Privacy Policy

This Privacy Policy explains how Atmosphere Entertainment Sdn Bhd 202301046211 (1540125-W), Level 59, Exchange 106, Lingkaran TRX, Tun Razak Exchange, 55188 Kuala Lumpur, Malaysia ("we") collects, uses, discloses and protects your personal data when you use GG Bazaar, in accordance with the Personal Data Protection Act 2010 of Malaysia ("PDPA"). By using the Platform you consent to the processing of your personal data as described here.

• Account data: name, email address and password (stored only in encrypted, hashed form), language preference.
• Order data: products bought or sold, order history, and the player details you enter for top-ups (such as player ID, zone or server).
• Payment data: provided by our payment partner, including payment method, card brand, the last four digits of a card, and transaction references. We never receive or store your full card number or security code.
• Communications: messages with Sellers, dispute messages and support requests.
• Seller data: store details, and identity, business and payout information requested during seller approval.
• Technical data: IP address, browser and device information, and the cookies described below.

We use your personal data to:

• create and manage your account;
• process orders and payments, deliver products and provide escrow;
• send order, payment and account notifications;
• prevent, detect and investigate fraud, abuse and security incidents;
• handle disputes, refunds and support requests;
• meet our legal, tax and regulatory obligations; and
• improve the Platform.

We will only send marketing messages if you have agreed to receive them, and you can opt out at any time.

We share personal data only as needed for these purposes:

• with the Seller of your order, limited to what they need to deliver it (for example your player details and display name);
• with our payment partner, Presto, to process payments and refunds;
• with game publishers or authorised distributors, limited to your player details, to carry out direct top-ups;
• with service providers that host and operate the Platform for us, under confidentiality obligations;
• with authorities, courts or regulators where required by law; and
• with a buyer or successor if our business is transferred, subject to this policy.

We do not sell your personal data.

Some of our service providers may process data outside Malaysia. Where this happens, we take steps to ensure your personal data receives a level of protection comparable to the PDPA.

We keep personal data for as long as your account is active and as needed for the purposes above. Order and transaction records are kept for at least 7 years to meet accounting and tax requirements. When data is no longer needed, we delete or anonymise it.

We use appropriate technical and organisational measures to protect your personal data, including encrypted connections, hashed passwords, encrypted storage of digital codes, and restricted staff access.

Under the PDPA you may:

• request access to the personal data we hold about you;
• request correction of data that is inaccurate, incomplete or out of date;
• withdraw your consent or ask us to limit processing, which may affect our ability to provide the service; and
• opt out of marketing.

Send requests to [email protected]. We will respond within 21 days. We may need to verify your identity, and may charge a fee for access requests where the law allows.

We use only the cookies needed to run the Platform: to keep you signed in, remember your language and keep your cart. We do not currently use advertising or third-party tracking cookies. If this changes, we will update this policy and ask for your consent where required.

The Platform is not intended for children under 18 without a parent's or guardian's consent. If you believe a child has given us personal data without consent, please contact us and we will delete it.

We may update this policy from time to time. We will post the new version here with a new effective date and notify you of material changes.

For questions or requests about your personal data, contact our Data Protection Officer: Atmosphere Entertainment Sdn Bhd 202301046211 (1540125-W), Level 59, Exchange 106, Lingkaran TRX, Tun Razak Exchange, 55188 Kuala Lumpur, Malaysia Email: [email protected]