Updated: January 2026
Your Data Protection

GDL88 Privacy Policy – Your Personal Data Protection in Malaysia

At GDL88, your privacy is not just a compliance checkbox — it is a responsibility we take seriously every day. This Privacy Policy clearly explains what data we collect, why we need it, how we store and protect it, and your rights as a GDL88 member over your own personal information.

256-bit SSL
Data Not Sold
Right to Access Data
Right to Deletion
24/7 Support
Our Privacy Commitment
6 Ways GDL88 Protects Your Personal Data
From technical safeguards to policy — here's how GDL88 keeps your information secure at all times
256-bit SSL Encryption

All communications between your device and GDL88's servers are protected using TLS with 256-bit encryption — the same standard used by Malaysia's major banks such as Maybank and CIMB. This means your data cannot be intercepted or read, even by anyone attempting to eavesdrop on your connection.

Secure Data Storage

Your GDL88 account password is stored in hashed form that cannot be decrypted by anyone — including GDL88's own technical staff. Sensitive financial information is stored in an isolated server environment with strict access controls, monitored continuously by our cybersecurity team.

Your Data Is Never Sold to Third Parties

GDL88 has never and will never sell, rent, or transfer your personal information to any third party for their marketing or business purposes. Any data sharing with third-party service providers — such as Touch 'n Go, GrabPay, or DuitNow payment providers — is strictly limited to what is necessary to deliver those services.

Your Data, Your Control

As a GDL88 member, you have the full right to access the data we hold about you, request corrections to inaccurate information, request a copy of your data in a readable format, and request deletion of your account along with all associated data. All such requests can be submitted directly to the GDL88 support team.

Regular Security Audits

GDL88's security infrastructure is regularly assessed by independent cybersecurity experts to identify and address any vulnerabilities before they can be exploited. We also conduct routine penetration testing to ensure our defences remain on par with current threats.

Marketing Communications Control

GDL88 only sends marketing communications — such as promotional offers and the latest bonus information — to members who have consented to receive them. You may unsubscribe from marketing communications at any time through your account settings or by contacting the GDL88 support team, with no impact on your account status.

Data Summary
Types of Data GDL88 Collects & Their Purpose
This table provides a general overview — full details are available in the privacy sections below
Data Type Example Purpose of Collection Retention Period
Identity Information Full name, date of birth, MyKad number Account registration, KYC verification Lifetime of account + 7 years
Contact Information Email, phone number, address Communication, account verification, support For the lifetime of the account
Financial Data Deposit records, withdrawal records, payment methods Transaction processing, AML compliance 7 years (legal requirement)
Game Data Betting history, winnings, session duration Platform operations, responsible gambling 3 years after last activity
Technical Data IP address, device type, web browser Security, fraud detection 12 months
Cookie Data Session preferences, language settings User experience, analytics Until cookies expire

1. Introduction — GDL88's Privacy Commitment

GDL88 takes the privacy and personal data protection of its members seriously. This Privacy Policy explains the data collection, use, storage and protection practices GDL88 follows in operating our online gaming platform, which serves players across Malaysia.

This policy applies to all information you provide to GDL88 when registering an account, using the platform, contacting our support team, or interacting with any part of GDL88's services. By registering a GDL88 account and using our platform, you agree to the practices described in this Privacy Policy.

Core Principles: GDL88 only collects data that is genuinely necessary to provide safe, quality services. We do not collect data to sell to third parties or for purposes unrelated to our operational needs.

If you have any questions or concerns about how GDL88 handles your personal data, you may contact us at any time at support@gdl88.asia. Our privacy team will respond within 3 business days for data protection-related inquiries.

2. Personal Data We Collect

GDL88 collects various types of personal data depending on how you interact with our platform. Below is a full breakdown of the data categories we may collect:

A. Identity & Contact Information

  • Full name as it appears on your official Malaysian identification document (MyKad).
  • Date of birth and Malaysian identity card number (MyKad).
  • An active email address and a Malaysian phone number.
  • Current residential address in Malaysia.
  • The username you chose when registering your GDL88 account.

B. Financial & Transaction Data

  • Records of all deposit and withdrawal transactions including date, time, amount (in RM) and payment method — Touch 'n Go eWallet, GrabPay, DuitNow, FPX Maybank2u, CIMB Clicks, Boost, ShopeePay.
  • Bank account or digital wallet information used for transactions (partially masked account number — GDL88 does not store the full number).
  • Historical records of your GDL88 account balance.

C. Game Activity Data

  • Game history including slots, live baccarat, blackjack, poker, lottery and all other game categories played on GDL88.
  • Records of bets placed, winnings, losses, and session duration.
  • Responsible gaming limits you have activated within your GDL88 account.

