gcs88 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how gcs88 ("gcs88", "we", "us", "our") collects, uses, stores, discloses, and otherwise processes the personal data of individuals ("you", "Player", "User") who access or use the gcs88 platform at gcs88.app, including all associated mobile applications and services (the "Platform").

gcs88 is committed to protecting the privacy and personal data of its players in accordance with applicable international gaming authority data protection standards and the principles of Malaysia's Personal Data Protection Act 2010 (PDPA) where applicable. By registering an account on gcs88 or otherwise using the Platform, you consent to the collection and processing of your personal data as described in this Policy.

This Policy should be read in conjunction with the gcs88 Terms & Conditions, which form the overarching agreement governing your use of the Platform.

2. Data We Collect

2.1 Information You Provide Directly

When you register a gcs88 account, use our services, or communicate with us, we collect the following categories of personal data that you provide directly:

• Identity Data: Full name, date of birth, national identity card number (MyKad) or passport number, nationality, and gender.
• Contact Data: Email address, mobile phone number, and residential address.
• KYC Documentation: Copies of government-issued identification documents, proof of address documents, and payment method verification documents submitted during the Know Your Customer verification process.
• Financial Data: Bank account details, e-wallet identifiers (such as Touch 'n Go eWallet or Boost account references), deposit and withdrawal transaction records, and account balance history.
• Communications: Records of your correspondence with gcs88 support via live chat, email, or other channels.

2.2 Information Collected Automatically

When you access and use the gcs88 Platform, we automatically collect certain technical and behavioural data, including:

• Device & Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and unique device identifiers.
• Usage Data: Pages and game sections visited, game sessions initiated, wagers placed, session duration, navigation paths, and feature interactions.
• Transaction Data: Complete records of all deposits, withdrawals, wagers, game outcomes, and bonus credits applied to your account.
• Location Data: Approximate geographic location derived from your IP address, used for fraud prevention and regulatory compliance purposes.

3. How We Use Your Data

gcs88 uses your personal data for the following purposes:

• Account Management: To register, maintain, and administer your gcs88 account, including processing deposits and withdrawals.
• Identity Verification: To verify your identity and age (21+) as required by our KYC obligations and to prevent access by underage individuals.
• Service Delivery: To provide access to games, sportsbook markets, live casino tables, and all other features of the gcs88 Platform.
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent transactions, money laundering, and other prohibited conduct.
• Legal & Regulatory Compliance: To comply with applicable gaming authority requirements, anti-money laundering obligations, and lawful requests from regulatory or law enforcement bodies.
• Customer Support: To respond to your queries, complaints, and support requests.
• Responsible Gaming: To monitor gaming behaviour, identify indicators of problem gambling, and apply responsible gaming tools where appropriate.
• Platform Improvement: To analyse usage patterns and improve the design, performance, and features of the gcs88 Platform.
• Marketing (opt-in only): To send you promotional offers, bonus notifications, and updates about gcs88 services, where you have given explicit consent to receive such communications.

4. Legal Basis for Processing

gcs88 processes your personal data under one or more of the following lawful bases:

• Contractual Necessity: Processing is necessary to perform the contract between you and gcs88 (i.e., to provide the Platform services you have registered for).
• Legal Obligation: Processing is required to comply with applicable gaming regulations, anti-money laundering laws, and KYC obligations.
• Legitimate Interests: Processing is necessary for our legitimate interests in operating a secure, fraud-free platform and improving our services, provided such interests are not overridden by your data protection rights.
• Consent: Where we rely on consent as the lawful basis (such as for direct marketing communications), you retain the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing & Disclosure

5.1 Third-Party Service Providers

gcs88 may share your personal data with carefully vetted third-party service providers who assist in the operation of the Platform. These include payment processing providers (including operators of Touch 'n Go eWallet, Boost, DuitNow, and bank transfer services), game content providers, identity verification service providers, fraud detection and anti-money laundering service providers, and cloud hosting and IT infrastructure providers. All such third parties are bound by data processing agreements requiring them to process your data only on gcs88's instructions and to maintain appropriate security standards.

5.2 Regulatory & Legal Disclosure

gcs88 may disclose your personal data to relevant gaming authorities, financial regulators, or law enforcement agencies where required to do so by law, court order, or regulatory directive. Such disclosures will be made only to the extent strictly necessary and in accordance with applicable legal requirements.

5.3 No Sale of Data

gcs88 does not sell, rent, or otherwise transfer your personal data to third parties for their independent marketing or commercial purposes. Any data sharing is strictly limited to the purposes described in this Policy.

