GSC108 Privacy Policy – Our Commitment to Protecting the Personal Data of Malaysian Users

This Privacy Policy is issued by gsc108, Malaysia's trusted online betting platform offering Sports Betting, Live Casino, poker, e-sports, and cricket services to users in Malaysia. This document explains how gsc108 collects, uses, stores, discloses, and protects your personal information.

This policy applies to all users who interact with the gsc108 platform via the website, mobile app, or any other communication channel operated by gsc108. This includes visitors who browse our website without registering an account, registered members actively using the platform, and former members whose accounts have been closed.

Gsc108 is committed to complying with Malaysia's Personal Data Protection Act (PDPA) 2010 and all related regulations. We take our responsibilities as a data processor seriously and consistently strive to handle your personal information in a transparent, fair, and secure manner.

Gsc108 collects several categories of information depending on how you interact with our platform. Below is a detailed description of each category:

A. Information You Provide Directly

• Malaysian phone number provided at account registration
• Full name and date of birth (for identity verification)
• Email address (if provided)
• Bank account number or phone number for DuitNow withdrawal purposes
• A copy of your identification document (MyKad) when requested for KYC verification
• Information you provide when contacting gsc108 customer support

B. Automatically Collected Information

• IP address and estimated location data
• Device type, operating system, and browser version
• Access log data including visit times, pages visited, and session duration
• Betting history and gaming activity on the gsc108 platform
• Deposit and withdrawal transaction history (amount, date, method)
• Cookie data and similar tracking technologies (described in Section 7)

C. Information From Third Parties

• Transaction confirmations from payment providers including Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX
• Identity verification information from authorised KYC service providers, where applicable
• Fraud prevention data from third-party security service providers

Gsc108 uses your personal information only for legitimate, stated purposes. The table below summarises the primary purposes for data use along with the applicable legal basis:

Gsc108 will not use your personal information for any purpose not stated above without first obtaining your consent. If you wish to withdraw consent for marketing purposes, you may do so at any time through your account settings or by contacting gsc108 support.

Gsc108 does not sell, rent, or trade your personal information to any third party for their own purposes. However, in the course of operating the platform, we may share limited information with the following categories of parties, all of whom are bound by strict confidentiality and data security agreements:

A. Payment Service Providers

To process deposit and withdrawal transactions, gsc108 shares the necessary transaction information with your chosen payment provider, such as Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX (Maybank2u, CIMB Clicks). This sharing is limited strictly to the information required to process the relevant transaction.

B. Technology Service Providers

Gsc108 uses third-party technology service providers for functions such as server infrastructure, cybersecurity systems, and platform analytics. All such providers are bound by data processing agreements that prohibit them from using your data for their own purposes.

C. Competent Authorities

Gsc108 may disclose personal information to government authorities, law enforcement, or regulatory bodies when required by Malaysian law or court order. In all such cases, gsc108 will disclose only the minimum information necessary and will endeavour to notify you if permitted to do so.

D. Business Transfers

In the event of an acquisition, merger, or sale of gsc108's assets, user information may be transferred to the receiving entity. In such circumstances, gsc108 will notify users before the transfer takes place, and users will be subject to the privacy policy of the new entity.

The security of your personal data is gsc108's top priority. We continuously invest in the latest security infrastructure and procedures to ensure your information remains protected at all times. Below are the key security measures we have in place:

• Encryption of Data in Transit: All communications between your device and gsc108's servers are encrypted using TLS 1.3 with a 256-bit SSL certificate — the highest standard currently available.
• Stored Data Encryption: Sensitive data stored in our databases, including payment information and identity documents, is encrypted using AES-256 encryption.
• Role-Based Access Control: Only staff with specific authorisation may access users' personal data, and only to the extent required for their duties.
• 24/7 Security Monitoring: A threat monitoring system operates around the clock to detect and respond to potential security incidents.
• Regular Penetration Testing: gsc108 conducts regular security assessments, including independent penetration testing, to identify and address vulnerabilities before they can be exploited.
• Two-Factor Authentication: Account login is protected by OTP verification via your registered phone number, adding an extra layer of security.
• Secure Data Backup: User data is backed up regularly to encrypted locations to ensure recovery is possible in the event of a system failure.

While gsc108 takes all reasonable steps to protect your data, no system is 100% impenetrable. You also play an important role in your account's security by keeping your password confidential and never sharing your login credentials with anyone.

