Privacy Policy gajian123 – Personal Data Protection for Malaysian Members

gajian123 is a digital entertainment platform offering online casino, Sports Betting, lottery, and related gaming services to members in Malaysia. In delivering these services, we collect and process a certain amount of personal data necessary to provide every member with a safe, fair, and enjoyable experience.

We understand that personal data is something deeply valuable and sensitive. The trust you place in us to handle it responsibly is not something we take lightly. That is why gajian123 has made serious investments in data security infrastructure, internal processes, and staff training to ensure your data remains protected at all times.

This policy is written in Bahasa Melayu to ensure it is easily understood by all our Malaysian members. We believe that a lengthy privacy policy filled with incomprehensible legal jargon is not real protection — it is just empty paper. This policy is written in plain language so you truly understand what happens to your data when you use gajian123.

gajian123 collects your personal data through several channels — during account registration, while you use the platform, and through automated technologies such as cookies. Below is a full table of the data types we collect and the purposes for which they are used:

Gajian123 does not collect data relating to religion, political views, health, or other sensitive information unrelated to the provision of our digital entertainment services. We strictly follow the principle of data minimisation — if we don't need it, we don't collect it.

Personal data collected by gajian123 is used solely for legitimate purposes directly related to the provision of our services. Specifically, we use your data to:

• Account management: Creating and managing your member account, processing your registration, and verifying your identity in accordance with KYC requirements;
• Transaction processing: Processing deposits via Touch 'n Go eWallet, GrabPay, DuitNow, FPX Maybank2u, CIMB Clicks, Boost, and ShopeePay, as well as handling withdrawal of winnings in Malaysian Ringgit (RM);
• Provision of gaming services: Grants access to Live Casino, Sports Betting (Malaysia Super League, EPL, badminton, cricket, e-sports), roulette, lottery, and all other games on the platform;
• Security & fraud prevention: Detecting suspicious activity, preventing unauthorised access, and protecting your account from security threats;
• Customer support: Handling your inquiries, complaints, and disputes efficiently in Bahasa Melayu;
• Legal compliance: Fulfil Malaysian legal obligations, including anti-money laundering (AML) requirements and reporting mandated by the relevant authorities;
• Service communications: Send important notifications about your account, winnings, terms changes, and security information via email or SMS to your Malaysian phone number;
• Platform improvements: Analyse usage patterns in aggregate (not at an individual level) to improve the design and features of the gajian123 platform;
• Responsible gaming: Monitoring gaming patterns to identify early signs of problem gambling and offer appropriate support.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), gajian123 processes your personal data on one or more of the following legal bases, depending on the purpose of processing:

• Consent: For marketing communications and other optional data uses, we rely on the explicit consent you provided. You may withdraw that consent at any time without affecting the validity of any processing carried out prior to withdrawal;
• Contract performance: Processing necessary to fulfil our contractual obligations to you — including processing financial transactions and providing access to games — is based on contractual necessity;
• Legal obligations: Certain data processing is necessary to comply with applicable Malaysian law, including AML legislation, KYC requirements, and financial reporting obligations;
• Legitimate interests: For purposes such as fraud prevention, platform security, and service improvement, gajian123 relies on legitimate business interests that do not override your privacy rights.

In all cases, gajian123 only processes data necessary to achieve the stated purposes and does not use data for any purpose inconsistent with the original reason it was collected.

gajian123 does not sell, rent, or trade your personal data. That said, in the course of our business operations, we may share data with the following categories of third parties on a limited and conditional basis:

• Payment processing providers: Malaysian e-wallet and banking providers (such as the DuitNow system and FPX network) receive only the minimum transaction data required to process your deposits and withdrawals. They are bound by strict data protection terms;
• Game software provider: Third-party game providers offering games on the gajian123 platform may receive the game data necessary to operate your gaming session. All providers undergo thorough security assessments before integration;
• Technical support services: Providers who assist us in maintaining the platform's technical infrastructure may access system data but not members' personal data, except where necessary to resolve technical issues;
• Legal authorities: gajian123 will disclose personal data to law enforcement agencies, courts, or Malaysian regulatory bodies when required by law or a valid court order. In such cases, we will notify you if permitted by law;
• Identity verification services: For KYC purposes, we may use third-party identity verification services that have undergone rigorous compliance assessments. Data shared is limited strictly to the information required for verification.

gajian123 has implemented a comprehensive set of technical and organisational security measures to protect your personal data from unauthorised access, loss, alteration, or unlawful disclosure:

