Company: GCL
Filing Date: 2025-09-04
Form Type: F-1
Source: 0001213900-25-084489
Chunk: 115

Company: GCL Global Holdings Ltd
Filing Date: 2025-09-04
Form: F-1
Chunk 115
---
 or termination of an agreement, requiring payment of damages to a person who has suffered loss or damage as a result of the contravention. Regulations Related to Data Privacy The Personal Data (Privacy) Ordinance (Chapter 486 of the Laws of Hong Kong) (“ PDPO”), imposes a statutory duty on data users to comply with the requirements of the six data protection principles contained in Schedule 1 to the PDPO. The PDPO provides that a data user shall not do an act, or engage in a practice, that contravenes the six data protection principles unless the act or practice, as the case may be, is required or permitted under the PDPO. The six data protection principles are:

| (a) | Principle 1 — purpose                      
 and manner of collection of personal data; |

| (b) | Principle 2 — accuracy                      
 and duration of retention of personal data; |

| (c) | Principle 3 — use 
 of personal data; |

| (d) | Principle 4 — security 
 of personal data;      |

| (e) | Principle 5 — information      
 to be generally available; and |

| (f) | Principle 6 — access 
 to personal data.    |

71 Non-compliance with a data protection principle may lead to a complaint to the Privacy Commissioner for Personal Data (the “ Privacy Commissioner”). The Privacy Commissioner may serve an enforcement notice to direct the data user to remedy the contravention and/ or instigate prosecution actions. A data user who contravenes an enforcement notice commits an offense which may lead to a fine and imprisonment. The PDPO also gives data subjects certain rights, inter alia:

| (i) | the right to be informed by a data user whether the data user holds personal data of which the individual 
 is the data subject;                                                                                      |

| (ii) | if the data user holds such data, to be supplied with a copy of such data; and |

| (iii) | the right to request correction of any data they consider to be inaccurate. |

The PDPO criminalizes certain uses, including, but not limited to, the misuse or inappropriate use of personal data in direct marketing activities, non-compliance with a data access request and the unauthorized disclosure of personal data obtained without the relevant data user’s consent. An individual who suffers damage, including injured feelings, by reason of a contravention of