Privacy Policy GSC108 – How We Protect Your Personal Data

This Privacy Policy ("Policy") is issued by GSC108 ("We", "Platform", "GSC108") and applies to all users and members who access or use the gsc108.online website and all services, games, and features available on it. This Policy explains how we collect, use, store, protect, and disclose your personal data when you interact with the GSC108 platform.

GSC108 takes our responsibility to protect every member's privacy seriously. We understand that personal data is sensitive, and we are committed to handling it in the most transparent and responsible manner possible. By registering for or continuing to use the GSC108 platform, you consent to the collection and use of your information as described in this Privacy Policy.

GSC108 operates in accordance with the principles of Malaysia's Personal Data Protection Act (PDPA), which requires that personal data be collected for a lawful purpose, processed fairly, stored securely, and not retained longer than necessary. We take all of these obligations seriously and make them the foundation of how we operate every day.

GSC108 only collects personal data that is necessary to deliver our services effectively and securely. Below are the types of data we collect and the purposes they serve:

We do not collect sensitive data such as medical information, religious beliefs, political affiliations, or biometric data except in very limited circumstances and with your explicit consent. Credit or debit card details are not stored on GSC108's servers — all payment transactions are processed through third-party payment providers that comply with PCI-DSS standards.

GSC108 uses the personal data we collect solely for legitimate purposes that are necessary to operate our platform effectively. The primary purposes are as follows:

• Account Management: Creating, verifying, and managing your member account, including the login process, identity verification, and password management.
• Transaction Processing: Processing deposits via DuitNow, FPX (Maybank2u, CIMB Clicks), Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay, as well as processing withdrawal of winnings to your Malaysian bank account or e-wallet.
• Service Provision: Grants you access to all games on GSC108, including live baccarat, poker, blackjack, slots, Malaysia Super League and EPL Sports Betting, virtual sports, and table games.
• Communications: Sending important notifications related to your account, transactions, policy changes, and promotional information that you have agreed to receive.
• Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, multi-account usage, and any misuse of the GSC108 platform.
• Responsible Gaming: Monitoring gaming patterns to identify signs of problem gambling and providing appropriate support to members who need it.
• Platform Improvements: Analysing how members use the platform to improve performance, user interface, and the overall gaming experience on GSC108.
• Legal Compliance: To fulfil applicable legal and regulatory obligations, including Anti-Money Laundering (AML) and Know Your Customer (KYC) requirements.

GSC108 does not sell, rent, or trade your personal data to any third party for marketing or any purpose unrelated to the provision of our services. However, there are limited circumstances in which your personal data may be shared with other parties:

• Payment Service Providers: Transaction data is shared with authorised payment providers (such as FPX and DuitNow processors) solely for the purpose of processing your deposits and withdrawals. These providers are bound by strict confidentiality agreements.
• Game Software Providers: Minimal game-related information may be shared with game software providers (such as live baccarat and slots providers) as required to operate the relevant games. They do not receive your financial data or full identity details.
• Regulatory & Legal Bodies: Where required by law or court order, GSC108 may be obligated to disclose personal data to the relevant authorities. We will notify you in advance if we are permitted to do so.
• Analytics Services: Anonymous and aggregated data (not personally identifiable information) may be shared with analytics providers to help us understand platform usage and improve our services.
• Identity Verification: In cases requiring additional identity verification, documentation may be reviewed by approved KYC service providers who are bound by strict confidentiality agreements with GSC108.

In all cases where data is shared with third parties, GSC108 ensures that those parties are bound by confidentiality and data protection obligations at least equivalent to the standards we hold ourselves to.

