GT20 takes your privacy seriously. Find out exactly how we collect, use, protect, and manage your personal data as a valued member of the GT20 Malaysia platform.
Six core principles that form the foundation of GT20's Privacy Policy in protecting every member's data in Malaysia.
GT20 uses the same 256-bit SSL encryption technology employed by leading Malaysian banks such as Maybank and CIMB. All data transmitted between your device and GT20's servers is fully encrypted — including login credentials, payment details and your personal information.
GT20 has never sold, rented, or traded your personal data to any third party for marketing or any other commercial purpose, and never will. Your data belongs to you, and GT20 respects that right fully and without exception.
All personal data management practices at gt20 are in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). This means gt20 is legally obligated to handle your data responsibly, transparently, and in accordance with standards set by the Malaysian government.
As a GT20 member, you have full control over your personal data. You may request to view, update, correct or delete your data at any time by contacting the GT20 support team. This right is guaranteed under the PDPA and we honour it in full.
GT20 members' personal data is stored on servers protected by multiple layers of physical and digital security. Access to member data is restricted to GT20 staff who require it for operational purposes only, and all access is logged and monitored.
In the event of any security incident involving GT20 members' personal data, we are committed to notifying affected members within the timeframe required by Malaysian law and taking immediate steps to contain and remediate the situation.
This Privacy Policy clearly explains how gt20 collects, uses, stores, and protects your personal data. By registering for or using the gt20 platform, you agree to the terms of this Privacy Policy. Please read it carefully and contact us at [email protected] if you have any questions.
GT20 ("we", "the Company", or "the Platform") is an online entertainment platform operating in Malaysia via gt20.my. We are firmly committed to protecting the privacy and personal data security of all our members across Malaysia.
This Privacy Policy describes our practices regarding the collection, use, disclosure, transfer, and storage of personal data that you provide to GT20 or that we collect through your use of our platform. It also outlines your rights in relation to that personal data and how you may exercise them.
This Privacy Policy applies to all services offered by gt20, including slot games such as Golden 7, Lucky 7, Year of Ox, Zeus, Triple Pandas, Gorilla Kingdom, and Red White Blue, Live Casino, Malaysia Super League and EPL Sports Betting, e-sports, and all other platform features.
GT20 fully complies with Malaysia's Personal Data Protection Act 2010 (PDPA) in all aspects of managing our members' personal data. We believe that transparency is the foundation of trust, and trust is the foundation of our relationship with each of our more than 850,000 active GT20 members across Malaysia.
GT20 collects your personal data through a number of ways — from information you provide directly when registering, to information generated through your use of the platform, and in limited cases, information from legitimate third-party sources. The categories of data we collect are as follows:
| Data Category | Example Information | Collection Method |
|---|---|---|
| Identity Data | Full name, MyKad / passport number, date of birth, gender | Account registration & KYC |
| Contact Information | Email address, Malaysian phone number, residential address | Registration & account profile |
| Financial Data | Bank account number, bank name, e-wallet details (TNG, GrabPay, Boost, ShopeePay), deposit & withdrawal records in MYR | Financial Transactions |
| Game Data | Betting history, wins, losses, slots played, gaming sessions | Automated platform activity |
| Technical Data | IP address, device type, operating system, web browser, cookie data, location (if permitted) | Automated platform usage |
| Communication Data | Support chat records, emails sent to GT20, feedback and complaints | Interactions with GT20 |
GT20 does not directly collect credit or debit card information — all transactions are processed through secure third-party payment providers such as DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay. GT20 never stores your full card number or payment PIN in our systems.
Gt20 uses the personal data collected for purposes that are lawful, transparent, and clearly stated. We do not use your data for any purpose beyond those listed below without first obtaining your consent:
Gt20 understands that your privacy is invaluable. We do not sell, rent, or trade your personal data to any third party for marketing purposes. However, under very limited circumstances, gt20 may share your personal data with the following parties for the stated purposes:
In all of the data-sharing cases described above, GT20 discloses only the minimum information necessary for the stated purpose. All third parties who receive data are legally bound by confidentiality agreements and are prohibited from using that data for any other purpose.
GT20 continuously invests in the latest security technologies and procedures to ensure your personal data remains protected at all times. Below are the key security measures we have in place:
While GT20 takes all reasonable steps to protect your data, no system is completely impervious to breaches. We recommend that you also play your part in keeping your GT20 account secure by using a strong password, not sharing your login credentials and logging out after every session.
Gt20 retains your personal data only for as long as necessary for the purposes set out in this Privacy Policy, or as required by applicable Malaysian law. Our general principles are as follows:
Once the retention period expires, GT20 will securely delete or anonymise the personal data using methods that ensure it cannot be recovered or reused.
GT20 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit gt20.my. The following are the types of cookies we use:
| Cookie Type | Purpose | Status |
|---|---|---|
| Essential Cookies | Required for core GT20 platform functionality — login, session security and language preferences | |
| Performance Cookies | Collecting anonymised usage data to help us improve the GT20 platform | |
| Functional Cookies | Remembering your preferences such as game settings, themes and display options on GT20 | |
| Security Cookies | Detecting suspicious activity, preventing fraud, and safeguarding the security of your GT20 account |
You can manage or delete cookies through your web browser settings at any time. However, if you disable essential cookies, certain functions of the GT20 platform may not work correctly. GT20 does not use cookies to track your activity on other websites outside our platform.
