Official GCS88 Documents

Privacy Policy GCS88 —
Protection Personal Data Malaysian Players

This Privacy Policy clearly explains how GCS88 collects, uses, stores, and protects your personal data as a Malaysian player. We are in full compliance with Malaysia's Personal Data Protection Act (PDPA) 2010 and are committed to safeguarding your privacy at all times.

Updated: January 2026 Read time: approximately 8 minutes

256-bit
SSL Data Encryption
PDPA
Malaysian Legal Compliance
0
Sale of Data to Third Parties
24/7
Active Security Monitoring

GCS88's Six Commitments to Every Malaysian Player

Before reading the full policy, here are GCS88's six core commitments to protecting your data and privacy as a player.

256-bit SSL Encryption for All Data

All information you submit to GCS88 — from registration and deposits via Touch 'n Go or DuitNow to account details — is protected with 256-bit SSL encryption, the same security standard used by Malaysia's major banks. No personal data is transmitted in plain text that could be intercepted.

Your Data Is Never Sold

GCS88 has never sold, rented, or traded players' personal data to any third party for marketing or any other commercial purpose — and we never will. Your data belongs to you, not to us. This is a commitment we will not compromise for short-term business gain.

Full Compliance with Malaysia's PDPA 2010

GCS88 operates in accordance with Malaysia's Personal Data Protection Act (PDPA) 2010, which governs how companies collect, process, and store users' personal data. As a platform serving Malaysian players, we take our local legal obligations seriously and comply with all PDPA requirements without exception.

Full Control is in Your Hands

GCS88 players have the right to access, correct, update, or request deletion of their personal data at any time. You may also withdraw consent for certain types of data processing. All personal data requests are handled within 14 working days by our GCS88 privacy team.

Limited & Strictly Controlled Data Sharing

In certain situations where GCS88 needs to share data with third parties — such as payment providers for processing deposits and withdrawals, or game software providers such as Evolution Gaming — such sharing is kept to a minimum, based strictly on genuine necessity, and bound by strict confidentiality agreements.

Full Transparency in Every Aspect

GCS88 believes players have the right to know how their data is used. This Privacy Policy is written in plain, straightforward language — not in deliberately confusing legal jargon. We do not bury our data practices in lengthy paragraphs that rarely get read. What we write here is what we do.

1

Introduction & Scope of This Privacy Policy

GCS88 ("we", "Platform") respects the privacy of every user who registers and uses our platform at gcs88.best. This Privacy Policy sets out in detail how we collect, use, process, store, and protect your personal data as a Malaysian player.

This Privacy Policy applies to all users of the GCS88 platform — whether you are a new player who has just registered, an existing player actively playing at our live casino tables, or a visitor simply browsing the site without registering. By using any part of the GCS88 platform, you agree to the collection and use of data as described in this Privacy Policy.

Legal Basis: GCS88 processes your personal data in accordance with Malaysia's Personal Data Protection Act (PDPA) 2010. As a player accessing this platform from Malaysia, you are fully protected by Malaysian data protection law as applied across all of GCS88's operations.

If you have any questions about this Privacy Policy or how GCS88 handles your personal data, please contact us by email at support@gcs88.best or via Live Chat, available 24 hours a day, 7 days a week in Bahasa Melayu. Our privacy team will respond to all enquiries within 48 working hours.

2

Personal Data We Collect

GCS88 collects personal data from various sources and in various ways, depending on how you interact with our platform. Below is a detailed breakdown of the types of data we collect:

Data You Provide Directly to Us:

  • Registration Information: Full name, preferred username, Malaysian mobile number, email address, and the password you create when registering your GCS88 account.
  • Identity Verification (KYC) Information: A copy of your MyKad or Malaysian passport, an identity verification selfie, and any additional information that may be required to verify your account before large withdrawals are processed.
  • Payment Information: Account numbers or digital wallet IDs for the payment methods you use — Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, FPX, Maybank2u, or CIMB Clicks. GCS88 does not directly store credit or debit card information.
  • Communication Information: Records of conversations with the GCS88 customer support team via Live Chat or email, including any enquiries, complaints, or feedback you submit.

