Privacy Policy

This Privacy Policy ("Policy") sets out how GSBet ("we", "us", "our", or "the Company") collects, uses, stores, shares, and protects personal data relating to individuals ("you", "the User", or "the Player") who access or use the GSBet platform available at gsbet.cam and any associated services, features, or applications (collectively, the "Platform").

GSBet is an online entertainment platform providing live casino games, video slots, sports betting, and instant games to eligible players, including players based across Malaysia — in cities such as Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam. As a platform that collects and processes personal data in the course of providing these services, we are committed to handling that data responsibly, transparently, and in compliance with applicable data protection principles.

By registering an account on the Platform, accessing any part of our services, or submitting any personal information to us, you acknowledge that you have read and understood this Policy, and you consent to the collection and use of your personal data as described herein. This Policy is incorporated into and forms part of our Terms and Conditions.

The following definitions apply throughout this Privacy Policy:

GSBet collects Personal Data from you through several channels: directly when you register or interact with the Platform, automatically through technical systems as you use the Platform, and from regulated third-party sources where required for compliance purposes.

3.1 Data You Provide Directly

3.2 Data Collected Automatically

• Technical identifiers: IP address, device type, browser type and version, operating system, screen resolution.
• Usage data: Pages visited, features used, session duration, click-paths, game history, wagering activity, login timestamps.
• Location data: Approximate geographic location derived from IP address, used for fraud prevention and eligibility verification.
• Cookie and tracking data: Session cookies, preference cookies, analytics identifiers — further described in Section 7.

3.3 Data from Third-Party Sources

In some circumstances, GSBet may receive Personal Data from regulated third-party sources, including identity verification service providers, fraud prevention databases, payment processors (such as FPX, Maybank, CIMB, Public Bank, and Hong Leong networks), and anti-money laundering screening services. Data obtained from third parties is used solely for the compliance and operational purposes for which it was obtained.

GSBet processes your Personal Data only for specified, explicit, and legitimate purposes. The primary purposes for which we use your data are:

• Account Management: Creating, maintaining, and securing your Account; authenticating your identity at login; communicating Account-related information.
• Service Delivery: Providing access to games, processing bets, calculating and crediting winnings, and operating the sports betting and live casino services.
• Payment Processing: Facilitating deposits via Touch 'n Go eWallet, DuitNow, FPX, GrabPay, Boost, and Malaysian banks; processing withdrawal requests to verified accounts; maintaining transaction records.
• Identity Verification (KYC): Verifying your age (21+), identity, and address in compliance with anti-money laundering (AML) obligations and responsible gambling requirements.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, collusion, money laundering, and other prohibited conduct; monitoring for suspicious betting patterns.
• Responsible Gambling: Administering deposit limits, session controls, self-exclusion requests, and reality checks in accordance with our Responsible Gambling Policy.
• Customer Support: Responding to queries, processing complaints, and resolving disputes via Live Chat, WhatsApp, and email channels.
• Legal Compliance: Meeting obligations under applicable laws, responding to lawful requests from regulatory or law enforcement authorities, and maintaining records required by AML regulations.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve game offerings, user experience, and platform performance.
• Marketing Communications: Sending promotional offers and bonus notifications to Players who have opted in to receive such communications. You may opt out at any time via Account settings or by contacting support.

GSBet processes your Personal Data on the following legal bases, depending on the purpose and context of the Processing:

• Contractual Necessity: Processing required to perform our obligations under the Terms and Conditions you have accepted — including Account management, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable laws, including AML legislation, age verification requirements, and responses to lawful regulatory or law enforcement requests.
• Legitimate Interests: Processing carried out in pursuance of GSBet's legitimate operational interests — such as fraud prevention, platform security, and service improvement — where those interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — such as marketing communications. Consent-based Processing may be withdrawn at any time without affecting the lawfulness of prior Processing.

GSBet does not sell, rent, or trade your Personal Data. We may share your data with third parties only in the limited circumstances described below:

• Payment Service Providers: We share necessary financial data with regulated payment processors — including FPX network members (Maybank, CIMB, Public Bank, Hong Leong), DuitNow, Touch 'n Go eWallet, GrabPay, Boost, and cryptocurrency processing partners — solely to facilitate your deposit and withdrawal transactions.
• Identity Verification Providers: We engage regulated third-party KYC service providers to assist with identity and age verification. These providers process your data under strict contractual obligations and cannot use it for any other purpose.
• Fraud Prevention & AML Services: We share data with fraud screening and AML compliance databases where required to detect and prevent financial crime, in accordance with our legal obligations.
• Game Studio Partners: Anonymised or pseudonymised game session data may be shared with licensed game studios for the purpose of game performance monitoring and technical support. No directly identifiable personal information is shared.
• Legal and Regulatory Authorities: We will disclose Personal Data to government agencies, law enforcement bodies, or regulatory authorities where required by law or a valid legal order, or where we reasonably believe disclosure is necessary to protect the rights, property, or safety of GSBet, our players, or the public.
• Business Transfers: In the event of a merger, acquisition, or sale of substantially all of our assets, your Personal Data may be transferred to the acquiring entity, subject to equivalent data protection obligations.

