Company: GCL
Filing Date: 2025-04-08
Form Type: 424B3
Source: 0001213900-25-029989
Chunk: 133

Company: GCL Global Holdings Ltd
Filing Date: 2025-04-08
Form: 424B3
Chunk 133
---
 actions,
including issuing cease and desist orders. Infringements of Section 61 of the Competition Act 2010 of Malaysia, may result in a fine
not exceeding five million ringgit, and for a second or subsequent offence, to a fine not exceeding ten million ringgit; or (b) if
such person is not a body corporate, to a fine not exceeding one million ringgit or to imprisonment for a term not exceeding five years
or to both, and for a second or subsequent offense, to a fine not exceeding two million ringgit or to imprisonment for a term not exceeding
five years or to both.

Regulations on Data Protection

The Personal Data Protection Act 2010 of Malaysia
(the “Malaysia PDPA”) regulates the processing of personal data in commercial transactions in Malaysia and
is enforced by the Personal Data Protection Commission. The Malaysia PDPA applies to (a) any person who processes, and (b) any
person who has control over or authorizes the processing of, any personal data in respect of commercial transactions. The Malaysia PDPA
also applies to a person in respect of personal data if (a) the person is established in Malaysia and personal data is processed,
whether or not in the context of that establishment, by that person or any other person employed or engaged by that establishment, or
(b) the person is not established in Malaysia but uses equipment in Malaysia for processing the personal data, except for the purposes
of transit through Malaysia.

<div align='center'>78</div>

“Personal data” is statutorily defined
to mean any information in respect of commercial transactions, which (a) is being processed wholly or partly by means of equipment
operating automatically in response to instructions given for that purpose, (b) is recorded with the intention that it should wholly
or partly be processed by means of such equipment, or (c) is recorded as part of, or with the intention that it should form a part
of, a relevant filing system that relates directly or indirectly to a data subject (i.e., an individual who is the subject of the personal
data) who is identified or identifiable from that information or from that and other information in the possession of a data user, including
any sensitive personal data and expression of opinion about the data subject. “Personal data” does not include any information
that is processed for the purpose of a credit reporting business carried on by a credit reporting agency under the Credit Reporting Agencies
Act 2010 of Malaysia.