1. Introduction
This Privacy Policy applies to the gacor22 website and all services accessed through it, including casino games, live dealer products, sports betting markets, account management, MYR payment facilities and customer support channels. gacor22 acts as the data controller in respect of personal data collected through these services.
A player accepts the practices described in this policy by registering an account, making a deposit, submitting a wager or otherwise using gacor22 after this policy has been made available. If any provision is not acceptable, the player should not use gacor22 services.
This policy is directed at adults aged 21 and above residing in or accessing gacor22 from Malaysia, including major metropolitan areas such as Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, Johor Bahru and other locations across Malaysia.
2. Definitions
- "Personal Data" means any information that identifies or could reasonably be used to identify a living individual.
- "Processing" means any operation performed on personal data, including collection, storage, use, disclosure and deletion.
- "Account Holder" or "User" means the verified individual whose details appear on a registered gacor22 account.
- "Payment Provider" means a bank, e-wallet service, instant transfer network or other financial institution used for MYR transactions.
- "Third Party" means a person or entity outside the gacor22 service relationship that may receive or process data for an identified purpose.
3. Data We Collect
3.1 Registration and identity data
When an account is created, gacor22 collects the name, date of birth, residential address, email address and mobile number provided. Where verification requires supporting documents, copies of identity cards, passports, proof of address or other approved records may also be collected.
3.2 Account activity data
gacor22 records wagering history, casino game activity, sports betting selections, session duration, deposit and withdrawal transactions, bonus participation and account configuration changes. These records support account management, dispute resolution and responsible gambling monitoring.
3.3 Payment data
To process MYR deposits and withdrawals, gacor22 collects information relating to the payment method used, including partial account identifiers, transaction references, timestamps and amounts. Full payment credentials such as complete card numbers or banking PINs are not stored by gacor22 and must not be shared through support communications.
3.4 Technical and device data
gacor22 automatically collects IP address, device type, operating system, browser type, referring URL, session timestamp and general geographic location data when the website is accessed. This information is used for security monitoring, fraud detection and service improvement.
3.5 Communications data
Messages sent to gacor22 support, including enquiries about MYR transactions, account restrictions and responsible gambling controls, are retained and may be reviewed for training, quality assurance and dispute purposes.
4. Lawful Bases for Processing
gacor22 processes personal data on the following principal grounds:
- Contractual necessity: processing required to open and maintain an account, execute MYR transactions and deliver services described in the Terms & Conditions.
- Legal obligation: processing necessary to comply with identity verification, anti-money laundering, fraud prevention or other applicable requirements.
- Legitimate interest: processing for security monitoring, fraud detection, service improvement and responsible gambling monitoring where the interest is not overridden by the rights of the individual.
- Consent: where a user has provided clear agreement to a specific processing activity, such as receiving optional promotional communications, that consent can be withdrawn at any time by contacting support.
5. How We Use Your Data
Personal data collected by gacor22 is used for the following purposes:
- Creating, verifying and maintaining gacor22 accounts;
- Processing MYR deposits and withdrawals through eligible payment methods including Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, DuitNow and FPX;
- Conducting identity, age and payment ownership verification as required by the Terms & Conditions;
- Detecting, investigating and preventing fraud, collusion, money laundering and prohibited conduct;
- Monitoring account behaviour for responsible gambling purposes and applying restrictions where necessary;
- Responding to support enquiries and resolving complaints or disputes;
- Meeting legal, regulatory or compliance obligations applicable to gacor22 or its payment partners;
- Sending service communications relating to account activity, payment status, security events or terms updates; and
- Improving the platform, detecting technical errors and analysing aggregate usage patterns.
6. Data Sharing and Disclosure
gacor22 does not sell personal data to third parties. Data may be shared in the following circumstances:
6.1 Payment providers
Transaction data, including names and payment identifiers, must be shared with banks, e-wallet operators and payment networks to execute and reconcile MYR transactions. Each provider processes that data under its own terms.
6.2 Identity and fraud service providers
gacor22 may use third-party identity verification, anti-fraud or security screening services. These providers receive the data necessary to perform the relevant check and are not permitted to use it for unrelated purposes.
6.3 Legal and regulatory disclosure
gacor22 may disclose personal data to a competent authority, court, law enforcement body or regulatory body where disclosure is legally required or reasonably necessary to protect rights, prevent harm or investigate suspected illegal activity. gacor22 will not notify an account holder of such disclosure where the law prohibits it.