Gsc108 does not retain your personal information for longer than is necessary for the purposes stated in this Privacy Policy, or as required under Malaysian law. Our data retention policy is as follows:

• Active Account Data: Retained for the duration your account remains active, plus the minimum period required by law following account closure.
• Financial Transaction Records: Retained for a minimum of seven (7) years after the transaction takes place, in line with Malaysian accounting and tax law requirements.
• Identity Verification Documents (KYC): Retained for a minimum of five (5) years after the business relationship ends, in line with anti-money laundering requirements.
• Support Communication Logs: Retained for two (2) years for reference and dispute resolution purposes.
• Technical Log Data: Retained for six (6) months for security purposes and technical troubleshooting.
• Marketing Data (with consent): Retained until you withdraw consent or close your account.

Once the applicable retention period expires, your data will be securely deleted or anonymised in a manner that can no longer be linked back to you as an individual. gsc108 maintains an automated data purging schedule to ensure this policy is consistently upheld.

Gsc108 uses cookies and similar tracking technologies to enhance the user experience on our platform. Below is an explanation of the types of cookies we use and their purposes:

A. Essential Cookies (Required)

These cookies are essential for the platform's basic functionality and cannot be disabled. They include login session cookies, CSRF security tokens, and language preference settings. Without these cookies, the gsc108 platform will not function properly.

B. Performance & Analytics Cookies

These cookies help us understand how users interact with the gsc108 platform — which pages are visited most frequently, where users encounter issues, and how we can improve the overall experience. Data collected through these cookies is aggregated and is not used to directly identify individuals.

C. Functional Cookies

These cookies save your preferences such as your preferred odds format (decimal, fractional), interface language, and other display settings so you do not have to reconfigure them each time you use the gsc108 platform.

You can manage your cookie settings through your web browser preferences. However, disabling certain cookies may affect the functionality of the gsc108 platform. For more information on how to manage cookies in your browser, refer to your browser's documentation.

Under the Personal Data Protection Act (PDPA) Malaysia 2010 and gsc108's policies, you have the following rights regarding your personal information. All requests may be submitted through gsc108's customer support channels and will be processed within a reasonable timeframe:

The gsc108 platform is STRICTLY for individuals aged 21 and above. gsc108 does not knowingly collect personal information from individuals under the age of 21. If you believe a minor has registered an account on gsc108, please contact us immediately at support@gsc108.run so we can take appropriate action.

During registration, gsc108 performs age verification based on the information provided by the user. Any account found to belong to a minor will be closed immediately and all funds returned to the original source. gsc108 also reserves the right to request supporting documents to verify age at any time.

In certain cases, your personal data may be stored or processed on servers located outside Malaysia — for example, for cloud infrastructure or cybersecurity services used by gsc108. When such transfers occur, gsc108 ensures that:

• Transfers are only made to countries or providers that maintain an equivalent or higher standard of data protection
• Data transfer agreements compliant with Malaysia's PDPA requirements are in place with all recipients
• Appropriate technical and organisational security measures are in place to protect data during transfer

Gsc108 does not transfer your personal data to countries without adequate data protection laws unless appropriate additional safeguards are in place. For more information on cross-border data transfers, please contact our Privacy Officer.

Gsc108 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other legitimate reasons. Each version will state the effective date at the top of the document.

For material amendments — that is, changes that significantly affect your privacy rights or the way we use your data — gsc108 will notify you via a prominent in-platform notification and/or an email to your registered address at least 14 days before the changes take effect.

Your continued use of the gsc108 platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you have the right to close your account and request deletion of your data in accordance with the procedures set out in Section 8.

Gsc108 has appointed a Data Protection Officer responsible for ensuring compliance with this Privacy Policy and handling all privacy-related enquiries from users.

If you have any questions, concerns, or requests regarding your personal data — including requests to access, correct, or delete your data — please reach out to us through the following channels:

• Email: support@gsc108.run (use the subject line "Privacy Inquiry")
• Live Chat: Available on the gsc108 platform, 24 hours a day
• WhatsApp: The number listed on the gsc108 platform's support page

Gsc108 is committed to responding to all privacy-related enquiries within seven (7) business days. For more complex requests such as full data exports or data deletion, processing may take up to 30 calendar days in accordance with Malaysia's PDPA requirements.