GK222 Privacy Policy – Our Commitment to Protecting Your Personal Data

1. Introduction

GK222 is an online sports betting and casino platform operating under a valid licence and in compliance with applicable legal requirements. We take our responsibility towards the protection of our users' personal data very seriously.

This Privacy Policy is drafted in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and clearly explains how GK222 collects, uses, discloses, stores, and protects your personal information when you use our platform — whether through the gk222.ml website or the GK222 mobile app.

We believe transparency is the foundation of trust. That is why we take a clear and open approach to explaining our privacy practices, so you can make informed decisions about the data you share with us.

2. Information We Collect

GK222 collects various types of information depending on how you interact with our platform. The following are the main categories of data we collect:

In addition to information you provide directly, gk222 also collects data automatically through cookie technology, tracking pixels, and server logs when you use our platform. This automatically collected data is used solely to improve platform performance and user experience.

3. How We Use Your Data

GK222 uses collected personal data for legitimate and transparent purposes. We do not use your data for purposes not stated in this policy without first obtaining your consent.

The primary purposes for which your data is used include:

• Account management — register, verify, and maintain your user account;
• Transaction processing — process deposits, withdrawals, and any financial transactions on the platform;
• Identity verification (KYC) — meet legal compliance requirements including anti-money laundering obligations;
• Security and fraud prevention — detect, investigate, and prevent fraudulent, abusive, or unauthorised activity;
• Service improvements — analyse usage patterns to improve platform performance and user experience;
• Service communications — send important notifications relating to your account, transactions, and security;
• Customer support — provide effective technical assistance and customer service;
• Responsible wagering — monitor betting patterns to identify users who may need assistance;
• Marketing (with your consent) — sending relevant promotional information, bonuses, and the latest offers.

4. Sharing Information with Third Parties

Gk222 does not sell, rent, or disclose users' personal data to third parties for commercial purposes. However, there are certain situations where we need to share your information with trusted parties to ensure the smooth operation of our platform.

Parties that may receive limited access to your data:

• Payment service providers — such as DuitNow processors, Touch 'n Go, Boost, and partner banks to facilitate financial transactions;
• KYC service providers — licensed identity verification companies that assist us in meeting compliance requirements;
• Technology infrastructure providers — cloud computing and cybersecurity companies that support the operations of the gk222 platform;
• Legal authorities and regulators — when required by Malaysian law or a valid court order;
• Auditors and professional advisors — audit, legal, or consulting firms bound by professional confidentiality obligations.

All third parties that receive gk222 user data are bound by strict data protection agreements and are only permitted to use such information for the purposes that have been agreed upon.

5. Your Data Security

GK222 continuously invests in cybersecurity infrastructure to ensure users' personal data is protected at all times. The technical and organisational security measures we implement include:

• 256-bit SSL/TLS encryption for all data communications between your device and gk222's servers;
• Encryption of sensitive data at rest within the database using industry-grade encryption algorithms;
• Two-factor authentication (2FA) available for all user accounts;
• Real-time security monitoring 24 hours a day, 7 days a week to detect suspicious activity;
• Strict access controls — only authorised staff may access user data, and only to the extent required for their role;
• Periodic security audits by independent third parties to identify and address system vulnerabilities;
• A comprehensive incident response plan to address any data breaches swiftly and effectively.

While gk222 takes all reasonable steps to protect your data, no system is completely immune to ever-evolving cyber threats. We encourage users to take their own protective measures, such as using strong passwords and not sharing login credentials with anyone.

6. Cookies and Tracking Technologies

The gk222 platform uses cookies and similar tracking technologies to enhance user experience, ensure session security, and analyse platform usage patterns. The following are the types of cookies we use:

• Essential Cookies — required for core platform functions such as login authentication and session security. These cookies cannot be disabled without affecting platform functionality;
• Performance Cookies — gather information on how users interact with the platform to help us identify and resolve technical issues;
• Functional Cookies — store user preferences such as language, display settings, and other preferences for a more personalised experience;
• Analytics Cookies — help us understand platform usage patterns in aggregate and anonymised form for continuous improvement purposes.

You may manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect the functionality and user experience of the GK222 platform.

7. Data Retention Period and Deletion

GK222 retains users' personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Our data retention guidelines are as follows:

• Active account data — retained for the duration the account remains active and up to 7 years after account closure for legal compliance purposes;
• Financial transaction records — retained for a minimum of 7 years in accordance with financial reporting and anti-money laundering requirements;
• Support communication records — retained for 3 years for customer service reference;
• Security and access logs — retained for 12 months for security investigation purposes if required;
• Marketing data — retained until you withdraw your consent or request deletion.

When data is no longer required, GK222 will securely delete or anonymise it using methods that ensure it cannot be recovered by any party.

8. User Rights Regarding Personal Data

Under Malaysia's Personal Data Protection Act 2010, you have certain rights regarding the personal data we hold. GK222 is committed to facilitating the exercise of these rights in a simple and hassle-free manner.