Gsc108 Privacy Policy – Player Data Protection in Malaysia

1. Introduction

Gsc108 operates as an online entertainment platform offering a wide range of casino games, sports betting, bingo, and fish shooting games to players in Malaysia. In running this platform, we need to collect and process certain personal data to ensure our services are safe, fair, and compliant with applicable legal requirements.

This Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data protection. We are committed to ensuring that all personal data you entrust to us is handled with full responsibility, transparency, and the highest level of security.

2. Personal Data We Collect

Gsc108 only collects data that is strictly necessary to provide our services. Below are the categories of data we collect and their respective purposes:

3. How We Use Your Data

Every piece of data we collect has a clear and legitimate purpose. gsc108 uses your personal data for the following purposes:

• Register and manage your user account on the gsc108 platform.
• Process deposits and withdrawals securely through the various supported payment methods.
• Conduct identity verification (KYC) to comply with anti-money laundering (AML) requirements.
• Send important notifications related to your account, transactions, and security updates.
• Provide responsive and effective customer support whenever you contact us.
• Analyze usage patterns to improve platform performance and experience.
• Detect and prevent fraudulent activity, money laundering, and other security threats.
• Comply with all legal obligations, court orders, or directives from relevant authorities.
• Send promotional information and exclusive offers, subject to your communication preferences.

4. Data Sharing with Third Parties

Gsc108 respects your trust and does not share your personal data indiscriminately. We only share your information in limited and legitimate circumstances, as follows:

• Payment Providers: Transaction data is shared with authorized payment processors to facilitate your deposits and withdrawals.
• KYC Providers: Identity information is shared with certified identity verification partners for KYC purposes only.
• Authorities: Where required by law, court order, or official investigation, gsc108 will disclose the necessary information to the relevant authorities.
• Technical Service Providers: Infrastructure, hosting, and cybersecurity providers that help us operate the platform may have limited access to certain data.

All third parties we work with are bound by strict confidentiality agreements and are required to comply with data protection standards equivalent to those of gsc108.

5. Data Security

Gsc108 continually invests in security infrastructure to keep your personal data protected at all times. The security measures we implement include:

• 256-bit SSL encryption for all data communication between your device and gsc108 servers.
• Passwords are stored using bcrypt hashing — your original password is never saved in plain text.
• Two-factor authentication (2FA) for an additional layer of security during login.
• Round-the-clock security monitoring by gsc108's expert cybersecurity team.
• Regular security audits by independent third parties to identify and address system vulnerabilities.
• Role-based access control (RBAC) ensuring only authorized personnel can access sensitive data.

While no system can guarantee absolute security, gsc108 takes all reasonable and industry-best measures to minimise the risk of data breaches or misuse.

6. Data Retention Period

Gsc108 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected or to comply with legal requirements. The following are our data retention guidelines:

• Active account data is retained for the duration that your account remains active on the gsc108 platform.
• Financial transaction records are retained for a minimum of 7 years in accordance with anti-money laundering legal requirements.
• KYC and identity verification data is retained for 5 years after account closure.
• Technical logs and usage data are retained for 12 months for security and analysis purposes.
• Customer support communication records are retained for 3 years.

Once the relevant retention period has elapsed, your data will be securely deleted or anonymized in accordance with gsc108's established data deletion procedures.

7. Cookies & Tracking Technologies

The gsc108 platform uses cookies and similar tracking technologies to enhance the user experience, analyze usage patterns, and ensure platform security. We use several types of cookies:

• Essential Cookies: Required for core platform functions such as login session verification and security. These cookies cannot be disabled.
• Performance Cookies: Collect information about how you use the platform to help us improve our services, such as the most frequently visited pages.
• Functional Cookies: Remember your preferences such as language, region, and display settings so you don't need to reconfigure them on every visit.
• Analytics Cookies: Help us understand user demographics and navigation patterns in aggregate for product improvement purposes.

You can manage and control cookies through your browser settings at any time. However, disabling essential cookies may affect the functionality of the gsc108 platform.

8. Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 and gsc108's privacy policy, you have the following rights regarding your personal data. All requests will be processed within 14 business days.