GTR88 Privacy Policy

This Privacy Policy ("Policy") is issued by GTR88 ("we", "us", "our", "GTR88"), the operator of the online casino and sports betting platform accessible at https://gtr88.cam. This Policy describes how GTR88 collects, processes, stores, and protects personal data relating to individuals who register for, access, or use the GTR88 platform ("you", "Player", "User").

GTR88 takes the privacy and security of player data seriously. We handle personal information in accordance with applicable data protection principles under our international licensing framework, including requirements for transparency, purpose limitation, data minimisation, and the security of personal data.

By registering an account on the GTR88 platform or otherwise providing your personal data to us, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you should not register an account or continue using the GTR88 platform.

For the purposes of this Privacy Policy, the following terms carry the meanings assigned to them below:

• "Personal Data" means any information that directly or indirectly identifies a natural person, including but not limited to name, date of birth, email address, phone number, identity document number, IP address, and financial information.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, alteration, or deletion.
• "Data Controller" means GTR88, which determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" means any third-party service provider engaged by GTR88 to process Personal Data on GTR88's behalf and under GTR88's written instructions.
• "KYC" means Know Your Customer — the identity verification process required to confirm a Player's identity and age.
• "Cookie" means a small text file placed on your device by the GTR88 platform to store session or preference data.
• "Platform" means the GTR88 website, mobile web interface, and all associated gaming and betting services at https://gtr88.cam.

GTR88 collects the following categories of personal data, depending on the nature of your interaction with the Platform:

GTR88 collects personal data through the following channels:

4.1 Direct Collection

Data you provide directly to GTR88, including during account registration, KYC submission, deposit or withdrawal requests, live chat interactions, email correspondence, and promotional opt-ins.

4.2 Automated Collection

Data generated automatically through your use of the Platform, including via cookies, web beacons, device fingerprinting, and server log files. This includes your IP address, browser type, device identifiers, and navigational behaviour on the site.

4.3 Third-Party Sources

Data received from third-party service providers engaged by GTR88, including KYC verification bureaus, payment processors (such as FPX banking partners, Touch 'n Go, DuitNow processing networks), and fraud prevention databases. GTR88 will only receive data from third parties where there is a lawful basis for doing so.

GTR88 processes your personal data on one or more of the following legal bases:

• Contractual Necessity: Processing is necessary to perform the contract between GTR88 and the Player — specifically, to operate the Player's account, process transactions, and deliver gaming and betting services.
• Legal Obligation: Processing is required to comply with GTR88's legal obligations under its gaming licence, including KYC and anti-money laundering (AML) requirements.
• Legitimate Interests: Processing is carried out for GTR88's legitimate business interests, including fraud prevention, platform security, and responsible gambling monitoring, where such interests are not overridden by the Player's privacy rights.
• Consent: Processing is based on your freely given, specific, and informed consent — primarily for the sending of marketing communications and optional analytics cookies. You may withdraw consent at any time.

GTR88 uses the personal data it collects for the following specific purposes:

• To create and manage your GTR88 account;
• To verify your identity and age as part of the KYC process;
• To process deposits and withdrawals via your selected Malaysian payment method (Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, and others);
• To detect and prevent fraudulent activity, money laundering, and account abuse;
• To administer and enforce the GTR88 Terms & Conditions;
• To monitor player activity in connection with our Responsible Gambling obligations, including the application of self-imposed limits and detection of problem gambling indicators;
• To respond to customer support queries submitted via live chat or email;
• To communicate with you regarding account activity, security alerts, and policy updates;
• To send marketing communications about GTR88 promotions, bonuses, and events, where you have provided consent to receive such communications;
• To analyse platform usage patterns and improve service performance;
• To comply with legal, regulatory, and licensing obligations.

GTR88 does not sell, rent, or trade personal data to third parties for their own commercial purposes. Personal data is shared only in the following limited circumstances:

7.1 Service Providers

GTR88 engages carefully selected third-party Data Processors to assist in delivering the Platform's services. These include KYC verification partners, payment processing networks (including FPX, DuitNow, and e-wallet gateway providers), fraud detection systems, cloud hosting providers, and customer support software operators. All such processors are bound by written data processing agreements that restrict their use of data to the specific purpose for which it was shared.

7.2 Legal and Regulatory Disclosure

GTR88 may disclose personal data to law enforcement authorities, regulatory bodies, or courts of competent jurisdiction where required to do so by applicable law, regulation, court order, or formal legal process. GTR88 will endeavour to notify the affected Player of any such disclosure unless prohibited from doing so by law.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of GTR88's business or assets, personal data held by GTR88 may be transferred to the acquiring entity as part of the transaction, subject to the same data protection obligations set out in this Policy.

7.4 Responsible Gambling Partners

Where a Player requests self-exclusion or external support, limited data may be shared with responsible gambling support organisations to facilitate the self-exclusion process, consistent with the Player's expressed wishes.

