Privacy Policy GSC88 — How We Protect the Personal Data of Malaysian Members

This Privacy Policy describes how GSC88 ("we", "Platform", "GSC88") collect, use, store, protect, and occasionally share your personal information when you use the website gsc88.site and all related services, including progressive jackpot slots, Live Casino, Sports Betting, table games, e-sports, and the VIP Rewards programme.

This Privacy Policy applies to all users of the GSC88 platform, including website visitors, registered members, and former members whose data is retained in accordance with legal requirements. GSC88 operates in compliance with Malaysia's Personal Data Protection Act (PDPA) 2010 and relevant international standards.

We take your privacy seriously. In six years of operation, GSC88 has never experienced any significant data breach, and we are committed to maintaining that record through continuous investment in security infrastructure and best-in-class privacy practices.

GSC88 collects your personal data through three main channels: data you provide directly when registering or using the platform, data generated automatically through your use of the platform, and data received from legitimate third-party service providers such as payment gateways.

Data You Provide Directly

Automatically Collected Data

GSC88 uses your personal data solely for legitimate purposes directly related to the services we provide. We do not process your data for any undisclosed purposes without obtaining your consent beforehand.

• Account Management: Creating and maintaining your GSC88 account, processing registration, and ensuring secure access to the platform.
• Financial Transaction Processing: Processing deposits and withdrawals in MYR via Touch 'n Go, GrabPay, DuitNow, FPX, and other methods, while maintaining accurate financial records.
• Gaming & Entertainment Provision: Enables you to play slots, Live Casino, Sports Betting, table games, and e-sports on the GSC88 platform.
• Identity Verification (KYC): Meeting anti-money laundering (AML) legal requirements and ensuring the GSC88 platform remains free from abuse.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, collusion, or platform abuse that could affect other members.
• Customer Support: Responding to enquiries, resolving complaints, and providing technical assistance to GSC88 members in Bahasa Melayu.
• VIP & Rewards Programme: Calculating and crediting rebates, bonuses, and VIP rewards based on your gaming activity.
• Responsible Gaming: Monitoring gameplay patterns to identify signs that may require responsible gambling intervention, in the interest of member wellbeing.
• Platform Improvements: Analysing aggregated (non-individual) usage data to improve the user experience and develop new features.
• Marketing Communications: Sending information about GSC88 promotions, bonuses, and new features — with your consent and with the option to unsubscribe at any time.

GSC88 processes your personal data on solid legal grounds in accordance with Malaysia's Personal Data Protection Act (PDPA) 2010. There are four main bases we rely on:

• Your Consent: When you register as a GSC88 member and accept this Privacy Policy, you give your consent for data processing for the stated purposes. You may withdraw this consent at any time.
• Contract Performance: Data processing required to deliver GSC88 services to you — including payment processing in MYR, account management, and game provision.
• Legal Obligations: Financial record-keeping and identity verification as required under Malaysian law, including AML (Anti-Money Laundering) obligations.
• Legitimate Interests: Processing necessary for GSC88's legitimate interests that does not override your privacy rights — including fraud prevention, platform security, and service improvements based on aggregated data.

GSC88 do not sell member personal data to any party. However, in order to provide a complete and secure service, we share limited data with the following categories of third parties under strict confidentiality agreements:

• Payment Providers: Payment gateways such as Touch 'n Go, GrabPay, DuitNow, FPX processors, and partner banks receive only the data necessary to process your financial transactions. This data is kept to a minimum and is protected under PCI DSS standards.
• Game Providers: Companies such as Pragmatic Play, NetEnt, and Microgaming may receive session identifiers necessary to deliver their games on the GSC88 platform. They do not receive your full name or any financial information.
• Technical Service Providers: Hosting providers, anti-fraud services, and internal analytics tools that help us operate the GSC88 platform securely and efficiently. All such providers are bound by strict data processing agreements.
• Legal Authorities: Malaysian government agencies or law enforcement authorities when required by law, court order, or valid legal process.

GSC88 employs multiple layers of technical and organisational security to protect your personal data from unauthorised access, loss, or accidental disclosure.

