Does gcup sell my personal data to third parties?

Absolutely not. gcup never sells, rents, or discloses member personal data to third parties for commercial marketing purposes. Your data is shared only with parties directly involved in delivering gcup's services to you – such as payment processors like Touch 'n Go, DuitNow, or GrabPay to process your MYR transactions, or game providers that require a player ID to deliver a game session. All such third parties are bound by strict confidentiality agreements with gcup.

How do I request a copy or deletion of my data from gcup?

To request a copy of your personal data or to apply for data deletion, send an email to support@gcup.best with the subject line "Privacy Rights Request" and clearly state whether you are requesting (a) a copy of your data, (b) a data correction, or (c) data deletion. gcup will verify your identity before processing the request and will respond within 7 business days. Data copies will be provided in a readable format. Data deletion is subject to minimum retention requirements mandated by law — gcup will inform you of any data that cannot be deleted and the reasons why.

Is my bank card or eWallet information safe with gcup?

Yes. gcup uses 256-bit SSL encryption for all financial transactions. Your payment information — whether via Touch 'n Go eWallet, DuitNow, GrabPay, ShopeePay, Boost, or FPX through Maybank2u and CIMB Clicks — is transmitted through fully encrypted channels. Importantly, gcup does not store your full bank card number or eWallet password; this information is processed directly by the respective payment providers. gcup only retains the details necessary for transaction records, not your sensitive payment credentials.

Can I stop promotional emails from gcup?

Yes, you can unsubscribe from gcup promotional emails at any time in two easy ways: (1) click the "Unsubscribe" link at the bottom of any gcup promotional email, or (2) log in to your gcup account and go to notification settings to turn off marketing emails. Unsubscription typically takes effect within 48 hours. Important: unsubscribing from promotional emails will not stop important account-related emails such as transaction confirmations, security alerts or other critical notifications relating to the management of your gcup account.

What does gcup do in the event of a data breach?

In the event of a security incident involving the breach of members' personal data, gcup is committed to responding swiftly and transparently. The steps gcup will take are: (1) Detect and contain the incident immediately using gcup's technical security team; (2) Assess the scope and impact of the breach on affected members' data; (3) Notify affected members via their registered email in a timely manner, with clear information about what occurred and what steps they should take; (4) Report the incident to the relevant authorities where required by law; and (5) Implement remedial measures to prevent recurrence. gcup will not conceal or delay notification of any serious security incident.

gcup | Privacy Policy – Your Data Protected Safely

1. Introduction – gcup's Privacy Commitment

Gcup ("gcup", "we", "platform") is fully committed to protecting the privacy of every member using our online casino platform in Malaysia. This Privacy Policy explains how gcup collects, uses, discloses, stores and protects your personal information when you register, make deposits in Malaysian Ringgit (RM), play games such as live baccarat, blackjack, slots or e-sports, and interact with any feature on the gcup platform.

This policy applies to all registered gcup members from Malaysia, including those who access the platform via web browser on a computer, tablet, or Android and iOS smartphone. By registering a gcup account or using any gcup service, you agree to the collection and use of your information as described in this Privacy Policy.

Gcup's Privacy Policy is part of Terms & Conditions gcup and should be read together with that document. In the event of any conflict between this Privacy Policy and the Terms & Conditions, the Privacy Policy shall prevail on all matters relating to personal data.

2. Personal Data Collected by gcup

Gcup only collects personal data necessary to deliver its online casino platform services to members in Malaysia. The following are the categories of data gcup collects and the reasons for collection:

Data Category	Sample Information	Reason for Collection
Identity	Full name, date of birth, MyKad number	Identity verification & KYC, age verification (21+)
Contact	Malaysia phone number, email address	Account communications, transaction confirmations, support
Financial	Payment methods (Touch 'n Go, DuitNow, GrabPay, FPX), MYR transaction records	Deposit & withdrawal processing, financial KYC verification
Technical	IP address, device type, web browser, operating system	Account security, fraud detection, platform improvement
Usage	Game records, betting history, types of games played	Responsible gaming, user experience improvement
Communications	Live chat support records, emails sent to gcup	Customer support delivery, service improvement

Gcup does not collect unnecessary information beyond what is required to provide its services. You are not obliged to provide all requested information, but withholding certain details (such as KYC information) may limit gcup's ability to process withdrawals or grant full access to the platform.