GSBet uses cookies and similar tracking technologies to enable core Platform functionality, remember your preferences, support security measures, and gather anonymised analytics data to improve our services.

You may manage cookie preferences through your browser settings at any time. Disabling strictly necessary cookies may prevent some Platform features from functioning correctly. For analytical and marketing cookies, you may withdraw consent via your Account settings or browser controls without affecting your ability to use core Platform services.

GSBet retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, including compliance with legal, regulatory, accounting, and reporting requirements. Our general retention periods are as follows:

• Account and Registration Data: Retained for the duration of your active Account, plus a minimum of five (5) years following Account closure to satisfy AML and regulatory record-keeping obligations.
• KYC Documentation: Retained for a minimum of five (5) years following the date of verification or Account closure, whichever is later, in compliance with applicable anti-money laundering legislation.
• Transaction Records: Retained for a minimum of seven (7) years from the date of each transaction for financial compliance and audit purposes.
• Support Communications: Retained for two (2) years following resolution of the relevant support case or complaint.
• Marketing Preference Data: Retained until you withdraw consent or for a maximum of two (2) years following your last active engagement, whichever occurs first.
• Technical Logs: Retained for up to twelve (12) months for security monitoring and fraud investigation purposes.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised such that it can no longer be associated with any individual.

GSBet implements and maintains comprehensive technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes:

• Transport Layer Security (TLS/SSL): All data transmitted between your device and the Platform is encrypted using 256-bit TLS encryption, consistent with banking-grade security standards.
• Encrypted Data Storage: Sensitive data — including KYC documents and financial records — is encrypted at rest using industry-standard encryption protocols.
• Access Controls: Personal Data is accessible only to authorised GSBet personnel on a strict need-to-know basis, enforced through role-based access control and multi-factor authentication for internal systems.
• Intrusion Detection: Our infrastructure is monitored continuously for suspicious activity, with automated alert systems and manual security review processes in place.
• Security Audits: We conduct periodic internal security reviews and engage independent security assessments to identify and remediate vulnerabilities.

While we take all reasonable measures to protect your data, no internet-based system can guarantee absolute security. You are responsible for maintaining the confidentiality of your Account credentials and for notifying us immediately at [email protected] if you suspect any unauthorised access to your Account.

Subject to applicable law and certain conditions, you hold the following rights in respect of your Personal Data held by GSBet:

To exercise any of the above rights, please contact our Data Protection team via Live Chat or by email at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within two (2) business days and respond substantively within thirty (30) calendar days. In cases of complexity or volume, this period may be extended by a further sixty (60) days with appropriate notice.

Please note that certain rights are subject to limitations. For example, the right to erasure does not override our legal obligation to retain transaction records and KYC documentation for the periods specified in Section 8.

The GSBet Platform is intended exclusively for individuals aged 21 years and above. We do not knowingly collect, process, or retain Personal Data from persons below the age of 21. Age verification is conducted as part of our mandatory KYC process, and any Account found to be registered by an individual under 21 will be immediately suspended.

If you are a parent or guardian and believe that a minor has registered an Account on our Platform or otherwise submitted Personal Data to us, please contact our support team immediately at [email protected]. We will investigate the matter promptly and, where confirmed, delete all Personal Data associated with the underage individual and close the Account forthwith.

The Platform may contain references or operational integrations with third-party services — such as payment gateways, identity verification providers, and game studio delivery networks. These third-party services operate under their own privacy policies and data practices, which are independent of this Policy.

GSBet is not responsible for the privacy practices, data security measures, or content of any third-party service. We encourage you to review the privacy policies of any third-party service you interact with, particularly payment processors you use for deposits and withdrawals (for example, the Touch 'n Go eWallet, DuitNow, and FPX platform privacy policies govern how those services handle your payment data on their respective platforms).

GSBet operates a global technology infrastructure, and some of the third-party service providers we engage — including cloud hosting providers, identity verification services, and analytics platforms — may process Personal Data in jurisdictions outside of Malaysia.

Where Personal Data is transferred internationally, GSBet takes all reasonable steps to ensure that appropriate safeguards are in place to protect your data in a manner consistent with this Policy. Such safeguards include contractual obligations on Data Processors through standard data protection clauses, vendor security certifications, and transfer impact assessments where required.

GSBet does not transfer your Personal Data to jurisdictions that do not provide an adequate level of data protection unless appropriate safeguards are in place as described above.

GSBet reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or operational requirements. The date of the most recent revision is indicated at the top of this page.

Where amendments are material — such as changes to the types of data we collect, how we use it, or the rights you hold — we will provide reasonable advance notice to registered Players via in-platform notification or email before the changes take effect.

Your continued use of the Platform following the effective date of any amendment constitutes your acknowledgement of and agreement to the revised Policy. If you do not agree to the revised terms, you should cease using the Platform and contact support to arrange Account closure in accordance with our Terms and Conditions.

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your Personal Data, please contact our support and data protection team through any of the following channels. All privacy-related requests are handled by trained personnel and treated with strict confidentiality.

When submitting a data rights request by email, please use the subject line "Data Rights Request — [Your Username]" and include a brief description of the nature of your request. We will acknowledge receipt within two (2) business days.