1. Home
  2. Privacy Policy
Gemma4 Official Documents

Privacy Policy Gemma4 – Malaysia Casino Personal Data Protection

At Gemma4, your privacy is more than a legal obligation — it is a core value we uphold wholeheartedly. This document clearly explains how we collect, use, protect, and manage your personal data in accordance with the Personal Data Protection Act (PDPA) Malaysia 2010.

Updated: January 2026 Bahasa Melayu (ms-MY) Malaysia – PDPA 2010
256-bit
SSL Encryption
PDPA
Malaysia Compliance
0
Sale of Data to Third Parties
24/7
Security Monitoring
Our Privacy Commitment

6 Ways Gemma4 Protects Your Personal Data

Before reading the full policy, here are six key principles that form the foundation of Gemma4's data protection practices for every member in Malaysia.

Bank-Grade 256-Bit SSL Encryption
All data transmitted between your device and Gemma4's servers is protected by 256-bit SSL encryption – the same security standard used by leading Malaysian banking institutions such as Maybank and CIMB. This means every login detail, payment information via DuitNow or Touch 'n Go eWallet, and personal data you submit is transmitted in fully encrypted form and is unreadable to any unauthorised party.
Full Compliance with Malaysia's PDPA 2010
Gemma4 operates in full compliance with the Malaysian Personal Data Protection Act (PDPA) 2010 in every aspect of how we handle member data. We only collect data that is genuinely necessary for clear and legitimate purposes, obtain your consent before any data processing, and give you the full right to access, correct, or request deletion of your data at any time.
No Sale of Data to Third Parties
Gemma4 has never and will never sell, rent, or share members' personal data with any third party for marketing or commercial purposes. Your data belongs to you — it is not an asset we trade. This is a non-negotiable commitment and one of the most fundamental core values that has guided Gemma4's operations in Malaysia from day one.
Secure Servers with Strict Access Controls
Gemma4 member data is stored on servers protected by multiple layers of physical and digital security. Access to member data is restricted solely to Gemma4 staff who require it to carry out their legitimate job functions. All access to member data is logged and continuously monitored by Gemma4's IT security team, 24 hours a day.
Your Full Rights Over Your Own Data
As a Gemma4 member, you have full legal rights under Malaysia's PDPA to access the personal data we hold about you, correct any inaccurate information, request restrictions on data processing in certain circumstances, and request deletion of your data upon account closure. All data-related requests can be submitted to us at [email protected].
Full Control Over Marketing Communications
Gemma4 only sends marketing communications — such as the latest promotional updates, exclusive offers, and platform news — to members who have given their consent at the point of registration. You may withdraw this consent at any time, easily, through your account settings or by contacting Gemma4's support team, available 24/7.
Contents
1. Introduction 2. Data We Collect 3. How We Use Your Data 4. Data Sharing 5. Data Security 6. Cookies & Technology 7. Your Rights 8. Data Retention 9. Children's Data 10. Policy Amendments 11. Contact Us
Full Privacy Policy
1

Introduction & Scope of Privacy Policy

This Privacy Policy is published and upheld by Gemma4 – an online casino platform operating under the domain gemma4.my and intended for users in Malaysia. This document sets out in detail how Gemma4 ("we", "the Platform") collects, processes, stores, protects, and discloses the personal data of our members and website visitors.

This Privacy Policy is drafted in accordance with the Malaysian Personal Data Protection Act 2010 (PDPA) and internationally recognised data protection principles. By registering an account or using any Gemma4 service, you agree to the data processing practices described in this Privacy Policy.

Key Commitments: Gemma4 is committed to managing your personal data transparently, responsibly, and in full compliance with Malaysian law. Your privacy is more than a legal obligation to us – it is the foundation of the trust we build with you as our member.

This policy applies to all information collected through the gemma4.my website, the Gemma4 mobile app, email communications, and all other interactions between you and Gemma4. If you do not agree with any part of this Privacy Policy, please discontinue use of Gemma4's services.

