geraitogel Privacy Policy: your data, handled with purpose

The following terms carry the meanings set out below throughout this Privacy Policy. Singular forms include the plural and vice versa where the context requires.

geraitogel may collect the following categories of Personal Data, depending on the service used and the stage of account or transaction activity:

• Identity data: full name, date of birth, nationality, MyKad or passport number and a copy of the applicable document.
• Contact data: email address, mobile number, residential or billing address including city and postcode.
• Verification data: selfie holding identity document, proof of address dated within three months, and supplementary documents requested during enhanced due-diligence review.
• Financial data: MYR deposit and withdrawal amounts, payment method identifiers (such as a masked card number, Touch 'n Go eWallet reference, Boost wallet reference, DuitNow account name or FPX bank name), and transaction records.
• Account activity data: login timestamps, session duration, game titles accessed, bet history, sports markets viewed and bonus interactions.
• Technical data: IP address, device type, operating system, browser version, screen resolution, referral source and approximate geolocation derived from network information.
• Communications data: the content and metadata of support messages, chat transcripts, email correspondence and live-chat records.
• Responsible gambling data: self-reported budget limits, deposit-limit requests, cooling-off or self-exclusion records, and any related welfare assessments.

geraitogel collects Personal Data through the following means:

• Direct submission: information entered during registration, identity verification, payment initiation, support contact or promotional claim.
• Automated collection: session and device data gathered through server logs, cookies and similar technologies as a User navigates geraitogel.
• Payment providers: transaction confirmation, payment status and limited payment reference data returned by Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong or other enabled payment processors.
• Verification services: identity or address confirmation data returned by approved third-party KYC and anti-fraud services used to validate submitted documents.
• Responsible gambling platforms: self-exclusion status information from applicable registers where geraitogel is required to check or report such records.

geraitogel relies on the following lawful bases for processing Personal Data:

geraitogel processes Personal Data to perform its core obligations to Users, comply with applicable legal requirements and maintain a safe, fair platform. Processing activities may include identity matching against submitted documents, transaction monitoring for unusual patterns, game-activity analysis for responsible gambling signals, and security log review.

Automated decisions that produce legal or similarly significant effects on a User — such as account suspension on fraud detection grounds — are subject to a human review process where practically feasible and where applicable law requires it. A User may request information about the logic involved in any such decision that materially affects them.

geraitogel may use cookies, local storage, session identifiers and similar technologies to maintain session state, detect suspicious access patterns, remember language or currency preferences, and gather aggregated usage data. These technologies do not create independently identifying profiles when used for operational purposes.

Most browsers permit users to restrict or delete cookies. Restricting essential cookies may affect platform functionality — for example, it may prevent session persistence. Restricting analytics or preference cookies is less likely to affect core service availability. geraitogel will indicate, where practically possible, which cookies are required for service delivery and which are optional.

geraitogel does not sell Personal Data. It may share data with third parties in the following circumstances:

• Payment providers: transaction data shared with Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong or other enabled processors strictly to complete a transaction.
• KYC and fraud services: identity document data and verification results shared with authorised providers under written data processing agreements.
• Responsible gambling registers: limited User data shared with applicable self-exclusion or welfare services in accordance with a legal or regulatory obligation.
• Legal authorities: Personal Data disclosed in response to a valid court order, regulatory direction, anti-money-laundering requirement or other binding legal obligation.
• Business transfers: Personal Data may be transferred if geraitogel is involved in a merger, acquisition or asset sale, subject to equivalent confidentiality and security commitments for Users.

Processors acting on geraitogel's behalf must operate under a written contract that restricts their use of Personal Data to the specified purpose and requires appropriate security standards.

Personal Data may be stored or processed on infrastructure located outside Malaysia. Where such a transfer occurs, geraitogel takes reasonably practicable steps to confirm that the recipient provides an adequate level of protection, through binding contractual commitments, recognised adequacy standards or other appropriate mechanisms.

Users who require further information about safeguards in place for a specific cross-border transfer may contact geraitogel through the Support email below.

geraitogel retains Personal Data for no longer than is necessary for the purposes stated in this policy. Indicative retention periods are guided by the following:

• KYC documents: retained for the period required by applicable anti-money-laundering or regulatory rules, typically five years from the end of a business relationship unless a longer period is mandated.
• Transaction records: retained to satisfy financial record-keeping obligations and to resolve disputes, typically for a minimum of five years.
• Support communications: retained for the period necessary to resolve the reported issue and any subsequent review, typically up to two years.
• Responsible gambling records: self-exclusion data is retained for the exclusion period and any additional period required to prevent re-registration.
• Marketing preferences: retained until an opt-out is processed or a reasonable period after the last interaction.

On expiry of the applicable retention period, data is deleted or irreversibly anonymised so that it can no longer be linked to an identifiable individual.

Subject to applicable law and the lawful basis for processing, Users may hold the following rights over their Personal Data:

To exercise any of the above rights, contact geraitogel through the Support email listed in Clause 14. geraitogel will acknowledge your request promptly and respond within a reasonable timeframe, which may be up to 30 calendar days or a longer period permitted by applicable law in complex cases. Identity verification may be required before a request is processed.

geraitogel casino-style content is strictly for adults aged 21 and above. geraitogel does not knowingly collect Personal Data from persons under 21. Age verification may be required at registration or before a payment is processed. If geraitogel discovers that Personal Data was collected from a person under the minimum age without appropriate parental or guardian consent where required by law, that data will be deleted as promptly as practicable.

If a parent or guardian believes that a minor has submitted Personal Data to geraitogel, a deletion request should be sent to the Support email in Clause 14 with sufficient information to identify the account concerned.

geraitogel applies organisational and technical measures intended to protect Personal Data from accidental loss, unauthorised access, disclosure, alteration or destruction. These may include encrypted HTTPS connections for data in transit, access controls restricting internal data availability to authorised roles, regular security reviews of platform configurations, and monitoring for anomalous account behaviour.

No system can guarantee absolute security. Users share responsibility for their own account safety by choosing strong unique passwords, protecting authentication credentials and notifying geraitogel promptly if they suspect unauthorised access. Support will never request a complete password in a written communication.

geraitogel may update this Privacy Policy to reflect changes in data processing practices, platform functionality, applicable law or regulatory guidance. Material changes that significantly affect how Personal Data is processed will be communicated through an appropriate notice on the website or, where practical, through account communications before the updated policy takes effect.

Continued use of geraitogel after an updated Privacy Policy has been published constitutes acknowledgement of the revised terms where permitted by applicable law. Users who object to a material change should contact geraitogel before the effective date to discuss their options.