Privacy Policy

This Privacy Policy ("Policy") is issued by gsc33 ("gsc33", "we", "us", or "our"), the operator of the online gaming platform accessible at gsc33.co and all associated sub-domains and mobile interfaces (collectively, the "Platform"). This Policy describes how gsc33 collects, processes, stores, and protects the personal data of registered players, prospective users, and visitors to the Platform, including players based in Kuala Lumpur, Penang, Johor Bahru, and across Malaysia.

By registering an account on the Platform or otherwise using any gsc33 service, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not consent, you must discontinue use of the Platform and close your account where applicable.

1. Who We Are and How to Contact Us

gsc33 is the data controller responsible for the personal data collected through the Platform. gsc33 operates under an international gaming authority licence and is committed to processing personal data in accordance with applicable data protection laws and the standards required by its licensing authority.

For all data protection enquiries, you may contact our designated data protection point of contact via the 24/7 live chat function on the Platform or by email at: [email protected] (plain text — not a clickable link).

2. Personal Data We Collect

gsc33 collects personal data from you in the following ways and categories:

2.1 Data You Provide Directly

• Registration data: full name, date of birth, email address, Malaysian phone number, and account username and password;
• KYC verification documents: copies of government-issued photo identification (MyKad, passport, or driving licence), proof of address, and, where required, proof of payment method ownership;
• Financial data: payment method details used for deposits and withdrawals, including Touch n Go eWallet identifiers, Boost account references, bank account details for Maybank, CIMB, and Public Bank transfers, and cryptocurrency wallet addresses where applicable;
• Communications data: the content of messages exchanged with gsc33 customer support via live chat or email.

2.2 Data Collected Automatically

• Device and technical data: IP address, browser type and version, operating system, device identifiers, and time zone settings;
• Usage data: pages visited, game sessions played, bet history, session durations, navigation paths, and Platform feature interactions;
• Cookie and tracking data: session cookies, persistent cookies, and similar tracking technologies as described in Section 7 of this Policy.

2.3 Data Received from Third Parties

• Identity and fraud verification data from third-party KYC and anti-money laundering (AML) screening providers;
• Payment verification and transaction data from payment processing partners;
• Publicly available data used for responsible gaming checks, including self-exclusion register information where applicable.

3. How We Use Your Personal Data

gsc33 uses the personal data it collects for the following purposes:

• Account management: to create, verify, maintain, and administer your gsc33 account, including processing deposits, withdrawals, and bonus claims;
• Regulatory compliance: to fulfil our obligations under our international gaming authority licence, including KYC verification, AML screening, responsible gaming checks, and mandatory reporting to licensing and law enforcement authorities;
• Fraud prevention and security: to detect, investigate, and prevent fraudulent transactions, account takeovers, multi-accounting, and other prohibited conduct as defined in the gsc33 Terms and Conditions;
• Service delivery and improvement: to provide, personalise, and improve the games, betting products, and other features available on the Platform;
• Customer support: to respond to your enquiries, resolve disputes, and provide technical assistance;
• Marketing communications: to send you promotional offers, bonus notifications, and Platform updates, where you have provided consent or where we have a legitimate interest in doing so under applicable law. You may opt out of marketing communications at any time via your account settings or by contacting support;
• Legal proceedings: to establish, exercise, or defend legal claims in connection with the use of the Platform.

4. Legal Basis for Processing

gsc33 processes your personal data on the following legal bases:

• Contractual necessity: processing required to perform our contract with you, including account registration, transaction processing, and KYC verification;
• Legal obligation: processing required to comply with regulatory requirements imposed by our gaming licence, AML legislation, and other applicable laws;
• Legitimate interests: processing conducted for fraud prevention, Platform security, and service improvement, where our legitimate interests are not overridden by your rights and freedoms;
• Consent: processing for direct marketing purposes and the placement of non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing and Disclosure

gsc33 does not sell or rent your personal data to third parties. We may share your data with the following categories of recipients in the circumstances described:

