Privacy Policy giitt1wqy – Personal Data Protection for Malaysian Members

1giitt1wqy Introduction & Privacy Commitment

Giitt1wqy fully understands the trust you place in us when you share personal information during registration and while using the platform. We take that trust seriously. We have never viewed your personal data as an ordinary business asset — it is your information, and you deserve to know exactly what happens with it.

This Privacy Policy is written in clear, plain English because we want every giitt1wqy member in Malaysia — from Kuala Lumpur to Kota Bharu, from Ipoh to Kuching — to genuinely understand their rights and the protections available to them. Not just another lengthy legal document that nobody reads.

2Types of Personal Data We Collect

Giitt1wqy only collects data that is strictly necessary to provide a safe, compliant, and quality service. The categories of data we may collect are as follows:

We do not collect any sensitive data such as medical records, religious information, or political views. Biometric data is also not collected by giitt1wqy.

3How giitt1wqy Uses Your Personal Data

Every piece of data we collect has a clear and legitimate purpose. giitt1wqy uses your personal data for the following:

• Account Management: Creating, maintaining, and securing your giitt1wqy account, including the login process, two-factor authentication, and password recovery
• Transaction Processing: Processing deposits via Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, and FPX, and managing all your withdrawal requests
• Service Delivery: Gives you full access to all casino games, slots, blackjack, live matches, and Sports Betting on the giitt1wqy platform
• Identity Verification (KYC): Meeting legal compliance obligations including age verification (18+), anti-money laundering (AML) prevention, and regulatory authority requirements
• Service Communications: Sending important notifications related to your account, transactions, Policy changes, and giitt1wqy service updates
• Marketing (with consent): Sending you information about giitt1wqy promotions, bonuses, and special offers – only where you have given consent to receive marketing communications
• Responsible Gambling: Monitoring usage patterns to identify early signs of problem gambling and reaching out to players who may need support
• Platform Security: Detecting and preventing fraud, system abuse, unauthorised access, and other cybersecurity threats
• Service Improvement: Analysing aggregated, anonymised usage patterns to improve the giitt1wqy user experience and platform performance

4Legal Basis for Data Processing at giitt1wqy

In accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), giitt1wqy processes your personal data on the following grounds, depending on the type of processing involved:

• Contract Performance: Processing necessary to provide the giitt1wqy platform services that you have registered for and agreed to use
• Legitimate Interests: Processing for fraud prevention, platform security, and service improvement purposes that fall within the legitimate interests of giitt1wqy and its members
• Legal Compliance: Processing required under Malaysian law, including AML and KYC requirements, and directives from competent authorities
• Permission: For marketing communications and certain cookie usage, we require and rely on your explicit consent, which may be withdrawn at any time

5Third-Party Data Sharing & Disclosure

Giitt1wqy does not sell, rent, or trade your personal data to any third party for their own marketing purposes — this is an absolute commitment. However, there are limited situations in which we may need to share your data:

• Payment Service Providers: Transaction details are shared with e-wallet and FPX providers (Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, Maybank2u, CIMB Clicks) solely for the purpose of processing your financial transactions
• Technology Service Providers: Cloud infrastructure providers and technical service vendors used by giitt1wqy are bound by strict confidentiality agreements and may only process data in accordance with our instructions
• Regulatory Bodies & Authorities: giitt1wqy may be legally required to disclose certain information to regulatory bodies, the police, courts, or Malaysian law enforcement agencies when lawfully requested
• Responsible Gaming Assessment Service Providers: Aggregated, anonymised usage data is shared with the independent body that audits our responsible gaming systems
• Business Transfer: In the event of a merger, acquisition, or sale of giitt1wqy assets, members' personal data may be transferred to the successor entity, with prior notice given to members

6giitt1wqy Data Security & Protection Measures

Giitt1wqy continually invests in the latest security infrastructure to keep your personal data protected at all times. The security measures we have in place include:

• 256-bit SSL/TLS encryption for all communications between your browser and giitt1wqy servers — the same standard used by Malaysia's leading banks
• Encryption of data at rest for all personal data and financial information stored in our databases
• Strict access controls — only authorised giitt1wqy staff may access member personal data, based on a need-to-know principle
• Regular security audits by independent third parties to identify and address any system vulnerabilities before they can be exploited
• An intrusion detection system (IDS) that monitors platform traffic 24/7 to identify suspicious activity
• Two-factor authentication (2FA) is available for all giitt1wqy member accounts – we encourage all members to enable it
• An established data breach response process – should a breach occur that affects your data, we will notify you within the timeframe stipulated by law

7Personal Data Retention Period

Giitt1wqy retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable Malaysian law.

