Privacy Policy

This Privacy Policy ("Policy") describes how GK222 ("the Platform", "we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("Player", "User", "you") who access or use the services available atgk222.casa and all associated subdomains and mobile-optimised versions.

GK222 is an internationally licensed online gaming platform offering casino games, live dealer tables, sports betting markets, and related services, primarily serving the Malaysian market. We take our data protection responsibilities seriously and are committed to handling personal information in a transparent, lawful, and secure manner.

This Policy should be read alongside our Terms & Conditions, which govern the overall relationship between GK222 and its registered players. In the event of any conflict between this Policy and the Terms & Conditions regarding data matters, this Privacy Policy shall prevail.

If you have questions about this Policy or wish to exercise any of your rights described herein, please contact our Data Protection team at [email protected].

For clarity, the following terms carry the meanings assigned below throughout this Policy:

• "Personal Data" — any information that directly or indirectly identifies a living individual, including name, email address, date of birth, identification number, IP address, and financial account details.
• "Processing" — any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Controller" — GK222, which determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" — any third-party service provider that processes personal data on behalf of GK222 under a data processing agreement.
• "Consent" — a freely given, specific, informed, and unambiguous indication of the Player's agreement to the processing of their personal data for a defined purpose.
• "KYC" — Know Your Customer; the identity and age verification process required under applicable anti-money laundering (AML) and responsible gambling regulations.
• "Cookies" — small text files placed on a Player's device by the GK222 Platform to enable session management, analytics, and personalised functionality.
• "Third Parties" — external entities other than GK222 and the Player, including payment processors, game providers, and regulatory bodies.

GK222 collects the following categories of personal data from players and prospective players:

GK222 collects personal data through the following channels:

• Direct Submission: Information you provide when creating your account, completing KYC verification, making deposits or withdrawals, contacting our support team, or participating in promotions.
• Automated Collection: Technical and usage data collected automatically via cookies, web beacons, and server log files when you browse or interact with the GK222 Platform.
• Third-Party Sources: Identity verification services, payment processors (such as FPX, DuitNow, Maybank, CIMB, Public Bank, Hong Leong Bank, and digital wallet providers), and fraud prevention services may share data with us for compliance purposes.
• Referal Programme: If you are referred to GK222 by an existing player using our referral programme, we receive your contact information for account setup purposes. You will receive full privacy notice upon registration.

GK222 processes personal data on the following legal grounds:

• Contractual Necessity: Processing required to register your account, manage your balance, process deposits and withdrawals, and deliver the gaming services described in our Terms & Conditions.
• Legal Obligation: Processing required to comply with applicable anti-money laundering (AML) laws, Know Your Customer (KYC) requirements, responsible gambling regulations, and lawful instructions from regulators or courts.
• Legitimate Interests: Processing necessary for fraud prevention, platform security, responsible gambling monitoring, and improving the overall player experience — provided such interests do not override your fundamental rights and freedoms.
• Consent: Where we process data for purposes not covered by the above (for example, sending optional promotional communications), we will seek your explicit consent and may withdraw it at any time without affecting the lawfulness of prior processing.

GK222 uses the personal data we collect for the following purposes:

• Account Management: Creating and maintaining your registered GK222 account, verifying your identity and age (21+ requirement), and administering your gaming activity.
• Payment Processing: Facilitating deposits and withdrawals in Malaysian Ringgit (MYR) via approved Malaysian payment channels including Touch 'n Go eWallet, DuitNow, FPX, and major banks.
• KYC & Compliance: Verifying your identity documents in accordance with anti-money laundering obligations and responsible gambling requirements.
• Customer Support: Responding to your enquiries, resolving account issues, and maintaining records of our correspondence for service quality purposes.
• Responsible Gambling: Monitoring gaming patterns to identify potential problem gambling behaviour, enforcing self-exclusion requests, and applying deposit or session limits where requested.
• Platform Security & Fraud Prevention: Detecting and investigating suspicious account activity, unauthorised access attempts, bonus abuse, and other forms of fraud.
• Platform Improvement: Analysing aggregated usage data to improve platform performance, game selection, and the overall player experience.
• Promotional Communications (with consent): Sending relevant bonus offers, promotions, and platform updates via email where you have opted in. You may unsubscribe at any time.
• Legal Compliance: Meeting our obligations under applicable laws and regulatory frameworks, including responding to lawful requests from authorities.