D. Technical & Device Data

  • IP address, device type (iOS/Android smartphone, laptop, tablet), operating system and web browser version.
  • Login and logout timestamps, general geographic location based on IP address.
  • Platform usage data such as pages visited, games clicked, and time spent.

3. How GDL88 Collects Data

GDL88 collects your personal data through several key channels:

  • Directly from you: When you register a GDL88 account, fill in forms on the platform, contact our support team via live chat, email or WhatsApp, or submit documents for the KYC process.
  • Automatically during platform use: GDL88 automatically records technical data such as IP address, device type and usage patterns when you access and use our platform — this is industry standard practice for security and fraud detection purposes.
  • From third-party payment providers: When you make a deposit or withdrawal using Touch 'n Go eWallet, GrabPay, DuitNow, or other methods, the payment provider may share transaction information necessary to verify and complete the payment.
  • Through cookies and tracking technologies: The GDL88 platform uses cookies and similar technologies to enhance the user experience, store session preferences, and collect analytics data for platform improvements.
GDL88 does not purchase or acquire personal data lists from third-party sources for marketing purposes. Every piece of data we hold about you comes directly from your interactions with the GDL88 platform.

4. How GDL88 Uses Your Data

GDL88 uses your personal data solely for legitimate purposes that are necessary in the context of providing our online gaming platform services. The following are the primary purposes:

Operations & Account Management

  • Creating and managing your GDL88 account securely.
  • Verifying your identity during the KYC process to meet legal compliance requirements.
  • Processing your deposits and withdrawals through your chosen payment method.
  • Providing effective customer support that is relevant to your situation.

Security & Fraud Prevention

  • To detect and investigate suspicious activity, fraud attempts, or violations of GDL88's terms.
  • Monitoring transaction patterns to comply with the Anti-Money Laundering Act and applicable AML requirements.
  • Protecting your account from unauthorised access through multi-factor authentication and anomaly detection systems.

Service Improvement

  • Analysing usage patterns to improve the interface and gaming experience on GDL88.
  • Managing the GDL88 VIP Rewards programme and tailoring promotional offers based on your activity and preferences.
  • Sending important service communications such as successful withdrawal notices, security alerts, and relevant policy updates.

Legal Compliance

  • To fulfil legal compliance obligations applicable to GDL88's operations.
  • Providing transaction records for audit and reporting purposes as required by the relevant authorities.

5. Data Sharing with Third Parties

GDL88 does not sell, rent, or disclose your personal data to third parties, except in the following limited circumstances:

Required Service Providers

GDL88 shares necessary data with service providers that help us operate the platform — including payment providers (Touch 'n Go eWallet, GrabPay, DuitNow, FPX, Boost, ShopeePay), game software providers (Pragmatic Play, Evolution Gaming, PG Soft, and others) and cloud infrastructure providers. Data sharing is limited strictly to what is required, and all service providers are bound by rigorous data protection agreements with GDL88.

Legal Requirements

GDL88 may disclose your personal data to authorities or law enforcement agencies when required by a valid court order, direction from a competent authority, or unavoidable legal obligation. In such circumstances, GDL88 will endeavour to notify you in advance where permitted by applicable law.

In the Event of a Business Transfer

If GDL88 is involved in a merger, acquisition, or business asset transfer, user data may be transferred as part of that process. In such cases, the receiving party will be bound by data protection obligations equivalent to this Privacy Policy, and members will be notified in advance.

GDL88's Commitment: We never sell member name lists, emails, or phone numbers to marketing companies, data brokers, or any external entity for advertising or third-party marketing campaigns.

6. GDL88 Data Security Measures

GDL88 implements multiple layers of technical and organisational protection to keep your personal data secure:

Technical Security

  • Encryption in transit: All communications between your device and GDL88's servers are protected by TLS 1.3 with 256-bit encryption, without exception.
  • Data encryption at rest: Sensitive data stored in GDL88's databases is encrypted using industry-recognised encryption algorithms.
  • Unreadable password: Passwords are stored as bcrypt hashes that cannot be decrypted — GDL88 staff are unable to view your original password.
  • Role-based access controls: GDL88 staff may only access the data required for their specific role — not all data across the board.
  • Continuous monitoring: GDL88's security monitoring system operates around the clock to detect and respond to threats in real time.

Organisational Security

  • All GDL88 staff with access to user data undergo background checks and ongoing data protection training.
  • A clear incident response procedure to swiftly and effectively address any security breaches.
  • Regular internal and external security audits conducted by independent experts.
While GDL88 takes all reasonable steps to protect your data, no internet security system can be guaranteed 100% impenetrable. You are also responsible for keeping your password and devices secure when accessing your GDL88 account.