6. Cookies & Tracking Technologies

gcs88 uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies used include:

• Strictly Necessary Cookies: Required for the Platform to function correctly, including session authentication and security tokens. These cannot be disabled.
• Functional Cookies: Used to remember your preferences such as language settings and display preferences.
• Analytics Cookies: Used to collect anonymous data about how players navigate and interact with the Platform, enabling us to improve performance and usability.

No third-party advertising or cross-site tracking cookies are used by gcs88 without explicit user consent. You may manage or block non-essential cookies via your browser's cookie settings at any time. Please note that disabling certain cookies may affect Platform functionality.

7. Data Retention

gcs88 retains your personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following retention standards:

• Active Accounts: Personal data and account records are retained for the duration of your active account relationship with gcs88.
• Closed Accounts: Following account closure, gcs88 retains identity, KYC, and financial transaction data for a minimum of five (5) years in compliance with anti-money laundering regulatory requirements.
• Support Communications: Records of customer support interactions are retained for a minimum of two (2) years.
• Analytics Data: Anonymised or aggregated analytics data may be retained indefinitely as it cannot be linked back to any individual player.

Upon expiry of the applicable retention period, gcs88 will securely delete or anonymise your personal data in accordance with our data disposal procedures.

8. Data Security

gcs88 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and gcs88 servers.
• Encryption of sensitive data fields at rest using industry-standard protocols.
• Role-based access controls ensuring that only authorised personnel can access personal data, limited to what is necessary for their specific function.
• Regular security assessments and penetration testing of the Platform infrastructure.
• Multi-factor authentication requirements for administrative access to systems containing personal data.
• Incident response procedures for detecting and responding to data security breaches in a timely manner.

In the event of a data security breach that is reasonably likely to result in a risk to your rights and interests, gcs88 will notify affected players and relevant regulatory authorities as required by applicable law.

9. Your Data Rights

Subject to applicable law and our legal retention obligations, you have the following rights in relation to your personal data held by gcs88:

• Right of Access: You may request a copy of the personal data gcs88 holds about you.
• Right of Rectification: You may request correction of any inaccurate or incomplete personal data.
• Right of Erasure: You may request deletion of your personal data, subject to our legal retention obligations. Note that we are required to retain KYC and transaction records for regulatory compliance purposes.
• Right to Restrict Processing: You may request that we restrict the processing of your data in certain circumstances.
• Right to Data Portability: Where technically feasible and where processing is based on consent or contract, you may request a machine-readable copy of your personal data.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time via your account notification settings.

To exercise any of these rights, please contact gcs88 support via live chat or email at [email protected]. gcs88 will respond to data rights requests within thirty (30) days of receipt.

10. Children's Privacy

The gcs88 Platform is strictly intended for adults aged 21 years and above. gcs88 does not knowingly collect personal data from individuals under the age of 21. If you have reason to believe that a person under 21 has provided personal data to gcs88 or is accessing the Platform, please contact us immediately at [email protected]. Upon confirmation, gcs88 will promptly close the account and delete the associated personal data to the extent legally permissible.

Age verification is a mandatory step in the gcs88 KYC process. No withdrawal will be processed prior to satisfactory completion of age verification.

11. International Data Transfers

gcs88 operates infrastructure across multiple jurisdictions to ensure platform reliability and performance. As a result, your personal data may be transferred to and processed in countries outside of Malaysia. Where such transfers occur, gcs88 ensures that appropriate safeguards are in place, including data processing agreements that require recipient parties to maintain data protection standards equivalent to those applied by gcs88 under this Policy and applicable international gaming authority requirements.

By using the gcs88 Platform and accepting this Privacy Policy, you consent to the transfer of your personal data to jurisdictions outside Malaysia for the purposes described herein.

12. Changes to This Policy

gcs88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or operational needs. Any material changes to this Policy will be communicated to registered players via email notification or prominent notice on the Platform prior to the changes taking effect.

The "Last Updated" date at the top of this Policy indicates when it was most recently revised. Your continued use of the gcs88 Platform following notification of changes constitutes your acknowledgement and acceptance of the revised Policy.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or gcs88's handling of your personal data, please contact our Data Protection team through the following channels:

• Live Chat: Available 24/7 via the gcs88 Platform. Average response time under 5 minutes.
• Email: [email protected] — please include "Privacy Request" in the subject line for expedited routing.

gcs88 is committed to resolving privacy-related concerns promptly and transparently. All data rights requests and privacy complaints will be acknowledged within five (5) business days and resolved within thirty (30) days wherever practicable.