GK222 does not sell, rent, or trade your personal data to third-party advertisers, data brokers, or marketing agencies. We share personal data only in the limited circumstances described below:

• Payment Service Providers: Financial data is shared with payment processors including FPX operators, DuitNow network participants, and digital wallet providers (Touch 'n Go, Boost, GrabPay) solely to facilitate transactions.
• Identity Verification Services: Where necessary, KYC documents may be shared with accredited third-party identity verification providers to confirm the authenticity of submitted documents.
• Game Content Providers: Technical data (such as session identifiers) may be shared with licensed game providers to deliver live casino and slot game services. These providers do not receive personally identifiable information beyond what is operationally necessary.
• Fraud & Security Providers: We may share technical and account data with specialist fraud prevention services to protect the integrity of the platform and its players.
• Legal & Regulatory Authorities: GK222 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required by applicable law or in response to a valid legal order.
• Business Transfers: In the event of a merger, acquisition, or sale of substantially all assets, personal data may be transferred to the succeeding entity, subject to equivalent privacy protections.

All third-party data processors engaged by GK222 are contractually required to implement appropriate technical and organisational security measures and to process personal data only as instructed by GK222.

GK222 uses cookies and similar tracking technologies to provide a functional, personalised, and secure experience on the Platform. By continuing to use GK222 with your browser's cookie settings at default, you consent to the use of cookies as described below.

• Essential Cookies: Required for the Platform to function correctly. These enable session authentication, security features, and core gaming functionality. They cannot be disabled without impairing Platform usability.
• Analytics Cookies: Help us understand how players navigate and interact with the Platform. Data collected is aggregated and anonymised and is used solely to improve the Platform experience.
• Preference Cookies: Remember your settings and preferences (such as language and display options) to personalise your experience across sessions.
• Responsible Gambling Cookies: Track session duration and activity patterns to support our responsible gambling monitoring obligations and to deliver session reminders where configured by the Player.

You may manage or delete cookies through your browser settings. Note that disabling essential cookies will significantly impair Platform functionality and may prevent access to certain features.

GK222 retains personal data for as long as is necessary to fulfil the purposes set out in this Policy, comply with applicable legal and regulatory obligations, and resolve disputes or enforce our agreements. The following general retention guidelines apply:

• Active Account Data: Retained for the duration of your account registration and for a minimum of five (5) years following account closure, in compliance with applicable AML regulations.
• KYC & Verification Documents: Retained for a minimum of five (5) years from the date of submission or account closure, whichever is later, in accordance with anti-money laundering record-keeping requirements.
• Transaction Records: All deposit, withdrawal, and betting transaction records are retained for a minimum of five (5) years to satisfy financial regulatory obligations.
• Support Communications: Correspondence with our support team is retained for up to three (3) years from the date of the last interaction for service quality and dispute resolution purposes.
• Marketing Preferences: Records of your consent or opt-out status for promotional communications are retained for as long as your account is active, plus one (1) year, to demonstrate compliance.

Once the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

GK222 implements a multi-layered security framework to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Our security measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the GK222 Platform.
• Encryption of sensitive data fields (including financial data and identity document scans) at rest using industry-standard encryption protocols.
• Multi-factor authentication options available for player accounts.
• Role-based access controls ensuring that only authorised GK222 personnel can access player data, and only to the extent required for their specific job function.
• Regular internal and third-party security audits and penetration testing.
• Documented incident response procedures for timely identification, containment, and notification of any personal data breaches.

