Privacy Policy gsc108 – Your Personal Data Protection

Gsc108 ("we", "Platform") is fully committed to protecting the privacy and security of your personal data. This Privacy Policy explains in detail how we collect, use, store, protect, and disclose your personal information when you use the gsc108 platform — including the gsc108.vu website, iOS and Android mobile apps, and all related services.

This document is prepared in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia and reflects our commitment to operating transparently and responsibly in handling the information you entrust to us.

By registering an account or using any gsc108 service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the platform and contact us to close your account.

Gsc108 only collects personal data that is strictly necessary for legitimate purposes. Below are the categories of data we collect and the reasons for collecting them:

We does not collect sensitive information such as biometric data, medical records, religious beliefs, or political views. Full credit/debit card numbers are not stored on gsc108 servers — all payment data is processed directly through PCI-DSS certified payment gateways.

The data we collect is used only for lawful, relevant, and non-excessive purposes. The following are the primary purposes for which your data is used:

• Provide, manage, and maintain your member account and securely process financial transactions
• Conduct KYC (Know Your Customer) and identity verification processes as required by law
• Detect, investigate, and prevent fraudulent activity, money laundering, and platform abuse
• Deliver important notifications related to your account, transactions, and changes to the terms of service
• Personalise your gaming experience based on your playing habits and preferences
• Send relevant promotional information and exclusive offers — you may unsubscribe at any time
• Comply with legal obligations and reporting requirements to the relevant authorities
• Analyse usage patterns to improve our services and overall user experience

The legal basis for each of our data processing activities is: (1) performance of a contract with you as a member, (2) legal obligations we are required to comply with, (3) our legitimate interests as a platform operator, and (4) your explicit consent given for specific purposes such as marketing communications.

Gsc108 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. However, we may share your data with the following parties under limited and controlled circumstances:

• Payment service providers: To securely process deposits and withdrawals. All our payment providers are PCI-DSS certified and subject to strict data protection agreements.
• Third-party game providers: Minimum information required to operate games within the gsc108 platform. These providers are bound by strict confidentiality agreements.
• Regulatory and law enforcement bodies: When required by Malaysian law or a valid court order.
• Fraud prevention agencies: To detect and prevent fraudulent activity and money laundering that could compromise platform security.
• Technical service providers: Such as cloud computing, analytics, and IT infrastructure services that support our platform's operations.

Gsc108 invests seriously in cybersecurity infrastructure to ensure your personal data is always protected. The technical and organisational security measures we implement include:

• Data encryption in transit using TLS 1.3 and 256-bit SSL protocols
• Data encryption at rest using AES-256
• Two-factor authentication (2FA) for all member accounts and internal access
• Next-generation firewall (NGFW) and intrusion detection system (IDS/IPS)
• Round-the-clock security monitoring by a dedicated cybersecurity team
• Regular penetration testing by independent security firms
• Rigorous patch management for all systems and software
• Regular data backups with tested disaster recovery procedures

While we take all reasonable steps to protect your data, no security system can be guaranteed 100% impenetrable. You also play an important role by ensuring your account password is strong, unique, and kept confidential from anyone.

Gsc108 uses cookies and similar tracking technologies to enhance your experience on our platform. The types of cookies we use are as follows:

You can manage your cookie settings through your web browser at any time. However, disabling essential cookies may affect the core functionality of the gsc108 platform and your overall gaming experience.

Under Malaysia's PDPA 2010, you have the following rights regarding your personal data held by gsc108:

To exercise any of the rights above, contact our Data Protection Officer at [email protected]. We will process your request within 21 business days from the date of receipt.

Gsc108 is an adult entertainment platform exclusively for individuals aged 18 and above. We do not knowingly collect or process any personal data from children under the age of 18.

If you discover or have reason to believe that a minor has provided personal data to gsc108, please contact us immediately at [email protected]. We will take immediate action to verify this and delete the relevant data if confirmed.

In the course of platform operations, your personal data may be transferred to and stored on servers located outside Malaysia. All international data transfers are conducted with adequate safeguards in place, including:

• Data transfer agreements incorporating standard data protection clauses
• Selection of partners and providers holding recognised data protection certifications
• Data protection impact assessment (DPIA) for every new material data transfer
• End-to-end encryption for all data transfers across borders

Gsc108 ensures that all recipient countries or entities provide a level of data protection equivalent to or exceeding Malaysia's PDPA requirements. Your data will not be transferred to any jurisdiction with inadequate data protection without your explicit consent.

Gsc108 retains your personal data only for as long as necessary for the stated purposes or in line with legal obligations. Below are our data retention guidelines:

• Active account data: Throughout the active period of your account and for 5 years after account closure for audit purposes
• Financial transaction records: Minimum 7 years in accordance with accounting and anti-money laundering legal requirements
• Support communication logs: 3 years from the date of last interaction
• Technical data and system logs: 90 days for general logs, 1 year for security logs
• KYC documents: 5 years after account closure or as required by the relevant authorities

Once the retention period has elapsed, your data will be securely deleted or anonymised so it can no longer be associated with you.

Gsc108 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. When we make material changes:

• We will update the "Last Updated" date at the top of this document
• A clear notice will be displayed on the platform's home page for at least 14 days before any changes take effect
• For significant changes, we will send a notification directly to your registered email address
• Continued use of the platform after the effective date constitutes acceptance of the updated policy

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by gsc108, please contact our Data Protection Officer (DPO) through the following channels:

If you believe that we are not handling your personal data in accordance with applicable law, you have the right to lodge a complaint with Department of Personal Data Protection (JPDP) Malaysia or the relevant regulatory authority in your jurisdiction.