• Data encryption: All data transmitted between your device and gajian123's servers is protected by 256-bit SSL/TLS encryption. Sensitive data stored in our databases is also encrypted to industry standards;
• Access controls: A role-based access control (RBAC) system ensures that only staff who require access to specific data to perform their duties are authorised to do so. All access is logged and monitored;
• Security monitoring: A 24/7 monitoring system tracks suspicious activity, intrusion attempts, and anomalies in data usage patterns. Our security team responds to alerts in real time;
• Regular security testing: The gajian123 platform undergoes regular penetration testing and security audits conducted by independent security firms to identify and address any vulnerabilities;
• Password management: Member passwords are stored using irreversible cryptographic hashing. gajian123 does not store passwords in plain text and cannot retrieve your password — only a reset is possible;
• Staff training: All gajian123 staff who handle members' personal data undergo comprehensive data protection training and are bound by confidentiality agreements.

gajian123 does not retain your personal data longer than necessary for the purpose for which it was collected, or as required by Malaysian law. Retention periods vary depending on the type of data:

• Active account data: Retained for the duration your gajian123 account remains active, plus the minimum period required by law following account closure;
• Financial transaction data: Deposit, withdrawal, and transaction history records are retained for a minimum of 7 years in compliance with Malaysian financial and tax legislation;
• KYC Data: Identity verification documents are retained for 5 years after the termination of the business relationship, in line with Malaysia's AML requirements;
• Support communication records: Customer support chat logs are retained for 2 years for reference and dispute resolution purposes;
• Technical log data: Technical and security logs are retained for 12 months for security monitoring and incident investigation purposes;
• Marketing data: If you have given consent to receive marketing communications, the relevant data will be retained until you withdraw that consent.

Once the applicable retention period has expired, your data will be securely deleted or permanently anonymised so that it can no longer be linked back to you as an individual. gajian123 conducts regular data retention reviews to ensure that expired data is promptly removed.

As a data subject, you have certain rights under Malaysia's Personal Data Protection Act 2010 that gajian123 fully respect. Below is a summary of your rights:

gajian123 uses cookies and similar tracking technologies to enhance your experience on our platform. Below is an explanation of the types of cookies we use:

• Essential cookies: Required for the platform to function correctly. This includes session cookies that keep you logged in and security cookies that protect your account. These cookies cannot be disabled without affecting the platform's core functionality;
• Performance cookies: Help us understand how members use the platform — which pages receive the most visits, where errors occur, and what the average session length is. All such data is collected in aggregate and is not linked to individual profiles;
• Functional cookies: Saving your preferences such as language, display settings, and game choices so you don't have to reconfigure them every time you log in;
• Security cookies: Used to detect suspicious login activity — such as sign-ins from a new location or device — and to trigger additional verification when required.

Gajian123 does not use third-party advertising cookies that track you across other websites. Our platform contains no third-party advertising pixels or external marketing data collectors.

You can manage your cookie settings through your web browser. However, disabling essential cookies may affect the functionality of the gajian123 platform and your login experience.

Although gajian123 takes all reasonable steps to prevent data breaches, we also maintain a comprehensive incident response procedure should a breach occur.

In the event of a data breach that may affect your rights and freedoms as an individual, gajian123 is committed to:

• Detection and containment: Identify and contain the breach as quickly as possible after it is detected through our monitoring systems;
• Risk assessment: Immediately assess the scope and severity of the breach — what data was involved, how many individuals are affected, and what risks they face;
• Agency notifications: Report to Malaysia's Department of Personal Data Protection within the timeframe stipulated by PDPA if the breach meets the reporting threshold;
• Member notifications: Notify affected members directly by email or SMS to their registered Malaysian number without undue delay if the breach poses a high risk to their rights. The notice will specify the type of data involved, the likely consequences, and steps you can take to protect yourself;
• Recovery: Taking all necessary steps to restore system security and prevent the same breach from occurring again.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way gajian123 handles your personal data, please reach out to us through the following channels:

• Email: support@gajian123.biz — Include "Privacy Policy" in your email subject line to ensure it is routed to the right officer;
• Live Chat: Available 24/7 on the gajian123 platform in Bahasa Melayu — typical response time is under 3 minutes;
• Response time: gajian123 is committed to responding to all privacy enquiries within 3 business days, and data access requests within 21 days.

If you are not satisfied with our response to your privacy concern, you have the right to file a complaint with Malaysia's Department of Personal Data Protection or to seek an appropriate legal remedy under the provisions of PDPA 2010.

Gajian123 will periodically review and update this Privacy Policy to ensure it remains relevant, accurate, and aligned with the latest legal developments and industry practices. Where material changes occur, we will notify you via your registered email address before those changes take effect.

This Privacy Policy was last updated on 1 January 2026 and supersedes all previous versions. For legal enquiries regarding Malaysia's PDPA, you may refer to the official website of the Department of Personal Data Protection Malaysia.