Last Updated: 1 January 2026
Data Protection & Privacy

GGC365 Privacy Policy

Your privacy matters to us. This Privacy Policy sets out how GGC365 collects, processes, stores, and protects your personal data when you use our online gaming platform. We are committed to handling your information responsibly and transparently.

01

Introduction

This Privacy Policy ("Policy") is published by GGC365 ("we", "us", "our") and applies to all individuals who access or use the GGC365 online gaming platform at https://ggc365.lat ("the Platform"). GGC365 operates as an online entertainment platform serving players across Malaysia, offering casino games, sports betting, live casino tables, and related services.

We recognise that personal privacy is important, and we are committed to handling your personal data lawfully, fairly, and with full transparency. This Policy explains what personal data we collect from you, the purposes for which we use it, how long we retain it, with whom we may share it, and the rights you hold in relation to your own information.

By registering an account or otherwise accessing the GGC365 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you should not use the Platform.

Scope of this Policy: This Policy applies to personal data processed by GGC365 in connection with your use of the Platform, including registration, deposits, withdrawals, gameplay, promotional participation, and customer support interactions.

02

Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

Term Meaning
Personal Data Any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial data, and behavioural data tied to that person.
Data Subject The individual to whom the personal data relates — in the context of this Policy, typically a registered GGC365 Player or site visitor.
Processing Any operation performed on personal data, including collection, storage, retrieval, use, disclosure, alteration, or deletion.
Data Controller GGC365, being the entity that determines the purposes and means of processing your personal data.
Third Party Any natural or legal person, authority, or body other than GGC365 and the Data Subject.
Consent A freely given, specific, informed, and unambiguous indication of the Data Subject's agreement to the processing of their personal data.
Cookie A small text file placed on a user's device by a website for the purpose of storing session information, preferences, or tracking data.
03

Personal Data We Collect

GGC365 collects the following categories of personal data in the course of providing its services:

3.1 Identity and Contact Data

  • Full legal name as it appears on your identity documents
  • Date of birth (used to verify minimum age eligibility — 21 years and above)
  • National identification number or passport number (collected during KYC verification)
  • Residential address, including city (e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam)
  • Email address and contact telephone number

3.2 Account and Authentication Data

  • Username and encrypted password hash
  • Account registration date and timestamp
  • Login history, including IP address and device type at time of login

3.3 Financial and Transaction Data

  • Deposit and withdrawal records, including amounts, timestamps, and payment methods used
  • Payment method details, including e-wallet identifiers (Touch 'n Go eWallet, Boost, GrabPay), bank account details (Maybank, CIMB, Public Bank, Hong Leong), DuitNow reference identifiers, and cryptocurrency wallet addresses (USDT TRC20)
  • Transaction reference numbers and processing statuses

3.4 Gaming Activity Data

  • Game session records, including games played, wagers placed, win/loss outcomes, and session durations
  • Sports betting selections, including market type, stake, odds, and result
  • Bonus and promotion participation history
  • VIP tier status and tier progression history

3.5 Technical and Device Data

  • IP address and approximate geographic location derived therefrom
  • Device type, operating system, browser type, and version
  • Referring URL and pages visited within the Platform
  • Cookie identifiers and session tokens

3.6 Communications Data

  • Records of communications with GGC365 customer support, including live chat transcripts and email correspondence
  • Feedback, complaints, or enquiries submitted through the Platform

Sensitive Data: GGC365 does not intentionally collect sensitive personal data such as health records, racial or ethnic origin, religious beliefs, or biometric data. If such information is incidentally disclosed during a support interaction, it will not be retained beyond what is necessary to address the relevant query.

