gsbet Privacy Policy

1. Overview

This Privacy Policy ("Policy") applies to all personal data collected and processed by gsbet ("the Company", "we", "us", "our") in connection with the operation of the online gaming platform at https://gsbet.asia and the gsbet mobile application (collectively, "the Platform"). It applies to all registered players, prospective players, and visitors to the Platform, including those based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and elsewhere in Malaysia and internationally.

gsbet is committed to protecting your privacy and handling your personal data responsibly, transparently, and in accordance with applicable data protection laws and the requirements of our international gaming authority licence. This Policy should be read alongside our Terms & Conditions, which govern your use of the Platform more broadly.

By accessing the Platform or registering a gsbet account, you acknowledge that you have read and understood this Policy. If you do not agree with any provision of this Policy, you should discontinue use of the Platform and contact us to close your account.

2. Personal Data We Collect

2.1 Registration & Identity Data

When you register a gsbet account, we collect the following information to fulfil our Know Your Customer (KYC) and anti-money laundering (AML) obligations:

• Full legal name as it appears on your government-issued identification;
• Date of birth (to verify you meet the 21+ age requirement);
• Residential address, including city and postcode;
• Email address and contact telephone number;
• Username and encrypted password (passwords are stored as one-way hashes and are never accessible in plain text, even to gsbet staff).

2.2 Identity Verification Documents

As part of the KYC verification process required before withdrawal processing, gsbet may collect copies of:

• Government-issued photo identification (MyKad, passport, or Malaysian driving licence);
• Proof of residential address (utility bill, bank statement, or official correspondence dated within 90 days);
• Proof of payment method ownership.

2.3 Financial Transaction Data

We collect records of all financial transactions conducted through the Platform, including deposit amounts, payment method identifiers (partial account numbers, e-wallet IDs), withdrawal requests, transaction timestamps, and betting activity. This data is required for regulatory reporting, AML compliance, and the resolution of any financial disputes.

2.4 Usage & Technical Data

When you access the Platform, we automatically collect technical data including your IP address, device type and operating system, browser type and version, session duration, pages visited, game titles played, and bet amounts. This data is used for security monitoring, fraud detection, platform optimisation, and aggregate analytics.

2.5 Communications Data

If you contact gsbet support via Live Chat, WhatsApp (available through your member dashboard), or email, we retain records of those communications for quality assurance, dispute resolution, and regulatory audit purposes.

3. How We Use Your Personal Data

gsbet uses personal data for the following purposes:

• Account creation and management: Registering your account, verifying your identity, and maintaining your player profile;
• Service delivery: Processing deposits and withdrawals, crediting winnings, resolving betting disputes, and providing customer support;
• Regulatory compliance: Meeting our KYC, AML, and responsible gaming obligations under our international gaming authority licence;
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, account takeovers, and other security incidents;
• Platform improvement: Analysing aggregated usage data to improve Platform performance, game selection, and the overall player experience;
• Marketing communications: Sending promotional offers, bonus notifications, and product updates to players who have not opted out of marketing communications. You may withdraw consent for marketing communications at any time via Account Settings or by contacting support;
• Responsible gaming: Monitoring betting patterns to identify potential problem gambling behaviour and trigger responsible gaming interventions where required by our licence obligations.

4. Legal Basis for Processing

gsbet processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and gsbet — account registration, transaction processing, and service delivery;
• Legal obligation: Processing required to comply with applicable law, including KYC/AML regulations and gaming licence conditions;
• Legitimate interests: Processing carried out in gsbet's legitimate business interests — fraud prevention, security monitoring, and platform analytics — provided those interests are not overridden by your rights and interests;
• Consent: Processing for marketing communications, where consent has been obtained and may be withdrawn at any time.

5. Data Sharing & Disclosure

gsbet does not sell, rent, or trade your personal data to third parties for their marketing purposes. We may share your data with the following categories of recipients, strictly on a need-to-know basis:

• Payment service providers: Including FPX network operators, Touch 'n Go eWallet, Boost, Visa, and Mastercard processing partners, for the purpose of executing financial transactions;
• Identity verification services: Third-party KYC providers who assist in verifying the identity documents submitted by players;
• Technology service providers: Cloud infrastructure, analytics, and security service providers who process data on our behalf under strict data processing agreements;
• Game providers: Certified game providers such as Evolution Gaming, Pragmatic Play, and others who operate games within the Platform may receive session data necessary to operate their games;
• Regulatory and law enforcement authorities: Where we are required by law, court order, or gaming regulatory authority to disclose player data, we will do so;
• Professional advisors: Legal, audit, and compliance advisors who require access to data in the course of providing professional services to gsbet, subject to confidentiality obligations.

All third-party service providers engaged by gsbet are required to process personal data only for the specific purposes for which it was shared, and to maintain appropriate security standards consistent with this Policy.