• Service providers: third-party companies that process data on our behalf, including payment processors, KYC and AML verification providers, IT infrastructure providers, and customer support platform operators. All such providers are contractually bound to process data only as instructed by gsc33 and to maintain appropriate security standards;
• Regulatory and licensing authorities: gsc33's licensing authority and any other regulatory body with lawful authority to request data in connection with our gaming licence or compliance obligations;
• Law enforcement: where gsc33 is required by law, court order, or other legal process to disclose personal data to government or law enforcement agencies;
• Business transfers: in the event of a merger, acquisition, or sale of gsc33's business or assets, personal data held by gsc33 may be transferred to the acquiring entity, subject to the acquiring entity's agreement to honour this Policy;
• Fraud prevention networks: where required to prevent or detect fraud or money laundering activities affecting the Platform or the broader gaming industry.

6. Data Retention

gsc33 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, and audit requirements. Specifically:

• Account data and gaming history are retained for a minimum of five (5) years from account closure, as required by our gaming licence and applicable AML regulations;
• KYC documents are retained for a minimum of five (5) years from the date of verification;
• Customer support communications are retained for a minimum of two (2) years;
• Marketing consent records are retained for the duration of the consent plus a reasonable period thereafter to demonstrate compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised.

7. Cookies and Tracking Technologies

gsc33 uses cookies and similar tracking technologies to operate and improve the Platform. The types of cookies we use include:

• Strictly necessary cookies: required for the Platform to function, including session authentication and security cookies. These cannot be disabled;
• Performance and analytics cookies: used to measure Platform usage, identify performance issues, and understand how players interact with different features. The data collected is aggregated and anonymised;
• Functional cookies: used to remember your preferences, such as language settings and preferred game categories.

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the Platform, including session login persistence.

8. Data Security

gsc33 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include 256-bit SSL encryption for data in transit, encryption of sensitive data at rest, access controls limiting data access to authorised personnel only, regular security audits and penetration testing, and two-factor authentication for account access.

While gsc33 takes all reasonable steps to secure your data, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. You are encouraged to use a strong, unique password for your gsc33 account and to enable two-factor authentication.

9. Your Data Protection Rights

Subject to applicable law and our regulatory obligations as a licensed gaming operator, you have the following rights in respect of your personal data held by gsc33:

• Right of access: to request a copy of the personal data we hold about you;
• Right of rectification: to request correction of inaccurate or incomplete personal data;
• Right of erasure: to request deletion of your personal data, subject to our legal and regulatory retention obligations;
• Right to restrict processing: to request that we limit the processing of your data in certain circumstances;
• Right to data portability: to receive your personal data in a structured, commonly used, machine-readable format where technically feasible;
• Right to object: to object to the processing of your personal data for direct marketing purposes at any time;
• Right to withdraw consent: where processing is based on consent, to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact gsc33 support via live chat or at the email address provided in Section 1. We will respond to all valid requests within 30 calendar days.

10. Children and Minors

The gsc33 Platform is strictly for persons aged 21 and above. gsc33 does not knowingly collect personal data from persons under the age of 21. If gsc33 becomes aware that personal data has been collected from an underage individual, the account will be suspended immediately, the data will be deleted as soon as reasonably practicable, and any deposited funds will be returned. If you believe an underage individual has registered on the Platform, please contact gsc33 support immediately.

11. International Data Transfers

gsc33's servers and service providers may be located in jurisdictions outside Malaysia. Where personal data is transferred internationally, gsc33 ensures that appropriate safeguards are in place, including data processing agreements with service providers that incorporate standard contractual clauses or equivalent protections. By using the Platform, you consent to the transfer of your data to these jurisdictions where necessary to deliver the services described in this Policy.

12. Changes to This Privacy Policy

gsc33 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or Platform features. Where changes are material, registered users will be notified via the registered email address or in-Platform notification at least 14 days before the amended Policy takes effect. The date of the most recent revision is displayed at the top of this page. Continued use of the Platform following the effective date of any amendment constitutes acceptance of the revised Policy.

13. Contact and Complaints

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact gsc33 via the 24/7 live chat on the Platform. Our support team serves Malaysian players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and beyond.

Email: [email protected] (plain text — not a clickable link)

If you are not satisfied with gsc33's response to a data protection complaint, you may refer the matter to the data protection authority in the jurisdiction applicable to your situation.