GCS88 Privacy Policy for Malaysian Players

Introduction

GCS88 respects the privacy of its players and website visitors. This Privacy Policy describes the standards applied to personal data processed through https://gcs88.cam, including data associated with account registration, identity checks, deposits, withdrawals, customer support, sports betting, live casino, slots, lottery, arcade games, and responsible gambling controls.

By using GCS88, you acknowledge that your information may be processed as described in this Policy. Where consent is required for a particular activity, GCS88 will seek that consent separately. This Policy should be read together with the Terms & Conditions, which govern your use of the platform.

Scope and Definitions

This Policy applies to personal data handled by GCS88 through its website, mobile browser experience, player account tools, support channels, and related services. It does not govern independently operated third-party services, although GCS88 limits service-provider disclosures as explained in this Policy.

Personal data means information that identifies, relates to, or can reasonably be associated with an individual. Processing includes collecting, recording, organising, storing, reviewing, using, disclosing, restricting, or deleting data. Player means a person who registers for or uses a GCS88 account. Service provider means a vetted organisation that performs a defined operational function for GCS88.

Personal Data We Collect

Depending on how you interact with GCS88, the following categories may be collected:

• Registration data: full name, date of birth, username, password credentials in protected form, residential address, email address, and mobile number.
• Identity and KYC data: government-issued identification details, proof of address, photographs, verification results, and related compliance records.
• Transaction data: deposit and withdrawal amounts, MYR balances, timestamps, transaction references, payment channel, and account-holder verification details.
• Gaming data: games played, sports markets viewed, wagers placed, odds accepted, results, bonus use, session history, and responsible gambling settings.
• Technical data: IP address, browser type, device identifiers, operating system, language setting, login times, security events, and approximate location derived from network information.
• Communication data: live chat transcripts, email correspondence, complaints, support requests, and survey responses.
• Risk and compliance data: fraud indicators, account-linking signals, source-of-funds records where required, and findings from security or eligibility reviews.

GCS88 seeks to collect only information relevant to an identified business, security, legal, or player-service purpose. Players should not submit unrelated sensitive information through support channels.

How We Collect Personal Data

GCS88 collects information directly when you create an account, complete verification, make a payment, set a deposit limit, request self-exclusion, participate in gaming, or speak with support. Technical and usage data may be recorded automatically when you access the website or account interface.

Information may also be received from payment processors, identity-verification providers, game suppliers, fraud-prevention services, and financial institutions when needed to complete a transaction or protect the platform. For example, a Maybank, CIMB, Public Bank, Hong Leong Bank, DuitNow, or FPX transaction may generate a confirmation reference that GCS88 retains as part of the account ledger.

How GCS88 Uses Personal Data

GCS88 may use personal data for the following defined purposes:

• Creating, authenticating, administering, and securing player accounts;
• Confirming identity, age, account eligibility, and payment-method ownership;
• Processing MYR deposits and withdrawals through supported payment channels;
• Recording sports bets, casino rounds, bonuses, winnings, and account balances;
• Providing customer support and resolving account or transaction disputes;
• Detecting fraud, collusion, bonus abuse, unauthorised access, and money laundering risk;
• Applying self-exclusion, deposit limits, session reminders, and other responsible gambling controls;
• Maintaining platform reliability, investigating faults, and improving user experience;
• Meeting record-keeping, legal, regulatory, and dispute-resolution obligations;
• Sending service notices and, where permitted, relevant promotional communications.

Where profiling or automated indicators are used for security purposes, they support risk assessment rather than removing appropriate human review from significant account decisions.

Legal Bases for Processing

The basis used by GCS88 depends on the processing activity. Data may be processed because it is necessary to perform the contract established when you accept the Terms & Conditions, to comply with a legal or regulatory obligation, to pursue a legitimate interest that does not override your rights, or because you have provided consent.

Legitimate interests may include preventing fraud, protecting accounts, maintaining service availability, enforcing platform rules, and improving customer support. When processing relies on consent, you may withdraw that consent for future activity, although earlier lawful processing remains valid.

Disclosure and Data Sharing

GCS88 does not sell personal data. Information may be disclosed only where reasonably necessary and subject to appropriate safeguards. Recipients may include payment processors, banks, e-wallet providers, identity-verification services, game suppliers, hosting and cybersecurity providers, professional advisers, auditors, and competent authorities.