7. Cookies & Tracking Technologies

The GDL88 platform uses cookies and similar technologies to enhance your experience. Cookies are small text files stored on your device when you visit the GDL88 platform. We use several types of cookies:

Essential Cookies (Required)

These cookies are essential for the basic functionality of the GDL88 platform — such as maintaining your login session, saving items in your betting slip and keeping your account secure. Without them, the platform will not function properly. These essential cookies cannot be disabled if you wish to use GDL88.

Preference Cookies

These cookies remember your preferences — such as your language choice, display settings and favourite games on GDL88 — so you do not have to reconfigure them each time you log in. They are purely for your convenience.

Analytics Cookies

GDL88 uses analytics data to understand how Malaysian players use our platform — which pages are visited most, which games are most popular, and where users encounter difficulties. This data is used solely for platform improvement and is not shared with external parties. You can disable analytics cookies through your web browser settings without affecting the core functionality of the GDL88 platform.

For more information on how to manage cookies on your device, please refer to your web browser's help documentation — whether you use Chrome, Safari, Firefox, or any other browser.

8. Your Personal Data Rights

As a GDL88 member and as an individual whose personal data we process, you have several important rights that GDL88 is committed to upholding:

Right of Access

You may request a copy of all personal data GDL88 holds about you. We will fulfil this request within 30 days and provide the data in a readable format.

Right to Correction

If any information on your GDL88 account is inaccurate or out of date, you have the right to request a correction. Basic details can be updated directly in your account settings.

Right to Deletion

You may request the deletion of your GDL88 account and associated personal data. However, certain data may need to be retained for a specified period to meet legal obligations, such as financial records.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time. Once your objection is received, GDL88 will immediately cease using your data for those purposes.

Right to Data Portability

You may request the data you have provided to GDL88 in a structured, machine-readable format (such as CSV or JSON) for use with other services, should you choose to do so.

Right to Restrict Processing

In certain circumstances — such as when you dispute the accuracy of your data or while an investigation into a complaint is ongoing — you may request that the processing of your data be temporarily restricted.

To exercise any of the rights above, please contact the GDL88 privacy team at support@gdl88.asia by clearly stating the right you wish to exercise along with your GDL88 account details. We will process your request within 30 days and keep you informed of its progress.

9. Protection of Children's Data

GDL88 has a zero-tolerance policy on membership or platform use by individuals under 18 years of age. The GDL88 platform is strictly for adults, and we do not knowingly collect or process personal data of minors.

If GDL88 discovers that personal data belonging to an individual under the age of 18 has been collected without our knowledge — whether through account registration using false information or by other means — we will delete that data immediately and close the account in question without prior notice.

Parents or guardians who believe their minor child has registered a GDL88 account without authorisation should contact our support team at support@gdl88.asia immediately. GDL88 will act promptly to address the situation.

GDL88 encourages parents and guardians to use parental control software and monitor their children's online activity to ensure they do not access adult gaming platforms, including GDL88.

10. International Data Transfers

In the course of operating the GDL88 platform, some of your personal data may be processed or stored outside Malaysia — for example, when using cloud infrastructure services or international game software providers such as Evolution Gaming or Pragmatic Play, which maintain servers across various global locations.

GDL88 ensures that any international data transfers are carried out with adequate safeguards through:

  • Binding data processing agreements with all third-party service providers that receive GDL88 user data.
  • Ensuring that data recipients comply with data protection standards equivalent to or stricter than those applicable in Malaysia.
  • Use of recognised and appropriate data transfer mechanisms for every instance of international data transfer.

If you would like to learn more about the safeguards in place for international data transfers, you may contact GDL88 at support@gdl88.asia for more information.

11. Data Retention Period

GDL88 does not retain your personal data longer than necessary for the purposes set out in this Privacy Policy. Data retention periods are based on the following principles:

  • Active account data: Retained for the lifetime of your active GDL88 account, plus the period required to resolve any outstanding matters.
  • Financial & transaction data: Stored for 7 years after a transaction occurs, to meet Malaysian legal and compliance requirements relating to financial records and anti-money laundering.
  • Gaming history data: Stored for 3 years after the last gaming activity, for responsible gaming purposes and resolution of any disputes.
  • Technical data & logs: Stored for a maximum of 12 months after collection, unless a longer period is required for an ongoing security investigation.
  • Data after account closure: After a GDL88 account is closed, we will delete or anonymise data that is not required to be retained for legal purposes within a reasonable timeframe.

When data is no longer needed, GDL88 will securely delete it using procedures that ensure the data cannot be recovered after deletion. Data retained for legal requirements will only be accessed within the context of those specific requirements.

