Privacy Policy gcup4 – Malaysia User Data Protection

1Information We Collect

Gcup4 collects your personal information through various interaction points on the platform. This information is collected directly from you during registration and use of our services, or automatically through technologies employed within our platform.

Information you provide directly:

• Full name as shown on your identity card (MyKad) or passport.
• An active mobile number and a valid email address.
• Date of birth for age verification to comply with the 18+ age requirement.
• Bank account or digital wallet details (account number, bank name) for processing deposits and withdrawals.
• A copy of an identity document such as your MyKad, passport, or driving licence for the KYC process.
• Current residential address for identity verification purposes.

Automatically collected information:

• Your device's IP address and approximate geolocation information.
• Browser type, operating system, and device model in use.
• Game session data including date, time, game type, and wagering amounts.
• Financial transaction records including deposits, withdrawals, and bonus history.
• Cookie and website usage data, such as pages visited and time spent on the platform.

2How We Use Your Information

Gcup4 uses the information collected for legitimate and transparent purposes. We do not use your data for anything beyond what is stated here:

• Account Management: Process registration, verify identity, manage logins, and ensure the security of your account.
• Financial Processing: Process deposits and withdrawals, verify payment information, and maintain transaction records as required by law.
• Legal Compliance: Fulfil Anti-Money Laundering (AML), Know Your Customer (KYC) compliance obligations, and reporting requirements to relevant authorities when required.
• Platform security: Detect and prevent fraud, bot usage, duplicate account registrations, and other suspicious activity that could compromise the safety of other users.
• Service Improvement: Analyse usage patterns to improve platform performance, enhance the user interface, and develop new, more relevant features.
• Service Communication: Send important notifications related to your account, policy updates, security alerts, and transaction information.
• Promotions & personalised offers: With your consent only, we send promotional information, bonus offers, and loyalty programme updates relevant to your gaming interests.

Gcup4 does not make any automated decisions that significantly affect you based solely on automated data processing without appropriate human review.

3Encryption & Data Protection

The security of your data is a responsibility we take seriously. gcup4 implements multiple layers of technical and organisational safeguards to protect your personal information:

• Data encryption in transit: All communication between your browser or app and gcup4's servers is secured by TLS 1.3 protocol with 256-bit encryption.
• Data encryption at rest: Sensitive information such as passwords is stored using one-way hashing algorithms that cannot be decrypted. Financial information is stored in fully encrypted format.
• Layered access control: Role-based access control (RBAC) ensures that only staff authorized for specific tasks can access the relevant data.
• Periodic Security Auditing: gcup4 conducts regular penetration testing and security audits by independent third parties to identify and address any vulnerabilities.
• 24/7 Threat Monitoring: A 24/7 security monitoring system detects any suspicious activity or unauthorized access attempts in real time.

In the event of any data breach that may affect your personal information, gcup4 is committed to notifying affected users within the timeframe required by applicable law, along with the steps being taken to address the situation.

4Third-Party Data Sharing

Gcup4 values your privacy and does not share your personal information indiscriminately. However, there are limited situations where sharing data with third parties is necessary:

• Payment service providers: To process your deposits and withdrawals, the required transaction information is shared with trusted payment gateway providers such as DuitNow, FPX, and digital wallet providers. All such providers are bound by strict data protection agreements.
• Game software providers: Third-party game providers receive the session data required to run games. This data is kept to the minimum necessary and does not include your full financial information.
• Statutory authorities: gcup4 will disclose user information to law enforcement authorities, regulatory bodies, or courts when required by law or a valid court order.
• Analytics services: Anonymised usage data (with no personally identifiable information) is shared with analytics service providers to help us understand platform usage patterns and make improvements.

Gcup4 never sell, rent, or trade users' personal information to advertising companies, data brokers, or any third party for their own marketing purposes. This is our absolute commitment to our users.

5Cookies & Tracking Technologies

Gcup4 uses cookies and similar tracking technologies to enhance your experience on the platform. Here are the types of cookies we use:

• Essential cookies (required): These cookies are required for core platform functions such as maintaining your login session, security, and privacy settings. They cannot be disabled.
• Performance cookies: Helps us understand how users interact with the platform, which pages are visited most frequently, and where users encounter issues. All data is collected anonymously.
• Functional cookies: Save your preferences such as display language, favourite game settings, and account options to deliver a more personalised experience.
• Marketing cookies: Used to display relevant offers and promotions to you based on your gaming interests. This type of cookie is only activated with your consent.

You can manage your cookie settings at any time through your browser settings. Please note that disabling certain types of cookies may affect specific features of the gcup4 platform. For detailed information about the cookies we use, please contact our support team.

6Your Rights as a User

Under the Personal Data Protection Act 2010 (PDPA) of Malaysia, you have the following rights regarding your personal information held by gcup4:

• Right to access: You may request a copy of the personal information we hold about you at any time.
• Right to rectification: If your information is inaccurate or out of date, you have the right to request that gcup4 correct or update it.
• Right to withdraw consent: You may withdraw consent for certain data processing activities, such as marketing communications, at any time.
• Right to erasure: Under certain circumstances, you may request the deletion of your personal information, subject to gcup4's legal obligations to retain certain records.
• Right to lodge a complaint: If you are dissatisfied with how gcup4 handles your data, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.

To exercise any of the above rights, please contact the gcup4 support team via email or live chat. We will process your request within 14 business days. For complex cases, we may require up to 30 days and will notify you accordingly.

7Data Retention & Deletion

Gcup4 retains your personal information only for as long as necessary for the purposes stated in this Privacy Policy, or as required by applicable law:

• Active account information is retained for the duration your account remains active at gcup4.
• After account closure, financial and identity records are retained for 7 years to meet AML and tax legal requirements.
• Gaming data and platform activity are retained for 3 years after the last session.
• Security logs and technical data are retained for 12 months on a rolling basis.
• Once the defined retention period has elapsed, data is securely deleted using methods that ensure it cannot be recovered.

If you wish to close your gcup4 account, please contact our support team. The account closure process will be completed within 5 business days after all outstanding balances are settled. Records required by law will continue to be retained for the periods stated above.