collection, processing, storage, and disclosure of personal data relating to individuals ("you", "Player", "User") who access or use the gaspol168 website at gaspol168.cam and all associated services, products, and interfaces provided by the Platform.

gaspol168 is an online casino and sports betting platform serving Malaysian players and other eligible users with gaming entertainment services. We are committed to handling personal data responsibly, transparently, and in accordance with internationally recognised data protection principles.

This Policy should be read in conjunction with our Terms & Conditions, which govern your use of the Platform more broadly. By registering an Account on gaspol168 or by continuing to use our services, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

For the purposes of this Privacy Policy, the following definitions shall apply:

gaspol168 collects personal data through several channels: directly from you when you register and use the Platform, automatically through your interaction with our website and services, and in certain circumstances from third-party sources. The categories of data we collect are as follows:

gaspol168 processes your personal data for the following purposes:

• Account Management: To create, maintain, and administer your registered Account, including authentication, account security, and profile updates;
• Service Delivery: To provide access to games, sports betting markets, promotions, and all other features of the Platform;
• Payment Processing: To process MYR deposits and withdrawals via approved Malaysian payment channels including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and cryptocurrency networks;
• Identity Verification (KYC): To verify your identity, age (minimum 21 years), and payment method ownership in compliance with our anti-fraud and anti-money-laundering obligations;
• Customer Support: To respond to your queries, complaints, and support requests submitted via live chat or email;
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, bonus abuse, and other prohibited conduct;
• Regulatory Compliance: To comply with applicable licensing requirements, anti-money-laundering obligations, and any lawful requests from competent authorities;
• Responsible Gambling: To administer your responsible gambling settings including deposit limits, self-exclusion, and cooling-off periods, and to proactively identify at-risk gambling patterns;
• Marketing Communications: To send you promotional offers, bonus notifications, and Platform updates, where you have provided consent and have not subsequently opted out;
• Platform Improvement: To analyse usage patterns, technical performance, and player behaviour in aggregate (anonymised where possible) for the purpose of improving the Platform's functionality and user experience.

gaspol168 processes personal data on the following legal bases, depending on the nature of the processing activity:

• Contractual Necessity: Processing required to perform the contract between you and gaspol168 (i.e., the Terms & Conditions), including account creation, payment processing, and service delivery;
• Legal Obligation: Processing required to comply with applicable legal obligations, including KYC identity verification, anti-money-laundering checks, and responses to lawful authority requests;
• Legitimate Interests: Processing necessary for the legitimate interests of gaspol168 where not overridden by your rights and interests, including fraud prevention, Platform security, and product improvement;
• Consent: Processing based on your freely given consent, including the sending of marketing communications and the use of non-essential cookies. Where consent is the legal basis, you may withdraw it at any time without affecting the lawfulness of processing prior to withdrawal.

gaspol168 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly for the purposes described in this Policy:

• Payment Service Providers: Third-party payment processors and e-wallet operators (including Touch 'n Go, Boost, GrabPay, DuitNow, FPX banking partners, and cryptocurrency network validators) solely to the extent necessary to process your deposit and withdrawal transactions;
• Identity Verification Providers: KYC and anti-fraud service providers who assist with identity verification and document authentication on our behalf;
• Game Technology Providers: Software studios and technology partners who provide games and betting infrastructure to gaspol168 may receive anonymised or pseudonymised session data for technical performance purposes;
• IT & Security Service Providers: Cloud hosting, content delivery, and cybersecurity service providers acting as Data Processors under written data processing agreements with gaspol168;
• Legal & Regulatory Authorities: Where required by applicable law, court order, or regulatory requirement, gaspol168 may disclose personal data to competent governmental or law enforcement authorities. We will notify you of such disclosure unless prohibited by law;
• Professional Advisors: Legal, accounting, and compliance advisors engaged by gaspol168, under confidentiality obligations, as necessary for the conduct of our business.

gaspol168 uses cookies and similar tracking technologies on the Platform to improve your user experience, ensure Platform security, and analyse usage patterns. The cookies we use fall into the following categories:

You may control cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may impair your ability to use the Platform. For analytics and functional cookies, you may manage your preferences through the cookie consent interface on the Platform.

