GGPoker Privacy Policy

1. Introduction and Scope

1.1 This Privacy Policy applies to all personal data collected and processed by GGPoker in connection with your use of ggpoker.one and any related applications, services, or products offered under the GGPoker brand (collectively, "the Platform" or "GGPoker Services").

1.2 This Privacy Policy applies to all users of the GGPoker Platform regardless of the device or method used to access it, including desktop browsers, mobile browsers, and the GGPoker Android and iOS applications.

1.3 This Privacy Policy should be read in conjunction with GGPoker's Terms and Conditions and Responsible Gaming Policy. By using the GGPoker Platform, you confirm that you have read and agree to this Privacy Policy.

2. Data Controller Information

2.1 GGPoker operates as the data controller in respect of personal data collected from users of the GGPoker Platform. As data controller, GGPoker determines the purposes for which and the means by which personal data is processed.

2.2 GGPoker operates under applicable international gaming authority licensing requirements, which include obligations with respect to the collection, processing, and retention of player personal data for anti-money laundering (AML), Know Your Customer (KYC), and responsible gaming compliance purposes.

3. Personal Data We Collect

3.1 GGPoker collects the following categories of personal data from users:

• Identity Data: Full legal name, date of birth, nationality, and identity document details (e.g., Malaysian MyKad number or passport number) collected during account registration and KYC verification;
• Contact Data: Email address, mobile telephone number, and residential address;
• Financial Data: Payment method identifiers, transaction records, deposit and withdrawal history, account balance information, and details of any chargebacks or payment disputes;
• Gaming Activity Data: Game session history, betting activity, poker hand histories, wagering patterns, and bonus utilisation records;
• Technical Data: IP address, device identifiers, browser type and version, operating system, screen resolution, and session timestamps;
• Communications Data: Records of your interactions with GGPoker customer support, including chat transcripts, email correspondence, and support ticket history;
• Responsible Gaming Data: Self-imposed deposit limits, loss limits, session alerts, cooling-off elections, and self-exclusion records;
• Marketing Preference Data: Your stated preferences regarding receipt of promotional communications from GGPoker.

4. How We Collect Your Personal Data

4.1 Directly from You. GGPoker collects personal data you provide when you register an account, complete KYC verification, make deposits or withdrawals, contact customer support, opt into promotional communications, or use self-service responsible gaming tools.

4.2 Automatically During Platform Use. Technical data — including IP addresses, device identifiers, session data, and cookies — is collected automatically as you navigate the GGPoker Platform. This data is used for security monitoring, fraud detection, platform performance optimisation, and compliance purposes.

4.3 From Third-Party Identity Verification Providers. Where GGPoker uses third-party KYC or identity verification services to verify your identity documents as required by licensing obligations, personal data may be received from those providers in relation to the outcome of the verification process.

4.4 From Payment Service Providers. GGPoker receives transaction confirmation and payment method reference data from payment processing partners, including Touch n Go eWallet, Boost, GrabPay, and banking partners such as Maybank, CIMB, and Hong Leong Bank, in connection with the processing of your deposits and withdrawals.

5. Purposes and Legal Bases for Processing

5.1 GGPoker processes personal data for the following purposes and on the following legal bases:

• Account Registration and Management — Processing is necessary for the performance of the contract between you and GGPoker (the Terms and Conditions);
• KYC Identity Verification — Processing is necessary for compliance with GGPoker's legal obligations under its international gaming authority licence and applicable AML regulations;
• Payment Processing — Processing is necessary for the performance of the contract, specifically the facilitation of MYR deposits and withdrawals through your chosen payment method;
• Fraud Detection and Security — Processing is necessary for GGPoker's legitimate interests in preventing fraud, multi-accounting, collusion, and other prohibited conduct;
• Responsible Gaming Compliance — Processing is necessary for compliance with GGPoker's regulatory obligations, including monitoring for problem gambling indicators and administering self-exclusion elections;
• Customer Support — Processing is necessary for the performance of the contract and GGPoker's legitimate interest in resolving user queries and complaints efficiently;
• Marketing Communications — Processing is based on your consent, which you may withdraw at any time via your account communication preferences;
• Platform Analytics and Improvement — Processing is based on GGPoker's legitimate interest in understanding how the Platform is used and improving its functionality and user experience.

6. Sharing and Disclosure of Personal Data

6.1 GGPoker does not sell, rent, or trade your personal data to third parties for their independent commercial purposes.

6.2 GGPoker may disclose your personal data to the following categories of third parties for the purposes described in this Privacy Policy:

• Payment Service Providers: To process your deposits and withdrawals in MYR;
• Identity Verification Providers: To conduct KYC and AML verification as required by licensing obligations;
• IT Infrastructure and Security Providers: Including cloud hosting, content delivery, and security monitoring services that support Platform operations;
• Gaming Regulators and Licensing Authorities: Where disclosure is required for regulatory compliance, audit, or investigation purposes under GGPoker's licence conditions;
• Law Enforcement and Government Authorities: Where disclosure is required by applicable law, court order, or regulatory demand;
• Professional Advisers: Including legal counsel and accountants, subject to professional confidentiality obligations.

