Company: GCL
Filing Date: 2025-09-09
Form Type: 424B3
Source: 0001213900-25-086274
Chunk: 114

Company: GCL Global Holdings Ltd
Filing Date: 2025-09-09
Form: 424B3
Chunk 114
---
 criminalizes the concealment or transfer
of the benefits of criminal conduct as well as the knowing assistance of the concealment, transfer or retention of such benefits. The
CDSA permits the confiscation of benefits derived from, and to combat, corruption, drug dealing and other serious crimes. The TSOFA criminalizes
terrorism financing and prohibits any person in Singapore from dealing with or providing services to a terrorist entity, including those
designated pursuant to the TSOFA. The CDSA and the TSOFA also require suspicious transaction reports to be lodged with the Suspicious
Transaction Reporting Office, Singapore’s Financial Intelligence Unit within the Criminal Affairs Division of the Singapore Police
Force. If any person fails to lodge the requisite reports under the CDSA and the TSOFA, it may be subject to criminal liability. In addition,
the TSOFA has extraterritorial reach, and any person outside Singapore who commits an act or omission that would constitute an offense
under the TSOFA if committed in Singapore may be proceeded against, charged, tried and punished accordingly in Singapore.

Regulations on Data Protection

The Personal Data Protection
Act 2012 of Singapore (the “Singapore PDPA”) governs the collection, use and disclosure of the personal data
of individuals (being data, whether true or not, about an individual who can be identified from that data or other accessible information),
and to provide individuals with the right to access and correct their own personal data. Organizations have mandatory obligations to
assess data breaches they suffer, and to notify the Personal Data Protection Commission (the “PDPC”) and where
applicable, the relevant individuals where the data breach is (or is likely to be) of a significant scale or resulting in (or is likely
to result in) significant harm to individuals. Other obligations include accountability, protection, retention, and requirements around
the overseas transfers of personal data.

Organizations are required
to, among other things, (i) obtain consent from individuals and inform them of the applicable purposes before collecting, using
or disclosing their personal data; and (ii) put in place reasonable measures to (a) protect the personal data in their possession
or control from unauthorized access, loss or damage and (b) prevent the loss of any storage medium or device on which personal data
is stored. In the event of a data breach involving any personal data in an organization’s possession or control, the Singapore
PDPA requires the organization to reasonably and expeditiously assess whether the data