Privacy Policy

1. Introduction

GSC33 ("we", "us", "our") operates the online gaming and sports betting platform accessible at gsc33.cam. We are committed to handling the personal data of our users — including all players registered from Malaysia — with transparency, care, and strict adherence to applicable data protection standards, including principles aligned with the Malaysian Personal Data Protection Act 2010 (PDPA).

This Privacy Policy ("Policy") describes the categories of personal data we collect from users of the GSC33 platform, the purposes for which that data is processed, the legal bases upon which we rely, how we protect it, and the rights that you, as a data subject, hold in relation to your own information.

By creating a GSC33 account, making a deposit, or using any feature of the platform, you confirm that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read in conjunction with our Terms & Conditions.

2. Definitions

The following defined terms are used throughout this Policy:

3. Personal Data We Collect

GSC33 collects the following categories of personal data from users of the Platform. We collect only the data that is necessary for the specific purposes described in this Policy and our Terms & Conditions.

3.1 Account Registration Data

• Full legal name as it appears on your government-issued identification;
• Date of birth (to verify you are 21 years of age or older);
• Email address;
• Mobile phone number;
• Chosen username and encrypted password;
• Residential address, including city and postcode.

3.2 KYC Verification Data

• Scanned or photographed copy of a valid Malaysian MyKad, passport, or other government-issued photo identification;
• Proof of residential address (utility bill, bank statement, or official correspondence dated within three months);
• Proof of payment method ownership (e.g., screenshot of Touch 'n Go eWallet account or redacted bank statement from Maybank, CIMB, or Public Bank);
• Source of funds documentation, where required for high-value transactions.

3.3 Financial Transaction Data

• Deposit and withdrawal records, including amounts, timestamps, and payment method references;
• Partial payment instrument identifiers (e.g., last four digits of a card, or e-wallet account reference);
• Cryptocurrency wallet addresses used for USDT TRC20 or BTC transactions;
• Currency denomination — primarily Malaysian Ringgit (MYR) or cryptocurrency equivalent.

3.4 Gameplay & Activity Data

• Game session logs, bet histories, wagering amounts, and game outcomes;
• Sports betting selections, including markets on EPL, Liga Super Malaysia, UFC, and other events;
• Bonus claims, wagering requirement progress, and promotional participation history;
• Login timestamps, session duration, and device type.

3.5 Technical & Device Data

• IP address and approximate geolocation derived from IP;
• Browser type, version, and operating system;
• Device identifiers where technically accessible;
• Referral source and navigation path within the Platform.

3.6 Customer Support Communications

• Records of live chat conversations, email correspondence, and support tickets;
• The content of any complaint, query, or feedback submitted to GSC33.

4. How We Collect Your Data

GSC33 collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or participate in promotions;
• Automatically — through cookies, server logs, and similar technologies when you browse or interact with the Platform (see Section 9 for full cookie details);
• From third-party providers — including identity verification services, payment processors (such as those handling Touch 'n Go eWallet, DuitNow, FPX, and bank transfer transactions), fraud-detection services, and analytics providers;
• From publicly available sources — where permitted by law, such as publicly accessible databases used for enhanced due diligence in high-risk transaction scenarios.

5. How We Use Your Data

GSC33 processes your personal data for the following specific purposes. We do not use your data for any purpose that is incompatible with those stated below without first obtaining your consent or where otherwise permitted by applicable law.

6. Legal Basis for Processing

GSC33 processes personal data only where a valid legal basis exists. The principal legal bases upon which GSC33 relies are as follows:

• Contractual necessity: Processing your registration data, KYC documents, and transaction records is necessary for GSC33 to perform its contractual obligations under the Terms & Conditions, including verifying your account, processing payments, and delivering gaming services.
• Consent: Where we send you direct marketing communications or use non-essential cookies, we do so only on the basis of your express prior consent. You may withdraw your consent at any time.
• Legitimate interests: We process certain technical and analytics data on the basis of our legitimate interest in improving the Platform, detecting fraud, and maintaining platform security — provided those interests are not overridden by your fundamental rights.
• Legal obligation: Where required by applicable anti-money laundering (AML) regulations, responsible gambling regulations, or other applicable law, we process personal data to comply with those legal obligations.