Service providers are authorised to process information only for defined purposes and are expected to maintain confidentiality and suitable security. GCS88 may also disclose information to establish, exercise, or defend legal claims; investigate suspected fraud; comply with a lawful request; or protect players and the integrity of the platform.

If the GCS88 business is reorganised, merged, or transferred, relevant data may form part of that transaction. Any recipient would remain subject to confidentiality and applicable privacy obligations.

Payment and Financial Information

To process deposits and withdrawals, GCS88 may retain transaction references and limited payment-account information. Supported methods may include Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, BTC, ETH, USDT, and BNB.

Payment providers process certain data under their own operational and compliance responsibilities. GCS88 does not intentionally store complete payment-card security codes. Where verification is required, documents and payment records may be reviewed to confirm ownership, investigate discrepancies, or prevent third-party funding.

Cookies and Usage Technologies

GCS88 may use cookies and similar local technologies to maintain login sessions, remember preferences, support security controls, measure page performance, and understand how platform features are used. Essential cookies are required for core functions such as authentication, account protection, and transaction continuity.

Analytics information may be aggregated or pseudonymised where practical. Browser controls can be used to remove or block cookies, but disabling essential cookies may prevent account login, live game access, or reliable use of other GCS88 functions.

Data Security

GCS88 uses administrative, technical, and organisational measures designed to protect personal data against accidental loss, unauthorised use, improper disclosure, alteration, and destruction. These measures may include encrypted transmission, role-based access, authentication controls, network monitoring, secure backups, logging, and staff confidentiality obligations.

No internet service can guarantee absolute security. Players also have an important role: use a unique password, keep login credentials private, sign out on shared devices, and contact GCS88 promptly if suspicious account activity is detected. GCS88 may temporarily restrict an account when doing so is reasonably necessary to investigate a security concern.

If a personal data incident creates a material risk, GCS88 will investigate, contain the incident, document the response, and provide notifications where required by applicable rules.

Data Retention and Deletion

GCS88 retains personal data only for as long as reasonably necessary for account administration, transaction reconciliation, dispute handling, fraud prevention, responsible gambling enforcement, legal compliance, and the establishment or defence of claims.

Retention periods vary by record type. Transaction, KYC, self-exclusion, and compliance records may need to remain after account closure. When information is no longer required, GCS88 will delete, anonymise, or securely isolate it in accordance with internal retention procedures and applicable obligations.

Your Privacy Rights

Subject to applicable law, identity verification, and valid exemptions, you may exercise the following rights regarding personal data held by GCS88:

Requests may be submitted through GCS88 support using the details in Section 16. To protect your account, GCS88 may ask for information needed to verify identity before acting. A request may be limited or refused where disclosure would affect another person's rights, undermine fraud detection, conflict with a legal obligation, or expose confidential security information.

International Data Processing

Because GCS88 operates an online gaming platform supported by international infrastructure and service providers, personal data may be processed outside Malaysia. Privacy laws in another location may differ from Malaysian standards.

When cross-border processing occurs, GCS88 applies appropriate contractual, organisational, and technical safeguards proportionate to the data and processing risk. Service providers receive only the information reasonably necessary for their assigned function.

Age Restriction and Underage Data

GCS88 services are not directed to children or anyone under 21. A person below the minimum age must not register, deposit, place a wager, or submit personal information through the platform.

If GCS88 reasonably suspects that an account belongs to an underage person, access will be restricted while age verification is completed. If underage use is confirmed, the account will be closed and relevant data may be retained where necessary to enforce the restriction, return legitimate deposited funds, investigate the activity, and satisfy legal obligations.

Anyone who believes an underage person has provided data to GCS88 should notify support promptly. For broader information about account controls and gambling-related harm, review our Responsible Gambling page.

Changes to This Privacy Policy

GCS88 may revise this Privacy Policy to reflect legal developments, operational changes, security practices, new payment options, or platform updates. The revised version will be published on this page with an updated effective date.

Where a change materially affects how existing personal data is processed, GCS88 may provide an additional account notice or request consent where required. Players should review this page periodically to remain informed about current data practices.

Contact Us

For questions about this Policy, concerns regarding account privacy, or requests to exercise privacy rights, contact the GCS88 support team through live chat on the platform or by email. Live chat is available 24 hours a day, including Malaysian public holidays.

Email Support: [email protected]

Please include your registered username and a clear description of your request, but do not send passwords, TAC numbers, wallet seed phrases, or complete payment credentials. GCS88 may request appropriate identification before disclosing or changing account information.

This Privacy Policy was last reviewed on 1 January 2026.