Privacy Policy — How Gelay88 Protects Your Personal Data

1Introduction

Gelay88 ("Gelay88", "we", "us", or "our") is the operator of the online gaming platform accessible at gelay88.cam (the "Platform"). We are committed to protecting and respecting the privacy of all individuals who interact with our Platform, including registered players, prospective users, and visitors.

This Privacy Policy (the "Policy") sets out the basis on which Gelay88 collects, uses, stores, shares, and otherwise processes personal data relating to you. It applies to all personal data collected through the Platform, through our customer support channels, and through any other interactions you may have with Gelay88.

By registering an account, depositing funds, placing a bet, or otherwise accessing the Platform, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein. Where your consent is the legal basis for a particular processing activity, you may withdraw that consent at any time by contacting us as described in Section 16.

This Policy should be read alongside our Terms & Conditions, which govern your use of the Platform generally.

2Definitions

For the purposes of this Policy, the following terms shall have the meanings set out below:

• "Personal Data" means any information that relates to an identified or identifiable natural person — including name, identification number, contact details, financial information, and online identifiers such as IP addresses.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of Processing Personal Data. In relation to the Platform, the Data Controller is Gelay88.
• "Data Processor" means a third party that Processes Personal Data on behalf of Gelay88 in accordance with Gelay88's written instructions.
• "KYC" means Know Your Customer — the identity and age verification process that Gelay88 is required to conduct in relation to its players.
• "Player" or "User" means any individual who has registered an account on the Platform.
• "Sensitive Personal Data" means Personal Data that warrants heightened protection by reason of its nature, including identification document numbers, financial account details, and data relating to health or criminal records where applicable.

3Data Controller Information

Gelay88 acts as the Data Controller in respect of the Personal Data it collects and processes through the Platform. As Data Controller, Gelay88 is responsible for determining the purposes for which Personal Data is collected and the manner in which it is processed.

Gelay88 has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with applicable data protection obligations and for responding to data subject enquiries. The DPO may be contacted through the details provided in Section 16 of this Policy.

4Personal Data We Collect

Gelay88 collects the following categories of Personal Data in connection with the operation of the Platform:

4.1 Identity & Contact Data

• Full legal name;
• Date of birth;
• Malaysian MyKad (IC) number or passport number (for non-Malaysian residents);
• Residential address;
• Email address;
• Mobile phone number.

4.2 Financial & Transaction Data

• Bank account details (account number, bank name) for withdrawal purposes — e.g., Maybank, CIMB, Public Bank, Hong Leong accounts;
• E-wallet account identifiers associated with Touch 'n Go eWallet, Boost, or GrabPay;
• Cryptocurrency wallet addresses where applicable;
• Deposit and withdrawal history, transaction amounts, and payment method records;
• Wagering activity, game history, and account balance records.

4.3 Technical & Device Data

• IP address and approximate geolocation derived from IP;
• Device type, operating system, and browser information;
• Session duration, pages visited, and in-platform navigation data;
• Login timestamps and authentication logs.

4.4 KYC & Verification Documents

• Photographs or scans of identity documents (MyKad front and back, or passport);
• Selfie images submitted for facial verification purposes, where requested;
• Proof of address documents, where required;
• Proof of payment method ownership, where requested.

4.5 Communications Data

• Records of live chat, email, and WhatsApp support interactions;
• Feedback, complaints, and dispute correspondence;
• Responses to surveys or promotional communications where you have opted in.

5How We Collect Personal Data

Gelay88 collects Personal Data through the following channels and mechanisms:

6Purposes of Data Processing

Gelay88 processes your Personal Data for the following specific, legitimate purposes:

• Account Management: To create, maintain, and administer your Player Account, including verifying your identity and enforcing the 21+ age requirement.
• Payment Processing: To facilitate deposits and withdrawals in MYR via your nominated payment method, including FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, and cryptocurrency channels.
• KYC & Regulatory Compliance: To comply with applicable anti-money laundering (AML), counter-terrorism financing (CTF), and age verification requirements.
• Platform Operation & Security: To operate, maintain, and secure the Platform; to detect and prevent fraud, money laundering, bonus abuse, and other prohibited activities.
• Customer Support: To respond to enquiries, complaints, and disputes; to provide assistance through our live chat, WhatsApp, and email support channels in English, Bahasa Melayu, and Mandarin Chinese.
• Responsible Gambling: To administer responsible gambling tools including deposit limits, self-exclusion, and cooling-off periods; to monitor for signs of problem gambling behaviour.
• Service Improvement: To analyse platform usage patterns and player feedback in order to improve our products, features, and user experience.
• Marketing Communications: To send you promotional communications, bonus offers, and relevant platform updates — but only where you have given explicit consent or where a legitimate interest exists and is not overridden by your privacy rights. You may opt out of marketing communications at any time.
• Legal Obligations: To comply with applicable law, respond to lawful requests from regulatory authorities, and enforce our Terms & Conditions.

