Privacy Policy – gtr88

1. Introduction

gtr88 ("gtr88", "we", "us", "our") operates the online gaming platform at gtr88.win ("Platform"). This Privacy Policy ("Policy") describes how gtr88 collects, uses, processes, stores, and discloses personal data relating to individuals who register for, access, or use the Platform ("you", "your", "Member").

This Policy should be read together with the gtr88 Terms & Conditions, which govern your use of the Platform. By registering an account or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

gtr88 is committed to protecting the privacy and security of Members' personal data in accordance with applicable data protection laws and internationally recognised best practices. We take our obligations under applicable personal data protection frameworks seriously and have implemented appropriate technical and organisational measures to safeguard the data we hold.

2. Personal Data We Collect

gtr88 collects personal data in the following categories:

Category	Examples	Source
Identity Data	Full name, date of birth, nationality, government-issued ID number	Provided by you during registration or KYC
Contact Data	Mobile phone number, email address	Provided by you during registration
Financial Data	Payment method details (e.g., Touch n Go account reference, bank account number last four digits, USDT wallet address), deposit and withdrawal history	Provided by you during deposits/withdrawals; generated by platform transactions
Transaction Data	Wager history, game session logs, win/loss records, bonus usage	Generated automatically by platform activity
Technical Data	IP address, device type and operating system, browser type, session timestamps, geolocation data (country/region level)	Collected automatically via cookies and server logs
Communication Data	Live chat transcripts, support ticket content, email correspondence	Generated during support interactions
Responsible Gaming Data	Deposit limits set, self-exclusion requests, session time preferences	Provided by you via account settings

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond what is strictly required for identity verification under applicable KYC regulations.

3. How We Use Your Personal Data

1. Account management: To create, maintain, and administer your gtr88 Account, including processing deposits, withdrawals, bonus credits, and VIP programme participation.
2. Identity verification (KYC): To verify your age and identity as required by applicable regulations, specifically to confirm you meet the 21+ age requirement before processing any withdrawal.
3. Transaction processing: To process deposits via Touch n Go, Boost, GrabPay, DuitNow, Maybank, CIMB, Public Bank, Hong Leong, USDT TRC20, and other supported payment methods, and to process withdrawal requests to your verified payment method.
4. Platform security and fraud prevention: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, duplicate accounts, and other conduct that breaches our Terms & Conditions.
5. Customer support: To respond to your enquiries, complaints, and support requests submitted via live chat or email.
6. Responsible gaming: To implement and monitor the deposit limits, session notifications, reality checks, and self-exclusion settings you configure, and to identify potentially problematic gaming behaviour patterns where we are required or permitted to do so.
7. Marketing communications: To send you information about promotions, bonuses, and new features at gtr88, where you have not opted out of such communications. You may unsubscribe from marketing emails at any time.
8. Legal compliance: To comply with applicable laws, regulations, court orders, and requests from competent authorities.
9. Platform improvement: To analyse aggregated, anonymised usage data for the purpose of improving Platform performance, user experience, and game selection.

4. Legal Bases for Processing

gtr88 processes your personal data on the following legal bases:

1. Contractual necessity: Processing required to perform our obligations under the Terms & Conditions, including account management and payment processing.
2. Legal obligation: Processing required to comply with applicable laws, including KYC, anti-money-laundering, and responsible gaming obligations.
3. Legitimate interests: Processing necessary for our legitimate business interests, including fraud detection, Platform security, and improvement of services, where such interests are not overridden by your data protection rights.
4. Consent: Processing for marketing communications, where consent has been given and can be withdrawn at any time without affecting the lawfulness of prior processing.

5. Data Sharing and Disclosure

1. Payment processors: We share financial and identity data with payment service providers (including e-wallet operators and banking partners) strictly as necessary to process your deposits and withdrawals. These providers are contractually bound to process your data only for the specified purpose.
2. KYC and identity verification providers: We share identity documents and personal data with licensed KYC verification service providers to fulfil our regulatory age and identity verification obligations.
3. Game providers: Licensed game studios and live dealer operators may receive pseudonymised session identifiers and wager data necessary to deliver game content and calculate outcomes. Full identity data is not shared with game providers.
4. Regulatory and law enforcement authorities: We may disclose personal data to competent regulatory bodies, law enforcement agencies, or courts where required by applicable law, valid legal process, or court order.
5. Business successors: In the event of a merger, acquisition, or sale of substantially all of gtr88's assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.
6. gtr88 does not sell, rent, barter, or otherwise commercially transfer your personal data to third-party marketers, data brokers, or advertising networks.

