GTR888 Official Privacy Document

Privacy Policy GTR888 – Malaysian Player Personal Data Protection

At GTR888, we understand that your personal data is a trust placed in us. This Privacy Policy transparently explains how we collect, use, protect, and manage your information — in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Updated: 1 January 2026  |  Malaysia (PDPA 2010)

Our Privacy Commitment

GTR888 never sells your personal data. We protect your information with 256-bit SSL encryption and fully comply with Malaysia's PDPA.

Compliant with Malaysia PDPA 2010
256-bit SSL encryption for all data
Data is not sold to third parties
Independent periodic security audits
Right to access and correct your data, guaranteed
Data Protection

How Does GTR888 Protect Your Data?

Six layers of data protection GTR888 has implemented to safeguard every Malaysian player's privacy

256-bit SSL Encryption

All communications between your device and GTR888's servers are protected by 256-bit SSL encryption — the same highest-grade security standard used by Malaysian banking institutions such as Maybank and CIMB. Your data cannot be read even if intercepted in transit.

Protected Database

Your personal information is stored in databases protected by multi-layered firewalls, strict access controls, and round-the-clock monitoring. Only authorised GTR888 personnel with a legitimate business need may access member data.

Payment Information Security

GTR888 does not directly store your card details, bank account numbers, or Touch 'n Go / GrabPay / DuitNow information. All MYR transactions are processed through licensed payment gateways that comply with the highest PCI DSS standards.

Identity Verification (KYC)

GTR888's KYC process is designed to verify member identities, prevent fraud, and protect players. Verification documents (MyKad, passport) are processed securely and are not retained beyond what is required under Malaysian legal compliance obligations.

No Sale of Data to Third Parties

GTR888 has never and will never sell, rent, or trade members' personal data to any third party for marketing or any other commercial purpose. Your data belongs to you — it is not a business asset we trade in.

Malaysia PDPA Compliance

GTR888 operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). We conduct regular compliance reviews and work closely with local legal advisors to ensure our data management practices remain aligned with the latest Malaysian legal requirements.

1. Introduction

This Privacy Policy is published by GTR888 ("we", "platform", "GTR888") and applies to all users who access or use the gtr888.im website and all related services. This document outlines our practices for collecting, processing, storing, and protecting your personal data.

By registering an account or using GTR888's services, you agree to the collection and use of information as described in this Privacy Policy. If you do not agree, please do not use GTR888's services.

GTR888's Privacy Policy forms part of your overall agreement with us, together with Terms & Conditions available on the relevant page. This Policy may be updated from time to time — the date of the latest revision will always be displayed at the top of this page.

Legal Basis: GTR888's Privacy Policy has been prepared in accordance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA), which governs how private organisations manage individuals' personal data in Malaysia.

2. Information We Collect

GTR888 only collects data that is strictly necessary to provide the services you use. The following are the main categories of data we collect:

2.1 Basic Personal Data

  • Full name as shown on your identification document (MyKad or passport)
  • Date of birth
  • An active Malaysian mobile phone number
  • Email address
  • Bank account number or e-wallet (for withdrawals to verified accounts)
  • Residential address (for certain KYC verification requirements)

2.2 Identity Verification Data (KYC)

  • Copy of MyKad (front and back) or passport
  • Selfie photo for basic biometric verification (if required)
  • Proof of address such as a utility bill or bank statement (required for VIP accounts)

2.3 Transaction & Activity Data

  • Deposit and withdrawal records in MYR (RM)
  • Gaming history (slots, baccarat, blackjack, Sports Betting, e-sports, virtual sports, and more)
  • Bonuses and promotions claimed
  • Account activity logs (login times, password changes, etc.)

2.4 Technical Data

  • Your IP address when accessing GTR888
  • Device type (smartphone, tablet, laptop)
  • Operating system and browser version
  • Cookie data and tracking technologies (see Section 8)

3. How We Collect Data

GTR888 collects your personal data through the following methods:

  • Account Registration: Information you fill in when opening a new GTR888 account.
  • Platform Usage: Gaming activity, RM transactions, and interactions with platform features are automatically recorded.
  • KYC Verification: Documents you upload to fulfil identity verification requirements.
  • Support Communications: Information you provide when interacting with the GTR888 support team via live chat, WhatsApp, Telegram, or email.
  • Cookies & Web Technologies: Data collected automatically through cookies and similar technologies while you browse GTR888 (see Section 8).
  • Licensed Third Parties: In some cases, GTR888 may receive information from licensed third-party identity verification providers for fraud prevention purposes.

GTR888 has never purchased personal data lists from third-party data brokers. All data we hold has been provided directly by you or generated through your use of our platform.

4. How We Use Your Data

GTR888 uses the personal data collected for the following purposes:

Purpose of Use Data Type Used Legal Basis
GTR888 member account managementBasic personal dataContract performance
Processing RM deposits & withdrawalsTransaction data, banking informationContract performance
Identity verification (KYC)Identification documentLegal obligations
Fraud prevention & anti-money launderingTechnical and transaction dataLegal obligations
24/7 customer supportPersonal data, account historyLegitimate interests
GTR888 promotional marketing & bonusesName, email address, phone numberYour consent
Platform analytics & improvementsAnonymised technical dataLegitimate interests
Malaysian legal complianceAll relevant categoriesLegal obligations

5. Data Sharing with Third Parties

GTR888 does not sell, rent, or trade your personal data to any third party. However, in the following limited circumstances, GTR888 may share your information:

  • Technical Service Providers: Server infrastructure providers, payment gateways (Touch 'n Go, GrabPay, DuitNow, FPX), and technical support services that process data on behalf of GTR888 under strict confidentiality agreements.
  • Licensed Game Providers: Game developers providing slots, live casino, and table games for the GTR888 platform may receive limited gameplay session data for technical purposes.
  • Legal Requirements: GTR888 may disclose your information to Malaysian authorities (such as Bank Negara Malaysia, MACC, or the police) where required by law, court order, or for crime prevention purposes.
  • GTR888 Data Protection: In the event of a legal dispute, GTR888 reserves the right to use relevant data to defend our legal rights.