04

How We Collect Your Data

GGC365 collects personal data through the following channels:

  • Direct submission: Data you provide when registering an Account, completing KYC verification, making a deposit or withdrawal, or contacting customer support.
  • Automated collection: Technical and device data collected automatically when you access the Platform, via cookies, server logs, and similar tracking technologies.
  • Third-party payment processors: Transaction data and payment method identifiers received from payment service providers (including but not limited to e-wallet operators, banks participating in the FPX network, and DuitNow service providers) in the course of processing your deposits and withdrawals.
  • Identity verification providers: Identity data returned from third-party KYC verification services engaged by GGC365 to confirm the identity and age of Players prior to processing withdrawals.
  • Fraud detection systems: Behavioural and device data processed by automated fraud detection tools to identify patterns consistent with fraudulent activity, bonus abuse, or policy violations.
05

Purpose & Legal Basis for Processing

GGC365 processes your personal data for clearly defined purposes. The following table sets out the primary processing activities, their purposes, and the legal basis upon which GGC365 relies:

Processing Activity Purpose Legal Basis
Account registration Creating and maintaining your GGC365 Player account Contractual necessity
KYC verification Age and identity verification; compliance with responsible gambling obligations Legal obligation; legitimate interest
Payment processing Facilitating deposits and withdrawals via your chosen payment method Contractual necessity
Fraud detection Protecting the Platform and Players from fraudulent activity and bonus abuse Legitimate interest
Marketing communications Sending promotional offers, VIP tier updates, and relevant notifications Consent (opt-in)
Responsible gambling Monitoring gaming patterns to support responsible gambling tools and self-exclusion Legal obligation; legitimate interest
Customer support Resolving account queries, disputes, and technical issues Contractual necessity; legitimate interest
Platform analytics Improving platform performance, user experience, and game catalogue Legitimate interest
06

Data Processing Principles

GGC365 is committed to processing your personal data in accordance with recognised data protection principles. Specifically, we ensure that personal data is:

  • Processed lawfully, fairly, and transparently — we do not collect data by deceptive means and we disclose our practices in this Policy.
  • Collected for specified, explicit, and legitimate purposes — data collected for one stated purpose will not be repurposed for a materially different use without your knowledge.
  • Adequate, relevant, and limited to what is necessary — we do not collect data beyond what is required to fulfil the stated purpose.
  • Accurate and kept up to date — Players may update their account information at any time. We encourage you to keep your registered email address and contact details current.
  • Retained no longer than necessary — our data retention practices are described in Section 8 of this Policy.
  • Processed securely — appropriate technical and organisational measures are applied to protect personal data against unauthorised access, loss, or destruction.

Marketing opt-out: You may withdraw consent to receive marketing communications at any time by contacting GGC365 customer support via live chat. Withdrawal of marketing consent will not affect your ability to use the Platform.

07

Data Sharing & Disclosure

GGC365 does not sell, rent, or trade your personal data to third parties for their own independent marketing purposes. We may disclose personal data in the following limited circumstances:

  • Payment service providers: Transaction data is shared with our payment processing partners — including e-wallet operators (Touch 'n Go, Boost, GrabPay), banking partners (Maybank, CIMB, Public Bank, Hong Leong), DuitNow infrastructure providers, FPX network participants, and cryptocurrency processing services — solely for the purpose of completing your requested financial transactions.
  • KYC and identity verification providers: Identity documentation submitted during account verification may be processed by our contracted third-party KYC service providers for the purpose of verifying your identity and age.
  • Fraud detection and security service providers: Anonymised or pseudonymised behavioural and technical data may be shared with automated fraud detection platforms to protect the integrity of the GGC365 Platform.
  • Legal and regulatory authorities: GGC365 may disclose personal data to law enforcement agencies, regulatory bodies, or other government authorities where required to do so by applicable law, court order, or where GGC365 has a good-faith belief that disclosure is necessary to comply with a legal obligation or protect the rights and safety of GGC365 or its Players.
  • Business transfers: In the event of a corporate restructure, acquisition, or transfer of all or part of GGC365's business assets, personal data held by GGC365 may be transferred to the acquirer, subject to the same data protection standards as described in this Policy.

All third-party service providers engaged by GGC365 are bound by contractual obligations to process personal data only in accordance with GGC365's instructions and to implement appropriate security measures.

