Company: GCL
Filing Date: 2025-09-09
Form Type: 424B3
Source: 0001213900-25-086274
Chunk: 119

Company: GCL Global Holdings Ltd
Filing Date: 2025-09-09
Form: 424B3
Chunk 119
---
 principle; |

| (d) | the security principle; |

| (e) | the retention principle; |

| (f) | the data integrity principle; and |

| (g) | the access principle. |

In general, to process or
disclose personal data relating to any individuals would require (i) consent from such individuals, particularly pertaining to sensitive
personal data, which may be obtained in any form that can be recorded and maintained properly by the data user; and (ii) written
notice to such individuals informing such individuals amongst others, (a) personal data that is being processed by or on behalf
of the data user and whether it is obligatory or voluntary for the individual to supply the personal data and, where it is obligatory
for the individual to supply the personal data, the consequences that the individual may face if the individual fails to supply the personal
data, (b) the purposes for which the personal data is being or is to be collected and further processed, (c) any information
available to the data user as to the source of that personal data, and (d) the individual’s right to request access to and
request correction of the personal data. Any person engaged in processing personal data shall take measures to protect the personal data
from any loss, misuse, modification, unauthorized or accidental access or disclosure, alteration or destruction and to maintain the integrity
of the personal data processed, which should not be kept longer than necessary for the fulfilment of the purpose for which it was to
be processed. Violation of the Malaysia PDPA, when convicted, may result fine up to RM500,000 and/or to imprisonment or both.

Regulations on Foreign Investment

As there is no overarching
FDI regime in Malaysia, foreign equity restrictions thresholds vary between every industry, depending on the applicable laws, policies,
and regulations issued by the relevant governmental departments. Epicsoft Malaysia is not subject to restrictions on foreign investment.

Regulations on Exchange Control

The exchange control regime
in Malaysia is regulated by the Financial Services Act 2013 of Malaysia (the “FSA”), which regulates the domestic
and international transactions involving residents and non-residents of Malaysia and prescribes a list of transactions that are prohibited
without approval from the Bank Negara Malaysia (the Central Bank of Malaysia) (the “BNM”). In exercise of the
powers conferred by the FSA, BNM issues the Foreign Exchange Notices (the “FE Notices”) which provides the
directions, requirements, restrictions, and conditions