GXGold takes the privacy and security of your personal data seriously. This Privacy Policy explains what information we collect when you use the GXGold platform, how we use and protect that information, who we share it with, and what rights you hold as a data subject under applicable data protection principles.
Six principles that govern how GXGold handles your personal data
GXGold applies 256-bit SSL encryption across all data transmissions and stores personal data in access-controlled, encrypted environments. We treat your information with the same care a Malaysian bank applies to financial records.
GXGold does not sell, rent, or trade your personal data to third-party marketers or data brokers under any circumstances. Your information is used exclusively to operate and improve the GXGold platform and to fulfil legal obligations.
You have the right to access, correct, or request deletion of your personal data at any time. GXGold responds to all data subject access requests within a reasonable timeframe and without charge for standard requests.
Where we share your data with third parties — such as payment processors (DuitNow, FPX, Touch n Go eWallet, Boost, Maybank) or game studios — we do so under strict data processing agreements and only to the extent necessary for service delivery.
GXGold retains personal data only for as long as required to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations, including anti-money laundering record-keeping requirements.
In the event of a data security breach that poses a material risk to your personal data, GXGold commits to notifying affected members without undue delay and taking all reasonable steps to contain and remediate the incident.
This Privacy Policy (hereinafter "the Policy" or "this Policy") is published by GXGold (hereinafter "GXGold", "we", "us", or "our"), the operator of the online gaming platform accessible at https://gxgold.cam and all associated sub-domains, mobile applications, and digital services.
GXGold is committed to protecting the privacy and personal data of every individual who interacts with our platform. This Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed. It applies to all registered members of GXGold as well as to individuals who browse the platform without registering.
By accessing or using the GXGold platform — including visiting the website, creating an account, making a deposit, using any game or feature, or contacting customer support — you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, you should discontinue your use of GXGold's services immediately.
This Policy should be read alongside GXGold's Terms & Conditions and Responsible Gambling Policy, which together form the complete framework governing your relationship with GXGold.
For the purpose of this Privacy Policy, the following definitions shall apply:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial information, and online identifiers. |
| "Processing" | Any operation or set of operations performed on personal data, whether by automated means or otherwise, including collection, storage, use, disclosure, and deletion. |
| "Data Controller" | GXGold, as the entity that determines the purposes and means of processing personal data collected through the Platform. |
| "Data Processor" | A third party that processes personal data on behalf of GXGold, pursuant to a written data processing agreement. |
| "Data Subject" | You — the natural person whose personal data is being processed by GXGold. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of agreement by the data subject to the processing of their personal data for a stated purpose. |
| "KYC" | Know Your Customer — the identity verification process mandated for financial service providers to confirm the identity of their customers and comply with anti-money laundering obligations. |
| "Cookies" | Small text files placed on your device by a website to store information about your browsing session, preferences, or behaviour. |
GXGold collects the following categories of personal data, depending on how you interact with the Platform:
3.1 Identity & Account Data
3.2 Contact Data
3.3 Financial Data
3.4 Gaming & Behavioural Data
3.5 Technical & Usage Data
3.6 Communications Data
GXGold collects personal data through the following means:
GXGold will clearly identify when providing personal data is mandatory (e.g., for KYC compliance) and when it is optional. Refusal to provide mandatory data may prevent us from delivering specific services, including processing withdrawal requests.
