Gcup5 Privacy Policy – Data Protection
Your Privacy Is Our Priority

Gcup5 collects your personal data through various means when you use our platform. The types of information we collect are as follows:

We only collect data that is strictly necessary for the stated purposes. gcup5 does not collect sensitive information such as biometric data, health information, or religious data unless required by law.

Every piece of data collected by gcup5 has a clear and lawful purpose. We use your personal data for the following:

• Account management: Registration, identity verification (KYC), and management of your gcup5 account.
• Transaction processing: Processes deposits, withdrawals, and all financial transactions securely and accurately.
• Platform security: Detects and prevents fraud, money laundering, unauthorized access, and other security threats.
• Service improvement: Analyzes usage patterns to enhance the gaming experience and interface of the gcup5 platform.
• Marketing communications: Sends promotional information, bonus offers, and platform updates — provided you have given your consent.
• Customer Support: Helps resolve complaints, inquiries, and technical issues you encounter.
• Legal compliance: Fulfills reporting and compliance obligations to relevant authorities when required by law.

Gcup5 does not sell your personal data to any third party. However, there are limited situations where we need to share your information with certain parties to enable the platform to operate smoothly:

• Payment service providers: DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, and our partner banks require transaction information to process your deposits and withdrawals.
• Game software providers: Third-party game providers integrated within the gcup5 platform receive only the minimum session data required to run the games.
• Identity verification services: Approved third-party KYC providers assist in verifying your identity to ensure platform security.
• Legal authorities: gcup5 will disclose the required information to authorities when mandated by a court order or applicable law.

All third parties involved in processing your data are required to comply with strict data security standards and to use that data solely for the specified purposes.

Gcup5 continuously invests in the latest security infrastructure to ensure your personal data is protected at all times. The security measures we implement include:

• 256-bit SSL Encryption for all data transmissions between the platform and users.
• Two-factor authentication (2FA) for all gcup5 account logins to prevent unauthorised access.
• 24/7 Monitoring by the gcup5 cybersecurity team to detect and neutralise any threats.
• Multi-layered access control — only gcup5 staff granted specific authorisation may access your personal data, and every access is automatically logged.
• Regular data backups to ensure your information is not lost due to technical failures or unforeseen incidents.
• Penetration testing conducted periodically by independent security experts to identify and address any system vulnerabilities.

Although gcup5 takes all reasonable precautions, no system on the internet is completely free from risk. We encourage you to take your own protective measures, such as using strong passwords and never sharing your login credentials with anyone.

Gcup5 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required by applicable laws in Malaysia.

• Active account data: Retained for as long as your account is active and for a minimum of 7 years after account closure to meet audit and legal compliance requirements.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysia's financial legal requirements.
• Support communication log: Retained for 2 years from the date of last interaction for reference and service improvement purposes.
• Technical data and access logs: Retained for 12 months for security and fraud detection purposes.

Once the retention period expires, gcup5 will securely delete or anonymize your data in accordance with established procedures.

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by gcup5:

• Right to access: You have the right to request and receive a copy of the personal data we hold about you.
• Right to rectification: You have the right to request gcup5 to correct any of your personal data that is inaccurate, incomplete, or outdated.
• Right to object to processing: You may object to the use of your personal data for direct marketing purposes at any time.
• Right to withdraw consent: If the processing of your data is based on your consent, you may withdraw that consent at any time, although this may affect our ability to provide certain services.

To submit any request regarding your rights, please contact the gcup5 support team via live chat on the platform. We will process your request within 21 business days from the date of receipt.

Gcup5 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit the gcup5 website.

• Essential cookies: Required for core gcup5 platform functions such as login verification and session security. These cookies cannot be disabled.
• Performance cookies: Helps us understand how users interact with the platform so we can continuously improve the overall user experience.
• Functional cookies: Remembers your preferences such as language, display theme, and other settings to deliver a more personalized experience.
• Analytics cookies: Enables gcup5 to analyze traffic and usage patterns for platform improvement purposes.

You can control and manage cookies through your web browser settings. However, disabling certain cookies may affect the functionality and your experience on the gcup5 platform.

Gcup5 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or platform service improvements. Any material changes will be communicated to you via:

• A prominent notice on the gcup5 homepage at least 14 days before any changes take effect.
• Email notification sent to your registered email address for significant changes.
• In-platform display upon login to ensure you are aware of the latest updates.

The "Updated" date at the top of this page reflects the last time this Privacy Policy was revised. Your continued use of the gcup5 platform after changes take effect constitutes your acceptance of the updated terms. It is good practice to review this Privacy Policy periodically.