2

Personal Data We Collect

Gemma4 collects your personal data only when there is a clear, legitimate, and necessary purpose for doing so. The following are the categories of data we may collect from you:

Personal Identification Data
  • Full name
  • Date of birth
  • National identity card number (MyKad)
  • Residential address
  • Nationality
Contact Details
  • Malaysia phone number
  • Email address
  • Platform username
Financial Data
  • E-Wallet details (TnG, GrabPay, Boost)
  • DuitNow account information
  • Deposit & withdrawal history (MYR)
  • Financial transaction records
Platform Usage Data
  • Gaming history (slots, live casino)
  • Session timestamps & duration logs
  • Betting patterns
  • Favourite games
Technical & Device Data
  • IP address
  • Device type & operating system
  • Web browser used
  • Cookie & session data
Communication Data
  • Support live chat records
  • Email correspondence with Gemma4
  • Feedback & Complaints
Gemma4 practises the principle of data minimisation – we only collect data that is genuinely necessary for clearly defined and legitimate purposes. We do not collect sensitive data without a strong basis and your explicit consent.
3

How We Use Your Personal Data

Gemma4 uses collected personal data solely for legitimate and necessary purposes in the context of providing online casino services to members in Malaysia. The following are the primary purposes for which your data is used:

  • Account Management: Creating and managing your Gemma4 account, verifying your identity, and providing access to the platform.
  • Financial Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX Maybank2u, and CIMB Clicks, as well as withdrawals of your winnings in Malaysian Ringgit (MYR).
  • Identity Verification (KYC): Meeting Malaysian legal requirements relating to age verification (18+), anti-money laundering (AML), and counter-terrorism financing (CFT).
  • Provision of Gaming Services: Ensuring a smooth gaming experience across all Gemma4 games, including slots, Live Roulette, and other casino games.
  • Customer Support: Responding to enquiries, resolving complaints, and providing technical assistance to members.
  • Responsible Gambling Monitoring: Identifying gaming patterns that may indicate problem gambling and providing appropriate assistance.
  • Platform Improvement: Analysing usage patterns to improve Gemma4's platform features, user experience, and game collection.
  • Marketing Communications (with your consent): Sending promotional information, bonuses, and platform updates to members who have given their consent.
  • Legal Compliance: Meeting reporting and compliance requirements under applicable Malaysian law.
Purpose Principle: Gemma4 will not use your personal data for any purpose beyond those stated above without first obtaining your renewed consent. If you receive any communication from Gemma4 that you feel is irrelevant or unauthorised, please contact us immediately at [email protected].
4

Data Sharing with Third Parties

Gemma4 does not sell, rent, or disclose members' personal data to third parties for marketing or commercial purposes under any circumstances. This is an absolute, non-negotiable policy.

However, in certain limited circumstances, Gemma4 may share your personal data with trusted third parties, and only for the following reasons:

  • Payment Service Provider: The necessary information is shared with authorised payment service providers – including DuitNow operators, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX-participating banks – solely for the purpose of processing your financial transactions.
  • Technical Service Providers: Cloud service providers, hosting, and IT infrastructure partners that support Gemma4 in operating the platform — all bound by strict data confidentiality agreements.
  • Law Enforcement Authorities: Gemma4 will disclose personal data to the relevant Malaysian authorities when required to do so by a court order, regulatory directive, or legitimate legal obligation.
  • Audit & Compliance Services: Independent third-party audit bodies that verify the integrity of Gemma4's random number generator (RNG) and game fairness may have limited access to anonymised game statistical data.
All third parties that receive data from Gemma4 are bound by strict data protection agreements and are permitted to use that data only for the specified purposes. Gemma4 is not responsible for the privacy practices of third parties that you access directly from our platform.
5

Data Security Measures

Gemma4 invests seriously in security technologies and procedures to protect our members' personal data from unauthorised access, disclosure, alteration, or destruction. The security measures we employ include:

