Privacy Policy

This Privacy Policy (hereinafter "Policy") sets out the basis on which Gamespools (hereinafter "the Company", "we", "us", or "our") collects, processes, stores, and discloses personal data relating to individuals who access and use the Gamespools website at https://gamespools.cam and all associated services and features (collectively, the "Platform").

Gamespools operates as an online gambling and gaming service provider serving players across Malaysia, including those in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and the broader Malaysian market. We are committed to protecting the privacy of all individuals whose data we process and to complying with applicable data protection principles under internationally recognised privacy frameworks.

By registering an account on the Platform, making a transaction, or otherwise providing your personal data to Gamespools, you acknowledge that you have read this Policy and consent to the collection and use of your information as described herein. If you do not agree with this Policy, please do not use the Platform.

For the purposes of this Privacy Policy, the following definitions shall apply:

• "Personal Data" means any information relating to an identified or identifiable natural person ("data subject"), including but not limited to name, identification number, contact details, financial data, and online identifiers.
• "Processing" means any operation performed on personal data, whether by automated means or otherwise, including collection, storage, use, disclosure, restriction, or deletion.
• "Data Controller" means Gamespools, which determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" means any third party that processes personal data on behalf of and under the instructions of Gamespools.
• "KYC" means Know Your Customer — the identity and age verification process required before withdrawal processing or at any point determined necessary by the Company.
• "Cookies" means small text files stored on a user's device by a web browser that enable various Platform functionalities and user experience features.
• "User" or "Player" means any natural person who accesses or uses the Platform, whether registered or unregistered.

Gamespools collects the following categories of personal data, depending on how you interact with the Platform:

• Full legal name
• Date of birth (to verify 21+ age eligibility)
• Residential address (including city, state, postcode, and country)
• Email address
• Mobile phone number
• Government-issued identification number (e.g., Malaysian MyKad NRIC number or passport number)

• Deposit and withdrawal amounts and dates
• Payment method details (e.g., registered mobile number for Touch 'n Go eWallet, Boost, GrabPay; bank account details for DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank, or Hong Leong Connect; cryptocurrency wallet address for USDT deposits)
• Transaction history and account balance movements

• IP address and approximate geolocation
• Device type, operating system, and browser type
• Pages visited, time spent on the Platform, and click-path data
• Login timestamps and session duration
• Game activity records including bets placed, games played, and outcomes

• Copies of government-issued photo ID (Malaysian MyKad or passport)
• Proof of address documents where required
• Proof of payment method ownership where required
• Source of funds documentation when requested for AML compliance purposes

• Support chat transcripts and email correspondence
• Survey responses and feedback submissions
• Marketing preference records

Gamespools collects personal data through the following channels:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or participate in a promotion.
• Automatically — through cookies, web beacons, server logs, and similar technologies when you browse the Platform. See Section 8 for details.
• From third-party payment processors — including confirmation data from Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX-participating banks (Maybank, CIMB, Public Bank, Hong Leong), and USDT blockchain network confirmations.
• From identity verification services — third-party KYC providers may return verification status and document authenticity results to Gamespools as part of our onboarding compliance process.
• From fraud prevention partners — device fingerprinting and risk-scoring data may be received from anti-fraud service providers used to protect the integrity of the Platform.

The table below summarises the primary purposes for which Gamespools processes your personal data and the data categories involved in each purpose.

Gamespools processes your personal data under the following legal bases, depending on the specific processing activity:

• Contractual necessity — processing required to fulfil our obligations under the account agreement, including identity verification, payment processing, and provision of gaming services.
• Legal obligation — processing required to comply with applicable regulatory requirements, including KYC identity verification, AML obligations, and financial record-keeping requirements.
• Legitimate interests — processing undertaken to protect the security and integrity of the Platform, prevent fraud, carry out platform analytics, and conduct responsible gambling monitoring, where such interests are not overridden by your rights.
• Consent — processing for marketing communications and non-essential cookies, where you have provided explicit, revocable consent. You may withdraw consent at any time by contacting support or adjusting your account notification preferences.

Gamespools does not sell or rent personal data to any third party for commercial purposes. We may share personal data with the following categories of recipients, strictly as necessary and under appropriate data processing agreements:

• Payment processors and financial institutions — including the operators of Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and participating Malaysian banks (Maybank, CIMB, Public Bank, Hong Leong) — for the processing of deposits and withdrawals.
• Identity verification (KYC) providers — third-party services that assist with document verification and age confirmation as part of our regulatory compliance obligations.
• Fraud detection and anti-money laundering service providers — to identify and prevent suspicious activity on the Platform.
• Game and software providers — licensed international studios and game technology providers whose services are integrated into the Platform, to the extent required for game delivery and technical support.
• Cloud and IT infrastructure providers — hosting, storage, and analytics infrastructure partners operating under strict data processing agreements.
• Legal and regulatory authorities — government agencies, law enforcement bodies, or regulators where required by applicable law, court order, or regulatory directive.