6. Cookies & Tracking Technologies

The gsbet Platform uses cookies and similar tracking technologies. Cookies are small text files placed on your device when you visit the Platform. gsbet uses the following categories of cookies:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in to your gsbet account. These cannot be disabled;
• Functional cookies: Remember your preferences such as language settings and game lobby layout preferences;
• Analytics cookies: Collect aggregated, anonymised data about how visitors use the Platform, enabling us to identify performance issues and improve the user experience. No individual player is identifiable from analytics data.

gsbet does not use advertising cookies or permit third-party advertising networks to place tracking cookies on the Platform. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will impair your ability to use the Platform.

7. Data Retention

gsbet retains personal data for the period necessary to fulfil the purpose for which it was collected, and for such additional period as required by law or our regulatory obligations:

• Account registration data and KYC documents: retained for a minimum of 5 years from the date of account closure, as required by AML regulations;
• Financial transaction records: retained for a minimum of 7 years from the transaction date;
• Communications records: retained for 3 years from the date of the communication;
• Usage and technical data: retained for 13 months in identifiable form, after which it is aggregated and anonymised.

Following the expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised. Players who close their gsbet accounts should be aware that certain data will be retained beyond account closure for the periods set out above, as required by law.

8. Security Measures

gsbet implements a layered security architecture to protect personal data against unauthorised access, disclosure, alteration, or destruction. Key measures include:

• TLS 1.2+ encryption for all data in transit between player devices and gsbet servers;
• AES-256 encryption for sensitive data at rest, including identity documents and payment method data;
• One-way cryptographic hashing of all player passwords — gsbet staff cannot view or recover plaintext passwords;
• Role-based access controls ensuring that employee access to player data is limited to the minimum necessary for each role;
• Continuous monitoring for suspicious access patterns, with automated alerts for anomalous activity;
• Regular security audits and penetration testing conducted by independent third parties.

While gsbet employs industry-standard security practices, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in risk to your rights and freedoms, gsbet will notify affected players and the relevant regulatory authority within the timeframes required by applicable law.

9. Your Data Protection Rights

As a gsbet player, you have the following rights in relation to your personal data. To exercise any of these rights, contact us via Live Chat or email at [email protected]:

• Right of access: Request a copy of the personal data gsbet holds about you;
• Right to rectification: Request correction of inaccurate or incomplete personal data;
• Right to erasure: Request deletion of your personal data, subject to our legal retention obligations. Note that data subject to regulatory retention requirements cannot be deleted on request;
• Right to restriction: Request that we restrict processing of your data in certain circumstances — for example, while you contest the accuracy of data we hold;
• Right to data portability: Request a copy of data you have provided to us in a structured, machine-readable format;
• Right to object: Object to processing carried out on the basis of legitimate interests, including direct marketing. You may opt out of marketing communications at any time via Account Settings;
• Right to withdraw consent: Where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of prior processing.

gsbet will respond to data subject requests within 30 days of receipt. In complex cases, we may extend this period by a further 60 days with prior notice. There is no charge for exercising your rights, except where requests are manifestly unfounded or excessive.

10. Children's Privacy

The gsbet Platform is strictly for adults aged 21 and above. gsbet does not knowingly collect personal data from individuals under 21 years of age. If we become aware that a registered account belongs to an individual under 21, we will immediately close the account, handle any associated funds in accordance with our regulatory obligations, and delete the personal data of the underage individual except to the extent that retention is required for regulatory reporting purposes.

Parents and guardians who have reason to believe that a minor may have registered a gsbet account should contact our support team immediately via Live Chat.

11. International Data Transfers

gsbet's primary infrastructure is hosted in data centres within Asia-Pacific. Some service providers and game providers engaged by gsbet may be located outside Malaysia, which means your data may be transferred to and processed in countries with different data protection standards than those in Malaysia.

Where such transfers occur, gsbet ensures that adequate safeguards are in place — including contractual obligations requiring recipient organisations to protect your data to a standard equivalent to this Policy. By using the gsbet Platform, you acknowledge and consent to the transfer of your data as described in this section.

12. Changes to This Privacy Policy

gsbet may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or the services we offer. Material changes will be communicated to registered players by email to the address on file and by a prominent notice on the Platform at least 7 days before the amended policy takes effect.

The "Last Updated" date at the top of this page indicates when the most recent revision was made. We encourage you to review this Policy periodically. Continued use of the Platform following the effective date of any amendment constitutes acceptance of the revised Policy.

13. Contact & Data Enquiries

If you have questions, concerns, or requests relating to this Privacy Policy or the way gsbet handles your personal data, please contact us through the following channels:

For complaints regarding our data practices that are not resolved through our internal process, you may escalate the matter to the data protection authority or gaming regulatory body with jurisdiction over gsbet's operations.