  • 256-bit SSL Encryption: All data transmitted between your device and Gemma4's servers is protected by impenetrable 256-bit SSL encryption – the same standard used by Malaysia's online banking systems.
  • Encryption of Data at Rest: Sensitive data stored in Gemma4's databases – including passwords and financial information – is encrypted using robust encryption algorithms.
  • Layered Access Control: Access to Gemma4's systems and data is governed by multi-factor authentication (MFA) and the principle of least privilege — only staff who genuinely require access to specific data are permitted to do so.
  • 24/7 Continuous Monitoring: Gemma4's security systems are monitored around the clock to detect and respond swiftly to any threats or suspicious activity.
  • Regular Security Testing: Gemma4 conducts regular penetration testing and security audits by independent cybersecurity experts to identify and address any vulnerabilities.
  • Staff Training: All Gemma4 staff with access to member data receive comprehensive data protection training and are bound by robust confidentiality agreements.
While Gemma4 implements comprehensive security measures, no system is ever 100% immune to cyber threats. You also play an important role in protecting your account – use a strong and unique password, enable two-factor authentication where available, and never share your login credentials with anyone.
6

Cookies, Analytics & Tracking Technologies

Gemma4 uses cookies and similar tracking technologies to enhance the user experience, analyse platform usage patterns, and maintain the security of your session. The following are the types of cookies we use:

  • Essential Cookies (Required): These cookies are strictly necessary for the core functions of the Gemma4 platform – such as maintaining your login session, processing transactions, and ensuring security. They cannot be disabled without affecting platform functionality.
  • Analytics Cookies: We use analytics cookies to understand how members interact with the Gemma4 platform — which pages are visited most, time spent in each section, and navigation patterns. This information is used solely to improve the platform.
  • Functional Cookies: These cookies allow the platform to remember your preferences – such as your preferred language, last betting settings, and favourite games – for a more personalised experience.
  • Security Cookies: Used to detect suspicious activity, prevent fraud, and safeguard the security of your account during gaming sessions on Gemma4.

You can manage your cookie settings through your web browser preferences. However, disabling essential cookies will significantly affect the functionality of the Gemma4 platform and may prevent you from logging in or completing transactions.

7

Your Rights Under Malaysia's PDPA

As a Gemma4 member in Malaysia, you have the following rights under the Personal Data Protection Act (PDPA) 2010 with respect to the personal data we hold:

1
Right of Access
You have the right to request and receive a copy of all personal data that Gemma4 holds about you.
2
Right to Rectification
You have the right to correct any personal data in Gemma4's records that is inaccurate, incomplete, or out of date.
3
Right to Withdraw Consent
You may withdraw your consent to data processing at any time — particularly with regard to marketing communications.
4
Right to Restrict Processing
Under certain circumstances, you may request that Gemma4 restrict the processing of your personal data.
5
Right to Erasure
You may request the deletion of your personal data when it is no longer required or upon account closure, subject to our legal obligations.
6
Right to Complain
If you are dissatisfied with how Gemma4 handles your data, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia.
To exercise any of the rights above, contact us at [email protected] and clearly state your request. We will respond within 14 business days. For more complex requests, additional time may be required and we will notify you accordingly.
8

Data Retention Period

Gemma4 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required under applicable Malaysian law.

  • Active Account Data: For as long as your Gemma4 account remains active and in use, your personal data will be retained to allow you to use our services without interruption.
  • Data Following Account Closure: Following account closure, Gemma4 will retain your personal data for the period required under Malaysian law – typically between 5 and 7 years – for anti-money laundering compliance and financial audit purposes.
  • Financial Transaction Records: All financial transaction records in MYR are retained for the period stipulated by applicable Malaysian financial laws.
  • Communication Data: Customer support communication records are retained for 2 years for reference and service improvement purposes.