6. Cookies and Tracking Technologies

1. The gtr88 Platform uses cookies and similar tracking technologies for the following purposes:
   • Essential cookies: Required for session authentication, security token management, and load balancing. These cannot be disabled without affecting your ability to use the Platform.
   • Performance cookies: Used to collect anonymised analytics data on Platform usage, page load times, and error rates, to assist us in improving Platform performance.
   • Preference cookies: Used to remember your settings, such as language preference and responsible gaming tool configurations.
2. gtr88 does not deploy third-party advertising cookies, retargeting pixels, or social media tracking scripts on the Platform.
3. You may manage or disable non-essential cookies via your browser settings. Note that disabling essential cookies will impair your ability to log in and use the Platform.

7. Data Retention

1. gtr88 retains personal data for no longer than is necessary for the purpose for which it was collected, subject to applicable legal retention requirements.
2. Account and transaction data is retained for a minimum period of five (5) years following account closure, as required by applicable anti-money-laundering and financial record-keeping regulations.
3. Communication and support data is retained for two (2) years from the date of the last interaction.
4. Marketing consent records are retained for the duration of the Member relationship and for two (2) years thereafter.
5. Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with gtr88's data destruction procedures.

8. Data Security

1. gtr88 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include 256-bit TLS/SSL encryption of data in transit, encryption of sensitive data at rest, role-based access controls, and regular security audits.
2. Access to personal data is restricted to gtr88 personnel and authorised third-party processors who have a legitimate need to access it in connection with their duties or services.
3. In the event of a personal data breach that is likely to result in a high risk to the rights and freedoms of affected individuals, gtr88 will notify affected Members without undue delay in accordance with applicable data breach notification requirements.

9. Your Data Protection Rights

Subject to applicable law, you have the following rights with respect to your personal data held by gtr88:

1. Right of access: You may request a copy of the personal data gtr88 holds about you.
2. Right to rectification: You may request correction of inaccurate or incomplete personal data.
3. Right to erasure: You may request deletion of your personal data, subject to gtr88's legal retention obligations and ongoing account status.
4. Right to restriction of processing: You may request that gtr88 restrict processing of your personal data in certain circumstances.
5. Right to data portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request transfer of your data in a structured, machine-readable format.
6. Right to withdraw consent: Where processing is based on consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.
7. To exercise any of the above rights, please contact gtr88 support via live chat or email at [email protected]. We will respond to verified requests within thirty (30) days.

10. International Data Transfers

1. gtr88 operates internationally and may transfer your personal data to servers or service providers located outside of Malaysia. Where such transfers occur, gtr88 ensures that appropriate safeguards are in place — including contractual data transfer agreements based on recognised international frameworks — to protect your data to a standard equivalent to that required under applicable Malaysian data protection law.

11. Children and Minors

1. The gtr88 Platform is strictly for adults aged 21 and above. gtr88 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been submitted by a person under 21, we will immediately suspend the relevant account, delete the associated personal data, and return any funds deposited to the extent permitted by our fraud prevention and AML obligations.
2. If you believe that a minor has registered or is using a gtr88 account, please contact us immediately at [email protected].

12. Changes to This Privacy Policy

1. gtr88 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to Members via email to the registered address or via a prominent notice on the Platform prior to the changes taking effect.
2. Your continued use of the Platform following the effective date of updated Policy constitutes your acceptance of the revised terms. The "Last Updated" date at the top of this page indicates when this Policy was most recently revised.

13. Contact Us

For any privacy-related queries, data subject access requests, or concerns regarding gtr88's handling of your personal data, please contact our Data Protection team via:

• Live Chat: Available 24/7 via the Platform
• Email: [email protected] (plain text — not a clickable link)

We aim to respond to all privacy-related enquiries within five (5) business days. Complex data subject access requests may take up to thirty (30) calendar days to fulfil.