7. Sharing Your Data with Third Parties

GSC33 does not sell, rent, or trade your personal data to third parties for commercial purposes. We may, however, disclose your personal data to the following categories of third parties where necessary for the purposes described in this Policy:

• Payment service providers: Including providers facilitating Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and cryptocurrency transactions. These providers receive only the data necessary to process the specific transaction.
• Identity verification providers: Third-party KYC and AML service providers that assist in verifying the identity and age of registered users.
• Cloud infrastructure and hosting providers: Providers of the servers and data storage infrastructure that underpin the Platform.
• Fraud detection and security services: Providers of real-time fraud monitoring, device fingerprinting, and anomaly detection services.
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or regulatory directive, GSC33 may disclose personal data to competent authorities. We will notify affected users where legally permitted to do so.
• Professional advisors: Including legal counsel, auditors, and compliance consultants engaged to assist GSC33 in meeting its legal and regulatory obligations, subject to confidentiality obligations.

8. Data Retention

GSC33 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. Our general data retention schedule is as follows:

Following the expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with GSC33's data disposal procedures. Anonymised, aggregated data that can no longer identify any individual may be retained indefinitely for analytics purposes.

9. Cookies & Tracking Technologies

GSC33 uses cookies and similar tracking technologies to operate the Platform, improve user experience, and support security functions. The following categories of cookies may be deployed:

• Strictly necessary cookies: Required for the Platform to function correctly — including maintaining your login session, remembering language preferences, and preventing cross-site request forgery (CSRF). These cookies do not require your consent as they are essential to service delivery.
• Analytics cookies: Used to collect anonymised information about how users interact with the Platform, including pages visited, session duration, and navigation patterns. This data is used in aggregate form to improve Platform performance.
• Security cookies: Used to detect and prevent fraudulent activity, identify suspicious login patterns, and protect user accounts.
• Preference cookies: Used to remember user settings and personalisation choices (such as display preferences) to improve the user experience on return visits.

Non-essential cookies are deployed only with your prior consent, which you may grant or withdraw at any time through your browser settings or our cookie consent interface. Withdrawing cookie consent may affect the functionality of certain Platform features.

10. Data Security

GSC33 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the GSC33 servers;
• Encryption at rest for sensitive stored data, including KYC documents and financial records;
• Two-factor authentication (2FA) available for all user accounts;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Regular internal security audits and vulnerability assessments;
• Incident response procedures designed to identify, contain, and remediate security breaches promptly.

11. Your Rights as a Data Subject

Subject to applicable law and certain exemptions, you hold the following rights in relation to your personal data held by GSC33. To exercise any of these rights, please contact us as described in Section 15.

• Right of Access: You have the right to request a copy of the personal data we hold about you, along with information about how it is processed.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to Erasure ("Right to be Forgotten"): In certain circumstances, you may request the deletion of your personal data. This right is subject to limitations where GSC33 is required to retain data for legal, regulatory, or compliance purposes.
• Right to Restriction of Processing: You may request that GSC33 restrict the processing of your personal data in certain circumstances, such as where you contest its accuracy or have objected to processing pending verification of our legitimate grounds.
• Right to Data Portability: Where processing is based on your consent or a contractual necessity and is carried out by automated means, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on our legitimate interests. GSC33 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

GSC33 will respond to valid data rights requests within thirty (30) calendar days of receipt. If a request is complex or numerous, we may extend this period by a further thirty (30) days, in which case we will notify you and explain the reason for the extension.

12. Minors & Age Restriction

GSC33 does not knowingly collect personal data from individuals under the age of 21. The Platform is strictly intended for adult users aged 21 and above. Registration by or on behalf of a minor is strictly prohibited under our Terms & Conditions.

Where GSC33 becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to suspend the relevant account, delete the collected data, and comply with any applicable legal obligations regarding underage access to gambling services.

13. Third-Party Services & Links

The GSC33 Platform integrates with various third-party services necessary for its operation — including payment processors (such as those supporting Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and bank transfers via Maybank, CIMB, and Public Bank), game content providers, and identity verification services.

Each third-party service provider operates under its own privacy policy and data protection practices. GSC33 is not responsible for the privacy practices of third-party providers beyond the contractual obligations imposed upon them as data processors under our agreements. We encourage you to review the privacy policies of any third-party service you interact with directly.

14. Changes to This Privacy Policy

GSC33 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. Where changes are material, we will notify registered users by email or through a prominent notice on the Platform prior to the changes taking effect.

The effective date displayed at the top of this Policy reflects the date of the most recent revision. We encourage all users to review this Policy periodically. Your continued use of the Platform following the publication of an updated Policy constitutes acceptance of the revised terms.

15. Contact Us — Data Privacy Enquiries

If you have any questions about this Privacy Policy, wish to exercise any of your data rights described in Section 11, or wish to raise a concern about how GSC33 processes your personal data, please contact us through any of the following channels:

This Policy was last reviewed and updated on 1 January 2026. If you have any concern that we have not addressed adequately, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.