Privacy Policy GCup Online

Gcup online ("we", "the gcup online platform", or "gcuponline.net") respects the privacy of every individual who uses our online entertainment platform. This Privacy Policy sets out in detail how we collect, process, store, disclose, and protect your personal data when you use the gcup online website and services.

This document is drafted in accordance with Malaysia's Personal Data Protection Act (PDPA) 2010 and industry best practices for user data protection. By using the gcup online platform, you acknowledge that you have read and understood this Privacy Policy.

Gcup online collects various categories of personal data to enable us to provide a safe, fair, and efficient service to all members. Below are the types of data we collect:

Personal Identification Data

• Full name as stated on MyKad or official Malaysian identity documents
• National identity card number (MyKad) or passport number
• Date of birth and gender
• Nationality and country of residence
• Profile picture (if uploaded)

Contact Data

• Registered active email address
• Malaysian mobile phone number
• Full residential address including postcode and state

Financial Data

• Malaysian bank account information (bank name, account number)
• E-wallet details such as Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay
• Deposit and withdrawal transaction history in MYR
• Payment records via DuitNow and FPX (Maybank2u, CIMB Clicks)

Platform Activity Data

• Gaming history for slots, baccarat, roulette, table games, badminton betting, and live matches
• Bonus and promotion usage records
• Account login and logout records including timestamps and location
• Communications with the gcup online customer support team

Technical Data

• IP address and geographical location information
• Web browser type and device operating system
• Cookie data and session identifiers
• Technical error records and system logs

Gcup online collects your personal data through several key methods:

Directly From You

The majority of our data is collected directly from you as you interact with the gcup online platform, including:

• Completing the gcup online account registration form
• Completing the identity verification (KYC) process
• Making deposits or withdrawals
• Contacting the gcup online customer support team
• Completing feedback forms or customer satisfaction surveys

Automatically

Some data is collected automatically when you visit or use the gcup online platform via cookies, web beacons, and other tracking technologies described in further detail in Section 9.

From Third Parties

In certain cases, gcup online may receive your personal data from trusted third parties such as identity verification providers, payment processors, and fraud prevention agencies to ensure the integrity of the gcup online platform.

Gcup online uses your personal data solely for legitimate purposes related to the operation of our platform. Below is a summary table of how your data is used:

Gcup online respects the confidentiality of your data. We do not sell, rent, or disclose your personal data to third parties for their own marketing purposes. However, gcup online may share your data in the following limited circumstances:

Trusted Service Providers

Gcup online works with selected third-party service providers to help operate the platform, including payment processors (Touch 'n Go, GrabPay, DuitNow, FPX), identity verification providers, and cloud service providers. All third parties are bound by strict confidentiality agreements and may only use your data for purposes specified by gcup online.

Legal Requirements

Gcup online may disclose your personal data to Malaysian government authorities or law enforcement bodies when required to do so by law, court order, or direction from a relevant regulatory agency.

Legitimate Interest Protection

Where necessary to prevent fraud, money laundering, or serious security threats to the gcup online platform or its users, we reserve the right to share relevant information with the appropriate parties.

Gcup online implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or accidental disclosure.

• 256-bit SSL/TLS Encryption — all data communications between your browser and gcup online servers are fully encrypted.
• Data encryption at rest — sensitive data such as financial and identity information is encrypted within the gcup online database.
• Strict access controls — only authorised gcup online staff with a legitimate operational need may access your personal data.
• Regular security audits — gcup online conducts regular penetration testing and security audits to identify and address any vulnerabilities.
• 24/7 threat monitoring — gcup online's automated monitoring systems remain active at all times to detect and respond to suspicious activity.
• Two-factor authentication (2FA) — gcup online encourages and supports the use of 2FA for all member accounts.

Gcup online retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable Malaysian law.

• Active account data — retained for the duration your gcup online account remains active, plus any additional period required by law.
• Financial transaction records — retained for a minimum of 7 years in compliance with Malaysian financial and tax regulatory requirements.
• KYC & AML records — retained for a minimum of 5 years after the business relationship ends, in compliance with Malaysia's Anti-Money Laundering Act (AMLA).
• Support communication logs — retained for 3 years for dispute resolution purposes.
• Technical data and access logs — retained for 12 months for security and technical troubleshooting purposes.

Once the retention period has expired, gcup online will securely delete or destroy your personal data using industry-recognised methods.

Under Malaysia's Personal Data Protection Act (PDPA) 2010, you as a data subject have the following rights regarding your personal data held by gcup online:

To exercise any of the rights above, please contact the gcup online privacy team by email at privacy@gcuponline.net. We will process your request within 21 business days.

Gcup online uses cookies and similar tracking technologies to enhance the user experience, analyse platform usage, and support essential gcup online website functions.

Types of Cookies We Use

• Essential Cookies — required for core gcup online platform functions such as login verification and session security. These cookies cannot be disabled.
• Performance Cookies — collects statistical information about how you use the gcup online platform to help us improve it. All data is anonymised.
• Functional Cookies — remembering your preferences such as language, region, and display settings to make your gcup online experience more convenient.
• Analytics Cookies — used to understand usage patterns and improve gcup online's services overall.

Managing Your Cookies

You can manage and control cookies through your web browser settings. However, disabling certain cookies may affect the functionality and performance of the gcup online platform.

The gcup online platform is intended exclusively for individuals aged 18 years and above. gcup online does not knowingly collect or process personal data from individuals under the age of 18.

Should gcup online discover that a child's personal data has been collected without valid parental or guardian consent, we will take immediate steps to delete that data and close the account in question. Parents or guardians who believe their child has registered a gcup online account without authorisation are urged to contact us immediately at support@gcuponline.net.

Gcup online reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or gcup online platform operations. The latest version of this Privacy Policy will always be available on the gcup online website with a clearly displayed "Last Updated" date.

For material and significant changes, gcup online will notify you via in-platform notifications or email to your registered address before the changes take effect. Your continued use of the gcup online platform after such changes constitutes your acceptance of the updated Privacy Policy.

If you have any questions, concerns, or complaints regarding gcup online's Privacy Policy or how we handle your personal data, please reach out to our team through the following channels:

• Privacy Email: privacy@gcuponline.net
• General Support Email: support@gcuponline.net
• Live Chat: Available 24/7 directly on the gcup online platform
• Response Time: Within 21 business days for privacy-related enquiries

If you are not satisfied with gcup online's response to your privacy complaint, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia or the relevant regulatory authority under the provisions of Malaysia's PDPA 2010.