Once the designated retention period has lapsed, your personal data will be securely deleted or anonymised using methods that ensure it cannot be recovered or traced back to you.

9

Protection of Children's Data

Gemma4 is an online casino entertainment platform intended exclusively for adults aged 18 and above. We do not knowingly collect personal data from any individual under the age of 18.

If you are a parent or guardian who believes your underage child has registered a Gemma4 account without your knowledge, please contact us immediately at [email protected]. We will act without delay to close the account and permanently delete all associated data.

Gemma4 employs multiple age verification mechanisms, including identity document checks, to ensure that our platform is accessible only to individuals who meet the minimum age requirement. Child protection is a non-negotiable priority across every aspect of Gemma4's operations.

10

Amendments to the Privacy Policy

Gemma4 reserves the right to amend or update this Privacy Policy at any time to reflect changes in our data processing practices, new legal requirements, or service improvements. Members will be notified of any material amendments via:

  • Email to the registered email address on your account.
  • Prominent notifications within the Gemma4 platform upon login.
  • Updating the "Updated" date at the top of this Privacy Policy.

Continued use of the Gemma4 platform after any amendment to this Privacy Policy takes effect will be considered your acceptance of the latest revised version. We encourage you to revisit this page periodically to stay informed about how we protect your personal data.

11

Contact Gemma4's Privacy Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way Gemma4 handles your personal data, please reach out to us through the following channels:

Privacy Email
[email protected] – please include "Privacy Policy" in the email subject line
Live Chat 24/7
Live chat within the Gemma4 platform – available 24 hours a day
Help Centre
Frequently asked questions at our FAQ page
Terms & Conditions
Read Full Terms & Conditions Gemma4

We are committed to responding to all privacy-related enquiries within 14 business days. For more urgent matters involving data security or suspected unauthorised access, please reach out via Live Chat for an immediate response.

In-Depth Understanding

Why the Gemma4 Privacy Policy Matters to You as a Malaysian Player

Many online casino players – whether they enjoy slots, Live Roulette, or other casino games – rarely give much thought to the privacy policy of the platform they use. That is entirely understandable. When you are having fun spinning Neon Fruits or fully absorbed in a session of 5 Lions Dance, the last thing on your mind is data privacy. The reality, however, is that understanding how a platform handles your data is just as important as understanding how the games themselves work.

At Gemma4, we fully understand the sensitivity of financial data. When you deposit via Touch 'n Go eWallet or make a withdrawal through DuitNow, the information involved is deeply personal. That is why we invest seriously in security infrastructure – 256-bit SSL encryption is not just technical jargon. It means all data travelling between your phone or laptop and Gemma4's servers is fully encrypted and unreadable to anyone who might attempt to intercept it in transit. The same standard used by Maybank and CIMB to protect your everyday online banking transactions.

PDPA Malaysia compliance is something Gemma4 takes extremely seriously. The Personal Data Protection Act 2010 is a Malaysian law that grants you real, enforceable rights over your personal data. Among the most important is the right to know what data is held about you and what it is used for. At Gemma4, the answer is straightforward – we use your data to manage your account, process financial transactions, ensure platform security, and meet legal requirements. Full stop. We do not sell your data, share it with advertisers, or use it for any purpose you have not consented to.

A question frequently asked by Malaysian players about privacy on online casino platforms is: "Is my gaming history shared with anyone?" The short answer is no. Your gaming history – whether you played slots at 11pm after watching an EPL match, or how many times you tried your luck in Live Roulette – is personal information that is strictly held within Gemma4's systems and is not disclosed to any external party, except where required by law, such as during a financial crime investigation conducted by a legitimate Malaysian authority.

One point we want to highlight concerns cookies. The Gemma4 platform uses cookies – this is standard practice for virtually all websites and digital applications. Cookies allow the platform to remember that you are logged in, store your preferences, and help us track sessions for security purposes. The analytics cookies we use help us understand which areas of the platform are most visited, so we can continuously improve your gaming experience. No Gemma4 cookies are used to sell your data to advertisers or any other party.

