Gila80 Privacy Policy – Our Commitment to Protecting the Personal Data of Malaysian Members

1 Introduction

Gila80 is an online sports betting and casino platform built to serve Malaysian players. As a responsible platform, we recognise that our members' trust is our most valuable asset — and that trust starts with transparent, responsible management of personal data.

This Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA 2010) and clearly outlines every aspect of how personal data is managed at gila80. We are committed to collecting only what is necessary for our operations, using your data solely for purposes you have consented to, and never sharing it without a lawful basis.

If you have any questions about this Privacy Policy, the gila80 support team is available to assist via live chat 24 hours a day or by email at support@gila80.best.

2 Types of Personal Data We Collect

Gila80 collects various types of personal data depending on how you interact with our platform. The following are the categories of data we collect:

Account Registration Data

• Full name as shown on your official identification document.
• An active Malaysian mobile phone number.
• A valid and active email address.
• Date of birth (for verification of the 18-year age requirement).
• Passwords are stored in encrypted (hashed) form — we do not store your password in plain text.

Financial & Payment Data

• The bank account or eWallet name used for deposits and withdrawals.
• Bank account number or eWallet number (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX).
• Deposit and withdrawal transaction history.
• Identity verification documents requested for the KYC (Know Your Customer) process, such as a copy of your identification card.

Platform Usage Data

• Betting history including market types, stake amounts, and outcomes.
• Login sessions including time, date, and session duration.
• The IP address and device type used to access gila80.
• Interaction history with the customer support team.
• Your saved preferences and account settings.

Technical Data & Cookies

• Cookie data and session identifiers to ensure the platform functions correctly.
• Technical error logs for troubleshooting purposes.
• Platform usage analytics data that does not personally identify any individual.

3 How gila80 Uses Your Personal Data

The personal data we collect is used solely for the following purposes — no use outside this scope will occur without your consent:

• Account Management: Creating and managing your member account, including the login process, password recovery, and updating your information.
• Transaction Processing: Processes deposits made via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX, as well as withdrawals of winnings to your Malaysian bank account or eWallet.
• KYC and Anti-Money Laundering Compliance: Verifies member identities in compliance with anti-money laundering legislation and platform licensing requirements.
• Customer Support: Providing effective assistance when you contact the gila80 support team, including access to relevant account history to resolve issues more efficiently.
• Platform Security: Detecting and preventing fraud, duplicate accounts, and other unauthorised activity that could compromise the integrity of the gila80 platform.
• Platform Improvements: Analysing usage patterns in aggregate (without identifying individuals) to improve the user experience on the gila80 platform.
• Account-Related Communications: Sending important notifications related to your account such as transaction confirmations, security alerts, and updates to terms.
• Marketing Communications (with consent): Sending information about gila80's latest promotions, bonuses, and offers — only if you have consented to receive such communications, and you may opt out at any time.

Gila80 does not use your personal data to make automated decisions that significantly affect you without human involvement.

4 Sharing Data with Third Parties

Gila80 does not sell members' personal data to any third party. However, in the course of operating the platform, we may need to share data with selected parties under limited circumstances:

• Payment Service Providers: Data required to process transactions is shared with eWallet providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, and banks supporting DuitNow and FPX. Such sharing is kept to a minimum and solely for transaction processing purposes.
• Technical Service Providers: Companies that provide infrastructure, hosting, or security services to gila80 may have limited access to data as required to carry out their functions. They are bound by strict confidentiality agreements.
• Relevant Authorities: gila80 may be legally required to disclose certain data to Malaysian authorities such as the police, courts, or regulatory agencies if lawfully directed to do so.
• Identity Verification Providers: For KYC purposes, identity verification data may be processed through recognised verification service providers who are held to equivalent privacy standards.

5 Security Measures We Take

Gila80 continuously invests in data security to ensure your personal information remains protected at all times:

• 256-bit SSL Encryption: All data transmitted between your device and gila80's servers is encrypted using 256-bit TLS/SSL protocol — the same standard adopted by Malaysia's leading financial institutions.
• Encrypted Password Storage: Your password is never stored in plain text. We use strong hashing algorithms with salting to ensure passwords cannot be recovered — even by gila80 staff.
• Two-Factor Authentication (2FA): Members are encouraged to enable 2FA to add an extra layer of security to their account — meaning even if your password is compromised, accessing your account still requires a second verification through your phone.
• 24/7 Security Monitoring: gila80's security systems continuously monitor account activity to detect suspicious patterns such as repeated login attempts, access from unusual locations, or abnormal transaction behaviour.
• Internal Access Controls: Access to members' personal data within the gila80 organisation is restricted to staff who require it for their specific duties, and all access is logged for audit purposes.
• Regular Security Assessments: gila80 conducts regular security audits and penetration testing to identify and address system vulnerabilities before they can be exploited.

