Privacy Policy GSC888 – Data Protection for Malaysian Members

This Privacy Policy is issued by gsc888 ("we", "platform", or "gsc888") and applies to all individuals who access or use the gsc888 platform in Malaysia ("you" or "member"). This document sets out in detail how we collect, store, use, disclose, and protect your personal data in the context of your use of the gsc888 online casino and Sports Betting platform.

Gsc888 understands that trust is the foundation of our relationship with every member. You entrust us with your personal information when you register and use this platform, and we take that responsibility seriously. Every decision we make regarding data handling is made with the protection of member privacy as our primary consideration.

This Privacy Policy applies to all gsc888 services, including the web platform at gsc888.best, any mobile applications we may release in the future, all customer support channels including live chat and email, and all financial transactions made through supported Malaysian payment methods including Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX via Maybank2u and CIMB Clicks.

By using the gsc888 platform, you agree to the terms of this Privacy Policy. If you do not agree with any part of this policy, please do not use our platform. We encourage you to read this document in full and to contact us if any section is unclear or raises concerns.

Gsc888 only collects data that is strictly necessary to operate the platform and provide services to members. We do not collect excessive or irrelevant data. The following are the categories of data we collect:

Account Registration Data:

• Full name as per Malaysian Identity Card (MyKad)
• MyKad number or passport number (for eligible non-citizens)
• Date of birth (for minimum age verification of 18 years)
• An active Malaysian mobile number
• Valid email address
• Password (stored in hashed format — we never store passwords in plain text)

Identity Verification (KYC) Data:

• Image or copy of MyKad (front and back)
• Proof of local address (recent utility bill or bank statement)
• Payment method details used (bank account number or e-wallet account number)
• Selfie or photograph (if required for additional verification)

Platform Usage Data:

• Game history including games played, dates, times, and results
• Transaction history including deposits and withdrawals via Touch 'n Go, DuitNow, GrabPay, FPX, and other methods
• Records of communications with the customer support team
• Login date and time, IP address, device type, and web browser information
• General geolocation data (state and city) for regional verification purposes

Gsc888 uses members' personal data solely for legitimate purposes directly related to the provision of platform services. The following outlines the specific purposes for which data is used:

• Account Management: Creating and managing member accounts, verifying identity, processing registrations, and enabling secure login to the gsc888 platform.
• Financial Transaction Processing: Processing deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX; processing withdrawal of winnings to members' Malaysian bank accounts or ewallets; managing transaction records for accounting purposes.
• Identity Verification and KYC: To meet legal requirements relating to identity verification, prevent fraud and the use of accounts by ineligible individuals, and fulfil anti-money laundering obligations.
• Platform Security: Detecting and preventing unauthorised access, fraud, and activities that violate gsc888's Terms & Conditions; monitoring suspicious activity; and protecting members from cybercrime.
• Customer Support: To enable gsc888's customer support team to provide accurate and efficient assistance; and to resolve disputes relating to gameplay or transactions.
• Platform Improvements: Analyzing usage patterns in aggregate (not at the individual level) to improve platform design, introduce new games, and enhance the overall user experience.
• Responsible Gaming: To monitor gameplay patterns in order to identify members who may need responsible gaming support, and to enforce limits set by members themselves.
• Marketing Communications (with consent): Sending information about promotions, bonuses, and special offers to members who have consented to receive them – this preference may be withdrawn at any time.

Gsc888 does not sell, rent, or disclose members' personal data to third parties for marketing or commercial purposes. However, there are limited situations where we need to share data with certain parties to keep the platform running:

• Payment Service Providers: Only the minimum transaction data required is shared with Malaysian payment gateway providers such as Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, and FPX processors to facilitate deposit and withdrawal processing. All these providers are bound by strict data protection agreements.
• Identity Verification Provider: KYC data may be processed by approved third-party identity verification service providers to ensure compliance with legal requirements. These providers are prohibited from using that data for any other purpose.
• Game Providers: Only the minimum information required (such as a player ID without a full name) is shared with game providers like Pragmatic Play, Evolution Gaming, and PG Soft, strictly for the technical purpose of integrating games into the gsc888 platform.
• Legal Authorities: gsc888 may be required by law to disclose personal data to Malaysian authorities such as the police, courts, or regulatory bodies upon receipt of a valid request. gsc888 will comply with such requests in accordance with proper legal procedures.
• Fraud Prevention: In cases where there is strong evidence of fraud or illegal activity, gsc888 may share relevant information with the appropriate Malaysian financial institutions or law enforcement agencies.

All third parties that receive personal data from gsc888 are subject to contractually binding data protection agreements. They are prohibited from using such data for any purpose other than those specified in the relevant agreement, and are required to protect it to a security standard equivalent to or higher than our own.

