Gcup online Privacy Policy – Protection
Malaysia Member Personal Data

Welcome to the gcup online Privacy Policy. This document is designed to give you a clear, transparent, and easy-to-understand overview of how gcup online ("Platform", "We") handles the personal data of members ("You") who register and use our services.

Gcup online takes privacy protection very seriously. We believe that your trust in our platform depends not only on the quality of our games and the fairness of payouts — but also on how we respect and safeguard the personal information you entrust to us.

This Privacy Policy applies to all services provided by gcup online, including the main website, mobile platform, app, and all our official communication channels. By registering for or using any gcup online service, you confirm that you have read and understood this Privacy Policy.

Gcup online collects your personal data through various channels — including during the account registration process, daily platform usage, financial transactions, and communications with our customer support team. The following are the categories of data we collect:

We do not collect special category data such as health information, political views, or religious beliefs except in very limited circumstances and with your explicit consent.

Every piece of data we collect has a clear and specific purpose. gcup online does not use your data for purposes unrelated to the provision of platform services. The following are the primary ways we use your personal data:

• Account management: Securely creating, verifying, and maintaining your member account on the gcup online platform.
• Transaction processing: Processing deposits, withdrawals, and all financial transactions promptly and accurately based on the information you provide.
• Identity verification (KYC): Verifying that every member is a real individual, aged 18 or above, and not listed on any exclusion list required by regulatory authorities.
• Security and fraud prevention: Detecting and preventing suspicious activity, duplicate account usage, and any form of fraud that may compromise the integrity of the platform.
• Customer support: Providing accurate and effective assistance whenever you contact the gcup online support team.
• Service communications: Sending important account-related notifications, security updates, and relevant promotional information — only if you have consented to receive them.
• Platform improvement: Analyzing aggregated, non-personal usage patterns to improve the overall user experience.
• Legal compliance: Meeting regulatory obligations, including anti-money laundering (AML) and counter-terrorism financing (CFT) requirements.

Gcup online does not sell or rent your personal data to any third party. However, in the course of operating the platform safely and efficiently, there are limited situations where we need to share certain information with the following parties:

• Payment service providers: FPX, DuitNow, Touch 'n Go, GrabPay, Boost, and banking partners that process your financial transactions — shared only to the extent necessary to complete the transaction.
• Cloud computing service providers: The gcup online server infrastructure is managed by certified cloud providers bound by strict confidentiality agreements.
• Game software providers: Game providers may receive the minimum technical data necessary to ensure games function correctly.
• Regulatory authorities: gcup online will disclose data when required by Malaysian law, court order, or a valid request from the relevant authorities.
• Identity verification services: Trusted third-party KYC service providers for verifying identity documents during the registration process.

All third parties that receive data from gcup online are bound by strict confidentiality and data protection agreements. They are only permitted to use the data for agreed purposes and may not use it for their own benefit.

Protecting your personal data is a responsibility gcup online takes with the utmost seriousness. We continuously invest in the latest security infrastructure to ensure your data remains safe at all times.

Key security measures we have implemented include:

• Advanced data encryption: All sensitive data is encrypted using AES-256 standards at rest and SSL/TLS 1.3 in transit.
• Two-factor authentication (2FA): An additional security layer for all account logins and withdrawals, available via SMS OTP and authenticator app.
• 24/7 Monitoring: The gcup online security system is monitored around the clock by an experienced cybersecurity team to detect any unusual activity.
• Regular penetration testing: The platform infrastructure undergoes independent security testing on a regular basis to identify and address any vulnerabilities before they can be exploited.
• Internal access controls: Only gcup online staff who require access to specific data to carry out their duties are granted permission — with a full audit log maintained.
• Automatic data backup: Your data is automatically backed up to a separate secondary data centre to ensure service continuity.

Gcup online uses cookies and similar tracking technologies to enhance the user experience, ensure platform security, and understand how members use our services. There are four main types of cookies we use:

• Essential Cookies: Required for core platform functions such as session login, security, and navigation. These cookies cannot be disabled as they are essential to website operations.
• Performance Cookies: Collecting aggregated, non-personal data on how visitors interact with our platform, helping us identify pages that need improvement.
• Functional Cookies: Saving your preferences such as language, display settings, and timezone to deliver a more personalized experience.
• Analytics Cookies: Helping us understand overall usage patterns for continuous product improvement.

You can manage your cookie settings through your web browser at any time. However, disabling essential cookies may affect platform functionality and your gaming experience on gcup online.

As a gcup online member, you have full rights over your personal data under Malaysia's Personal Data Protection Act 2010 (PDPA). We respect and uphold the following rights:

To exercise any of the above rights, please contact the gcup online support team via Live Chat or email. We will process your request within 30 working days from the date of receipt.

Gcup online retains your personal data only for as long as necessary to fulfil the purpose for which it was collected or to comply with applicable legal requirements. The following are our data retention guidelines:

• Active account data: Retained for the duration your account is active and for a period of 7 years after account closure to meet financial record-keeping and AML compliance requirements.
• Transaction records: Retained for a minimum of 7 years in accordance with Malaysia's accounting and tax legal requirements.
• Security logs: Retained for 2 years for fraud detection and security incident investigation purposes.
• Support communication records: Retained for 3 years from the date of last communication for service reference and improvement.
• Cookie data: Session cookies are deleted when you close your browser; persistent cookies are stored until their set expiry, typically between 30 days and 2 years.

Upon expiry of the retention period, your data will be securely deleted or converted into an anonymised format that cannot be linked to your identity.

Gcup online reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or developments in the services we offer.

When material changes are made to this Privacy Policy, we will notify you via:

• A prominent notice on the gcup online homepage.
• An in-account notification message upon your next login.
• Email to the address registered to your account (for significant changes).

The latest version of this Privacy Policy is always available on this page with a clearly displayed update date. We encourage you to review this page periodically. Your continued use of the gcup online platform after any changes constitutes your acceptance of the updated Privacy Policy.

If you have any questions, concerns, or complaints regarding how gcup online handles your personal data, we are ready to listen and assist you promptly.

• 24/7 Live Chat: The fastest way — directly within the gcup online platform, with a response within minutes.
• Privacy Email: [email protected] — for formal written data enquiries, responded to within 3 business days.
• FAQ: Review FAQ page us for immediate answers to frequently asked questions about privacy and your account.

If you believe that gcup online has failed to uphold your privacy rights and your complaint has not been satisfactorily resolved, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) as the relevant regulatory authority.