Automatically Collected Data:

  • Technical Data: IP address, web browser type, device operating system, screen resolution, and other technical information automatically transmitted when you access the GCS88 platform.
  • Usage Data: Pages visited, games played, session duration, clicks and in-platform actions, navigation history within GCS88, and general usage patterns.
  • Transaction Data: A complete record of all deposits, withdrawals, bets, wins, and losses across all game types — Live Casino, slots, jackpot, roulette, Sports Betting, and e-sports.
  • Cookie Data: Information collected via cookies and similar technologies while you browse the GCS88 platform. See Section 7 for further details.
Data Category Specific Examples Collected During
Identity Name, MyKad/Passport Registration / KYC
Contact Phone number, email Registration
Financial EWallet ID, FPX account number Deposits / Withdrawals
Transactions Bets, winnings, history During gameplay
Technical IP, browser, device Every visit
Usage Games played, sessions While active
3

How GCS88 Uses Your Personal Data

GCS88 uses collected personal data only for lawful and specific purposes. We do not use your data beyond what is necessary for the stated purposes:

  • Account Management: To create and manage your GCS88 account, verify your identity during login, and maintain the security of your account at all times.
  • Financial Transaction Processing: To process deposits via Touch 'n Go, GrabPay, DuitNow, FPX, and other Malaysian payment methods, and to securely and accurately process your winnings withdrawals.
  • Gaming Services Provision: To give you access to and let you enjoy all GCS88 games — live casino Baccarat, Dragon Tiger, Blackjack, slots, jackpots, roulette, badminton betting, e-sports, and more — with a seamless and personalised experience.
  • Customer Support: To resolve enquiries, technical issues, complaints, or any account-related matters through Live Chat, email, or other support channels provided by GCS88.
  • Legal Compliance: To comply with Malaysian legal requirements including PDPA 2010, Anti-Money Laundering (AML) requirements, Know Your Customer (KYC), and any other legal obligations applicable to GCS88's platform operations.
  • Platform Security: To detect and prevent fraud, system abuse, unauthorised access attempts, and any activity that violates GCS88's Terms & Conditions — safeguarding all players and the integrity of the platform.
  • Service Improvement: To analyse usage patterns on an aggregate (not individual) basis, helping us understand how to improve the user experience, add the most popular games, and enhance the technical aspects of the GCS88 platform.
  • Platform Communications: To send important notifications about your account, changes to our terms and conditions, security updates, and other information relevant to your use of the platform. GCS88 does not send marketing emails without your explicit consent.
GCS88 adheres to the principle of data minimisation — we only collect data that is genuinely necessary for the stated purpose. We do not collect personal data that is excessive or irrelevant to the platform's operations.
4

Legal Basis for Data Processing

Under Malaysia's Personal Data Protection Act (PDPA) 2010, GCS88 must have a valid legal basis for every instance of personal data processing. GCS88 processes your data on the following bases:

  • Contract Performance: Processing that is necessary to provide GCS88's services to you — such as processing deposits, managing your account, and enabling access to games. This forms the primary basis for most of our data processing.
  • Legal Obligation Compliance: Processing required to comply with Malaysian law, including KYC/AML requirements, reporting to authorities, and other legal obligations binding on GCS88.
  • Legitimate Interests: Processing for purposes such as fraud prevention, platform security, and service improvement — where the interests of GCS88 and our players outweigh any adverse impact on individual privacy.
  • Consent: For certain types of processing that require your explicit consent — such as sending optional marketing communications. You may withdraw this consent at any time without affecting the core GCS88 services you use.
If you would like to know the specific legal basis for any particular data processing activity we carry out, you may contact the GCS88 privacy team at support@gcs88.best for further clarification.
5

Data Sharing with Third Parties

GCS88 does not sell, rent, or trade players' personal data to any third party. However, in certain limited situations, GCS88 may need to share your personal data with the following categories of third parties:

  • Payment Service Providers: Payment platforms such as Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, and banks processing FPX transactions (Maybank, CIMB) receive the transaction information required to process your deposits and withdrawals. This data sharing is kept to a minimum and limited strictly to information necessary to complete the transaction.
  • Game Software Providers: Live casino and game providers such as Evolution Gaming, Pragmatic Play Live, and SA Gaming may receive anonymous or pseudonymous account identifiers to enable live game sessions to function. They do not receive your real name or financial information.
  • Technical Infrastructure Providers: Cloud server providers, cybersecurity services, and other technical infrastructure providers that support the operation of the GCS88 platform. All such providers are bound by strict confidentiality agreements and may only use the data provided to them for the specified technical purposes.
  • Legal Authorities: In situations where GCS88 is legally required under Malaysian law to disclose data to authorities — such as the Royal Malaysia Police, Bank Negara Malaysia, or other enforcement agencies — we will comply with that obligation. GCS88 will endeavour to notify the player concerned unless prohibited by law from doing so.
Important: GCS88 does not share your personal data with third-party advertising companies, data brokers, or any other party for marketing purposes without your explicit consent. This is a non-negotiable principle.