Technical Security Measures

• 256-bit SSL encryption for all data communications between your device and GSC88 servers.
• Passwords are stored using the bcrypt one-way hashing algorithm — we have no access to your actual password.
• Enterprise-grade firewalls and intrusion detection systems (IDS) that are always active.
• Penetration testing by independent security experts at least twice a year.
• An AI-powered fraud detection system that monitors suspicious activity in real time.
• Two-factor authentication (2FA) is available for all GSC88 member accounts.

Data Retention Period

• Active Account Data: Retained for the duration of the active account period and 5 years after account closure (AML compliance requirement).
• Financial Transaction Records: Retained for 7 years in accordance with Malaysian accounting and tax law requirements.
• Security & Activity Logs: Retained for 2 years for fraud detection and dispute resolution purposes.
• Marketing Data: Retained until you withdraw consent or request deletion.
• KYC Documents: Retained for the period required under Malaysian anti-money laundering laws.

GSC88 uses cookies and similar tracking technologies to ensure the platform runs smoothly, enhance your experience, and detect fraud. Below are the types of cookies we use:

As a GSC88 member and an individual protected under Malaysia's PDPA, you hold the following rights regarding your personal data. We take these rights seriously and will process every request promptly and transparently.

GSC88 may send you marketing communications about promotions, new bonuses, major jackpots, and newly launched platform features. All such communications are based on the consent you provided during registration or at a later date.

How to Manage Marketing Communications

• Under Account Settings: Log in to your GSC88 account, go to Settings → Communications, and toggle the notification types you wish to receive or turn off.
• Unsubscribe Link: Every GSC88 marketing email contains an "Unsubscribe" link that allows you to opt out of all marketing emails within 24 hours.
• Contact Support: Contact the GSC88 support team and request to be removed from the marketing communications list — this will be processed within 3 business days.

The GSC88 platform is intended for users who are 18 years of age and above only. GSC88 does not knowingly collect or process personal data from individuals under the age of 18.

If we determine that personal data has been collected from an individual under the age of 18 without proper age verification, we will delete that data immediately and close the account in question. Any remaining balance after bonus deductions will be refunded via the original payment method.

In operating the GSC88 platform, some of your personal data may be stored or processed on servers located outside Malaysia — for example, for cloud hosting services and international game providers. GSC88 ensures that all international data transfers are carried out with adequate safeguards in place.

• All third-party service providers that handle GSC88 member data are bound by data processing agreements requiring them to protect that data to a standard at least equivalent to Malaysia's PDPA.
• GSC88 gives preference to service providers that process data within the Asia Pacific region wherever possible.
• Financial data related to MYR transactions is processed and stored in accordance with Malaysian financial regulatory requirements.

GSC88 reserves the right to update or amend this Privacy Policy from time to time in response to changes in technology, legislation, or our business practices. We are committed to notifying you of significant changes in a clear and timely manner.

• Significant changes to this Privacy Policy will be communicated via email to registered members and through a prominent notice on the GSC88 platform at least 14 days before the changes take effect.
• Minor changes (such as spelling corrections or clarifications with no substantive impact) may be made without prior notice but will always be reflected in the updated date at the top of this document.
• Continued use of the GSC88 platform after the effective date of any amendment will be deemed your acceptance of the updated policy.
• Previous versions of the Privacy Policy are kept in an archive and are available upon request for reference.

If you have any questions, concerns, or complaints regarding how GSC88 handles your personal data, or if you wish to exercise any of the rights set out in Section 8, please reach out to us through the following channels:

• Privacy Email: support@gsc88.site (please mark the subject: "Privacy Enquiry")
• Live Chat: Available 24/7 within the GSC88 platform or mobile app
• Support Language: Bahasa Melayu & English
• Response Time: Within 24 hours for general enquiries; 14 working days for formal data rights requests

GSC88 is committed to resolving all privacy concerns transparently, fairly, and within the stipulated timeframe. If you are unsatisfied with our response after raising an issue directly with us, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia in accordance with the established PDPA procedures.