3. How gcup Uses Your Personal Data

Gcup uses Malaysian members' personal data for limited and legitimate purposes only. Every use of data is based on a genuine business need or the consent you provided at registration. The following are the primary purposes for which gcup uses your data:

Service Provision: Managing your gcup account, processing deposits and withdrawals in MYR, and enabling access to baccarat, blackjack, slots, and e-sports
Verification & KYC: Verifying the identity and age of members (21 and above) in accordance with industry requirements and to prevent access by underage individuals
Security & Fraud Detection: Identifying and preventing fraudulent activity, money laundering, duplicate account registrations, and abuse of the gcup bonus system
Customer Support: Responding to enquiries, resolving technical issues, and providing support in Bahasa Melayu 24/7.
Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and providing appropriate interventions in accordance with policy Responsible Gaming gcup
Platform Improvement: Analysing gcup platform usage to improve the user experience, introduce new games, and enhance existing features.
Marketing Communications: Sending information about gcup bonuses, promotions, and platform updates — only with your consent and unsubscribable at any time.

gcup will never: using your data to build psychological profiles for manipulation purposes, selling data to advertising companies, using data for purposes not stated in this Privacy Policy, or granting data access to any party without a lawful basis.

4. Sharing Data with Third Parties

Gcup does not sell members' personal data to any party. However, there are limited circumstances where gcup needs to share certain data with selected third parties to enable the delivery of gcup's services:

Game Providers: Providers such as Evolution Gaming, Pragmatic Play, and Microgaming receive only the minimum data required to deliver their games – typically just a player ID, without any real name
Payment Processors: eWallet providers such as Touch 'n Go, GrabPay, DuitNow, ShopeePay and Boost, as well as FPX banks such as Maybank and CIMB, receive the transaction information necessary to process your RM deposits and withdrawals
Technical Service Providers: Companies that assist gcup in operating its technical infrastructure (such as cloud hosting) may have limited access to data in a technical capacity only, and are bound by strict confidentiality agreements.
Legal Authorities: gcup will disclose personal data to Malaysian authorities where required by valid law, such as in financial crime investigations or by court order.

gcup never shares your data with third-party marketing companies, online advertisers, data brokers, or any party with no direct involvement in delivering gcup's services to you.

All third-party partners of gcup are required to comply with data protection standards equivalent to or higher than those set out in this Privacy Policy. gcup periodically reviews its data sharing agreements to ensure ongoing compliance.

5. gcup's Data Security Measures

Gcup continuously invests in security infrastructure to protect the personal data of all Malaysian members. This goes beyond a legal obligation – it is gcup's moral responsibility to the player community that trusts our platform.

The technical and organizational measures gcup uses to protect your data:

256-bit SSL/TLS Encryption: All data transmitted between your device and gcup's servers is encrypted using 256-bit SSL/TLS protocol — the same encryption technology used by Malaysia's leading financial institutions.
Strict Access Controls: Only authorised gcup staff with a legitimate business need may access member data, with an audit log maintained for every access
24/7 Monitoring: gcup's systems are continuously monitored to detect and respond to security threats promptly
Secure Data Backup: Data is backed up regularly to a secure, separate location to ensure recovery in the event of a technical incident.
Regular Security Audits: gcup conducts regular penetration testing and security audits by independent experts to identify and address potential vulnerabilities.
Staff Training: All gcup staff who handle personal data receive regular data protection training.

While gcup takes every reasonable step to protect your data, no security system is infallible. In the unlikely event of a data breach, gcup is committed to notifying affected members in a timely manner and taking immediate remedial action.

6. Cookies, Analytics & Tracking Technologies at gcup

Gcup uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device when you visit the gcup platform. They help gcup remember your preferences and understand how you use the platform.