As a gt20 member and data subject under Malaysia's PDPA, you have the following rights regarding your personal data held by us. gt20 is committed to respecting and facilitating the exercise of these rights:
Under Malaysia's PDPA, every GT20 player is guaranteed the following rights regarding their personal data.
You have the right to request and receive a copy of all personal data that GT20 holds about you. We will provide this information within 21 days of receiving a valid request.
You have the right to request that GT20 correct any personal data we hold about you that is inaccurate, incomplete, or out of date. We will update your data within a reasonable timeframe.
Under certain circumstances permitted by the PDPA, you have the right to request that GT20 delete your personal data. Such requests are subject to GT20's legal obligations, which may require us to retain certain data.
You have the right to object to GT20's processing of your personal data for specific purposes, particularly direct marketing. Your objection will be actioned promptly by the GT20 team.
In certain circumstances, you have the right to request that GT20 restrict the processing of your personal data while any dispute regarding its accuracy or the lawfulness of the processing is being resolved.
You may opt out of GT20 marketing communications at any time by clicking "Unsubscribe" in any marketing email or by contacting us at [email protected].
To exercise any of the above rights, please contact gt20's data protection team by email at [email protected], stating the type of request and your account details. We will respond within 14 business days and resolve your request within 21 business days, in accordance with Malaysia's PDPA requirements.
GT20 applies multiple layers of data protection to ensure the privacy and security of every Malaysian member are consistently safeguarded.
This value reflects the current level of protection implemented. GT20 continuously works to strengthen all layers of data security.
GT20 takes the protection of children and minors extremely seriously. The GT20 platform is exclusively for individuals aged 18 and above. We do not knowingly collect, process, or store personal data from anyone under the age of 18.
GT20 employs a strict age-verification system during registration, including date-of-birth verification and identity document checks. Should we discover that personal data belonging to an individual under 18 years of age has been inadvertently collected in our system, we will immediately delete that data and close the account in question.
If you become aware that someone under the age of 18 has registered on GT20 or accessed the platform without authorisation, please contact us immediately at [email protected]. GT20 will take prompt action to address the situation.
GT20 may update this Privacy Policy from time to time to reflect changes in our data practices, new Malaysian legal requirements or the expansion of GT20's services. Any significant changes will be communicated to members via:
Continued use of the GT20 platform after any changes take effect constitutes your acceptance of the updated Privacy Policy terms. We recommend reviewing this page periodically to stay informed on how GT20 protects your privacy.
If you have any questions, concerns, or complaints regarding how GT20 handles your personal data, or wish to exercise any of the rights set out in this Privacy Policy, please reach out to our data protection team through the following channels:
GT20 is committed to responding to all privacy-related enquiries within 14 business days and resolving requests within 21 business days. All privacy-related communications are handled with the utmost confidentiality and respect for every GT20 Malaysia member.
When you play on GT20, you entrust us with highly sensitive information — your name, email address, phone number, bank account details, and financial transaction records in MYR. GT20 treats this trust as our greatest responsibility, and we never lose sight of the fact that behind every account is a real Malaysian individual whose privacy rights deserve to be respected.
In today's digital landscape, cybersecurity threats are real and increasingly sophisticated. From phishing attacks targeting Malaysian online platform users to hacking attempts aimed at stealing data, GT20 takes a proactive approach to protecting every one of our members. We don't wait for problems to arise — we stay two steps ahead in continually reinforcing our security systems.
One of the things we're most proud of at GT20 is that all our payment processing is handled through approved, regulated providers in Malaysia. Whether you're depositing RM100 via Touch 'n Go eWallet, GrabPay or DuitNow, or withdrawing your winnings through FPX to Maybank or CIMB, every transaction goes through channels that are secure, regulated and fully compliant with Malaysian law. GT20 never stores your card number or bank account details directly in our systems.
From a responsible gaming standpoint, GT20 also uses the data we collect to safeguard the wellbeing of our players. GT20's monitoring system analyses gameplay patterns to identify early signs of potentially problematic behaviour. If our system flags something of concern, the GT20 support team may reach out to you proactively to offer assistance and information on available support resources. Your data is never used to exploit vulnerabilities — rather, it is used to protect you.
GT20 also takes a highly considered approach to marketing communications. We only send you promotions, bonus information, and platform updates if you have explicitly opted in to receive them. No spam, no unsolicited emails — only relevant, useful communications that you actually want. And if at any point you wish to stop receiving them, a single click or a quick email to us is all it takes; we will respect your preference without delay.
Ultimately, GT20 believes that a sound Privacy Policy is more than just a legal document — it reflects the company's values and culture. We have written this Privacy Policy in plain, straightforward language that Malaysian players can easily understand, because we believe every member deserves to know their rights without needing to be a legal expert. This transparency is part of GT20's commitment to being a platform that truly merits the trust of over 850,000 Malaysian players every day.
The most frequently asked questions from GT20 members about their privacy and personal data protection.
Get the full picture of every aspect of the GT20 platform by reading these important documents.