7Legal Basis for Processing

Gelay88 relies on the following legal bases for the Processing of your Personal Data:

• Performance of a Contract: Processing necessary to operate your Player Account and to provide the services described in our Terms & Conditions — including account registration, payment processing, and game delivery.
• Legal Obligation: Processing required in order to comply with applicable laws, including KYC/AML requirements, age verification obligations, and record-keeping requirements imposed by applicable regulations.
• Legitimate Interests: Processing necessary for the legitimate interests of Gelay88 — including fraud prevention, platform security, responsible gambling monitoring, and service improvement — where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we rely on your consent as the legal basis for processing (principally for direct marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

8Data Sharing & Disclosure

Gelay88 does not sell, rent, or trade your Personal Data to third parties. We may share your Personal Data with the following categories of recipients strictly on a need-to-know basis and subject to appropriate data protection safeguards:

8.1 Service Providers & Data Processors

We engage trusted third-party service providers who process data on our behalf under written agreements that include appropriate data protection obligations. These include:

• Payment processing providers (FPX gateways, DuitNow, e-wallet platform operators, cryptocurrency payment processors);
• Identity verification and KYC technology providers;
• Fraud detection and anti-money laundering screening services;
• Cloud hosting and data storage providers;
• Customer support platform providers (live chat software, email systems);
• Analytics providers used to improve platform performance.

8.2 Regulatory & Law Enforcement Authorities

Gelay88 may disclose Personal Data to competent regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, court order, or lawful regulatory directive. In such cases, Gelay88 will disclose only the minimum amount of data necessary to satisfy the relevant legal requirement.

8.3 Business Transfers

In the event of a merger, acquisition, sale of assets, or other corporate restructuring involving Gelay88, Personal Data held by Gelay88 may be transferred to the acquiring entity as part of that transaction, subject to the requirements of applicable data protection law. We will notify affected players of any such transfer.

9International Data Transfers

In the course of operating the Platform and engaging service providers, Gelay88 may transfer your Personal Data to recipients located in countries outside of Malaysia. Where such international transfers occur, Gelay88 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that which applies within Malaysia.

These safeguards may include:

• Contractual clauses that obligate the receiving party to protect your data to an appropriate standard;
• Transfers to countries or organisations that have been assessed as providing an adequate level of data protection;
• Other technical and organisational measures appropriate to the circumstances of the transfer.

You may request further information about the safeguards applicable to specific international transfers by contacting us at the details in Section 16.

10Data Retention

Gelay88 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or for as long as is required by applicable law, regulation, or contractual obligation. The following indicative retention periods apply:

Upon the expiry of the applicable retention period, Personal Data will be securely deleted or anonymised. Where data must be retained beyond its standard retention period due to an active dispute, legal proceedings, or regulatory investigation, it will be retained until that matter is resolved.

11Cookies & Tracking Technologies

Gelay88 uses cookies and similar technologies (including session identifiers, local storage, and analytical scripts) to operate and improve the Platform. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the basic operation of the Platform — including session management, login authentication, and security functions. These cannot be disabled without affecting Platform functionality.
• Functional Cookies: Enable enhanced features such as remembering your preferred language, display settings, and responsible gambling tool configurations.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players navigate and use the Platform, enabling us to identify areas for improvement. Individual players are not identified through analytics data.
• Security Cookies: Used to detect and prevent fraudulent activity, unauthorised access, and bot interactions.

You can manage cookie preferences through your browser settings. Please note that disabling certain categories of cookies may impact Platform functionality. Gelay88 does not use cookies to serve third-party advertising.

12User Rights

Subject to applicable law, you hold the following rights in relation to your Personal Data held by Gelay88. To exercise any of these rights, please contact us using the details in Section 16.

Gelay88 will respond to all valid rights requests within 30 days of receipt. Where a request is complex or we receive a high volume of requests, this period may be extended by a further 30 days, of which you will be informed. We will not charge a fee for exercising your rights unless a request is manifestly unfounded or excessive.

13Security Measures

Gelay88 implements appropriate technical and organisational security measures to protect Personal Data against unauthorised access, alteration, disclosure, or destruction. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform;
• Encrypted storage of sensitive Personal Data at rest;
• Role-based access controls limiting employee access to Personal Data strictly to those with a legitimate operational need;
• Two-factor authentication (2FA) options for Player Accounts;
• Real-time fraud monitoring and anomaly detection systems;
• Regular security assessments and penetration testing;
• Staff training on data protection and information security obligations.

Notwithstanding these measures, no method of electronic transmission or storage is 100% secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, Gelay88 will notify you and any applicable regulatory authority in accordance with applicable law.

14Children & Minors

The Gelay88 Platform is strictly intended for adults aged 21 years and above. Gelay88 does not knowingly collect Personal Data from any person under the age of 21.

Age verification is a mandatory step in the account registration and KYC process. Where Gelay88 discovers that Personal Data has been collected from a person under 21, that Account will be immediately closed, all associated data will be deleted to the extent permitted by applicable law, and any funds deposited will be returned to the verified payment method associated with the Account.

If you have reason to believe that a person under 21 is accessing the Platform or has registered an account, please notify our support team immediately using the contact details in Section 16.

15Changes to This Privacy Policy

Gelay88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, data processing practices, or Platform functionality. Where changes are material, Gelay88 will notify registered Players by email to the registered address, or by prominent notice on the Platform, prior to the changes taking effect.

The "Last updated" date at the top of this Policy reflects the most recent revision. We encourage you to review this Policy periodically to stay informed about how we protect your Personal Data. Your continued use of the Platform following the publication of any revised Policy constitutes your acceptance of the changes.

16Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the manner in which Gelay88 processes your Personal Data — including requests to exercise your data rights — please contact us through the following channels. All contact details are provided as plain text and are not clickable links:

We aim to acknowledge all privacy-related enquiries within 2 business days and to provide a substantive response within 30 calendar days. For complex requests, we will inform you if additional time is required.

If you are not satisfied with our response to a privacy concern, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.