6.3 All third-party service providers engaged by GGPoker are contractually required to maintain the confidentiality and security of personal data and to process it only for the purposes for which it was disclosed.

7. International Data Transfers

7.1 GGPoker's operations and infrastructure span multiple jurisdictions. Your personal data may be transferred to and processed in countries outside Malaysia. Where such transfers occur, GGPoker ensures that appropriate safeguards are in place — including contractual protections — to maintain a level of data protection equivalent to that required by applicable data protection standards.

7.2 By using the GGPoker Platform, you consent to the transfer of your personal data to jurisdictions outside Malaysia in accordance with this Privacy Policy.

8. Data Retention

8.1 GGPoker retains personal data for as long as necessary to fulfil the purposes for which it was collected, including the duration of your account relationship with GGPoker and any applicable statutory retention obligations.

8.2 In accordance with international gaming authority requirements and AML legislation, certain categories of personal data — including identity documents, KYC records, and financial transaction records — must be retained for a minimum period (typically five years) after the end of the account relationship, irrespective of account closure.

8.3 Personal data that is no longer required for any lawful purpose will be securely deleted or anonymised in accordance with GGPoker's data retention schedule.

9. Cookies and Tracking Technologies

9.1 GGPoker uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device that enable GGPoker to recognise returning users, maintain session state, and collect analytical and security data.

9.2 GGPoker uses the following categories of cookies:

• Strictly Necessary Cookies: Required for the Platform to function correctly, including session authentication and security tokens. These cannot be disabled;
• Analytical Cookies: Used to measure and improve Platform performance, understand user navigation patterns, and identify technical errors;
• Functional Cookies: Used to remember your preferences, such as language settings and display options;
• Security Cookies: Used for fraud detection, bot prevention, and account protection.

9.3 You may configure your browser to refuse cookies; however, disabling strictly necessary cookies will prevent certain Platform features from functioning correctly. Marketing and analytical cookies may be managed via your account settings.

10. Security Measures

10.1 GGPoker implements technical and organisational security measures appropriate to the risk presented by the processing of your personal data. These measures include SSL/TLS encryption for all data in transit, encryption at rest for sensitive stored data, role-based access controls, regular security audits and penetration testing, and incident response procedures.

10.2 While GGPoker takes all reasonable steps to protect your personal data, no data transmission or storage system can be guaranteed to be completely secure. In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, GGPoker will notify you in accordance with applicable notification obligations.

11. Your Data Subject Rights

11.1 Subject to applicable law and GGPoker's regulatory obligations, you have the following rights in relation to your personal data:

• Right of Access: You may request a copy of the personal data GGPoker holds about you;
• Right of Rectification: You may request correction of inaccurate or incomplete personal data;
• Right of Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected and no overriding retention obligation applies;
• Right to Restrict Processing: You may request that GGPoker restricts its processing of your personal data in certain circumstances;
• Right to Data Portability: You may request a machine-readable copy of personal data you have provided to GGPoker;
• Right to Object: You may object to processing based on GGPoker's legitimate interests;
• Right to Withdraw Consent: Where processing is based on consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.

11.2 To exercise any of these rights, please contact GGPoker's customer support team via live chat on ggpoker.one or email at [email protected]. GGPoker will respond to data subject requests within 30 days of receipt.

12. Children and Minors

12.1 The GGPoker Platform is strictly available to individuals aged 21 and above. GGPoker does not knowingly collect personal data from individuals under the age of 21. If GGPoker becomes aware that personal data has been collected from a minor, the relevant account will be immediately suspended and the data deleted.

12.2 If you believe a minor may have accessed the GGPoker Platform using falsified age information, please contact GGPoker's customer support team immediately.

13. Links to Third-Party Services

13.1 The GGPoker Platform does not include links to third-party websites. GGPoker is not responsible for the data practices of any external parties with whom you independently choose to share personal data.

14. Amendments to This Privacy Policy

14.1 GGPoker reserves the right to update or amend this Privacy Policy at any time. Material changes to this Privacy Policy will be communicated to registered users via email notification or a prominent notice on the Platform. The "Last Updated" date at the top of this page reflects the date of the most recent revision.

14.2 Your continued use of the GGPoker Platform following notification of amendments constitutes acceptance of the revised Privacy Policy.

15. Contact and Data Subject Requests

15.1 For all privacy-related enquiries, data subject access requests, or complaints regarding GGPoker's handling of your personal data, please contact us via:

• Live chat: available 24/7 via ggpoker.one
• Email: [email protected]

15.2 GGPoker's customer support and data protection team aims to acknowledge all privacy enquiries within 48 hours and to respond substantively within 30 calendar days.