Company: GCL
Filing Date: 2025-05-22
Form Type: 424B3
Source: 0001213900-25-046609
Chunk: 121

Company: GCL Global Holdings Ltd
Filing Date: 2025-05-22
Form: 424B3
Chunk 121
---
 integrity, continuous operation, redundancy and security of all IT Systems
and data, including “Personal Data,” used in connection with their businesses. “Personal Data” means (i)
a natural person’s name, street address, telephone number, e-mail address, photograph, social security number or tax identification
number, driver’s license number, passport number, credit card number, bank information, or customer or account number; (ii) any
information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended;
(iii) “personal data” as defined by the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679);
(iv) any information which would qualify as “protected health information” under the Health Insurance Portability and Accountability
Act of 1996, as amended by the Health Information Technology for Economic and Clinical Health Act (collectively, “HIPAA”);
and (v) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection
or analysis of any data related to an identified person’s health or sexual orientation. There have been no breaches, violations,
outages or unauthorized uses of or accesses to same, except for those that have been remedied without material cost or liability or the
duty to notify any other person or such, nor any incidents under internal review or investigations relating to the same except in each
case, where such would not, either individually or in the aggregate, reasonably be expected to result in a Material Adverse Effect. The
Company and its Subsidiaries are presently in compliance with all applicable laws or statutes and all judgments, orders, rules and regulations
of any court or arbitrator or governmental or regulatory authority, internal policies and contractual obligations relating to the privacy
and security of IT Systems and Personal Data and to the protection of such IT Systems and Personal Data from unauthorized use, access,
misappropriation or modification except in each case, where such would not, either individually or in the aggregate, reasonably be expected
to result in a Material Adverse Effect.

(aaa) . The Company and its Subsidiaries are, and at all prior times were, in compliance with all applicable state
and federal data privacy and security laws and regulations, including without limitation HIPAA, and the Company and its Subsidiaries
have taken commercially reasonable actions to prepare to comply with, and since May 25, 2018, have been and currently are