Privacy Policy GLC250 – Our Commitment to Protecting Your Information

1. Introduction & Scope of This Privacy Policy

Welcome to the Privacy Policy page GLC250. We, GLC250, are the data controller responsible for all personal data collected through our platform at glc250.my. This Privacy Policy applies to all users of the GLC250 platform, including unregistered visitors, registered members, and former members whose accounts have been terminated.

This Policy has been prepared in accordance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data protection. GLC250 committed to processing your personal data in a lawful, fair, and transparent manner – giving you complete peace of mind every time you log in and play on our platform.

This Privacy Policy should be read together with Terms & Conditions and page Responsible Gaming GLC250. In the event of any conflict between these documents, this Privacy Policy shall prevail in all matters relating to your personal data.

2. Types of Personal Data We Collect

GLC250 collect your personal data through a number of different methods. Below is a comprehensive overview of the types of data we may collect and retain:

2.1 Data You Provide Directly

• Full name as stated on your MyKad or valid identification document
• An active Malaysian phone number for verification and communication purposes
• A valid email address for account communications and notifications
• Date of birth for age verification (players must be 18 years of age or older)
• Financial information required to process deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, Maybank2u, or CIMB Clicks
• Identity verification documents such as a copy of your MyKad, as required for the KYC (Know Your Customer) process

2.2 Automatically Collected Data

• IP address and geographic location information (state/city level only)
• Device type, operating system, and web browser used
• Game session data including games played, session duration, and betting history
• Access and activity logs within the GLC250 platform
• Cookie data and similar tracking technologies (see Section 9 for more information)

2.3 Data from Third Parties

• Identity verification information from licensed KYC service providers
• Payment processing data from payment gateway providers such as FPX and Malaysian digital wallet providers
• Self-exclusion information from relevant exclusion registers, where applicable

3. How GLC250 Uses Your Personal Data

GLC250 uses your personal data for lawful and limited purposes only. We will not use your data for unrelated purposes without first obtaining your consent. The following are the primary purposes for which data is used at GLC250:

For marketing and promotional communications purposes, GLC250 will always obtain your explicit consent before sending any promotional materials. You may withdraw this consent at any time through your GLC250 account settings or by contacting our support team.

4. Legal Basis for Data Processing

GLC250 process your personal data on one or more legal bases recognised under Malaysia's PDPA and generally accepted data protection principles. The primary legal bases we rely on are:

• Contract Performance: Processing that is necessary to fulfil the agreement between you and GLC250, such as processing deposits, managing your account, and enabling you to play on the platform.
• Legal Obligation: Processing required to comply with Malaysian law, including KYC requirements, anti-money laundering (AML) obligations, and reporting to authorities where mandated.
• GLC250's Legitimate Interests: Processing for the purposes of platform improvement, fraud prevention, and business risk management that does not adversely affect your fundamental rights.
• Consent: For marketing and promotional communications where you have provided explicit consent. You have the right to withdraw this consent at any time.

If you would like to know the specific legal basis applied to any particular data processing activity, please contact the Privacy Officer GLC250 via the email address provided in Section 13.

5. Sharing Data with Third Parties

GLC250 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. However, there are limited circumstances in which we may share your data with carefully selected third parties:

• Payment Service Providers: GLC250 shares necessary financial information with payment gateway providers (such as FPX, Touch 'n Go, GrabPay, and others) solely for the purpose of processing your deposit and withdrawal transactions. This data is used exclusively for transaction processing.
• KYC Service Providers: To fulfil identity verification requirements, GLC250 may share your identity documents with licensed KYC service providers, who are bound by strict confidentiality agreements.
• Gaming Service Providers: Third-party game providers offering games through the GLC250 platform may receive session data necessary for game operation. This data does not include directly identifiable personal information unless required.
• Legal Authorities: GLC250 will disclose your data to Malaysian authorities if required to do so by law, court order, or direction from a relevant authority.
• Business Transfer: In the event that GLC250 is involved in a merger, acquisition, or asset transfer, player data may be transferred as part of that transaction — subject to prior notice being given to all affected members.

All third parties that receive personal data from GLC250 bound by strict data processing agreements and required to uphold data protection standards comparable to GLC250's own practices.

6. Data Retention Period

GLC250 only retains your personal data for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required by applicable Malaysian law.

• Active Account Data: Your personal data is retained for as long as your GLC250 account remains active and in use.
• After Account Closure: Upon account closure, GLC250 will retain data necessary for legal compliance (including financial records and KYC documentation) for a minimum period of 7 years as required under applicable Malaysian law.
• Log & Technical Data: Technical logs and session data are retained for a maximum of 12 months for security and technical troubleshooting purposes.
• Marketing Data: Data used for marketing communications is retained until you withdraw your consent or request deletion, whichever comes first.

Once the relevant retention period has expired, GLC250 will securely delete or anonymise your data in accordance with established data deletion procedures.