08

Data Retention

GGC365 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

Data Category Retention Period Reason
Account registration data Duration of active account + 5 years post-closure Contractual obligations; legal compliance
KYC verification documents 5 years from date of submission Anti-money laundering obligations
Financial transaction records 7 years from transaction date Financial record-keeping requirements
Gaming activity records 5 years from last activity Dispute resolution; responsible gambling monitoring
Support communications 3 years from last interaction Service quality and dispute records
Marketing consent records Until consent is withdrawn + 2 years Demonstrating lawful basis for marketing

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification of the Data Subject.

09

Cookies & Tracking Technologies

GGC365 uses cookies and similar tracking technologies on the Platform to support operational functionality, improve user experience, and analyse Platform usage. The following categories of cookies are used:

  • Strictly necessary cookies: Essential to the functioning of the Platform. These include session authentication tokens that keep you logged in during a gaming session. These cookies cannot be disabled without impairing Platform functionality.
  • Functional cookies: Used to remember your preferences, such as language settings and display options, to provide a more personalised experience across sessions.
  • Analytical cookies: Used to collect aggregated data on how Players interact with the Platform — including pages visited, time spent, and navigation paths — to help GGC365 identify areas for improvement. This data is not used to identify individual users.
  • Security and fraud-prevention cookies: Used to detect and prevent fraudulent access attempts, bot activity, and multiple account registrations from the same device.

Most web browsers permit you to control cookie behaviour through browser settings. Please note that disabling certain cookies may affect the availability of some Platform features, including login functionality and session continuity.

No third-party advertising cookies: GGC365 does not deploy third-party advertising or tracking cookies that follow you across websites outside of the GGC365 Platform.

10

Data Security

GGC365 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

  • SSL/TLS encryption: All data transmitted between your device and the GGC365 Platform is encrypted in transit using industry-standard Transport Layer Security (TLS) protocols.
  • Encrypted password storage: Account passwords are never stored in plain text. All passwords are hashed using a cryptographic one-way function before storage.
  • Access controls: Access to personal data within GGC365's systems is restricted to authorised personnel on a need-to-know basis, governed by role-based access control policies.
  • Regular security reviews: GGC365 periodically reviews its security practices and infrastructure to identify and address potential vulnerabilities.
  • Incident response procedures: GGC365 maintains documented procedures for responding to personal data breaches, including assessment, containment, and notification protocols where required.

Notwithstanding the above, no method of electronic data transmission or storage is entirely immune from risk. GGC365 cannot guarantee absolute security, and Players are encouraged to take personal precautions — including using strong, unique passwords and logging out after each session.

11

Your Data Rights

As a Data Subject, you hold a number of rights in relation to your personal data held by GGC365. These rights, and how you may exercise them, are set out below:

Right of Access

You may request a copy of the personal data GGC365 holds about you, along with information about how it is used.

Right to Rectification

You may request correction of any inaccurate or incomplete personal data held on your account.

Right to Erasure

You may request deletion of your personal data where we no longer have a lawful basis to retain it. Legal retention obligations may apply.

Right to Restrict Processing

You may request that we limit the processing of your personal data in certain circumstances, such as while a dispute is being investigated.

Right to Data Portability

You may request a copy of your personal data in a structured, commonly used, machine-readable format for transfer to another data controller.

Right to Object

You may object to the processing of your personal data where we are relying on legitimate interests as the legal basis, including objecting to direct marketing.

To exercise any of the above rights, please contact GGC365 support via live chat or at the email address provided in Section 15 of this Policy. We will respond to all verified requests within a reasonable timeframe. GGC365 may need to verify your identity before processing a data rights request.

No fee for standard requests: GGC365 does not charge a fee for processing legitimate data rights requests. Where a request is manifestly unfounded or excessive, GGC365 reserves the right to charge a reasonable administrative fee or decline the request, with written reasons provided.

