Privacy Policy — Gopek178

Introduction

This Privacy Policy ("Policy") is issued by Gopek178 ("the Platform", "we", "us", "our") and applies to all personal data collected from individuals ("Members", "Users", "you") who access or use the Gopek178 website at gopek178.cam and all associated services, whether through a desktop browser, mobile browser, or any other means of access.

Gopek178 is an online gaming and sports betting platform serving users in Malaysia and other permitted jurisdictions. We take the privacy and security of your personal data seriously. This Policy is designed to give you a clear, transparent account of our data handling practices so that you can make informed decisions about using our Platform.

This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, both of which govern separate but related aspects of your use of the Platform.

Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person. This includes, without limitation, your full name, date of birth, residential address, email address, phone number, financial account details, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data. Gopek178 acts as the Data Controller in respect of the personal data of its Members.
• "Data Processor" means a third-party entity that processes Personal Data on behalf of the Data Controller, under instruction and subject to a data processing agreement.
• "KYC" means Know Your Customer — the identity and age verification process required by Gopek178's operating obligations.
• "Cookie" means a small text file placed on your device by the Gopek178 website for the purposes described in Section 9 of this Policy.
• "Member" means any individual who has created and holds a registered account on the Gopek178 Platform.
• "Sensitive Personal Data" means personal data revealing racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data — none of which Gopek178 intentionally collects except where explicitly required by applicable law or regulatory obligation.

Data Controller

Gopek178 is the Data Controller responsible for the personal data of Members collected through and in connection with the Platform at gopek178.cam. As Data Controller, Gopek178 determines the purposes for which your personal data is collected and the manner in which it is processed.

For all data protection related enquiries, rights requests, or complaints, you may contact our designated data protection contact through the following channels:

• Email: [email protected] — subject line: "Data Protection Enquiry"
• Live Chat: Available 24/7 directly on the Platform — state that your query relates to data protection and it will be routed to the appropriate team.

Gopek178 operates under international online gaming licensing. Our data handling obligations are defined by the data protection and privacy requirements of our licensing jurisdiction, as well as any applicable obligations under the laws of jurisdictions where our Members reside.

Data We Collect

Gopek178 collects personal data in the following categories, depending on the nature of your interaction with the Platform:

4.1 Identity & Registration Data

• Full legal name (as it appears on your identity document);
• Date of birth (for age verification — minimum age is 21);
• Gender;
• Nationality and country of residence;
• Malaysian identity card number (MyKad) or passport number, collected during KYC verification.

4.2 Contact Data

• Email address (primary account contact and communication channel);
• Mobile phone number;
• Residential address (collected during KYC — used for address verification).

4.3 Financial & Transaction Data

• Bank account details or e-wallet identifiers associated with payment methods used (e.g., Maybank account details, CIMB account number, Touch 'n Go registered phone number, Boost account, GrabPay account, USDT wallet address);
• Deposit and withdrawal transaction history;
• Wagering history (game played, amounts staked, outcomes);
• Account balance information at any given time.

4.4 Technical & Usage Data

• IP address at the time of registration and at each login;
• Device type, operating system, and browser information;
• Session data including login timestamps, session duration, and pages visited;
• Geolocation data (at the country or region level) derived from IP address;
• Cookie and tracking data as described in Section 9.

4.5 Communications Data

• Records of your communications with our support team via Live Chat, email, WhatsApp, or Telegram;
• Support ticket content and resolution records;
• Any feedback, complaints, or dispute submissions you make to Gopek178.

4.6 KYC Verification Documents

• Copies of identity documents (MyKad, passport);
• Proof of address documents (utility bills, bank statements dated within 3 months);
• Proof of payment method ownership;
• Selfie images submitted for identity confirmation purposes.

How We Collect Your Data

Gopek178 collects personal data through the following means:

5.1 Directly from You

The majority of personal data we hold is provided directly by you, including during the account registration process, the KYC verification process, when making deposit or withdrawal requests, when contacting our support team, and when participating in promotions or completing surveys.

5.2 Automatically from Your Device

When you access the Gopek178 Platform, our systems automatically collect certain technical data from your device and browser, including your IP address, device type, browser type and version, operating system, and session behaviour data. This data is collected through server logs, cookies, and similar tracking technologies, as further described in Section 9.

5.3 From Third-Party Payment Processors

When you make a deposit or withdrawal, our payment processing partners — including those facilitating Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and USDT transactions — share limited transaction confirmation data with us. This typically includes a transaction reference number, amount, currency, timestamp, and the masked or partial identifier of the payment instrument used. Gopek178 does not receive your full bank account credentials or e-wallet passwords via these integrations.

5.4 From Identity Verification Providers

Where Gopek178 uses third-party identity verification services to assist with KYC processing, these providers may share with us the result of identity checks (pass/fail/refer), together with a confidence score. The underlying document images and biometric data, where applicable, are handled in accordance with the verification provider's own privacy policies, which are subject to Gopek178's vendor due diligence process.

