PRIVACY POLICY & DATA PROTECTION

Grcasino Privacy Policy – Data Protection for Malaysian Players

Your privacy is our priority. This document clearly explains what data we collect, why we need it, and how we protect it to the highest security standards.

Last updated: January 2026

Grcasino's Privacy Commitment at a Glance

Before reading the full policy, here are the key things you need to know

256-bit SSL Encryption

All data transmitted between your device and grcasino servers is protected by 256-bit SSL encryption — the same standard used by leading banking institutions in Malaysia.

Data Not Sold to Third Parties

Grcasino does not sell, rent or trade your personal data to any third party for marketing purposes. Your data belongs to you — not to us as a business commodity.

Right of Access & Data Deletion

You have the right to request a copy of your personal data, correct inaccurate information, or request deletion of your data from grcasino's systems, subject to legal requirements.

Cookie Controls in Your Hands

Cookies used by grcasino are there to improve your experience – not to monitor your online activity. You can manage your cookie preferences through your browser settings.

Malaysian Legal Compliance

The grcasino Privacy Policy is developed in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), ensuring all our data handling practices meet local legal requirements.

Data Breach Notification

In the event of any data security breach affecting your information, grcasino will notify you within the timeframe required by applicable law.

Our Privacy Commitment: grcasino respects your privacy. We only collect data that is genuinely necessary, use it in the way you would expect and protect it to the highest security standards.

1Introduction

This Privacy Policy explains how grcasino ("we", "our platform") collects, uses, stores and protects your personal information when you use our online casino platform at grcasino.pro.

This policy applies to all users who register, browse or interact with the grcasino platform in any way. By continuing to use our platform, you confirm that you have read and understood this policy.

Grcasino complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and all applicable data protection legislation. We take our responsibilities as a data controller seriously and are committed to ensuring your data is always handled with the utmost care and integrity.

2Personal Data We Collect

Grcasino collects personal data from various sources to provide and improve our services to you:

2.1 Data You Provide Directly

  • Full name as shown on official identification documents.
  • Verified date of birth and age.
  • Current residential address.
  • Email address and mobile phone number.
  • Bank account or digital wallet details for payment purposes.
  • Identity verification documents such as MyKad or passport (for the KYC process).

2.2 Data Collected Automatically

  • IP address and location information (state or city only).
  • Device type, operating system and web browser used.
  • Game history, wagering activity and financial transactions on the platform.
  • Login timestamps, session duration, and in-platform activity.
  • Cookie data and similar tracking technologies.
Data Category Data Examples Primary Purpose
Identity Name, date of birth, MyKad KYC & Security
Contact Email, phone number Communications
Financial Bank account, transaction history Payments & Audit
Technical IP address, device data Platform Security
Games Betting history, game preferences Service Improvement

3Data Collection and Usage Purpose

Grcasino uses your personal data only for legitimate and necessary purposes, including:

  • Identity verification and KYC: Verifying that players meet the minimum age requirement and preventing fraud and money laundering.
  • Service provision: Processing deposits, withdrawals, wins, and all in-platform transactions.
  • Account management: Creating and maintaining your account, including your game history and preference settings.
  • Platform security: Detecting and preventing fraud, hacking, and platform misuse.
  • Customer support: Providing technical support and responding to your enquiries effectively.
  • Responsible gaming: Monitoring gameplay patterns to identify players who may need support.
  • Service communications: Sending important notifications regarding your account, transactions, and policy updates.
  • Marketing (with consent): Sending promotional information and special offers only where you have given explicit consent.
  • Legal compliance: Meeting reporting and regulatory requirements set out under Malaysian law.

4Data Sharing with Third Parties

Grcasino does not sell your personal data to any party. However, in the context of platform operations, we share data with certain parties under limited circumstances:

  • Payment providers: Transaction details required to process deposits and withdrawals via FPX, DuitNow, and other payment partners. These providers are bound by strict confidentiality agreements.
  • Game providers: Technical data required to operate games from providers such as Pragmatic Play, NetEnt, and others. No personally identifiable information is shared beyond the minimum technical requirements.
  • Identity verification services: KYC data is shared with certified third-party identity verification service providers for the purpose of complying with anti-money laundering requirements.
  • Legal authorities: grcasino will disclose data when required by law, court order or direction from a competent authority in Malaysia.