When data sharing is necessary, GCS88 ensures that the receiving party has adequate security measures in place, uses the data only for the specified purpose, and is bound by a legally enforceable confidentiality agreement.

6

Data Retention & Security Measures

GCS88 takes the security of players' personal data extremely seriously. The following are the technical and organisational security measures we have implemented to protect your data:

Technical Measures:

  • 256-bit SSL/TLS Encryption: All communications between your browser or application and GCS88's servers are encrypted using 256-bit SSL/TLS protocols. This means no personal data can be intercepted or read during transmission.
  • Encrypted Password Storage: Your GCS88 account password is never stored in plain text. We use one-way hashing algorithms with salt to keep your password secure even in the event of any security incident.
  • 24/7 Security Monitoring: GCS88's infrastructure is continuously monitored to detect any suspicious activity, unauthorised access attempts, or security threats. Our technical security team responds to any incidents promptly.
  • Strict Access Controls: Only authorised GCS88 staff who require access to specific data to carry out their duties may access that data. Access is controlled through multi-factor authentication and monitored via audit logs.

Data Retention Period:

  • Active account data is retained for as long as your account remains active with GCS88.
  • Following account closure, GCS88 retains transaction and account data for a minimum of 7 years for Malaysian legal compliance purposes (AML, tax, and audit requirements).
  • Customer support communication data is retained for 3 years from the date of the conversation.
  • Technical log data is retained for 12 months for security and troubleshooting purposes.
While GCS88 takes all reasonable steps to protect your data, no security system in the world can be guaranteed to be 100% impenetrable. We encourage all players to use a strong, unique password for their GCS88 account and never share it with anyone.
7

Cookies & Tracking Technologies

GCS88 uses cookies and similar tracking technologies to enhance the user experience, analyse platform performance, and maintain session security. Below is an explanation of the types of cookies we use:

  • Essential Cookies: These cookies are essential for the GCS88 platform to function properly. They are used to maintain your login session, secure transactions, and enable core platform features such as the bet slip. Without these cookies, many GCS88 features will not work. These cookies cannot be disabled.
  • Performance & Analytics Cookies: These cookies collect information about how you use the GCS88 platform — the pages visited most frequently, time spent in each section, and any error messages that may appear. This data is used in aggregate to help us understand how to improve the platform. It does not identify you as an individual.
  • Functional Cookies: These cookies allow the GCS88 platform to remember your preferences — such as your preferred language, your most frequently used betting limits, or your favourite casino table — to deliver a more personalised experience.

You can manage and delete cookies through your web browser settings. Please note, however, that disabling certain cookies may affect the functionality of some areas of the GCS88 platform. For more information on managing cookies in your browser, refer to your browser's help documentation.

8

Your Rights Under Malaysia's PDPA

As a data subject under Malaysia's Personal Data Protection Act (PDPA) 2010, you have the following rights regarding your personal data held by GCS88:

Right of Access

You have the right to request a copy of the personal data GCS88 holds about you. Data access requests will be processed within 14 business days.

Right to Rectification

You have the right to correct any personal data that is inaccurate or incomplete. Basic information can be updated directly in your GCS88 account settings.

Right to Erasure

In certain circumstances, you have the right to request the deletion of your personal data. Please note that some data must be retained for a specified period to comply with Malaysian legal obligations.

Right to Restrict Processing

You have the right to request that GCS88 restrict the processing of your personal data in certain circumstances — for example, while data is being reviewed for accuracy or during a dispute relating to its processing.

Right to Object

You have the right to object to the processing of your data for specific purposes, including direct marketing. GCS88 will respect your objection and cease the relevant processing accordingly.

Data Portability Rights

You have the right to receive your personal data in a machine-readable format for transfer to another service provider, where this is technically feasible.

