Privacy Policy GacorX500 –
Your Privacy, Our Responsibility

1Introduction & Scope of This Privacy Policy

GacorX500 is an online sports betting and casino platform operating in Malaysia. We offer a wide range of services to registered members across Malaysia, including betting on the Malaysia Super League and EPL football, badminton, e-sports, Live Casino, roulette, poker, and slots.

This Privacy Policy applies to all personal information collected by GacorX500 through:

• Official website https://gacorx500.ws and all associated subdomains.
• Account registration and verification process.
• Interactions with the GacorX500 customer support team.
• Use of any product or service offered by GacorX500.
• Financial transactions including deposits via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX.

2Personal Data We Collect

GacorX500 collects the following categories of personal data from platform members and users. All data collection is guided by the minimisation principle — we only collect what is strictly necessary:

2.1 Data You Provide Directly

• Identity information: Full name, MyKad or passport number, date of birth, nationality.
• Contact information: Email address, phone number, current residential address.
• Financial information: Bank account number, bank name, e-wallet account numbers (Touch 'n Go, GrabPay, Boost, ShopeePay).
• Proof of identity: A photo of your MyKad or other identity document as requested during the KYC process.
• Security information: Password (stored in encrypted form), security questions.

2.2 Automatically Collected Data

• Technical data: IP address, web browser type, operating system, screen resolution.
• Usage data: Pages visited, time spent, buttons clicked, navigation patterns.
• Transaction data: History of deposits, withdrawals, bets, winnings, and losses.
• Location data: Approximate location based on IP address (not GPS) for security and verification purposes.
• Device data: Device identifiers and hardware information related to security.

3How We Use Your Personal Data

GacorX500 uses the personal data collected for the following purposes, all of which are grounded in valid legal bases under PDPA 2010:

4Sharing Data with Third Parties

GacorX500 does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. However, in the course of operating the platform, your data may be shared with the following categories of third parties under limited circumstances:

• Payment provider: Transaction information shared with payment processors such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX member banks (Maybank, CIMB, and others) solely for the purpose of processing your transactions.
• Gaming technology provider: Third-party gaming software providers that require session information (not full identity data) to operate Live Casino and slots games.
• Government authorities: Law enforcement agencies or regulatory bodies making official requests pursuant to Malaysian legal provisions.
• IT service provider: Hosting companies, cloud service providers, and security technology vendors bound by strict confidentiality agreements.

5Security & Data Retention

GacorX500 employs multiple layers of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL Encryption: All transmitted data is encrypted using the latest TLS 1.3 protocol.
• Password storage: Passwords are stored using the bcrypt hashing algorithm, which cannot be reverse-decrypted.
• Internal access controls: Only approved staff with a legitimate operational need may access member data, and every access is logged.
• Penetration testing: GacorX500's security systems are regularly audited by independent security experts.
• Data backup: Data is securely backed up and encrypted across multiple data centres in different locations for disaster recovery.

Regarding retention periods, gacorx500 stores personal data for the following durations:

• Active account data: For as long as the account remains active and for 7 years after account closure (in line with Malaysia's AML compliance requirements).
• Transaction logs: 7 years from the date of transaction.
• Customer support communication logs: 3 years from the date of last communication.
• Marketing data: Until you withdraw your consent.

6Cookies & Tracking Technologies

GacorX500 uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and better understand how the platform is used. The cookies we use fall into three categories:

You can manage your cookie preferences through your web browser settings. However, disabling mandatory cookies may affect the core functionality of the GacorX500 platform.

7Your Rights as a Data Subject

Under Malaysia's PDPA 2010 and GacorX500's privacy policy, you have the following rights regarding your personal data. All requests may be sent to privacy@gacorx500.ws:

8Protection of Children's Data

GacorX500 is a platform designed exclusively for adults aged 18 and above. We do not knowingly collect, process, or store the personal data of individuals under the age of 18.

9Cross-Border Data Transfers

GacorX500's primary servers are located in Malaysia. However, in certain circumstances, data may be processed or stored by service providers in other countries. When cross-border data transfers occur, GacorX500 ensures adequate protection by:

• Using approved standard contractual clauses for data protection.
• Ensuring that recipient countries maintain an equivalent or higher standard of data protection.
• Obtaining your explicit consent where required by law.

10Changes to This Privacy Policy

GacorX500 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. Any significant changes will be communicated to you via:

• Email notifications sent to your registered email address.
• A prominent notice on the GacorX500 homepage.
• A verification pop-up will appear at your next login for any material changes.

Your continued use of the GacorX500 platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you do not agree, please contact us to close your account.

11Contact Us About Privacy

If you have any questions or concerns, or wish to exercise your rights regarding your personal data, please contact GacorX500's Data Protection Officer (DPO):