GXGold processes personal data for the following purposes:
| Purpose | Description |
|---|---|
| Account Management | Creating, maintaining, and administering your GXGold account, including authentication and security. |
| Transaction Processing | Processing deposits and withdrawals via your chosen Malaysian payment method (DuitNow, FPX, e-wallets, bank transfer, or cryptocurrency). |
| Identity Verification (KYC) | Confirming your identity, age eligibility (21+), and payment method ownership in compliance with anti-money laundering obligations. |
| Legal Compliance | Meeting obligations under applicable anti-money laundering (AML), counter-terrorism financing (CTF), and other regulatory requirements. |
| Fraud Prevention | Detecting, investigating, and preventing fraudulent activity, account abuse, and unauthorised access. |
| Platform Improvement | Analysing usage patterns to improve Platform features, game selection, payment channel performance, and user experience. |
| Customer Support | Responding to enquiries, resolving disputes, and maintaining records of support interactions for quality assurance. |
| Responsible Gambling | Monitoring gaming patterns to identify potential problem gambling behaviours and administering self-exclusion and limit tools. |
| Marketing & Promotions | Sending promotional communications where you have consented to receive them. You may withdraw consent at any time (see Section 12). |
| Personalisation | Tailoring your Platform experience, including recommending relevant games or promotions based on your activity history. |
GXGold processes your personal data on one or more of the following legal bases:
GXGold does not sell, rent, or commercially exploit your personal data for the benefit of third parties. We share personal data with third parties only in the following circumstances and only to the extent necessary for the stated purpose:
7.1 Payment Service Providers
Transaction data is shared with integrated payment processors — including DuitNow, FPX (Financial Process Exchange), Touch n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, and cryptocurrency processing services — solely for the purpose of executing your deposit and withdrawal instructions.
7.2 Identity Verification Providers
Your identification documents and biometric data (if applicable) may be shared with third-party KYC and identity verification service providers for the purpose of confirming your identity and age eligibility in accordance with applicable compliance requirements.
7.3 Game Studio Providers
Limited technical data (such as session tokens and player identifiers) is shared with game studio providers to facilitate seamless game play and to maintain accurate game transaction records. No directly identifiable personal data such as your full name or national identification number is shared with game studios.
7.4 Fraud Prevention & AML Services
Account and transaction data may be processed by third-party fraud detection and anti-money laundering screening services for the purpose of protecting the integrity and security of the Platform and complying with applicable legal obligations.
7.5 Legal and Regulatory Authorities
GXGold will disclose personal data to law enforcement, regulatory, or governmental authorities where required to do so by applicable law, court order, or lawful authority, or where such disclosure is necessary to protect GXGold's legal rights or the safety of its members.
All third-party Data Processors engaged by GXGold are bound by written data processing agreements that prohibit the use of your personal data for purposes other than those specified, and require them to implement appropriate security measures.
GXGold retains personal data for as long as is necessary to fulfil the purposes for which it was originally collected, or as required by applicable legal, regulatory, or contractual obligations. The following indicative retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account and identity data (active account) | Duration of account plus 5 years after closure |
| KYC documents (MyKad, passport, utility bills) | Duration of account plus 5 years (AML compliance) |
| Financial transaction records | 7 years from date of transaction (regulatory requirement) |
| Customer support communications | 3 years from date of interaction |
| Gaming activity logs | 3 years from date of activity |
| Marketing consent records | Until consent is withdrawn, plus 1 year |
| Technical/access logs | 12 months from date of creation |
Upon expiry of the applicable retention period, GXGold will securely delete or anonymise your personal data in accordance with our internal data lifecycle procedures, unless further retention is required by a specific legal obligation or legitimate business reason.
GXGold implements and maintains a comprehensive suite of technical, organisational, and administrative security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
While GXGold takes all reasonable steps to protect your personal data, no digital platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for promptly reporting any suspected unauthorised access to GXGold's support team.
As a data subject, you hold a number of rights in relation to your personal data held by GXGold. These rights are exercisable free of charge for standard requests and GXGold will respond to all verified requests within a reasonable timeframe:
Request a copy of the personal data GXGold holds about you, together with information about how it is being processed.
Request correction of inaccurate or incomplete personal data held about you. You may also update certain details directly via your account settings.
Request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to GXGold's legal retention obligations.
Request that GXGold restricts the processing of your personal data in certain circumstances, such as while the accuracy of the data is being contested.
Receive your personal data in a structured, commonly used, machine-readable format for the purpose of transferring it to another service provider.
Object to the processing of your personal data where GXGold relies on legitimate interests as the legal basis, including objecting to direct marketing communications.