GSC108 implements multiple layers of technical and organisational security measures to protect your personal data from unauthorised access, unlawful use, loss, or alteration:

• Transit Encryption: All data transmitted between your device and GSC108's servers is protected with 256-bit TLS/SSL encryption, ensuring no third party can intercept or read your communications.
• Storage Encryption: Sensitive data stored in our databases — including passwords and financial information — is encrypted using modern encryption algorithms and is never stored in plain text.
• Access Controls: Access to members' personal data within GSC108's internal systems is strictly limited to staff who require it to perform their duties, based on a need-to-know principle.
• 24/7 Security Monitoring: Our security monitoring systems operate around the clock to detect and respond to any security threats, intrusion attempts, or suspicious activity.
• Two-Factor Authentication (2FA): GSC108 offers two-factor authentication for member accounts as an added layer of security — we encourage all members to enable this feature.
• Regular Security Audits: The GSC108 platform undergoes regular independent security audits to identify and address any vulnerabilities before they can be exploited.

GSC108 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

• Essential Cookies: These cookies are required for the platform's core functions — such as maintaining your login session, remembering your language preference, and basic security. They cannot be disabled without affecting platform functionality.
• Preference Cookies: Remembering your settings and preferences — such as frequently accessed game types, display limits, and interface choices — to deliver a more personalised experience.
• Analytics Cookies: Collects anonymous information about how visitors use our website — including the most frequently visited pages, time spent, and navigation paths. This information helps us improve the platform.
• Security Cookies: Used to identify trusted devices, detect suspicious login attempts, and protect your account from unauthorised access.

You can manage or block cookies through your browser settings. However, blocking certain cookies may affect the full functionality of the GSC108 platform, including the ability to log in and play games. For the best experience, we recommend allowing essential cookies.

GSC108 retains your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required by applicable law. Our general data retention principles are as follows:

• Active Account Data: For as long as your account remains active with GSC108, your identity and contact data will be retained to ensure uninterrupted access to the platform.
• Financial Transaction Data: Transaction records in MYR — including deposits via DuitNow, FPX, e-wallets, and withdrawals — are retained for 7 years after the transaction date as required by Malaysian financial regulations.
• Data After Account Closure: Once an account is closed, GSC108 will delete or anonymise personal data within 90 days, except for data that must be retained to fulfil legal obligations or resolve any outstanding disputes.
• Log & Security Data: Security logs and technical activity data are retained for 12 months for the purposes of security incident investigation and fraud prevention.
• Self-Exclusion Data: If you have used the self-exclusion feature, related records are retained for 5 years to ensure your request is honoured should you attempt to re-register.

As a GSC108 member and under the principles of Malaysia's PDPA, you have the following rights regarding your personal data. To exercise any of these rights, contact us via 24/7 live chat or email support@gsc108.online:

The GSC108 platform is intended exclusively for individuals aged 18 years of age and above only. We do not knowingly collect personal data from individuals under the age of 18. GSC108 carries out age verification procedures at registration and reserves the right to request identity verification documents to confirm a member's age at any time.

If you become aware that someone under the age of 18 has registered a GSC108 account or provided their personal data to us, please contact us immediately at support@gsc108.online. We will take prompt action to verify, close the account in question, and delete all associated data in accordance with our security procedures.

If you are a parent or guardian concerned about a child in your care accessing the GSC108 platform, we encourage you to use appropriate parental control software to block access to content that is unsuitable for minors.

GSC108 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, technology, new legal requirements, or member feedback. The latest version of the Privacy Policy will always be available on this website with the most current "Updated" date.

If we make any material changes to how we use your personal data, we will notify you via email to the address registered on your account and/or through a prominent notice on the GSC108 website before those changes take effect. It is your responsibility to ensure your email address on your GSC108 account is kept up to date so you do not miss any important notifications.

Continued use of the GSC108 platform following any changes to this Privacy Policy constitutes your acceptance of the updated version. If you do not agree with any changes, please discontinue use of the platform and close your account by contacting our support team.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how GSC108 handles your personal data, please reach out to us through the following channels:

• 24/7 Live Chat: The fastest option — click the live chat icon on your screen to connect with our Malay-speaking support team, available anytime.
• Email: Send a written enquiry to support@gsc108.online — we aim to respond within 24 business hours. Please include your full name and account number to help us process your request faster.

For more formal complaints or enquiries relating to data protection, you also have the right to lodge a complaint with the relevant data protection authority in Malaysia. GSC108 is committed to cooperating fully with any investigation carried out by the competent authorities.