At Gembet, your privacy is more than a legal obligation — it is a responsibility we take seriously. This Privacy Policy clearly explains how we collect, use, store, and protect the personal data of every Malaysian member who uses our platform.
Six core principles that form the foundation of how Gembet manages the personal data of Malaysian members
All personal and financial information you provide to Gembet — including your Touch 'n Go eWallet, GrabPay, and DuitNow details — is protected with the same 256-bit SSL and AES-256 encryption used by Maybank and CIMB. No third party can read your data in transit.
Gembet collects only the data genuinely necessary to deliver our services — nothing more, nothing less. We do not collect information unrelated to account management, payment processing, or compliance with applicable laws in Malaysia.
Gembet has never and will never sell, rent, or share members' personal data with any third party for marketing or commercial purposes without your explicit consent. Your data belongs to you — it is not a Gembet business asset to be traded.
Every Gembet member has the right to access, update, amend, or request deletion of their personal data at any time. These rights can be exercised easily through your account settings or by contacting Gembet's support team, available 24/7.
Gembet retains your personal data only for as long as necessary to fulfil the original purpose of collection or to comply with applicable legal requirements. Once the data is no longer needed, it will be deleted or anonymised using secure, non-recoverable methods.
In the event of any data breach involving your personal information, Gembet is committed to notifying you within a reasonable timeframe in line with Malaysia's data protection legal requirements. We will not conceal any security incidents that affect our members' data.
This Privacy Policy ("Policy") is published by Gembet ("we", "Gembet", or "platform") and applies to all individuals who access or use the Gembet platform at gembet-bangla.com, including registered members, visitors browsing without an account, and any party interacting with Gembet's content or services on any device.
This policy comprehensively outlines Gembet's privacy practices — covering the types of data we collect, why we collect it, how we use it, who can access it, how long we retain it, and what rights you hold as a data owner. Reading and understanding this policy is important before you register or use any Gembet services.
Note: By registering an account or continuing to use the Gembet platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, please stop using the platform and contact us to close your account.
Gembet collects your personal data through various methods depending on how you interact with the platform. The following are the categories of data we collect:
Gembet uses the personal data collected solely for the following purposes:
Gembet does not use your personal data for third-party marketing, user profile sales, or any purpose not stated in this policy without your explicit prior consent.
Gembet processes your personal data on one or more of the following legal bases:
| Legal Basis | Applicable Situations |
|---|---|
| Contract Performance | Processing is necessary to fulfil the service agreement between you and Gembet — including account management and payment processing. |
| Legitimate Interests | Fraud prevention, platform security, and service improvement that do not override your fundamental privacy rights. |
| Legal Obligation | Compliance with AML, KYC, and applicable data protection laws, including Malaysia's Personal Data Protection Act 2010 (PDPA). |
| Consent | Optional marketing communications and optional data collection that you actively consented to during registration or subsequently through your account settings. |
Gembet does not sell your personal data. However, in certain limited and lawful circumstances, Gembet may share your data with the following parties:
Every third party that receives personal data belonging to Gembet members must sign a binding data processing agreement obligating them to protect your data in accordance with Gembet's security standards and Malaysian data protection laws.
Gembet implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or accidental disclosure:
While Gembet takes reasonable steps to protect your data, no system is entirely immune to cyber threats. In the event of a security incident involving your data, Gembet will notify you within a reasonable timeframe in accordance with its data breach notification obligations.
As a Gembet member and data subject, you hold the following rights regarding your personal data that we hold:
To exercise any of the above rights, contact the Gembet support team via live chat on the platform or by email at support@gembet-bangla.com. Gembet will respond to your request within 30 days of receipt. For complex requests, this period may be extended by up to 60 days, with notice provided to you.
Gembet uses cookies and similar tracking technologies to enhance the user experience, maintain your login session, and analyse platform usage patterns. Gembet uses four categories of cookies:
You can manage your cookie preferences through your browser settings. However, disabling essential cookies will affect the functionality of the Gembet platform. For more information on managing cookies in your browser, refer to your browser's help documentation.
The Gembet platform is intended exclusively for individuals aged 18 and above. Gembet does not knowingly collect, store, or process the personal data of anyone under the age of 18.
If Gembet discovers that personal data belonging to a minor has been collected without valid consent, we will take immediate action to delete that data and close the account in question. If you believe a minor has registered a Gembet account, please contact us immediately at support@gembet-bangla.com so that we may take the appropriate action.
Gembet runs automated age verification during registration and reserves the right to request proof of age in the form of a MyKad or other valid document at any time. Accounts that fail to verify a minimum age of 18 will be suspended immediately.
In the course of operating our platform services, your personal data may be processed or stored on servers located outside Malaysia. This is standard operational practice within the global online services industry.
When such data transfers occur, Gembet ensures that:
Gembet handles your financial data — including information related to Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX accounts — with the highest level of protection. Here is how we safeguard your financial information:
Gembet reserves the right to update or amend this Privacy Policy at any time to reflect changes in our privacy practices, new legal requirements, or changes to the services we offer. All changes take effect once the updated version is published on this page.
For significant changes that affect how we use your personal data, Gembet will:
We encourage you to review this Privacy Policy page periodically to stay informed of Gembet's current practices. The "Updated" date at the top of this page will always reflect the date of the most recent changes.
If you have any questions, concerns, or complaints about how Gembet handles your personal data, or if you wish to exercise any of the rights outlined in Section 7, please contact the Gembet privacy team through the following channels:
Email: support@gembet-bangla.com
Live Chat: Available 24/7 within the Gembet platform after logging in
Response Time: We aim to respond to all privacy-related enquiries within 3 business days and to rights exercise requests within 30 days.
If you are unsatisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in Malaysia in accordance with the procedures set out under the applicable data protection laws.
Join over 500,000 Malaysian players who trust Gembet to keep their personal data safe. Register for free in under 2 minutes with a minimum deposit of RM10.
Gembet's privacy team is ready to help you understand how your personal data is used and to exercise your rights. Any request for data access, correction, or deletion will be processed within 30 days of receipt. For urgent account security matters, use the in-platform live chat for a faster response.
All privacy-related communications are confidential and handled exclusively by authorised personnel. Gembet will never request your password or full payment details via email.