To exercise any of the above rights, please contact GXGold's data support team via the 24/7 live chat or by email at [email protected] with the subject line "Data Rights Request — [Your Registered Username]". GXGold may request verification of your identity before processing a data rights request to ensure that data is not disclosed to unauthorised individuals.
GXGold uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file stored on your device by your browser when you visit a website. The following categories of cookies are used on the GXGold Platform:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Essential for Platform operation — including session management, login authentication, and security functions. Cannot be disabled. | Session |
| Functional | Remembers your preferences such as language selection and game settings to personalise your Platform experience. | Up to 12 months |
| Analytics | Collects anonymised data on how members navigate and use the Platform, used to improve features and performance. | Up to 24 months |
| Marketing | Used where you have consented to personalised content recommendations or where GXGold runs promotional campaigns. | Up to 30 days |
You may control cookie settings through your browser's privacy or settings menu. Disabling certain cookies may affect the functionality of the Platform. For strictly necessary cookies, no consent is required as they are essential to the operation of the service.
Where you have provided explicit consent during registration or subsequently opted in, GXGold may send you promotional communications by email, SMS, or in-platform notification. These communications may include information about new games, special promotions, bonus offers, Liga Super Malaysia and EPL-related betting promotions, and VIP programme updates.
You may withdraw your consent to receive marketing communications at any time by:
Withdrawal of consent for marketing will not affect GXGold's ability to send you transactional and service-related communications that are necessary for the operation of your account, such as deposit confirmations, withdrawal notifications, security alerts, and account policy updates.
The GXGold Platform is strictly intended for individuals aged 21 years and above. GXGold does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the GXGold registration and KYC process.
If GXGold discovers or reasonably suspects that personal data has been collected from a person under the age of 21, the relevant account will be immediately suspended, any funds associated with that account will be withheld pending investigation, and all personal data associated with the account will be securely deleted to the extent permitted by law and regulatory obligations.
21+ Only. If you believe a minor has registered an account on GXGold, please contact our support team immediately via live chat so that we can take swift action to protect the individual concerned.
In the course of operating the GXGold Platform, personal data may be transferred to, stored in, and processed in countries outside Malaysia. Such transfers may occur in connection with the use of third-party service providers for payment processing, identity verification, game delivery, and cloud infrastructure hosting.
Where personal data is transferred internationally, GXGold takes reasonable steps to ensure that such transfers are governed by appropriate safeguards, which may include:
By using the GXGold Platform and providing your personal data, you acknowledge and consent to the possibility of such international transfers in the circumstances described above.
GXGold reserves the right to amend, update, or replace this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform features. When material changes are made to this Policy, GXGold will:
Your continued use of the GXGold Platform following the effective date of any amendment to this Policy constitutes your acknowledgement of, and agreement to, the updated terms. If you do not accept the revised Policy, you must cease using the Platform and may request account closure in accordance with the procedures described in GXGold's Terms & Conditions.
If you have any questions, concerns, or requests in connection with this Privacy Policy or GXGold's data processing activities, please contact our data support team through the following channels:
24/7 Live Chat: Available via the chat icon on the GXGold Platform. Average response time: 3–5 minutes.
Email: [email protected] — use subject line "Privacy Enquiry" or "Data Rights Request — [Username]".
Support Hours: 24 hours a day, 7 days a week, in English, Bahasa Melayu, and Mandarin.
GXGold commits to acknowledging all privacy-related enquiries within 5 business days and providing a substantive response within 20 business days of receipt of a verified request. This timeline may be extended in cases of complex or high-volume requests, in which case GXGold will communicate the estimated resolution timeframe to you.
GXGold values the trust that Malaysian players place in us to handle their personal data responsibly. We are committed to maintaining the highest standards of data privacy and security across every aspect of the GXGold platform.
Questions about your data? Our 24/7 support team handles all privacy and data rights requests — typically within minutes via live chat. For players aged 21 and above only.
⚠️ For players aged 21 and above only. GXGold is an entertainment platform — all games involve risk. Please gamble responsibly.