gaspol168 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulation. The following general retention guidelines apply:

• Account and Identity Data: Retained for the duration of the active Account relationship and for a minimum period of five (5) years following Account closure, in compliance with anti-money-laundering and record-keeping obligations;
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with standard financial record-keeping requirements;
• KYC Documentation: Retained for a minimum of five (5) years from the date of verification or from Account closure, whichever is later;
• Customer Support Communications: Retained for two (2) years from the date of the final communication in each support case, unless the matter remains subject to ongoing dispute;
• Technical and Log Data: Server logs and session data are typically retained for twelve (12) months for security and fraud investigation purposes, after which they are anonymised or deleted;
• Marketing Preferences: Retained until you withdraw consent for marketing communications, after which your opt-out preference will be retained indefinitely to prevent inadvertent re-subscription.

Upon the expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised. Where deletion is not immediately practicable due to technical constraints, data will be securely isolated and protected from further processing until deletion can be completed.

gaspol168 implements a range of technical and organisational security measures to protect your personal data from unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:

• SSL/TLS Encryption: All data transmitted between your device and the gaspol168 Platform is encrypted using industry-standard TLS protocols;
• Encrypted Storage: Sensitive personal data, including KYC documents and payment identifiers, is stored in encrypted form on secured servers;
• Access Controls: Access to personal data by gaspol168 staff is restricted on a need-to-know basis, with role-based access controls and activity audit logging;
• Penetration Testing: The Platform undergoes periodic security assessments to identify and remediate technical vulnerabilities;
• Incident Response: gaspol168 maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, we will notify affected individuals within a reasonable timeframe.

As an international online gaming platform serving players including those based in Malaysia, gaspol168 may process and store personal data on servers located outside of Malaysia. This includes the use of cloud infrastructure and third-party service providers based in various jurisdictions internationally.

Where personal data is transferred to countries that do not provide a level of data protection equivalent to that of Malaysia or the Player's home jurisdiction, gaspol168 ensures that appropriate safeguards are in place, including:

• Contractual clauses in agreements with Data Processors requiring adherence to equivalent data protection standards;
• Data processing agreements that impose binding obligations on recipients to implement appropriate technical and organisational security measures;
• Transfers only to jurisdictions or entities with recognised adequacy determinations or equivalent protective frameworks where applicable.

By using the gaspol168 Platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions other than Malaysia. We take all reasonably practicable steps to ensure that such transfers are conducted securely and in compliance with this Policy.

Subject to applicable law and certain limited exceptions (for example, where data must be retained for legal compliance purposes), you have the following rights in relation to your personal data held by gaspol168:

To exercise any of the above rights, please contact us via the support channels listed in Section 14 of this Policy. We will respond to verified requests within a reasonable timeframe. gaspol168 reserves the right to verify your identity before processing any data rights request, and may decline requests that are manifestly unfounded, excessive, or conflict with legal obligations.

gaspol168 maintains a strict minimum age requirement of 21 years for all Account registrations and gaming activity on the Platform. This Policy and the Platform as a whole are not directed at, and must not be used by, individuals under the age of 21.

We do not knowingly collect personal data from individuals under 21 years of age. If you are a parent or guardian and believe that a minor has registered an Account or submitted personal data to gaspol168, please contact our support team immediately. Upon verified confirmation, we will take prompt steps to close the relevant Account and delete any associated personal data.

gaspol168 reserves the right to update, amend, or replace this Privacy Policy at any time. Where material changes are made, we will notify registered Players by email to the address associated with their Account and/or by posting a prominent notice on the Platform prior to the change taking effect.

The "Last Updated" date at the top of this page will be revised to reflect the date of any change. We encourage you to review this Policy periodically to remain informed of how your personal data is processed. Your continued use of the Platform following the publication of any revised Policy constitutes your acceptance of the changes.

If you do not agree to any amendment to this Privacy Policy, you should discontinue use of the Platform and may contact us to request Account closure and the processing of any applicable data deletion request.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or wish to raise a concern about how your personal data is handled by gaspol168, please contact our team through the following channels:

We take all privacy concerns seriously. If you are not satisfied with our response to a privacy complaint, you may wish to seek guidance from a qualified legal professional in your jurisdiction regarding your available remedies.