GCS88 Privacy Policy — User Personal Data Protection

1 Introduction and Scope of This Privacy Policy

This Privacy Policy is issued by GCS88 and applies to all users who register, browse, or use any services provided by the GCS88 platform at gcs88.onl. By using our platform, you agree that GCS88 may process your personal data in accordance with the terms set out in this document.

This policy covers all types of personal data we collect — whether directly from you, automatically through platform usage, or from legitimate third-party sources. We encourage you to read this document carefully and contact us if you have any questions.

2 Types of Personal Data We Collect

GCS88 collects various types of personal data depending on how you interact with our platform. Below are the main categories of data we collect:

Registration and Identity Data:

• Full name as it appears on your official identification document.
• Date of birth for verification of the minimum age requirement of 18 years.
• Active email address for communication and account verification.
• An active Malaysia mobile phone number.
• Current residential address (for certain KYC requirements).

Identity Verification Data (KYC):

• A digital copy of your Malaysian identity card (MyKad) — front and back.
• A selfie with your identity document for facial verification.
• Proof of ownership of the bank account or eWallet used.

Financial and Transaction Data:

• Bank account or eWallet details (account number, bank name — not your password or PIN).
• Deposit and withdrawal records, including amounts and payment methods.
• Complete transaction history within the platform.

Usage and Technical Data:

• IP address, device type, operating system, and web browser used.
• Session log data including login times, session duration, and in-platform activity.
• Cookies and platform performance tracking data.

3 Purpose of Data Collection and Processing

GCS88 processes your personal data on a valid legal basis and only for clear, specific purposes. We will not process your data for any other purpose without informing you in advance.

4 Data Sharing with Third Parties

GCS88 values user trust. We will never sell your personal data to any party for commercial purposes. However, in the course of platform operations, we may share your data with the following categories of third parties strictly on a need-to-know basis:

• Payment Providers: FPX, Touch 'n Go eWallet, Boost, GrabPay, and local banks — to securely process deposits and withdrawals.
• Game Providers: Game software developers that provide slots, Live Casino, and other games on our platform.
• KYC Service Providers: A certified third-party identity verification platform that facilitates fast and secure KYC processing.
• Relevant Authorities: Regulatory bodies, law enforcement agencies, or courts when lawfully required under Malaysian law.
• Technical Infrastructure Providers: Cloud computing and server hosting services that support gcs88's technical operations to the highest security standards.

5 Use of Cookies and Tracking Technologies

GCS88 uses cookies and similar tracking technologies to enhance the user experience, ensure account security, and analyze platform performance. Cookies are small text files stored on your device when you visit our platform.

We use several types of cookies:

• Essential Cookies: Required for core platform functions such as login, session security, and navigation. These cookies cannot be disabled.
• Performance Cookies: Collects data on how users interact with the platform to help us improve the overall user experience.
• Functional Cookies: Saves user preferences such as language, display format, and other personal settings for a more convenient return experience.
• Analytics Cookies: Helps us understand aggregated, anonymised platform usage patterns for continuous improvement.

You can manage or delete cookies through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality or user experience of the GCS88 platform.

6 Data Security and Protective Measures

GCS88 invests seriously in data security infrastructure to ensure your personal information is always protected. Key security measures we implement include:

• SSL/TLS 1.3 Encryption: All communications between your device and gcs88's servers are encrypted using the latest version of the TLS protocol to prevent data interception.
• AES-256 Data-at-Rest Encryption: Personal data stored in our databases is encrypted using the AES-256 standard adopted by global financial institutions.
• Two-Factor Authentication (2FA): Users are encouraged and internal processors are required to use 2FA to access accounts and systems.
• Role-Based Access Control: Only specifically authorised staff may access user data, and every access is logged and audited.
• Real-Time Threat Monitoring: Our security systems operate 24 hours a day to detect and respond to any security threats immediately.
• Regular Penetration Testing: GCS88 conducts regular security testing and independent audits to identify and patch any system vulnerabilities before they can be exploited.

7 Data Retention Period

GCS88 retains your personal data for as long as your account is active or as long as needed for the purposes stated in this policy. Below are our data retention guidelines:

• Active Account Data: Retained for the duration of your active account and for a minimum of 7 years after account closure, to comply with anti-money laundering legal requirements.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with applicable Malaysian financial and tax legal requirements.
• KYC Documents: Retained for the duration of the active account and 7 years after account closure.
• Technical and Activity Logs: Retained for 90 days for security and technical troubleshooting purposes.
• Marketing Data (with consent): Retained until you withdraw consent or request deletion.

Once the stipulated retention period expires, your data will be securely deleted or anonymised in accordance with gcs88's data disposal procedures.

8 Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and GCS88 policy, you have various rights regarding your personal data. GCS88 is committed to making it easy for you to exercise these rights at no additional charge.

9 Cross-Border Data Transfers

In some operational cases, your personal data may be transferred to and stored on servers located outside Malaysia — particularly in relation to cloud infrastructure providers and international game software providers that we use.

When such transfers occur, GCS88 ensures that adequate data protection is upheld through the following mechanisms:

• A legally binding Data Processing Agreement with the receiving party.
• Transfers are made only to countries or entities that meet data protection standards equivalent to Malaysia's PDPA.
• Use of approved standard contractual clauses for international transfers involving providers in other jurisdictions.

10 Minors and Age Restrictions

The gcs88 platform is strictly for users aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. Our registration process requires users to confirm that they meet the minimum age requirement.

If we discover that personal data of a minor under 18 years of age has been collected without parental or guardian knowledge and consent, we will immediately delete that data and close the account in question without notice.

11 Changes to This Privacy Policy

GCS88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or platform service improvements. Each new version will be published on this page with an updated effective date.

For material and significant changes, we will notify users via their registered email or in-platform notification at least 14 days before the changes take effect. Continued use of the gcs88 platform after the effective date of such changes constitutes full acceptance of the amended policy.

12 How to Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how gcs88 processes your personal data, please contact our Data Protection Officer through the following channels:

You may also file a formal complaint with the Personal Data Protection Commissioner of Malaysia if you believe your privacy rights have been violated and the issue cannot be resolved through GCS88 channels.