6.4 Business operations
Technical service providers such as hosting, analytics and customer communication platforms may process limited categories of data on behalf of gacor22, subject to appropriate contractual restrictions.
7. Payment Data
gacor22 applies additional care to information relating to MYR payment methods. Players must enter payment details only through the official gacor22 account interface. gacor22 support staff will never request a complete card number, banking password, full e-wallet PIN or one-time security code through any communication channel.
Transaction records are retained for compliance and dispute purposes for the periods described in the Retention section. Payment method names such as Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX, Touch 'n Go eWallet, Boost and GrabPay are referenced to identify the transaction route and to support customer support.
If you receive an unexpected message requesting your gacor22 password, e-wallet credentials or banking PIN, do not respond. Contact [email protected] immediately to report a suspected phishing attempt.
8. Cookies and Technical Data
gacor22 uses cookies and similar technologies to maintain secure sessions, remember account preferences, detect fraudulent activity and analyse aggregate usage. Cookies do not contain personally identifiable information in isolation but may be combined with account data where a user is logged in.
A browser can be configured to block or delete cookies. Disabling essential cookies may prevent certain gacor22 features, including account login and payment flows, from functioning correctly. Analytical cookies that are not essential to the service may typically be disabled without affecting core account functions.
Third-party content or services embedded within gacor22 may independently set cookies governed by the respective provider's own privacy practices.
9. Data Retention
gacor22 retains personal data for as long as an account remains active and for a reasonable period thereafter to meet legal obligations, resolve disputes, prevent further abuse and maintain auditable records. The retention periods applied to different data categories reflect the nature of the information and applicable compliance requirements.
Identity verification and anti-money laundering records are held for periods consistent with financial crime prevention obligations. Transaction logs are retained for a period that allows audit, reconciliation and dispute resolution. Communications with support are retained for a reasonable operational period.
When retention is no longer justified, gacor22 either deletes or anonymises the data so that it cannot reasonably be attributed to an identifiable individual.
10. Data Security
gacor22 implements technical and organisational security measures appropriate to the nature of personal data processed. These include encrypted data transmission, access controls restricting data to authorised personnel, monitoring for unusual account activity and procedures for responding to security incidents.
No internet-based system can guarantee absolute security. Users contribute to account security by maintaining strong passwords, keeping login credentials confidential, enabling available two-factor authentication and reporting suspected unauthorised access promptly.
In the event of a data incident affecting personal information, gacor22 will take appropriate steps to contain and investigate the issue. Where notification is legally required or reasonably appropriate, affected users or authorities will be informed within the applicable timeframe.
11. User Rights
Subject to applicable law, an account holder may submit a request to gacor22 support in connection with the following rights:
- Access: a request to confirm whether personal data is held and to receive a copy of the data processed.
- Correction: a request to correct inaccurate or incomplete personal data without undue delay.
- Deletion: a request to delete personal data where there is no overriding legal or legitimate basis for retention.
- Restriction: a request to limit processing while accuracy or legal basis is under review.
- Objection: an objection to processing carried out on the basis of legitimate interest, including profiling, where the specific circumstances warrant it.
- Portability: a request to receive commonly used personal data in a structured, machine-readable format where technically feasible and legally applicable.
- Withdrawal of consent: where processing is based on consent, withdrawal of that consent for prospective processing.
Requests will be reviewed after identity verification. gacor22 may decline a request where complying would conflict with a legal obligation, harm a third party's rights or prejudice a fraud investigation. A response will normally be provided within a reasonable period following verified receipt of the request.
12. Minors
gacor22 services are intended solely for adults aged 21 and above. gacor22 does not knowingly collect personal data from any person under that age. If a parent or guardian believes that a minor has submitted personal information to gacor22, they should contact support immediately. gacor22 will remove the data and close any identified underage account as promptly as the circumstances allow.
13. Policy Updates
gacor22 may revise this Privacy Policy to reflect changes in data processing practices, applicable law, payment methods or technical operations. Material revisions will be communicated through a notice on the website or to the email address registered with an account. The date shown near the top of this page indicates the current version.
Continued use of gacor22 following a valid update constitutes acceptance of the revised policy from its effective date. Players who do not accept a revised policy should stop using gacor22 and may request account closure through support.