GTR88 operates internationally and may transfer personal data to, and process it in, countries other than the country in which you are located, including countries outside Malaysia. Where data is transferred internationally, GTR88 ensures that appropriate safeguards are in place — such as data processing agreements with equivalent data protection standards — to ensure your data remains protected in accordance with this Policy.

By using the GTR88 platform, you acknowledge and consent to the transfer of your personal data to countries outside your country of residence where such transfer is necessary to provide the services described in this Policy.

GTR88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or licensing obligations. The following indicative retention periods apply:

• Account and KYC records: Retained for a minimum of 5 years from the date of account closure, as required under anti-money laundering compliance obligations;
• Transaction records: Retained for a minimum of 5 years from the date of transaction;
• Support communications: Retained for 2 years from the date of the last communication;
• Marketing preferences: Retained until withdrawal of consent or account closure, whichever is earlier;
• Technical / log data: Retained for up to 12 months from generation.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with GTR88's data destruction procedures.

10.1 Types of Cookies Used

GTR88 uses the following categories of cookies on the Platform:

• Essential Cookies: Strictly necessary for the Platform to function. These include session authentication cookies and security tokens. These cannot be disabled without significantly impairing platform functionality.
• Functional Cookies: Remember your preferences and settings (such as language and currency display) to provide a more personalised experience.
• Analytics Cookies: Collect aggregated, anonymised data about how players interact with the Platform, enabling GTR88 to identify performance issues and improve the user experience. These are enabled only with your consent.
• Security Cookies: Used for fraud detection and prevention, including device fingerprinting components to identify potentially suspicious access patterns.

10.2 Managing Cookies

You may control and delete cookies through your browser settings at any time. Please note that disabling essential cookies may prevent some features of the GTR88 platform from functioning correctly. For information on managing cookies in your specific browser, refer to your browser's help documentation.

Subject to applicable law and GTR88's legitimate legal obligations, you hold the following rights in respect of your personal data:

To exercise any of these rights, submit a written request to GTR88 at [email protected] with the subject line "Data Rights Request". GTR88 will acknowledge your request within 5 business days and aim to fulfil it within 30 calendar days. Identity verification may be required before the request is processed.

GTR88 will only send marketing communications — including information about bonuses, promotions, tournaments, and new game releases — to Players who have explicitly opted in to receive such communications at the point of registration or subsequently through their Account Settings.

You may withdraw your consent to receive marketing communications at any time by:

• Updating your notification preferences in your Account Settings;
• Clicking the unsubscribe link included in any marketing email; or
• Contacting [email protected] with a request to be removed from marketing lists.

Opting out of marketing communications will not affect the sending of transactional communications relating to your account — such as withdrawal confirmations, security alerts, or policy update notices.

GTR88 implements a range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the GTR88 Platform;
• Encryption of sensitive personal data at rest in GTR88's data stores;
• Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent required for their duties;
• Two-factor authentication for internal system access;
• Regular security vulnerability assessments and penetration testing;
• Incident response procedures for detecting, reporting, and managing data breaches.

In the event of a personal data breach that poses a material risk to affected individuals, GTR88 will notify those individuals in accordance with applicable legal requirements.

The GTR88 Platform is strictly intended for individuals who are 21 years of age or older. GTR88 does not knowingly collect personal data from any person under 21 years of age. Age is verified as part of the mandatory KYC process prior to the approval of any withdrawal.

If GTR88 becomes aware that personal data has been collected from a person under the age of 21 without appropriate verification, the affected account will be immediately suspended, all personal data associated with the account will be deleted, and any funds deposited will be returned to the originating payment method subject to applicable legal constraints.

The GTR88 Platform does not contain links to external third-party websites or services for general browsing purposes. Where references to third-party payment providers (such as Maybank, CIMB, Touch 'n Go, or DuitNow) are made on the Platform, these are for informational purposes relating to GTR88's payment processing functionality.

GTR88 is not responsible for the privacy practices or content of any third-party services. If you access third-party platforms — for example, the Touch 'n Go eWallet application — in connection with your GTR88 transactions, their respective privacy policies will apply to your use of those services.

GTR88 reserves the right to update or amend this Privacy Policy at any time. Where material changes are made, GTR88 will notify registered Players by email, by posting a notice on the Platform, or by updating the "Last Updated" date at the top of this page.

Continued use of the GTR88 Platform following the publication of any amendment constitutes acceptance of the revised Policy. If you do not agree to the revised Policy, you are entitled to close your account and withdraw any eligible balance in accordance with the procedures described in the Terms & Conditions.

For all privacy-related enquiries, data rights requests, or complaints regarding GTR88's handling of your personal data, please contact GTR88 using the details below:

If you are not satisfied with GTR88's response to your data complaint, you may have the right to lodge a complaint with a relevant data protection authority in your jurisdiction.