This Privacy Policy clearly explains how gula2 collects, uses, stores and protects your personal data as a member of our online casino platform. We operate in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and are committed to safeguarding your privacy at all times.
A summary of gula2's key commitments to protecting the privacy and personal data of every member in Malaysia.
Gula2 is fully compliant with Malaysia's Personal Data Protection Act 2010 (PDPA) in all aspects of the collection, processing, and storage of members' personal data. We conduct regular internal compliance reviews to ensure our practices remain aligned with the latest legal requirements.
All data transmitted between your device and gula2's servers is protected with 256-bit SSL encryption — the same security standard used by leading banking institutions in Malaysia. This ensures that your personal information and financial transaction data cannot be intercepted by unauthorised parties.
Gula2 does not sell, rent or trade members' personal data to any third party for marketing or commercial purposes. Your data belongs to you — it is not a business asset that gula2 can monetise without your knowledge and consent.
Every gula2 member has the full right to access, correct, transfer or request the deletion of their personal data. Such requests can be made through account settings or by contacting gula2's Privacy Officer — and we are committed to processing every request within the timeframe prescribed by law.
Gula2 does not retain members' personal data for longer than is necessary for the stated purposes or as required by law. Once the retention period has lapsed, data is securely deleted using procedures that ensure it cannot be recovered.
In the event of a data breach affecting gula2 members' personal data, we are committed to notifying affected members within the timeframe stipulated by the PDPA and to taking immediate steps to contain and address the breach. Transparency in critical situations is a standard we hold ourselves to.
By registering an account or using gula2's services, you consent to gula2 collecting and processing your personal data as described in this Privacy Policy. This Privacy Policy should be read together with Terms & Conditions and Responsible Gaming Policy gula2. If you do not agree with any part of this policy, please do not register for or use the gula2 platform.
The foundation of gula2's commitment to protecting the privacy of every member who uses our platform.
This Privacy Policy ("Policy") is published by gula2 ("we", "gula2", "the Company") and describes our practices regarding personal data collected from individuals who use the gula2 online casino platform via the gula2.my website and official gula2 mobile application ("Platform"). gula2 is the data controller for all personal data collected through this Platform.
We believe that privacy is more than a legal obligation — it is a fundamental right that deserves to be respected. When you place your trust in gula2 by sharing your personal information, we take full responsibility for honouring that trust in a transparent, accountable manner that meets your expectations. That is why we have written this Privacy Policy in plain language that everyday Malaysians can understand — not in confusing legal jargon.
This Privacy Policy applies to all individuals who: register an account on gula2, use any service or game on the gula2 Platform, contact the gula2 support team through any channel, or browse gula2.my without registering an account. This Policy does not apply to third-party websites or services that may be linked from the gula2 Platform.
Gula2 processes members' personal data on the following legal bases under Malaysia's PDPA 2010: (1) Consent — provided at the point of registration and through use of the Platform, (2) Contractual performance — to fulfil our obligations to you as a gula2 member, (3) Legitimate interests — for security, fraud prevention and service improvement purposes, and (4) Legal compliance — to meet the legal obligations imposed on gula2.
The categories of personal data that gula2 collects from members and prospective members.
Gula2 only collects personal data that is strictly necessary to provide the services you request, fulfil our legal obligations, or for other purposes stated in this Policy. We do not collect data that is excessive or irrelevant to its intended purpose.
| Data Category | Specific Information Examples | Requirement |
|---|---|---|
| Identity Data | Full name, date of birth, MyKad number, gender | Mandatory |
| Contact Data | Malaysian phone number, email address | Mandatory |
| Financial Data | E-wallet account details (TNG, GrabPay, Boost, ShopeePay), FPX account number, deposit and withdrawal records | Mandatory |
| Identity Verification Data | Copy of MyKad or passport (where required for KYC) | Where applicable |
| Gaming Data | Game records, betting history, winnings, game preferences | Mandatory |
| Technical Data | IP address, device type, operating system version, web browser, access logs | Automatic |
| Cookie Data | Session identifiers, preference cookies, analytics cookies | Automatic |
| Communication Data | Live Chat recordings, support emails, member feedback | Where applicable |
Gula2 does not generally collect sensitive personal data such as health information, religious beliefs or criminal records. However, in the context of responsible gaming, we may process information relating to gameplay patterns that indicate addiction risk — solely to protect the welfare of our members and for no other purpose. Such data is handled with a higher level of protection.
The channels through which gula2 collects members' personal data.