7. GLC250 Data Security Measures

GLC250 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or accidental destruction. The key measures we have in place include:

• 256-bit SSL/TLS Encryption for all data communications between your device and GLC250's servers, ensuring data in transit cannot be intercepted.
• Data-at-rest encryption for all sensitive data stored in the GLC250 database, including financial information and identity documents.
• Role-based access control which ensures that only authorised personnel can access sensitive player data, with every instance of access logged and monitored.
• Two-factor authentication for all administrative access to GLC250 systems containing player data.
• Regular security audits by independent third parties to identify and address any vulnerabilities in the GLC250 system.
• Staff training on data protection best practices and privacy policy compliance on a regular basis throughout the year.
• Incident response procedures to address any data breaches swiftly and effectively, including notification to affected players within the stipulated timeframe.

8. Your Rights as a Data Subject

As a player GLC250 residing in Malaysia, you have the following rights under the Personal Data Protection Act 2010 (PDPA) in relation to your personal data:

To exercise any of these rights, please contact the Privacy Officer GLC250 via email at [email protected], stating the right you wish to exercise along with your account details. GLC250 will process your request within 30 calendar days. For complex cases, this period may be extended to 60 days, with prior notice provided to you.

Please note that these rights are not absolute and may be subject to certain exceptions under Malaysia's PDPA, particularly in circumstances where processing is required to fulfil a legal obligation.

9. Cookies & Tracking Technologies

Platform GLC250 uses cookies and similar tracking technologies to enhance the user experience, maintain security, and understand how players use our platform. Cookies are small text files stored on your device when you visit the GLC250 website.

Types of cookies we use on GLC250:

• Essential Cookies: Required for the core functionality of the GLC250 platform, such as maintaining your login session and saving language preferences. These cookies cannot be disabled as they are an integral part of the platform's technical infrastructure.
• Performance & Analytics Cookies: Helps GLC250 understand how players interact with the platform, which pages are visited most frequently, and where players encounter difficulties. This data is collected in aggregated and anonymised form for platform improvement purposes.
• Functional Cookies: Enables the GLC250 platform to remember your preferences and settings — such as font size, game preferences, and personalised account settings — for a more tailored experience.
• Marketing Cookies: Used only with your consent to display relevant promotional content based on your interests and activity on the GLC250 platform. You may withdraw this consent at any time through the cookie settings.

You can manage or disable cookies through your web browser settings. Please note, however, that disabling certain cookies may affect the functionality and your overall experience on the platform GLC250.

10. Protection of Children's Data

Platform GLC250 is strictly for individuals aged 18 and above. We do not knowingly collect, process, or store personal data from anyone under the age of 18.

Should GLC250 discover that personal data belonging to a minor has been collected without our knowledge – for example, if an individual provided false information about their age during registration – we will take the following steps immediately:

• Suspending the account in question pending completion of the investigation.
• Deleting all personal data associated with that individual from GLC250 systems.
• Refunding any valid account balance in accordance with the applicable procedures.
• Reporting the incident to the relevant authorities where required by law.

11. Cross-Border Data Transfers

In the course of operating the platform GLC250, there are circumstances where your personal data may be transferred to and processed in countries other than Malaysia — for example, when using cloud server services or technical infrastructure operating across multiple regions.

In the event of a cross-border data transfer, GLC250 is committed to ensuring that:

• Your data is only transferred to countries or regions that offer a level of data protection adequate to, or comparable with, Malaysia's PDPA.
• Appropriate data transfer agreements – including recognised standard contractual clauses – are in place to ensure your data remains protected throughout any transfer.
• Data recipients outside the country are bound by confidentiality and data protection obligations no less stringent than GLC250's own standards.

If you have any questions regarding cross-border data transfers involving your personal data, please contact the Privacy Officer GLC250 for further clarification.

12. Amendments to This Privacy Policy

GLC250 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data handling practices, new legal requirements, or changes to the services we offer. Any amendments will take effect upon publication of the latest version of this Privacy Policy on this page.

For significant amendments that materially affect your rights or the way we use your personal data, GLC250 will provide you with reasonable notice via your registered email or a prominent in-platform notification at least 14 days before any amendments take effect. This gives you sufficient time to review the changes and decide whether to continue using the GLC250 platform.

It is your responsibility to review this Privacy Policy periodically. The "Updated" date at the top of this page will always reflect the date of the current version. Your continued use of the platform GLC250 after the effective date of any amendment will be deemed as your acceptance of the revised policy.

13. Contact GLC250's Privacy Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way GLC250 handles your personal data, we encourage you to reach out to our Privacy Officer through the following channels:

• Privacy Officer Email: [email protected] (with the email subject "Data Privacy Enquiry")
• Live Chat: Available 24 hours a day, 7 days a week via the chat icon on the GLC250 platform
• Frequently Asked Questions: Many common privacy-related questions are answered on the FAQ us

Privacy Officer Team GLC250 committed to responding to all privacy-related enquiries within 24 hours. For complaints requiring further investigation, we will provide progress updates within 7 business days.

If you are unsatisfied with our response after giving GLC250 a reasonable opportunity to address your complaint, you have the right to lodge a complaint with the relevant data protection authority in Malaysia.