Types of cookies used by gcup:

Essential Cookies: Required for core gcup platform functions such as login, game sessions, and security. These cookies cannot be disabled without affecting platform functionality.
Preference Cookies: Remembering your preferences such as language (Bahasa Melayu), display settings, and your favourite games on gcup.
Analytics Cookies: Helps gcup understand how members use the platform – including the most visited pages, time spent on each game, and navigation paths. This data is aggregated and anonymised for platform improvement purposes
Security Cookies: Used to identify suspicious activity, prevent duplicate account registrations, and protect member accounts from unauthorised access

You can manage and delete cookies at any time through your web browser settings. However, disabling essential cookies may affect gcup platform functionality, such as the ability to log in or continue a game session. For guidance on managing cookies in your browser (such as Chrome, Safari, or Firefox on an Android or iOS smartphone in Malaysia), please refer to the relevant browser's help documentation.

7. Your Privacy Rights as a gcup Member

As a gcup member, you have certain rights regarding your personal data. gcup is committed to facilitating the exercise of these rights without any unnecessary barriers or charges:

1

Right of Access

You may request a copy of all personal data gcup holds about you at any time. gcup will provide it in a readable format within 14 business days.

2

Right to Rectification

If any personal data gcup holds about you is inaccurate or incomplete, you have the right to request an immediate correction. Contact support@gcup.best with the details that need to be amended.

3

Right to Erasure

You may request the deletion of your personal data from gcup's systems, subject to data retention requirements mandated by law and platform security requirements.

4

Right to Data Portability

You have the right to receive your personal data in a machine-readable format (such as CSV or JSON) for transfer to another platform, should you choose to do so.

5

Right to Object

You may object to the use of your data for direct marketing or profiling purposes at any time. gcup will honour your objection immediately, without question.

6

Right to Unsubscribe

You may withdraw your consent to receive gcup marketing communications at any time via the unsubscribe link in any email or through your gcup account settings.

To exercise any of the rights above, contact the gcup privacy team by email at support@gcup.best with the subject line "Privacy Rights Request" and specify the right you wish to exercise. gcup will respond within 7 business days. For complex requests or those involving a large volume of data, gcup reserves the right to extend the response period to up to 30 business days, with advance notice to you.

8. gcup's Data Retention Period

Gcup retains your personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy, or as required by law. The following are gcup's data retention guidelines:

Active Account Data: Retained for the duration your gcup account is active plus the mandatory retention period following closure
Financial Transaction Records: Retained for a minimum of 7 years in accordance with industry financial record-keeping requirements.
KYC & Identity Verification Records: Retained for a minimum of 5 years after account closure for compliance and audit purposes
Support Communication Logs: Retained for 3 years for reference and dispute resolution purposes
Analytics Cookie Data: Aggregated and anonymised data is retained for long-term analysis; individually identifiable data is deleted after 13 months
Security Logs: Retained for 2 years for security incident investigation purposes

Once data is no longer required and the minimum retention period has lapsed, gcup will securely delete or anonymise it using methods that ensure it cannot be recovered.

9. Protection of Children & Minors

Gcup takes the protection of minors extremely seriously. The gcup platform is strictly for individuals aged 21 and above. gcup does not knowingly collect or store personal data from underage individuals.

If you discover that an individual under 21 has registered a gcup account — whether it is your child, a sibling, or any other young person — please report it to support@gcup.best immediately. gcup will close the account without delay and permanently delete all associated data at no charge.

Gcup encourages parents and guardians to install parental control software on devices used by children and teenagers to prevent access to online gambling sites. If you need information about additional protective measures, the gcup support team is ready to help.

10. Privacy Policy Amendments & How to Contact gcup

Gcup reserves the right to update this Privacy Policy from time to time to reflect changes in privacy practices, legal requirements, or new features on the gcup platform. Members will be notified of any material amendments via their registered email or through a prominent notification on the gcup platform at least 14 days before the changes take effect.

Continued use of the gcup platform after the effective date of any amendment will be considered acceptance of the updated Privacy Policy. If you do not agree with the changes, you may close your gcup account before the effective date.

Contact the gcup Privacy Team: For any questions, concerns, or requests relating to your privacy and personal data at gcup, please contact us at support@gcup.best with the subject line "Privacy Policy". The gcup team will respond within 1 business day. All communications are handled in Bahasa Melayu.

Privacy Policy gcup – Data Protection for Malaysian Players