Gsc888 takes a multi-layered approach to protecting members' personal data against unauthorised access, disclosure, alteration, or destruction. The security measures we have implemented include:

• Data Encryption in Transit: All communications between a member's device and gsc888's servers are encrypted using TLS 1.3 protocol with 256-bit SSL certificates. This ensures that data transmitted — including login credentials and transaction details — cannot be intercepted or read by unauthorised parties.
• Data Encryption at Rest: Sensitive data such as payment information, MyKad numbers, and KYC details are stored in encrypted format in our database. Member passwords are never stored in plain text — we use strong hashing algorithms with a unique salt for every password.
• Internal Access Controls: Access to members' personal data within gsc888's internal systems is restricted to staff who genuinely require it to perform their duties. All access is logged and regularly audited. The principle of least privilege is strictly enforced.
• 24/7 Security Monitoring: Automated monitoring systems operate 24 hours a day to detect intrusion attempts, unusual access patterns, and other security threats. Our cybersecurity team responds to any alerts promptly.
• Regular Security Testing: gsc888 conducts regular penetration testing and independent security audits to identify and address vulnerabilities before they can be exploited.
• Incident Management: We have clear incident response procedures in place. In the event of a data breach that may affect members, we will notify the affected members and the relevant authorities within the timeframes required by Malaysian law.

The gsc888 platform uses cookies and similar tracking technologies to enhance the user experience and enable certain platform features. The following are the types of cookies we use:

• Essential Cookies: These cookies are essential for the platform to function properly. They store login session information, language preferences, and basic platform settings. Without them, the platform cannot operate and you will not be able to play. These cookies cannot be disabled.
• Performance Cookies: These cookies collect information about how members use the platform — for example, which pages are visited most frequently and what error messages are encountered. All information is collected anonymously and is used to improve the gsc888 platform.
• Functional Cookies: These cookies allow the platform to remember preferences you have set, such as your username (if you choose to save it), game preferences, and display settings, providing a more personalised experience.
• Security Cookies: These cookies are used to detect unauthorized login attempts, identify devices used by members for additional security, and prevent CSRF (Cross-Site Request Forgery) attacks.

You can control and manage cookies through your web browser settings. However, disabling certain cookies may affect the functionality of the gsc888 platform. Session cookies will be deleted automatically when you close your browser, while persistent cookies will remain on your device until they expire or until you delete them manually.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and gsc888's privacy commitment, you have the following rights regarding your personal data:

To exercise any of the rights above, please contact the gsc888 Data Privacy Officer by email at support@gsc888.best stating the right you wish to exercise and the information needed to verify your identity. We will process your request within 21 working days from the date we receive your completed request.

Gsc888 retains members' personal data only for as long as necessary to fulfil the purposes for which it was collected, or to comply with applicable legal and regulatory requirements. The following are the retention period guidelines for key data categories:

• Active Account Information: For the duration of the active member account plus 5 years after account closure, in compliance with Malaysian anti-money laundering legal requirements.
• Financial Transaction Records: A minimum of 7 years from the transaction date, in line with the requirements of the Companies Act and relevant Malaysian tax legislation.
• KYC Documents: For the duration of the active account plus 5 years — required for audit and regulatory compliance purposes.
• Security Logs: 12 months from the date the log is generated, after which it will be automatically deleted or anonymised.
• Customer Support Records: 3 years from the date of the last interaction, to allow for the resolution of any disputes that may arise thereafter.
• Marketing Data: Until you withdraw consent or request deletion — such data will be deleted within 30 days of the request being received.

Once the retention period expires, data will be securely deleted or anonymised so that it can no longer be linked to any individual. Anonymised data may be retained indefinitely for statistical and analytical purposes, as it no longer constitutes personal data.

Gsc888 has appointed a Data Privacy Officer responsible for ensuring compliance with this Privacy Policy and Malaysian data protection law. If you have any questions, concerns, or complaints regarding your privacy or the handling of your personal data by gsc888, please contact us through the following channels:

• Email (recommended for privacy-related matters): support@gsc888.best — include "Privacy Enquiry" in the subject line of your email
• 24/7 Live Chat: Via the gsc888 platform — select the "Privacy & Data" category when starting a chat session
• Response Time: We are committed to responding to all privacy-related enquiries within 2 business days, and to processing data rights requests within 21 business days

If you believe gsc888 has violated your privacy rights under Malaysia's PDPA and your complaint has not been resolved to your satisfaction after contacting us, you have the right to lodge a complaint with the Department of Personal Data Protection under the Ministry of Communications Malaysia.