Gcup takes every member's privacy seriously. This policy clearly explains how we collect, store, use, and protect your personal data in accordance with Malaysian law.
All personal data at gcup is protected with 256-bit SSL encryption. We do not sell or rent your information to third parties for marketing purposes. Last updated: 1 January 2026.
We built the gcup platform with privacy as a priority, not an afterthought. Here are the six core principles that underpin how we handle your data.
Every data exchange between your device and gcup's servers is encrypted using the latest TLS protocol with 256-bit encryption. This means your login credentials, card details, and transaction data cannot be intercepted by any third party.
Your personal data is stored on servers protected by multi-layered access controls. Only authorized personnel with a legitimate need are permitted to access such information, and every access is logged for audit purposes.
You have full control over your personal data. Through your gcup account settings, you can update personal information, manage communication preferences, and request data deletion at any time.
Gcup has never and will never sell, rent, or transfer your personal data to advertisers or third-party data brokers. Your data belongs to you — it is not a business commodity.
The gcup Privacy Policy is drafted in accordance with the Personal Data Protection Act 2010 (PDPA) Malaysia and anti-money laundering (AML) requirements. We update this policy periodically to ensure ongoing compliance.
In the event of any security incident involving your data, gcup is committed to notifying you within 72 hours of detection, in line with global data protection best practices.
This Privacy Policy ("Policy") describes the practices of gcup ("Platform", "We") in handling personal information collected from users ("You" or "Member") who access or use the gcup platform. We understand that your trust is our most valuable asset, and we are committed to managing your personal data with full transparency, security, and respect.
By registering and using the gcup platform, you agree to the terms set out in this Privacy Policy. If you disagree with any part of this policy, we encourage you to contact our support team before continuing to use the platform.
Gcup collects your personal data through several channels — during account registration, during platform use, during financial transactions, and through ongoing communication between you and our team. We only collect data that is genuinely necessary to provide you with a safe, fair, and effective service.
The following are the categories of personal data we collect:
| Data Categories | Example Information | Primary Purpose |
|---|---|---|
| Identity Information | Full name, date of birth, identification card number | Identity verification (KYC) |
| Contact Information | Email address, phone number, residential address | Account communications, customer support |
| Financial Data | Bank account number, bank name, transaction records | Deposit and withdrawal processing |
| Technical Data | IP address, browser type, operating system, device ID | Security, fraud detection |
| Usage Data | Game records, betting history, session duration | Platform improvement, responsible gaming |
| KYC Documents | Copies of ID, bank statements, selfie photos | AML/KYC compliance |
Gcup does not collect sensitive data such as health information, religious beliefs, or political views. Biometric data is only collected where required by the relevant authorities for legally mandated identity verification purposes.
We also collect information you provide voluntarily, such as feedback from customer satisfaction surveys, game reviews, and communications with our support team via live chat or email. All such communications may be recorded for training and quality control purposes.
The personal data we collect is used responsibly for specific and lawful purposes. gcup does not use your data for purposes unrelated to the provision of platform services or that conflict with applicable law.
Gcup does not use your personal data to make fully automated decisions that significantly affect your rights without human review. Any decisions regarding account suspension or closure involve a manual review by our team.
Gcup understands the importance of your data privacy. We do not sell, rent, or disclose your personal data to third parties for their own marketing purposes. However, there are limited situations where we need to share your information with certain parties to enable the platform to operate securely and remain legally compliant.
All third parties that receive your data from gcup are contractually bound to use it solely for the stated purpose and to implement appropriate security measures. gcup conducts thorough due diligence on all third-party partners before sharing any user data.
The security of your data is gcup's top priority. We implement a multi-layered security framework encompassing technical, administrative, and physical safeguards to protect your personal data from unauthorized access, alteration, disclosure, or destruction.
Your bank card and e-wallet details are never stored on gcup's servers. All payment processing is handled directly by trusted, PCI-DSS certified payment providers, ensuring your financial details remain fully protected.
While we take all reasonable steps to protect your data, no security system can be guaranteed 100% secure. You also have a responsibility to protect your account by using a strong password, not sharing your login credentials, and keeping your device updated with the latest security patches.
In accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data held by gcup. gcup is committed to respecting and facilitating the exercise of these rights.
You have the right to request a copy of the personal data we hold about you. Requests will be processed within 14 business days.
If your data is inaccurate or outdated, you have the right to request a correction through your account settings or by contacting our support team.
You may request the deletion of your personal data, subject to retention requirements prescribed by law.
You may object to the processing of your data for specific purposes, including direct marketing, at any time.
You have the right to receive your personal data in a machine-readable format for transfer to another service.
In certain circumstances, you may request a restriction on the processing of your data while a dispute is being resolved.
To exercise any of the rights above, contact the gcup privacy team via email [email protected] or via live chat on the platform. We will verify your identity before processing any request to safeguard your account security.
Gcup retains your personal data for as long as your account is active or as long as necessary to provide our services. After account closure, we retain certain data for periods required by Malaysian law, particularly in relation to financial records and AML compliance.
Once the designated retention period has lapsed, your data will be securely deleted or permanently anonymised so it can no longer be linked to your identity.
If you have any questions, concerns, or complaints about how gcup handles your personal data, or if you wish to exercise any of your privacy rights, our privacy team is here to help.
You can reach us via live chat available on the gcup platform 24 hours a day, 7 days a week, or by email [email protected]. We aim to respond to all privacy-related inquiries within 5 business days.
Gcup reserves the right to update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any significant changes will be communicated via an in-platform notification or your registered email at least 7 days before they take effect.
We are available 24/7 for any questions related to your privacy and data security.