When you register a gula2 account, you directly provide information such as your full name, Malaysian phone number and email address. This is the most basic data required to establish your account identity within the gula2 system.
When you make a deposit using Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow or FPX (Maybank2u, CIMB Clicks), gula2 receives the transaction data required to process and verify the payment. This includes the transaction reference, amount and payment method identifier needed for account reconciliation and financial records.
The gula2 platform automatically records data related to your gaming activity — including games played, bet amounts, round outcomes, session duration and game preferences. This data is required to accurately process winnings, resolve game disputes, meet statutory reporting requirements and improve the user experience.
When you contact the gula2 support team via Live Chat or email, the conversation is recorded for service quality purposes, staff training and as a reference record in the event of any future disputes. These recordings are retained for a defined period and protected by strict access controls.
The gula2 Platform automatically collects certain technical data when you access our services — including your IP address, device and browser type, operating system, and timestamped access logs. This data is required for system security, fraud detection, technical troubleshooting and platform experience optimisation.
Clearly and precisely — for exactly what purposes gula2 uses your personal data.
Gula2 uses members' personal data solely for the lawful purposes stated herein. We will not use your data for any other purpose without first notifying you and obtaining fresh consent where required by law.
Service Provision — To create and manage member accounts, process deposits and withdrawals via TNG eWallet, GrabPay, DuitNow, and FPX, process winnings, and enable access to all games on the gula2 Platform.
Identity Verification (KYC) — Verifying member identities to meet legal requirements related to anti-money laundering and to ensure the minimum age requirement of 18 years is observed.
Security & Fraud Prevention — To detect, investigate, and prevent fraudulent activity, account manipulation, money laundering, and breaches of the terms of service on the gula2 Platform.
Service Communications — Sending account-related notifications, transaction confirmations, important security alerts, service updates and responses to customer support enquiries.
Responsible Gaming — Monitoring playing patterns to identify risk indicators, enforcing member-set limits, and supporting self-exclusion programmes.
Marketing with Consent — Sends information about gula2 promotions, bonuses and new offers to members who have consented to receive marketing communications. You may unsubscribe at any time.
Product Improvement — Analysing aggregated and anonymised usage data to understand usage patterns, identify technical issues and improve the overall gula2 Platform experience.
Legal Compliance — To fulfil the reporting and record-keeping obligations required under applicable Malaysian law, including requirements related to AML/CFT and the PDPA 2010.
Who may have access to your personal data and under what circumstances.
Gula2 does not sell members' personal data to third parties for commercial purposes. However, there are certain situations where gula2 needs to share data with selected parties for legitimate operational purposes. All such data sharing is governed by strict data protection agreements.
To process deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX, gula2 is required to share the necessary transaction data with these payment service providers. Only the minimum data required to complete a transaction is shared, and it remains subject to each provider's own privacy policy.
To fulfil legal requirements relating to identity verification, gula2 may engage third-party services that specialise in document and digital identity verification. Data shared is limited to information necessary for the verification process and is retained only for as long as required.
Gula2 uses third-party technical service providers that assist in operating the Platform, including cloud services, performance monitoring, and usage analytics. Data shared with these parties is anonymised or aggregated wherever possible and is subject to strict data processing agreements.
Gula2 may be required to disclose members' personal data to Malaysian government authorities, law enforcement bodies or competent courts when mandated by law or a valid court order. In such circumstances, gula2 will disclose only the minimum data necessary to fulfil the relevant requirement and will endeavour to notify the affected member, unless prohibited from doing so by law.
The technical and organisational measures gula2 takes to protect members' personal data.
Gula2 implements comprehensive technical and organisational security measures to protect members' personal data from unauthorised access, disclosure, alteration, or destruction. These measures are reviewed and updated on a regular basis to keep pace with the latest developments in cybersecurity threats.
All communications between your device and gula2's servers are protected by 256-bit SSL/TLS encryption. Sensitive data such as payment information and passwords are stored in encrypted format using industry-recognised encryption algorithms.
Access to members' personal data within gula2 is restricted to staff who require it to perform their duties. All access is logged and monitored. Strong passwords and two-factor authentication are mandatory for all internal gula2 accounts.
Gula2's technical infrastructure is protected by multi-layered firewalls and intrusion detection systems that monitor network traffic in real time to detect and block cyber threats.
Gula2 member data is regularly backed up to secure, encrypted locations. gula2 maintains a comprehensive disaster recovery plan to ensure service continuity and data protection under all circumstances.
