Gcup Privacy Policy – Protecting Your Personal Data

1. Introduction

Gcup ("we", "Platform", or "company") values the trust you place in us when you register and use the services we provide. This Privacy Policy describes our practices regarding the collection, use, disclosure, and protection of your personal information, in compliance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

This policy applies to all users who access the gcup platform via our website, mobile app, or any other channels we provide. By continuing to use the platform, you acknowledge that you have read, understood, and agreed to the terms set out in this document.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable legal requirements. Any significant changes will be communicated to you via a notice on the platform or your registered email.

2. Information We Collect

Gcup only collects information necessary for legitimate purposes in order to provide you with the best service. The categories of information we collect are as follows:

A. Registration & Account Information

• Full name, identity card number, or passport number.
• Date of birth and gender.
• Email address and mobile phone number.
• Current residential address.
• Account username and password (stored in encrypted form).

B. Financial Information

• Bank account number registered for deposits and withdrawals.
• Transaction records include deposits, withdrawals, and gaming history.
• Information related to the payment methods used.

C. Technical & Usage Information

• IP address, device type, and operating system.
• Web browser type and version in use.
• Access time, pages visited, and session duration.
• General location based on network connection.

D. KYC Documents (Identity Verification)

• Copy of national identity card or passport.
• Recent bank statement or utility bill as proof of address.
• A selfie or facial photo for further verification if required.

3. How We Use Your Information

All information collected by gcup is used solely for legitimate purposes directly related to the provision of our services. The following are the primary purposes for which your data is used:

• Account Management: Create, verify, and maintain your user account.
• KYC Process: Conduct identity verification checks to comply with anti-money laundering (AML) legal requirements.
• Transaction Processing: Process deposits, withdrawals, and financial transactions securely and accurately.
• Customer Support: Provide assistance and efficiently resolve your complaints or enquiries.
• Platform Security: Detect and prevent fraud, hacking, and suspicious activity that could compromise your account security.
• Personalise Your Experience: Personalise content, promotions, and game recommendations based on your usage habits.
• Legal Compliance: Fulfil reporting and compliance obligations to the relevant authorities.
• Marketing Communications: Send promotional information, special offers, and platform updates — you may unsubscribe at any time.

We will not use your data for any purpose beyond what is stated here without first obtaining your consent.

4. Disclosure of Information to Third Parties

Gcup does not sell, rent, or trade your personal information to any third party for their own commercial purposes. However, we may share your information in the following limited circumstances:

• Service Providers: Technical partners and payment service providers who help us operate the platform — all bound by strict confidentiality agreements.
• Statutory Authorities: Government agencies, regulators, or law enforcement authorities when required by Malaysian law.
• Fraud Prevention: Relevant industry bodies to prevent cross-platform fraud and protect user interests.
• Business Transfers: In the event of a merger, acquisition, or sale of company assets — users will be notified in advance.

Every third party involved is required to handle your data to privacy standards no less stringent than those set out in this Privacy Policy.

5. Data Storage & Retention Period

All your personal data is stored on secure servers with full encryption protection. gcup uses industry-grade cloud infrastructure with strict access controls to keep your data protected at all times.

Data retention periods are as follows:

• Active account information is retained for the duration your account remains active, plus 5 years after closure.
• Financial transaction records are retained for 7 years in compliance with Malaysia's tax and financial legal requirements.
• Access and technical activity logs are retained for 12 months for security and audit purposes.
• KYC documents are retained for the period required by applicable AML regulations.

Once the retention period expires, your data will be securely deleted or anonymised in accordance with established procedures.

6. Use of Cookies

The gcup platform uses cookies and similar tracking technologies to enhance user experience and ensure optimal platform performance. The types of cookies we use are:

• Essential Cookies: Required for core platform functions such as login session management and security. These cookies cannot be disabled.
• Performance Cookies: Collect anonymous statistical data on how users interact with the platform for improvement purposes.
• Functional Cookies: Save your preferences such as language, display settings, and region for a more personalised experience.
• Marketing Cookies: Used to display relevant advertisements and measure the effectiveness of our promotional campaigns.

You can manage or disable cookies through your web browser settings. However, disabling essential cookies may affect platform functionality.

7. Your Rights as a User

Under Malaysia's PDPA and gcup's internal policies, you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal information we hold about you.
• Right to Rectification: Request that we correct any inaccurate or outdated information.
• Right to Erasure: Request deletion of your personal data, subject to legal record-retention requirements.
• Right to Object: Object to the processing of your data for direct marketing purposes.
• Right to Portability: Receive your data in a structured, machine-readable format.
• Right to Withdraw Consent: Withdraw your consent for certain processing at any time.

To exercise any of the above rights, please contact our support team. We will process your request within 30 business days.

8. Data Security

Gcup implements a range of robust technical and organisational measures to protect your personal data from unauthorised access, loss, destruction, or accidental disclosure. Our protective measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Passwords are encrypted using a secure hashing algorithm — no one at gcup can ever view your password.
• Role-based access control (RBAC) — only authorised staff may access specific data.
• Round-the-clock security monitoring to detect any threats or intrusions immediately.
• Penetration testing and periodic security audits conducted by independent experts.
• A comprehensive incident response plan to address any data breach swiftly.

While we take all reasonable measures, no system is completely secure. In the event of a material data breach, we will notify you and the relevant authorities as required by law.

9. Contact Us Regarding Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact our Data Protection Officer through the following channels:

• Email: [email protected]
• Via Live Chat available on the gcup platform (24 hours / 7 days)
• Through the FAQ for privacy-related FAQs

We are committed to treating every enquiry seriously and responding within a reasonable timeframe.

Update History