12

Children's Privacy

The GGC365 Platform is strictly intended for adults. GGC365 enforces a minimum age requirement of 21 years for all registered Players. We do not knowingly collect personal data from any individual under the age of 21.

GGC365 employs KYC verification procedures to confirm the age and identity of Players prior to processing withdrawal requests and at any point when an account review is triggered. Any account found to be operated by a person under 21 will be immediately suspended, all winnings forfeited, and any remaining deposited balance returned in accordance with our Terms and Conditions.

If you believe that a minor has registered an account on the GGC365 Platform or has submitted personal data without parental consent, please contact our support team immediately so that we can investigate and take appropriate action.

13

Third-Party Services & Links

The GGC365 Platform may incorporate integrations with third-party payment processors, game software providers, and identity verification services. While GGC365 takes reasonable steps to ensure that contracted third parties maintain appropriate data protection standards, GGC365 cannot accept responsibility for the privacy practices of third-party organisations.

Where a third-party service provider processes your personal data on behalf of GGC365, they do so as a data processor under a binding agreement that restricts their use of your data to the specific purpose for which it was shared.

GGC365's website does not contain outbound links to external websites outside of the Platform's own domain. If you independently navigate to any external website, the privacy practices of that site are governed by its own privacy policy, not this one.

14

Amendments to This Policy

GGC365 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or operational requirements. The "Last Updated" date at the top of this page will be revised accordingly when material changes are made.

Where changes to this Policy are material — meaning they significantly affect the way in which your personal data is processed — GGC365 will endeavour to notify registered Players by means of a notice displayed on the Platform or by email to the address registered on your account.

Your continued use of the GGC365 Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any revision to this Policy, you should discontinue use of the Platform and contact our support team to request account closure.

The most current version of this Privacy Policy is always accessible at https://ggc365.lat/privacy-policy.

15

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by GGC365, please contact our Data Support team through the following channels:

  • Live Chat: Available 24 hours a day, 7 days a week via the GGC365 Platform. Target response time is under 2 minutes. Live chat is the fastest channel for account-specific privacy queries.
  • Support Email (plain text — not a clickable link): [email protected] — GGC365 aims to acknowledge all written privacy-related enquiries within 4 hours and provide a substantive response within 5 business days.

When submitting a data rights request, please include your registered account username and a brief description of your request so that our team can verify your identity and process your enquiry efficiently.

Related policies: This Privacy Policy should be read alongside the GGC365 Terms & Conditions and Responsible Gambling page, which together govern your use of the Platform.

How GGC365 Protects Your Data

Beyond legal obligations, GGC365 holds itself to a higher standard of data stewardship — because players who trust us with their information deserve to have that trust honoured in practice, not just in policy text.

End-to-End Encryption

All data transmitted between your device and the GGC365 Platform is protected by TLS encryption. Your financial details, account credentials, and gaming activity travel securely across the network.

No Data Selling

GGC365 does not sell, rent, or trade your personal data to third-party advertisers or data brokers. Your information is used only for the purposes stated in this Privacy Policy.

Minimal Data Collection

We collect only the personal data that is necessary to provide our services and comply with legal obligations. Data that is no longer required is securely deleted or anonymised.

Transparent Processing

Every data processing activity at GGC365 has a documented purpose and legal basis. We do not repurpose your data for activities outside the scope of what you were informed about at collection.

Your Rights, Honoured

Access, rectification, deletion, portability — GGC365 processes all verified data rights requests promptly. Submit a request via live chat and our team will acknowledge it without delay.

No Cross-Site Tracking

GGC365 does not use third-party advertising cookies or cross-site trackers. Analytical cookies on the Platform are used solely to improve GGC365's own services — not to build advertising profiles.

Ready to Experience GGC365?

Now that you understand how GGC365 handles your data, head back to the homepage to explore our games, sports markets, and payment options built specifically for Malaysian players.

For players aged 21 and above only. Please gamble responsibly.  |  Terms & Conditions  |  Responsible Gambling