To exercise any of the above rights, please contact GCS88's privacy team by email at support@gcs88.best, stating the right you wish to exercise and your account identification details. We will verify your identity before processing any data-related request to ensure the security of your account.
9

Protection of Children's Data

GCS88 services are exclusively for individuals aged 18 and above. Our platform does not direct any services or content towards minors, and GCS88 does not knowingly collect personal data from individuals under the age of 18.

Should GCS88 discover that personal data has been collected from an individual under the age of 18 without proper age verification, we will take immediate steps to delete that data and close the account in question. Accounts confirmed to belong to minors will be closed immediately, and all accumulated funds will be returned to the parent or legal guardian.

Parental Advisory: If you believe your child has registered a GCS88 account without your permission, please contact us immediately at support@gcs88.best. We will act promptly to close the account and return any associated funds.
10

Amendments to This Privacy Policy

GCS88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or improvements to the way we protect player data. The "Updated" date at the top of this page will always reflect the date of the most recent amendment.

For significant amendments — particularly those that change how we use personal data or affect players' rights — GCS88 will notify players via in-platform notifications or registered email at least 14 days before the changes take effect. This gives players sufficient time to review the changes and make an informed decision about their continued use of the GCS88 platform.

Continued use of the GCS88 platform after any amendment to this Privacy Policy takes effect will be considered acceptance of the updated terms. If you do not agree with the changes made, you have the right to close your GCS88 account and request a return of any eligible balance.

11

Contact Us for Privacy Enquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or how GCS88 handles your personal data, please reach out to us through the following channels:

  • Email: support@gcs88.best — for detailed privacy enquiries or data access requests. We respond within 48 working hours.
  • Live Chat: Available 24 hours a day, 7 days a week, directly within the GCS88 platform in Bahasa Melayu for general privacy and data enquiries.

When contacting us about a privacy matter, please clearly state: your GCS88 account username or email (for identity verification), the specific matter you wish to raise or the right you wish to exercise, and any other relevant details. This helps our privacy team resolve your request quickly and accurately.

GCS88 is committed to responding to all privacy-related enquiries within 14 business days. For more complex cases requiring internal investigation, we will keep you informed of the progress and expected resolution timeline.

Why Data Privacy Is a Top Priority for GCS88 Malaysia

In an increasingly digital world, data privacy is no longer a concern reserved for large tech companies or individuals who feel they have "something to hide". It is a fundamental right for everyone — including every player who registers at GCS88 to enjoy live Baccarat, their favourite slots, or a bet on a Thomas Cup badminton match. Your personal data belongs to you, and GCS88 takes the responsibility of safeguarding it just as seriously as we do the funds in your account.

Malaysia's Personal Data Protection Act (PDPA) 2010 is the legal framework governing how companies collect and use personal data in Malaysia. GCS88 does not merely "comply" with PDPA because it is the law — we genuinely believe the principles it enshrines reflect fair and responsible data handling practices. Every provision in the PDPA, from data minimisation and purpose limitation to data security obligations and users' rights to access and correct their data, is something GCS88 embraces not just as a legal requirement but as an ethical commitment.

One of our top priorities for GCS88 players is the security of their payment methods. When you make a deposit using Touch 'n Go eWallet, GrabPay, DuitNow, or FPX, your payment data passes through multiple layers of security. GCS88 does not store your credit card numbers or digital wallet passwords — we only retain the transaction identifiers required for records and verification. Payment providers such as Touch 'n Go and GrabPay maintain their own security infrastructure that meets Malaysia's financial industry standards, and GCS88 interacts with them exclusively through secure programmatic interfaces (APIs) without access to your account details on their end.

One concern that frequently troubles online casino players is marketing — will their data be used to flood them with gambling ads everywhere they go? At GCS88, the answer is no. We do not sell our players' data to advertising networks, data brokers, or third-party marketing companies. Any communications you receive from GCS88 relate to your account, service updates, or GCS88's own promotions — and you can opt out of these marketing communications at any time through your account settings without affecting your core service.

GCS88 takes the overall technical security of its platform equally seriously. Our server infrastructure is updated regularly with the latest security patches, independent third-party penetration testing is conducted on a periodic basis to identify and address vulnerabilities before they can be exploited, and all internal staff access to user data is logged, monitored, and subject to strict controls that ensure only personnel with a legitimate need can access specific data.