All third parties working with grcasino are bound by strict confidentiality and data protection agreements. They are not permitted to use your data for any purpose other than those specified in the agreement.

5Data Security Measures

Grcasino implements multiple layers of technical and organisational security to protect your personal data from unauthorised access, loss or accidental disclosure:

  • 256-bit SSL encryption: All communications between your browser and our servers are protected by high-grade SSL encryption, active at all times.
  • Sensitive data encryption: Financial information and identity documents are stored in encrypted format and cannot be read without the appropriate encryption key.
  • Strict access controls: Only grcasino staff with a legitimate business need are permitted to access player data, and all access is logged for audit purposes.
  • Continuous security monitoring: Our systems are monitored 24/7 to detect any suspicious activity or intrusion attempts.
  • Two-factor authentication: Players are encouraged to enable two-factor authentication (2FA) for an added layer of account protection.
  • Regular security audits: The grcasino platform undergoes periodic independent security audits to ensure security standards remain current.

6Cookies and Tracking Technologies

Grcasino uses cookies and similar technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you browse our platform.

You can manage or delete cookies at any time through your web browser settings. Please note that disabling certain cookies may affect the functionality of the grcasino platform.

7Your Rights Regarding Personal Data

As a grcasino player, you have the following rights regarding your personal data under Malaysia's PDPA:

Right of Access

Request a copy of the personal data grcasino holds about you in a readable format.

Right to Rectification

Request correction of inaccurate or incomplete data in our records.

Right to Erasure

Request deletion of your data, subject to legal retention requirements.

Right to Object

Object to the processing of your data for specific purposes such as direct marketing.

Right to Data Portability

Receive your data in a structured format that can be transferred to another platform.

Right to Restriction of Processing

Request that grcasino restrict how your data is used in certain circumstances.

To exercise any of the above rights, please contact the grcasino support team via 24/7 live chat or submit a written request through your account. We will process your request within 14 business days.

8Data Retention and Deletion

Grcasino retains your personal data only for as long as necessary for the purposes stated in this policy, or as required by applicable law.

  • Active account data: Retained for the duration your account is active and for 5 years after account closure for audit and legal compliance purposes.
  • Financial transaction records: Retained for 7 years in accordance with Malaysian legal requirements relating to financial and tax records.
  • KYC Documents: Retained for the period specified by applicable anti-money laundering requirements.
  • Security log: Retained for 2 years for investigation purposes in the event of a security incident.

When data is no longer needed and there is no legal obligation to retain it, grcasino will securely delete or anonymise that data.

9Protection of Children's Data

The grcasino platform is intended for individuals aged 18 and above only. We do not knowingly collect personal data from minors. Should we discover that data from a minor has been collected, we will delete it immediately and close the account in question.

If you have reason to believe that a minor has registered on our platform, please contact our support team immediately so we can take appropriate action.

10Changes to This Privacy Policy

Grcasino reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or technological developments. You will be notified of any material changes through:

  • In-platform notification when you log in after changes have been made.
  • Email to the address registered on your account.
  • Announcements on the grcasino platform homepage.

Continued use of the grcasino platform after a change takes effect will be considered your acceptance of the updated Privacy Policy. The last updated date is displayed at the top of this page.

11How to Contact Us

If you have any questions, concerns or complaints regarding this Privacy Policy or how grcasino handles your personal data, you can reach us through the following channels:

  • Live Chat: Available 24/7 via the live chat icon at the bottom corner of the grcasino platform.
  • Support Email: [email protected]
  • Help Centre: Visit page FAQ us for answers to frequently asked questions about privacy and data security.

The grcasino privacy team will respond to all data-related enquiries within 14 working days. For more complex cases, we will notify you of the expected timeframe required.

✦ YOUR DATA IS SAFE WITH GRCASINO ✦

Play with Peace of Mind – Your Privacy is Fully Protected

Grcasino puts your privacy and data security first in every aspect of our operations. Register with confidence and experience the difference.

* 18+. Play responsibly. Your data is protected under Malaysia's PDPA.

Bahasa Melayu