Regarding the right to data erasure guaranteed under PDPA – this is a right that genuinely exists and is yours to exercise. If you close your Gemma4 account and wish to have your personal data deleted, you may formally request this. We will delete your data in accordance with the timeframes and procedures prescribed by law – certain categories of data must be retained for specific periods under Malaysian financial legislation, but we will clearly explain what is kept and why when you submit such a request.

Finally, we want to make clear that this Privacy Policy is not a document we drafted simply to satisfy legal requirements and then set aside. It is a living document that we review regularly to ensure it reflects our actual practices and the latest developments in Malaysia's data protection landscape. Whenever meaningful amendments are made, we will notify you proactively. Your trust in Gemma4 is something we do not take lightly, and the way we honour that trust is by being transparent and accountable in everything we do with your personal data, every day.

FAQ

Frequently Asked Questions About Gemma4's Privacy Policy

Absolutely not. This is an absolute, non-negotiable policy at Gemma4. We do not sell, rent, or disclose members' personal data to any third party for marketing or commercial purposes. Data that may be shared is strictly limited to payment service providers such as DuitNow or Touch 'n Go eWallet that require information to process your transactions, and Malaysian law enforcement authorities where required by law. All such third parties are bound by strict data protection agreements.

You may request access to your personal data by emailing [email protected] with the subject line "Data Access Request – PDPA". Please include your full name and Gemma4 account number in the request. Gemma4 will respond within 14 business days with a copy of the personal data we hold about you. This is your right, guaranteed under the Personal Data Protection Act (PDPA) Malaysia 2010, and we respect it fully.

Following account closure, Gemma4 retains your personal data for the period required under Malaysian law — typically between 5 and 7 years for financial records, for anti-money laundering compliance purposes. Once the mandatory retention period has lapsed, your data will be securely deleted or anonymised. If you wish to request deletion of your data after account closure (for data not subject to legal retention requirements), contact us at [email protected] and we will clearly explain what can and cannot be deleted, and why.

Yes, your payment information is protected to the highest security standard at Gemma4. All transactions via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX are processed through channels encrypted with 256-bit SSL. Gemma4 does not store your full card or e-wallet account details in our systems – only the information necessary to identify your payment method for withdrawal purposes is retained. All stored financial data is also encrypted within our databases.

Yes, you can opt out of marketing communications from Gemma4 at any time with ease. Simply click the "Unsubscribe" link found at the bottom of any promotional email you receive from us. You can also update your communication preferences via your Gemma4 account settings or by contacting our support team. Please note that you cannot opt out of essential transactional emails such as deposit confirmations, withdrawal notifications, and account security alerts – these are important communications directly related to the security and management of your account.
View All FAQs
Trust & Security

Gemma4 – The Online Casino Platform You Can Fully Trust

Licensed & Regulated
256-bit SSL
PDPA
MY Local Payments
24/7 Support
No Data Sales
Gemma4 Privacy Commitment Summary

Gemma4 protects your personal data with 256-bit SSL encryption, is fully compliant with Malaysia's PDPA 2010, does not sell your data to third parties, and gives you full rights to access, correct, or request deletion of your data. Your privacy and security are a trust we uphold every day for more than 500,000 members across Malaysia.

Read Full Terms & Conditions →
Join Gemma4 with Confidence

Your Data Is Safe – Ready to Start Playing at Gemma4?

Register a free Gemma4 account in under 2 minutes, with full confidence that your personal data is protected to the highest security standards. Deposit from as little as RM10 and claim a welcome bonus of up to RM888.

Register a Free Account Log In
Data Protected by 256-bit SSL Malaysia PDPA Compliance Minimum Deposit RM10 Bonus Up to RM888

18+ only. Please gamble responsibly. Responsible Gaming

Bahasa Melayu