All third parties receiving data from GTR888 are required to sign data protection agreements that meet Malaysia's PDPA standards and may only use such data for the specifically agreed purposes.

6. Data Security

GTR888 takes the security of your data very seriously. The following technical and organisational measures are in place to protect your personal data:

  • 256-bit SSL/TLS encryption for all data communications in transit.
  • Data-at-rest encryption using AES-256 for database storage.
  • Role-based access control (RBAC) — only staff who require access for their specific duties are permitted.
  • 24/7 continuous security monitoring with automated intrusion detection systems.
  • Periodic security audits conducted by qualified independent third parties.
  • Mandatory data security training for all GTR888 staff who handle personal data.
  • An established security incident response procedure to act swiftly in the event of a breach.

While GTR888 takes all reasonable steps to protect your data, no security system can guarantee absolute 100% protection. If you suspect any unauthorised activity on your account, please contact GTR888 support immediately via live chat or email at support@gtr888.im.

7. Data Retention & Deletion

GTR888 retains your personal data for as long as necessary for the purposes outlined in this policy, or as required by Malaysian law. Retention periods vary depending on the type of data:

  • Active account data: Retained for as long as your GTR888 account remains active.
  • MYR transaction records: Retained for a minimum of 7 years in accordance with Malaysian financial legal requirements.
  • KYC Documents: Retained for a minimum of 5 years after account closure in accordance with anti-money laundering (AML) requirements.
  • Support communication logs: Retained for 3 years for reference and dispute resolution purposes.
  • Technical data (IP logs, etc.): Retained for 90 days for security purposes.

Once the retention period has expired and there is no longer a valid legal or business reason to retain the data, GTR888 will delete or destroy your data securely in accordance with established procedures.

8. Cookies & Tracking Technologies

GTR888 uses cookies and similar tracking technologies to enhance the user experience and analyse platform usage. The following are the types of cookies we use:

Cookies & Trackers

Types of Cookies GTR888 Uses

You can manage cookie usage through your browser settings. However, disabling certain cookies may affect the functionality and your overall experience on the GTR888 platform.

How to Manage Cookies:
  • Google Chrome: Settings → Privacy & Security
  • Safari: Preferences → Privacy
  • Firefox: Options → Privacy & Security
  • Mobile: Settings → Browser → Cookies
Your Rights

Your Rights Under Malaysia's PDPA

As a GTR888 player, you are entitled to data protection rights guaranteed under Malaysian law

Right to Access Data

You have the right to request a copy of all personal data GTR888 holds about you. Requests will be processed within 21 business days.

Right to Rectification

If any of your data is inaccurate or out of date, you have the right to request GTR888 to correct or update it at no charge.

Right to Withdraw Consent

You may withdraw your consent to certain data processing activities (such as marketing communications) at any time through your account settings or by contacting us.

Right to Restrict Processing

In certain circumstances, you have the right to request that GTR888 restrict how we process your data while a dispute or review is pending.

Right to Object

You have the right to object to the processing of your data for direct marketing purposes, or where GTR888 relies on legitimate interests as the legal basis for processing.

Right to Complain

If you are dissatisfied with how GTR888 handles your data, you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection.

9. How to Exercise Your Rights

To exercise any of the rights listed above, please contact GTR888 through the following channels, clearly stating the right you wish to exercise along with your account information for verification purposes:

  • Email: support@gtr888.im (with the subject line "PDPA Rights Request")
  • Live Chat: Available 24/7 on the GTR888 platform
  • WhatsApp / Telegram: Number available after logging in to your GTR888 account

GTR888 will process your request within 21 business days and may require identity verification before fulfilling it, to safeguard your account security.

10. Children's Data Protection

GTR888's services are strictly for individuals aged 18 and above. GTR888 does not knowingly collect personal data from children or minors. Should we discover that a child's data has been collected without our knowledge, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe your child has registered with GTR888, please contact us immediately at support@gtr888.im for prompt action.

11. Privacy Policy Amendments

GTR888 reserves the right to update this Privacy Policy at any time to reflect changes in our practices, Malaysian legal requirements, or the technologies we use. Any significant amendments will be communicated to you via your registered email or through a prominent notice on the GTR888 platform at least 14 days before the changes take effect.

Your continued use of the GTR888 platform following any amendments constitutes acceptance of the updated policy. We encourage you to review this page periodically.

12. Contact Our Privacy Officer

If you have any questions, concerns, or complaints regarding GTR888's Privacy Policy or how we handle your personal data, please contact our Data Privacy Officer (DPO):

Email: support@gtr888.im
Live Chat: 24/7 within the platform
Response Time: 21 working days

For complaints that cannot be resolved directly with GTR888, you have the right to submit a complaint to Malaysia Personal Data Protection Department under the Ministry of Communications and Digital.

Your Privacy Is Fully Protected at GTR888

Join over 50,000 Malaysian players who trust GTR888 — an online casino platform that protects your data in compliance with PDPA and 256-bit SSL encryption. Register now and claim your welcome bonus of up to RM888!

Bahasa Melayu