Purposes of Data Processing

Gopek178 processes your personal data for the following clearly defined purposes:

Legal Basis for Processing

Gopek178 processes your personal data under one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to perform the contract between you and Gopek178, including account creation, game access, and payment processing.
• Legal obligation: Processing required to comply with applicable legal and regulatory obligations, including KYC, anti-money laundering (AML), and responsible gambling requirements imposed by our licensing authority.
• Legitimate interests: Processing necessary for our legitimate business interests, including fraud prevention, platform security, dispute resolution, and service improvement — provided these interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — for example, where you opt in to receiving promotional communications from Gopek178. You may withdraw consent for consent-based processing at any time by contacting our support team.

Data Sharing & Disclosure

Gopek178 does not sell your personal data. We may share your personal data in the following limited circumstances only:

8.1 Service Providers & Data Processors

Gopek178 engages third-party service providers who process personal data on our behalf under written data processing agreements. These include: identity verification providers for KYC processing; payment processors facilitating transactions via Maybank, CIMB, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and cryptocurrency networks; fraud detection and AML screening services; IT infrastructure and cloud hosting providers; and customer support software platforms.

All such processors are contractually obligated to process personal data only as instructed by Gopek178, to implement appropriate technical and organisational security measures, and to refrain from using your data for their own commercial purposes.

8.2 Regulatory & Law Enforcement Authorities

Gopek178 may be required by applicable law, court order, or regulatory directive to disclose personal data to competent authorities. Where legally permitted, we will inform you of such a disclosure prior to or following the disclosure. We will not disclose personal data to government bodies beyond the extent strictly required by applicable law.

8.3 Business Transactions

In the event that Gopek178 undergoes a merger, acquisition, sale of assets, or corporate restructuring, personal data held by us may be transferred to a successor entity. We will provide prior notice to affected Members where such a transfer occurs, and will ensure that any successor entity accepts binding obligations under this Privacy Policy.

8.4 Aggregate & Anonymised Data

Gopek178 may share aggregated, anonymised, or de-identified data that cannot reasonably be used to identify any individual Member with analytics partners, industry bodies, or in public reporting. This data is not personal data and is not subject to the restrictions of this Privacy Policy.

Cookies & Tracking Technologies

The Gopek178 website uses cookies and similar tracking technologies to deliver, maintain, and improve the Platform experience. This section describes the types of cookies we use and the purposes they serve.

9.1 Types of Cookies Used

• Strictly Necessary Cookies: Essential for the Platform to function. These include session cookies that maintain your login state, security tokens, and load-balancing cookies. These cannot be disabled without materially impairing your ability to use the Platform.
• Functional Cookies: Store your preferences such as language settings, displayed currency (MYR), and user interface customisation choices. Disabling these will cause the Platform to revert to default settings on each visit.
• Analytical Cookies: Allow us to understand how Members interact with the Platform — which features are used most, where users encounter difficulties, and how the overall user journey can be improved. We use aggregated and anonymised data from these cookies and do not use them to profile individual Members for marketing purposes.
• Security & Fraud Prevention Cookies: Help us detect unusual or suspicious access patterns, including multiple login attempts, abnormal session behaviour, and potential account compromise indicators.

9.2 Cookie Management

You can manage cookie preferences through your browser settings. Most modern browsers allow you to view, delete, and block cookies. Note that disabling strictly necessary cookies will prevent you from accessing the Platform. Detailed cookie management instructions for common browsers (Chrome, Firefox, Safari, Edge) are available in your browser's help documentation.

Data Retention

Gopek178 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our regulatory obligations. The following general retention periods apply:

• Active Account Data: Retained for the duration of your account membership with Gopek178, plus a statutory post-closure retention period required by our licensing obligations (typically 5 years following account closure).
• KYC Documents: Retained for the period specified by our licensing authority's AML requirements from the date of account closure (typically 5 years). These documents may be required by regulatory authorities during this period.
• Transaction Records: Financial transaction records are retained for a minimum of 5 years post-transaction in accordance with AML and record-keeping obligations.
• Support Communications: Retained for up to 3 years from the date of the last interaction, unless the communication relates to a dispute or regulatory matter requiring longer retention.
• Technical & Log Data: Server log data is retained for up to 12 months, after which it is anonymised or deleted.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data destruction procedures.

Data Security

Gopek178 implements a multi-layered data security programme designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key security measures include:

• Encryption in Transit: All data transmitted between your device and our servers is protected using 256-bit SSL/TLS encryption. This applies to every page on the gopek178.cam domain.
• Encryption at Rest: Sensitive data stored in our databases — including identity document copies and financial identifiers — is encrypted using AES-256 encryption at the storage layer.
• Access Controls: Access to personal data within Gopek178's internal systems is restricted on a strict need-to-know basis, with role-based access controls, multi-factor authentication for privileged accounts, and comprehensive access logging.
• Regular Security Assessments: Our platform undergoes periodic security reviews, including vulnerability scanning and penetration testing, to identify and address potential weaknesses before they can be exploited.
• Incident Response: Gopek178 maintains a documented data breach response procedure. In the event of a security incident affecting your personal data, we will notify you and relevant regulatory authorities within the timeframes required by applicable obligations.