While we take all reasonable steps to protect your data, no system can be guaranteed 100% secure. We encourage members to do their part by using strong passwords, enabling 2FA, and reporting any suspicious activity to our support team immediately.

6 Cookies & Tracking Technologies

Gila80 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

• Session Cookies: Required to keep you logged in during your session and to link your activity within a single continuous session. These cookies are automatically deleted when you close your browser.
• Preference Cookies: Saves your preferences such as your chosen language and display settings so you do not have to reconfigure them each time you log in.
• Security Cookies: Used to detect suspicious activity and protect your account from unauthorised access.
• Analytics Cookies: Helps us understand how members use our platform in aggregate — without identifying any individual personally. This information is used to improve the design and functionality of the gila80 platform.

You can manage cookie settings through your browser preferences. However, disabling certain cookies may affect the functionality of the gila80 platform — particularly session cookies required for a secure login process.

7 International Data Transfers

In the course of operating the platform, some of your personal data may be processed or stored on servers located outside Malaysia. This can occur when gila80 uses cloud infrastructure service providers that operate globally.

In all cases involving international data transfers, gila80 ensures that:

• Data recipients in other countries provide a level of data protection that is equivalent to or higher than what is required in Malaysia.
• Appropriate and legally binding data transfer agreements are established with data recipients.
• Data transfers are carried out on a lawful basis under applicable data protection legislation.

If you would like more information about the protection mechanisms used for international data transfers, please contact the gila80 support team.

8 Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data that we hold:

• Right of Access: You have the right to request a copy of the personal data we hold about you. We will provide this information within 14 business days of receiving a valid request.
• Right to Rectification: If your personal data is inaccurate or out of date, you have the right to request a correction. You can update basic information directly in your account settings, or contact us for changes that require additional verification.
• Right to Erasure: You may request deletion of your personal data under certain circumstances — for example, if you decide to permanently close your gila80 account. However, we may be required to retain certain records for a period specified under anti-money laundering laws.
• Right to Object to Processing: You have the right to object to the processing of your personal data for direct marketing purposes at any time by contacting us or using the unsubscribe link in our communications.
• Right to Data Portability: Under certain circumstances, you have the right to request your personal data in a machine-readable format for transfer to another service provider.

To submit any request related to the rights above, contact the gila80 support team via live chat or email at support@gila80.best by clearly stating the nature of your request. We are committed to responding within 24 hours and resolving requests within a reasonable timeframe.

9 Data Retention Period

Gila80 does not retain your personal data for longer than is necessary for the purpose for which it was collected. The following outlines our data retention guidelines:

• Active Account Data: Retained for as long as your account remains active on gila80.
• Financial Transaction Data: Retained for a minimum of 7 years from the date of the transaction, in line with Malaysia's financial compliance and anti-money laundering legal requirements.
• Data After Account Closure: After an account is closed at a member's request, personal data that is no longer required for legal compliance purposes will be deleted within 90 days. Data required for legal purposes will be retained for the period prescribed by the relevant legislation.
• Security Log Data: Retained for 12 months for security analysis and investigation purposes where required.

Once the retention period has ended, your data will be securely deleted or anonymised so that it can no longer be linked to your identity.

10 Children's Privacy

Gila80 strictly prohibits the use of the platform by anyone under the age of 18. We do not knowingly collect or process personal data belonging to minors. If we discover that personal data of an underage individual has been collected, we will take immediate steps to delete that data and terminate the account in question.

If you believe we may have collected data from an individual under the age of 18, please notify us immediately by emailing support@gila80.best so that we can take immediate action.

11 Links to Third-Party Websites

The gila80 platform may contain links to third-party websites for informational purposes. This Privacy Policy applies solely to the gila80 platform and does not cover the privacy practices of those third-party websites. gila80 is not responsible for the privacy practices or content of any external websites linked from our platform.

We encourage you to read the privacy policy of every website you visit, especially before providing any personal information.

12 Amendments to This Privacy Policy

Gila80 reserves the right to amend this Privacy Policy from time to time to reflect changes in our operational practices, legal requirements, or industry standards. When significant amendments are made, we will notify members via their registered email or through an in-platform notification at least 14 days before the changes take effect.

The "Updated" date at the top of this page reflects when the latest version of this Privacy Policy was published. We encourage you to check this page periodically to stay informed about how we manage your personal data. Continued use of the gila80 platform after any amendments take effect will be considered acceptance of the updated Privacy Policy.

13 Contact Us for Privacy Matters

For any questions, concerns, or requests relating to this Privacy Policy or the management of your personal data at gila80, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week in Bahasa Melayu through the gila80 platform. The fastest option — we typically respond within 2 minutes.
• Email: support@gila80.best — Please include "Privacy Inquiry" in your email subject line. We are committed to responding within 24 hours.

For issues related to responsible gambling or self-exclusion, please visit the Responsible Gambling us for available information and tools. For legal matters and platform usage terms, please refer to Terms & Conditions gila80.