As a GK222 player, you have the following rights with respect to your personal data. To exercise any of these rights, please contact us at [email protected] with your account username and the specific right you wish to exercise. We will respond within a reasonable period, typically within 30 calendar days.

• Right of Access: You may request a copy of the personal data GK222 holds about you, along with information about how it is being used. We will provide this in a clear and structured format.
• Right to Rectification: If any personal data we hold is inaccurate or incomplete, you may request that it be corrected. Some corrections can be made directly via your account settings panel.
• Right to Erasure ("Right to be Forgotten"): In certain circumstances, you may request the deletion of your personal data. Note that this right is subject to legal retention obligations — for example, AML regulations require us to retain certain records for a minimum of five years regardless of an erasure request.
• Right to Data Portability: You may request that personal data you have provided to GK222 be transferred to you in a structured, commonly used, machine-readable format.
• Right to Restriction of Processing: In certain circumstances (such as when you contest the accuracy of data or object to its processing), you may request that we restrict how your data is used while the matter is under review.
• Right to Object: You may object to the processing of your personal data where GK222 is relying on legitimate interests as its legal basis. You also have an absolute right to opt out of direct marketing communications at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.

GK222 is strictly an adult platform. Our services are not directed at, and are not intended for use by, individuals under the age of 21. We do not knowingly collect personal data from individuals under the age of 21.

If GK222 becomes aware that personal data has been collected from a person under the age of 21 without appropriate verification or parental consent, we will take immediate steps to delete that information and close the associated account.

Parents and guardians are encouraged to use parental control software to prevent minors from accessing gambling websites. GK222 strongly supports responsible gambling at both individual and household levels.

The GK222 Platform integrates with certain third-party service providers to deliver payment processing, game content, and analytics functionality. While we take care to partner with reputable providers, GK222 is not responsible for the privacy practices of third-party services.

Third-party payment providers used on GK222 — including but not limited to FPX operators, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB Bank, Public Bank, and Hong Leong Bank — operate under their own privacy policies. We encourage Players to review the privacy policies of any payment service provider they use.

GK222 does not incorporate links to unrelated third-party websites. If the Platform ever includes informational links (for example, to responsible gambling resources), those external sites operate under their own policies which GK222 does not control.

GK222 primarily serves the Malaysian market, and the majority of data processing occurs within secure server environments. Where personal data is transferred to or processed in jurisdictions outside Malaysia, GK222 ensures that appropriate safeguards are in place to protect your data to the same standard as described in this Policy.

Such safeguards may include contractual data processing agreements with third-party processors that incorporate standard data protection clauses, or transfers to jurisdictions that have been deemed to provide adequate levels of data protection under applicable frameworks.

If you have questions about the specific safeguards in place for any particular international data transfer, please contact us at [email protected].

GK222 reserves the right to update or amend this Privacy Policy at any time. Changes will be published on this page with the revised "Effective Date" updated accordingly. We encourage Players to review this Policy periodically to remain informed about how we protect their personal data.

For material changes that significantly affect how we process your personal data, GK222 will make reasonable efforts to notify registered Players via the email address on file or via a visible notice on the Platform prior to the changes taking effect.

Your continued use of the GK222 Platform following the publication of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to a revised Policy, you must cease using the Platform and may request account closure in accordance with our Terms & Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by GK222, please reach out using the details below:

• Privacy & Data Protection Enquiries: [email protected]
• Live Chat: Available24/7 on the GK222 Platform for urgent account-related enquiries
• Response Commitment: All privacy-related requests will receive an acknowledgement within 2 business hours and a substantive response within 30 calendar days
• Subject Access Requests (SAR): Please include your registered username and a brief description of the data you wish to access when submitting a SAR

For responsible gambling concerns or self-exclusion requests, please visit our dedicatedResponsible Gambling page.

For general questions about GK222 or our services, please visit our About Us page or consult our FAQ.