Company: GCL
Filing Date: 2025-09-05
Form Type: F-1/A
Source: 0001213900-25-085150
Chunk: 106

Company: GCL Global Holdings Ltd
Filing Date: 2025-09-05
Form: F-1/A
Chunk 106
---
 Serious Crimes (Confiscation of Benefits) Act 1992 of Singapore (the “ CDSA”) and Terrorism (Suppression of Financing) Act 2002 of Singapore (the “ TSOFA”). The CDSA provides for the confiscation of benefits derived from, and to combat, corruption, drug dealing and other serious crimes. Generally, the CDSA criminalizes the concealment or transfer of the benefits of criminal conduct as well as the knowing assistance of the concealment, transfer or retention of such benefits. The CDSA permits the confiscation of benefits derived from, and to combat, corruption, drug dealing and other serious crimes. The TSOFA criminalizes terrorism financing and prohibits any person in Singapore from dealing with or providing services to a terrorist entity, including those designated pursuant to the TSOFA. The CDSA and the TSOFA also require suspicious transaction reports to be lodged with the Suspicious Transaction Reporting Office, Singapore’s Financial Intelligence Unit within the Criminal Affairs Division of the Singapore Police Force. If any person fails to lodge the requisite reports under the CDSA and the TSOFA, it may be subject to criminal liability. In addition, the TSOFA has extraterritorial reach, and any person outside Singapore who commits an act or omission that would constitute an offense under the TSOFA if committed in Singapore may be proceeded against, charged, tried and punished accordingly in Singapore. Regulations on Data Protection The Personal Data Protection Act 2012 of Singapore (the “ Singapore PDPA”) governs the collection, use and disclosure of the personal data of individuals (being data, whether true or not, about an individual who can be identified from that data or other accessible information), and to provide individuals with the right to access and correct their own personal data. Organizations have mandatory obligations to assess data breaches they suffer, and to notify the Personal Data Protection Commission (the “ PDPC”) and where applicable, the relevant individuals where the data breach is (or is likely to be) of a significant scale or resulting in (or is likely to result in) significant harm to individuals. Other obligations include accountability, protection, retention, and requirements around the overseas transfers of personal data. Organizations are required to, among other things, (i) obtain consent from individuals and inform them of the applicable purposes before collecting, using or disclosing their personal data; and (ii) put in place reasonable measures to (a) protect the personal data in their possession or control from unauthorized access, loss or damage and (b) prevent the loss