Your Rights

As a data subject, you hold the following rights in respect of your personal data held by Gopek178. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request". We will respond to verified requests within 30 days of receipt.

12.1 Right of Access

You have the right to request a copy of the personal data we hold about you. Subject to identity verification, we will provide you with a summary of the personal data categories we hold, the purposes for which it is processed, and, where technically feasible, a copy of the specific data itself.

12.2 Right of Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. For corrections to core account data such as name, address, or contact information, we may require supporting documentation to verify the accuracy of the requested change.

12.3 Right of Erasure ("Right to Be Forgotten")

You may request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purposes for which it was collected, or where you withdraw consent and there is no other legal basis for processing. Please note that this right is subject to limitations: where we are required by law or regulatory obligation to retain your data (for example, KYC records and transaction history retained for AML compliance), we cannot delete it within the mandatory retention period.

12.4 Right to Restrict Processing

In certain circumstances, you may request that we restrict the processing of your personal data — for example, while the accuracy of the data is being contested, or pending the outcome of an objection to processing. During a restriction period, we will continue to store your data but will not process it beyond storage, except with your consent or for legal claims.

12.5 Right to Data Portability

Where processing is based on your consent or contractual necessity, and is carried out by automated means, you have the right to receive the personal data you provided to us in a structured, commonly used, and machine-readable format, and to request that it be transmitted directly to another service provider where technically feasible.

12.6 Right to Object

You have the right to object to processing based on our legitimate interests. Where you raise such an objection, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defence of legal claims.

12.7 Right to Withdraw Consent

Where processing is based on your consent — such as for promotional email communications — you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing carried out prior to withdrawal. To unsubscribe from marketing communications, you may use the unsubscribe link in any marketing email or contact our support team directly.

Children & Minors

The Gopek178 Platform is strictly for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Our account registration process includes mandatory age disclosure and is subject to KYC identity and age verification.

If you are a parent or guardian and believe that a minor under your care has registered an account with Gopek178, please contact us immediately at [email protected] with the subject line "Minor Account Report". We will investigate and act promptly.

International Data Transfers

Gopek178 operates on an international basis and engages service providers in multiple jurisdictions. As a result, your personal data may be transferred to and processed in countries outside of Malaysia. When such transfers occur, Gopek178 takes steps to ensure that your personal data continues to receive a level of protection consistent with this Privacy Policy.

Safeguards we implement for international transfers include: requiring all third-party data processors to execute standard contractual clauses or equivalent transfer mechanisms; conducting due diligence on the data protection frameworks applicable in the destination country; and monitoring compliance of our international processors on an ongoing basis.

By using the Gopek178 Platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions that may have different data protection standards to those applicable in Malaysia. We ensure that such transfers are conducted responsibly and with appropriate contractual protections in place.

Third-Party Links

The Gopek178 Platform may contain links to third-party websites, applications, or services — for example, links to payment provider portals when processing deposits via Maybank2u, CIMB Clicks, Touch 'n Go eWallet, or similar platforms. These third-party destinations operate under their own independent privacy policies and data practices.

Gopek178 has no responsibility for, and accepts no liability in connection with, the privacy practices, data handling, or security measures of any third-party website or service. We encourage you to review the privacy policy of any third-party service before providing your personal data to that service.

Changes to This Privacy Policy

Gopek178 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, regulatory requirements, or Platform features. The date of the most recent revision is always displayed at the top of this page.

Where a change to this Policy is material — for example, a significant change to how we use your personal data or a change to the categories of data we collect — Gopek178 will provide advance notice to Members via email notification to the registered account address and/or an in-platform notification. For non-material updates, such as clarifications or corrections to existing language, we will update the policy and revise the "Last Updated" date without separate notification.

Your continued use of the Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the changes. If you do not agree to any revision, please discontinue use of the Platform and contact our support team to close your Account.

The current version of this Privacy Policy is always available at gopek178.cam/privacy-policy. We recommend reviewing it periodically.

Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise your data rights, or wish to raise a concern about how Gopek178 handles your personal data, please contact us through the following channels:

• Email: [email protected] — use the subject line "Data Protection Enquiry" or "Data Rights Request" for faster routing.
• Live Chat: Available 24/7 on the Platform — inform the support agent that your query relates to data privacy and it will be escalated to the appropriate team.

Gopek178 aims to acknowledge all privacy-related enquiries within 5 business days and to provide a substantive response within 30 days of receiving a verified request.

This Privacy Policy was last updated on 1 January 2026 and supersedes all previous versions. Gopek178 is an international online gaming platform serving Malaysian users. This Policy is published in English. In the event of any inconsistency arising from translation into another language, the English version shall prevail.