For players with further privacy concerns, we encourage you to read this Privacy Policy in full and reach out to our team if any section is unclear. GCS88 believes that players who understand how their data is used are players who trust our platform more — and it is that trust which builds the meaningful, long-term relationship between GCS88 and our growing Malaysian player community.

Ultimately, data privacy is not about hiding something — it is about control. Your right to know what data is collected about you, how it is used, and who it may be shared with is a right GCS88 is fully committed to upholding. This Privacy Policy is the written expression of that commitment, and we invite every GCS88 player to review it and hold us accountable to what we have promised.

Terms & Related GCS88 Policies

This Privacy Policy should be read together with GCS88 Terms & Conditions that governs the overall use of the platform. For information on responsible gaming tools and how GCS88 supports players who need assistance, please visit the page Responsible Gaming us. All GCS88 policies are designed to protect the interests and safety of our Malaysian players. Enquiries can be directed to support@gcs88.best at any time.

GCS88 Data Privacy FAQs

The most frequently asked questions from Malaysian players about how GCS88 handles their personal data.

No, absolutely not. GCS88 does not sell, rent, or trade players' personal data to any third party for commercial purposes. This commitment is written into our Privacy Policy and is a non-negotiable principle. Your data is only shared in very limited situations — such as with payment providers to process your deposit and withdrawal transactions, or with Malaysian authorities when required by law. In all such cases, data sharing is kept to a minimum, purpose-specific, and governed by binding confidentiality agreements. GCS88 does not work with third-party advertising networks or data brokers in any capacity.

GCS88 does not directly store your digital wallet password or PIN. When you make a deposit via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, or FPX, the payment process takes place through a secure interface (API) provided by the respective payment provider — you are actually authorising the transaction directly within their app or platform. GCS88 only receives a transaction confirmation notification and a unique identifier for record-keeping and crediting your account balance. All communication between the GCS88 platform and payment providers is encrypted with 256-bit SSL encryption. Payment information you provide during a deposit is stored at the highest level of protection and is only accessible by GCS88's automated systems for the purpose of re-withdrawal to the same payment method.

Yes, you may request deletion of your personal data under the "right to be forgotten" recognised in Malaysia's PDPA. However, please be aware that GCS88 may not be able to fully delete all of your data in certain situations due to legal obligations — for example, financial transaction data must be retained for a minimum of 7 years under Malaysian financial and anti-money laundering laws. In such cases, GCS88 will anonymise your data as thoroughly as possible so it can no longer be linked to your personal identity, while retaining the transaction records required for legal compliance. To initiate a data deletion request, please email support@gcs88.best with the subject line "Data Deletion Request" along with your account username.

The Know Your Customer (KYC) process at GCS88 is a standard legal compliance requirement within the financial industry and online betting platforms. For full account verification — typically required before withdrawals exceed a certain amount or to meet anti-money laundering requirements — GCS88 may request: a copy of your MyKad (front and back) or a valid Malaysian passport, a selfie holding your identification document to confirm ownership, and in certain cases, proof of current address (a utility bill or bank statement dated within the last 3 months). All documents submitted for KYC are stored with encryption and accessed only by staff specifically authorised for verification purposes. These documents are never shared or used for any purpose other than the identity verification required by law.

Yes, GCS88 monitors player activity for several legitimate purposes. First, monitoring is essential for platform security — to detect potential fraud, bot usage, or any activity that violates GCS88's Terms & Conditions. Second, gaming activity records are necessary to resolve any disputes that may arise between players and the platform. Third, GCS88 uses aggregated, non-identifiable gaming activity data to understand which games are most popular among our Malaysian players, for the purpose of platform improvement. Fourth, in the context of responsible gambling, GCS88's systems can detect patterns that may indicate a gambling problem and suggest self-management tools to the relevant player. All such monitoring is carried out in accordance with this Privacy Policy and is never shared with third parties for marketing purposes.

Your Data is Safe — Your Game is On

GCS88 protects your privacy with 256-bit SSL encryption, fully complies with Malaysia's PDPA 2010, and never sells your data. Register for free and enjoy over 1,000 games with complete peace of mind knowing your data is always secure.

256-bit SSL PDPA Malaysia Compliant No data selling 18+ only

Bahasa Melayu