The Gamespools Platform uses cookies and similar tracking technologies to enhance your browsing experience, maintain session continuity, and analyse usage patterns. The following categories of cookies may be set when you access the Platform:

• Strictly Necessary Cookies: Essential to the operation of the Platform, including session authentication and security tokens. These cannot be disabled without breaking core Platform functionality.
• Performance & Analytics Cookies: Collect anonymised data about how users interact with the Platform to inform improvements. These cookies do not personally identify you.
• Functional Cookies: Remember your preferences (such as language setting and display options) across sessions to personalise your experience.
• Marketing Cookies: Used (with your consent) to understand game preferences and deliver relevant promotional content. These cookies may be set by our trusted advertising partners.

You may manage or disable non-essential cookies through your browser settings at any time. Note that disabling certain cookies may affect the functionality of the Platform.

Gamespools implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform.
• Encryption of sensitive data at rest within our database infrastructure.
• Role-based access controls ensuring that personal data is accessible only to authorised personnel with a legitimate business need.
• Regular security audits, vulnerability assessments, and penetration testing of Platform infrastructure.
• Multi-factor authentication requirements for administrative systems and account access.
• Incident response procedures to detect, contain, and report data breaches in accordance with applicable obligations.

While Gamespools employs industry-standard security practices, no method of electronic transmission or storage is entirely immune from risk. You are encouraged to use a strong, unique password for your Gamespools account and to notify us immediately if you suspect any unauthorised access.

Gamespools retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, or for as long as required by applicable legal, regulatory, or contractual obligations. The following general retention guidelines apply:

• Account data: Retained for the duration of the active account relationship and for a period of not less than five (5) years following account closure, for regulatory compliance and dispute resolution purposes.
• Transaction and financial records: Retained for a minimum of seven (7) years from the date of each transaction in compliance with financial record-keeping requirements applicable to gaming operators.
• KYC documentation: Retained for not less than five (5) years from the date of verification or account closure, whichever is later.
• Customer support communications: Retained for a period of three (3) years unless required longer for ongoing dispute or legal proceedings.
• Marketing preferences: Retained until withdrawal of consent or account closure.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to any individual.

As a data subject, you hold the following rights in respect of your personal data processed by Gamespools. To exercise any of these rights, please contact us using the details in Section 15.

Gamespools will respond to all verifiable data rights requests within thirty (30) days of receipt. In complex cases, this period may be extended by up to a further sixty (60) days, in which case we will notify you of the extension and reason within the initial thirty-day period.

Please note that certain rights may be limited where Gamespools has a legal obligation to retain or process specific data (for example, KYC and AML compliance records). We will clearly communicate any such limitations when responding to your request.

Gamespools is strictly an adult entertainment service. The Platform is not directed at, and must not be used by, any individual under the age of 21. We do not knowingly collect or process personal data from individuals under 21 years of age.

All account registrations are subject to age verification as part of the KYC process. Where Gamespools becomes aware that a registered account belongs to an individual under the age of 21, the account will be immediately suspended, all funds will be held pending investigation, and the data will be handled in accordance with applicable child data protection obligations.

As an online gaming platform, Gamespools may transfer your personal data to third-party service providers and data processors located in jurisdictions outside Malaysia. Such transfers may occur in connection with cloud hosting, KYC verification, payment processing, fraud detection, or game delivery services.

When transferring personal data internationally, Gamespools takes appropriate safeguards to ensure that your data receives an adequate level of protection, including the use of contractual clauses that impose data protection obligations equivalent to those applied within the Platform's home jurisdiction, and the selection of service providers operating under recognised data protection certification schemes.

Gamespools reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or Platform features. Any amended Policy will be posted on this page with an updated "Last Updated" date.

For material changes that significantly affect how we process your personal data, Gamespools will provide advance notice to registered players via email or an in-platform notification where reasonably practicable. Your continued use of the Platform following the effective date of the updated Policy constitutes your acceptance of the revised terms.

We encourage you to review this Policy periodically to stay informed about how Gamespools handles your personal data.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by Gamespools, please contact us through the following channels:

• Live Chat Support: Available 24/7 within your registered Gamespools account dashboard — the fastest route to our team for urgent data queries.
• Email: [email protected] (plain text — not a clickable link)
• Subject Line Recommendation: When emailing, please use the subject line "Privacy Request – [Your Request Type]" to ensure prompt routing to our data team.

Gamespools serves players across Malaysia — from Kuala Lumpur and Petaling Jaya to Penang, Johor Bahru, Shah Alam, and beyond. We are committed to responding to all privacy-related queries within three (3) business days.