All gula2 staff with access to members' personal data undergo comprehensive data security and privacy training during onboarding and on a regular basis thereafter. They are bound by strict confidentiality obligations as part of their employment agreements. gula2 takes any breach of confidentiality by staff extremely seriously.
How long gula2 retains your personal data and what happens after that period.
Gula2 adheres to the principle of data minimisation — we do not retain your personal data any longer than is strictly necessary for the stated purpose or as required by law. Retention periods vary depending on the type of data and the purpose for which it is held.
| Data Type | Retention Period | Reason |
|---|---|---|
| Active account data | For the duration of the active account + 7 years | Malaysian legal requirements |
| Financial transaction records | 7 years from the date of transaction | Financial reporting & AML requirements |
| Game records | 5 years from the date of play | Dispute resolution & audits |
| Customer support records | 3 years from the date of interaction | Service quality & referrals |
| KYC / identity verification data | For the duration of the active account + 7 years | AML/CFT legal requirements |
| Technical & security logs | 12 months from the date of log | System security & investigations |
| Marketing data (with consent) | Until consent is withdrawn | Ongoing marketing with consent |
Once the specified retention period has expired, gula2 will delete or anonymise the relevant personal data using secure deletion procedures that ensure the data cannot be recovered by any party. Account deletion requests from members will be processed in accordance with applicable legal obligations — meaning certain data may need to be retained even after account closure for legal compliance purposes.
The rights held by every gula2 member regarding their personal data under PDPA 2010.
As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights in relation to your personal data held by gula2. To exercise any of these rights, please contact the gula2 Privacy Officer as stated in Section 12.
You have the right to obtain a copy of the personal data held by gula2 about you.
You have the right to request the correction of any personal data that is inaccurate or incomplete.
You have the right to request the deletion of your personal data under certain circumstances permitted by law.
You have the right to object to the processing of your personal data for direct marketing purposes at any time.
You have the right to receive your data in a structured, portable format that can be transferred to another controller.
You have the right to request a restriction on the processing of your data under certain circumstances during an investigation or dispute.
Gula2 is committed to responding to all data rights requests within the timeframe stipulated by Malaysia's PDPA 2010 — generally within 21 business days from the date a complete request is received. For more complex requests, gula2 will notify you of the need for additional time and the reasons for it. All responses will be sent to the registered email address of your gula2 account.
How gula2 uses cookies and similar technologies to enhance your experience.
The gula2 Platform uses cookies and similar tracking technologies to ensure the Platform functions correctly, enhance user experience, and analyse platform usage. Cookies are small text files stored on your device when you browse the gula2 Platform.
You can control and manage cookies through your web browser settings. Please note, however, that disabling certain essential cookies may affect the functionality of the gula2 Platform. For non-essential cookies, you may grant or withdraw your consent via the cookie management panel available on the gula2 Platform.
The gula2 Platform is strictly for users aged 18 and above. gula2 does not knowingly collect or process personal data from individuals under the age of 18. Should gula2 discover that personal data of a minor has been collected, we will take immediate steps to delete that data and close the account in question. If you believe an underage individual has registered on gula2, please contact us immediately.
Gula2 reserves the right to amend this Privacy Policy at any time to reflect changes in data processing practices, legislative amendments or changes to the services we offer. When material amendments are made, gula2 will notify members via their registered email address or an in-Platform notification at least 14 days before the changes take effect. We recommend reviewing this page periodically. The "Updated" date at the top of this page indicates when this Policy was last revised.
For any enquiries, complaints, or requests relating to your privacy and personal data on gula2, you may contact our Data Privacy Officer through the following channels:
Gula2 takes all privacy-related enquiries and complaints very seriously. If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) under PDPA 2010.
Please also read the other important documents that together form the complete agreement between you and gula2.
Quick answers to the most frequently asked questions about privacy and personal data at gula2.
The gula2 Data Privacy Officer team is ready to assist you with all privacy-related matters — from data access requests and information corrections to complaints regarding data processing. We operate in Bahasa Melayu and are committed to responding to every enquiry within the stipulated timeframe.
Email: [email protected] | 24/7 Live Chat within the gula2 platform
Gula2 ensures that all your personal information is protected with 256-bit SSL encryption, processed in compliance with Malaysia's PDPA 2010, and never sold to any third party. Register today and enjoy a safe, fair and entertaining online casino experience in Malaysia.
Secure & Trusted • SSL 256-bit • PDPA 2010 Compliant • Responsible Gaming