Company: GCL
Filing Date: 2025-07-31
Form Type: 424B3
Source: 0001213900-25-070094
Chunk: 81

Company: GCL Global Holdings Ltd
Filing Date: 2025-07-31
Form: 424B3
Chunk 81
---
 counter-terrorist financing legislation in Singapore that are of general application are the Corruption, Drug Trafficking and Other
Serious Crimes (Confiscation of Benefits) Act 1992 of Singapore (the “CDSA”) and Terrorism (Suppression of Financing)
Act 2002 of Singapore (the “TSOFA”). The CDSA provides for the confiscation of benefits derived from, and to
combat, corruption, drug dealing and other serious crimes. Generally, the CDSA criminalizes the concealment or transfer of the benefits
of criminal conduct as well as the knowing assistance of the concealment, transfer or retention of such benefits. The CDSA permits the
confiscation of benefits derived from, and to combat, corruption, drug dealing and other serious crimes. The TSOFA criminalizes terrorism
financing and prohibits any person in Singapore from dealing with or providing services to a terrorist entity, including those designated
pursuant to the TSOFA. The CDSA and the TSOFA also require suspicious transaction reports to be lodged with the Suspicious Transaction
Reporting Office, Singapore’s Financial Intelligence Unit within the Criminal Affairs Division of the Singapore Police Force. If
any person fails to lodge the requisite reports under the CDSA and the TSOFA, it may be subject to criminal liability. In addition, the
TSOFA has extraterritorial reach, and any person outside Singapore who commits an act or omission that would constitute an offense under
the TSOFA if committed in Singapore may be proceeded against, charged, tried and punished accordingly in Singapore.

Regulations on Data Protection

The Personal Data Protection
Act 2012 of Singapore (the “Singapore PDPA”) governs the collection, use and disclosure of the personal data
of individuals (being data, whether true or not, about an individual who can be identified from that data or other accessible information),
and to provide individuals with the right to access and correct their own personal data. Organizations have mandatory obligations to assess
data breaches they suffer, and to notify the Personal Data Protection Commission (the “PDPC”) and where applicable,
the relevant individuals where the data breach is (or is likely to be) of a significant scale or resulting in (or is likely to result
in) significant harm to individuals. Other obligations include accountability, protection, retention, and requirements around the overseas
transfers of personal data.

Organizations are required to,
among other things, (i) obtain consent from individuals and inform them of the applicable purposes