12. Amendments to GDL88's Privacy Policy

GDL88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or changes to GDL88 services. When material amendments are made to this Privacy Policy, we will notify you via:

  • Email to the address registered on your GDL88 account.
  • A notice displayed on the GDL88 platform the next time you log in.
  • An announcement on the GDL88 website's Privacy Policy page with a clear amendment date.

The "Updated" date at the top of this Privacy Policy indicates when the latest amendment takes effect. Your continued use of the GDL88 platform after an amendment notice is considered acceptance of the revised Privacy Policy. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

Note: Minor amendments such as spelling corrections or language clarifications will not trigger a notification. Only amendments that materially change how we collect, use, or disclose your data will be actively communicated to all GDL88 members.

13. Contact Us for Privacy Enquiries

If you have any questions, concerns, or requests relating to your privacy and personal data protection at GDL88, our team is here to help. We take every privacy enquiry seriously and are committed to providing transparent and helpful responses.

You may contact the GDL88 privacy team through the following channels:

  • Privacy Email: support@gdl88.asia — for data protection inquiries, data access requests, or privacy complaints.
  • Live Chat: Available directly on the GDL88 platform, 24 hours a day, 7 days a week for general inquiries.
  • WhatsApp: For inquiries that require faster, more direct communication with the GDL88 support team.

For requests relating to data rights (access, correction, deletion), please state clearly in your email: your full name, GDL88 username, the type of request, and any relevant additional information. We will respond within 3 working days and resolve your request within 30 days of receipt.

GDL88 values the trust you place in us when handling your personal information. Our commitment to privacy goes beyond a legal obligation — it is a core value that GDL88 upholds across every aspect of our operations in Malaysia.

256-bit SSL

Bank-grade encryption for all communication between you and GDL88's servers

Data Not Sold

GDL88 never sells or transfers member data to third-party marketing companies

Full Data Rights

Access, correction, deletion — full control of your personal data is in your hands

24/7 Privacy Support

The GDL88 privacy team is available at any time to assist with enquiries related to your personal data.

Frequently Asked Questions
Frequently Asked Questions About GDL88's Privacy Policy
Quick answers to the questions members ask most about privacy at GDL88

No — this is a commitment GDL88 upholds without exception. GDL88 does not sell, rent, or transfer members' personal data to any marketing companies, data brokers, or external parties for their own business purposes. Any data sharing with third parties is limited to service providers who directly assist us in operating the platform — such as payment providers Touch 'n Go, GrabPay, and DuitNow — and only to the extent necessary to carry out those services.

You may submit a data access request by contacting the GDL88 team at support@gdl88.asia and clearly stating that you wish to receive a copy of your personal data. Please include your full name and GDL88 account username to facilitate identity verification. GDL88 will process your request within 30 days and provide the data in a readable format. Data access requests are free of charge and may be made at any time.

Yes, you may request the deletion of your account and personal data by contacting the GDL88 support team. However, there are important exceptions — certain data must be retained for a specified period to meet legal requirements. For example, financial transaction records must be kept for 7 years in accordance with applicable compliance obligations. Data subject to these legal requirements cannot be deleted before the mandatory retention period expires, but access to such data will be restricted and used solely in the context of those legal obligations.

GDL88 does not store your full bank card number or digital wallet login credentials. When you make a deposit using Touch 'n Go eWallet, GrabPay, DuitNow, FPX Maybank2u, CIMB Clicks, Boost, or ShopeePay, you are redirected to the payment provider's secure interface to complete the transaction. GDL88 only receives confirmation that the transaction was successful — not your sensitive financial details. If you have ever entered payment details on a site that appeared to be GDL88 but was not our official platform, please contact us immediately.

When you close your GDL88 account, we will delete or anonymise all personal data that does not need to be retained for legal purposes. Data that must be kept — such as financial transaction records for the mandatory 7-year period — will be stored in an isolated environment and accessible only within the context of legal requirements. Closed accounts cannot be reactivated, and you will need to register a new account if you wish to use GDL88 again in the future (subject to eligibility and no prior suspension record).
Your Rights Are Protected — Contact GDL88 If You Have Any Concerns

If you have any concerns about how GDL88 handles your personal data, or wish to exercise any of the data rights outlined in this Privacy Policy, please contact us at support@gdl88.asia. You may also read Terms & Conditions and Responsible Gaming us for a full overview of how GDL88 operates transparently and responsibly.

Play with Peace of Mind — Your Data is Fully Protected at GDL88

Now you know how GDL88 protects your privacy. Join over 500,000 Malaysian players enjoying an online gaming platform that is safe, fair, and respectful of user privacy.

Minimum deposit MYR 20 · Touch 'n Go · GrabPay · DuitNow · FPX · Age requirement: 18 and above

Bahasa Melayu