• Active Account Data: Retained for the duration your giitt1wqy account remains active, and for the required period following account closure as mandated by compliance obligations
• Financial Transaction Records: Retained for a minimum of 7 years from the transaction date in line with Malaysia's tax and anti-money laundering legal requirements
• KYC Records: Retained for a minimum of 5 years after the business relationship with giitt1wqy ends, in compliance with Malaysia's AMLA requirements
• Technical Log Data: Automatically deleted after 90 days unless required for an ongoing security investigation
• Support Communication Records: Retained for 2 years for quality control and dispute resolution purposes

When your data is no longer needed and there is no legal obligation to retain it, giitt1wqy will delete or anonymise it in a secure and irreversible manner.

8Your Rights as a Data Subject at giitt1wqy

In accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by giitt1wqy:

• Right to Access: You have the right to request a copy of the personal data giitt1wqy holds about you. Requests can be submitted via live chat or the support email
• Right to Rectification: If your personal data is inaccurate or outdated, you have the right to request a correction. You may also update certain information directly within your giitt1wqy account settings
• Right to Erasure: Under certain circumstances, you may request that giitt1wqy delete your personal data. However, this right is limited where we have a legal obligation to retain the data
• Right to Object to Marketing: You may withdraw consent to receive marketing communications from giitt1wqy at any time by clicking the unsubscribe link or contacting our support team
• Right to Object to Processing: In certain situations, you have the right to object to the processing of your personal data on the basis of our legitimate interests
• Right to Complain: If you believe that giitt1wqy has processed your personal data improperly, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia

To exercise any of the above rights, please contact the giitt1wqy customer support team via 24/7 live chat or email at support@giitt1wqy.com. We will process your request within 21 business days as prescribed by Malaysia's PDPA.

9C ookies & Tracking Technologies at giitt1wqy

The giitt1wqy platform uses cookies and similar tracking technologies to enhance your experience, maintain session security, and understand how the platform is being used. The types of cookies we use are as follows:

• Essential Cookies: Required for core giitt1wqy platform functions such as login authentication, session security, and transaction processing. These cookies cannot be disabled as they are critical to platform operation
• Performance & Analytics Cookies: Helps us understand how members use the giitt1wqy platform – which pages are visited most, how long sessions last, and where technical issues occur. This data is analysed in aggregated and anonymised form
• Functional Cookies: Saves your preferences such as language settings, display layout, and notification choices to deliver a more personalised experience each time you log in to giitt1wqy
• Security Cookies: Used to identify and prevent fraudulent activity, suspicious login attempts, and cyber attacks against the giitt1wqy platform

You can manage your cookie settings through your web browser preferences. However, disabling essential cookies may affect the functionality of the giitt1wqy platform and prevent you from logging in or completing transactions.

10Children's Data Protection

The giitt1wqy platform is strictly for adults aged 18 and above. We do not knowingly collect, use, or store any personal data from individuals under the age of 18.

Should giitt1wqy become aware of, or have reason to believe, that personal data of a child under 18 has been collected without proper consent, we will take immediate steps to delete that data from our systems and close the account in question.

11Cross-Border Transfer of Personal Data

In the course of its operations, giitt1wqy may need to transfer your personal data to servers or service providers located outside Malaysia. When such transfers occur, giitt1wqy ensures your data receives equivalent protection through:

• Data transfer agreements compliant with internationally recognised data protection standards
• Use of certified cloud service providers that comply with ISO 27001 or equivalent security standards
• Standard contractual clauses that ensure a consistent level of data protection regardless of server location
• A data protection impact assessment (DPIA) is conducted before any new cross-border data transfer is implemented

Giitt1wqy does not transfer your personal data to countries that lack an adequate level of data protection without appropriate additional safeguards in place.

12Changes to giitt1wqy's Privacy Policy

Giitt1wqy may update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or service improvements. When we make significant changes, we will:

• Updating the "Last Updated" date at the top of this document
• Sending a notification to your registered email address whenever a material change occurs
• Displaying a clear notice on the giitt1wqy platform homepage for a reasonable period after any changes take effect
• In the event of highly significant changes that affect your rights, we will seek your consent again where required by law

We encourage you to review this Privacy Policy page periodically to stay informed. Your continued use of the giitt1wqy platform after any changes take effect will be considered your acceptance of the updated Policy.

13Contact Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or how giitt1wqy handles your personal data, please reach out to us through the following channels:

• Live Chat: Available 24/7 directly within the giitt1wqy platform – the fastest way to get a response in Bahasa Melayu
• Email: support@giitt1wqy.com – we are committed to responding within 3 business days

For formal requests relating to data subject rights under Malaysia's PDPA, please clearly state in your message that it is a "Data Subject Rights Request" so we can handle it with the appropriate priority and within the timeframes prescribed by law.