1 Privacy Policy Introduction & Scope
This Privacy Policy is issued by gcup3 and applies to all users who register, access, or use any services provided through the gcup3 platform. We are committed to ensuring your personal information is handled with full responsibility, transparency, and in accordance with the laws in force in Malaysia.
This document describes the types of data we collect, the purpose of collection, parties that may receive your data, retention periods, and your rights as the data owner. By using the gcup3 platform, you consent to the practices described in this privacy policy.
This privacy policy is to be read together with Terms and Conditions gcup3. Together, these two documents form the entire agreement between you and gcup3 regarding use of the platform.
2 Types of Personal Data We Collect
Gcup3 collects the personal information needed to operate the platform safely and efficiently. We only collect data that is relevant and necessary — nothing more.
Data You Provide Directly
- Full name, date of birth and gender collected during account registration
- Email address and mobile number for account verification
- Identity documents (MyKad, passport) for the KYC verification process
- Bank account or digital wallet details for deposit and withdrawal purposes
- Current residential address submitted for identity verification
Automatically Collected Data
- Your IP address, device type, and web browser information
- Activity log data including login times, games played, and transactions
- Cookies and similar tracking technologies to enhance the user experience
- Approximate geolocation data for service area verification purposes
| Data Type | Purpose of Collection | Retention Period |
|---|---|---|
| Identity Information | Account registration & KYC | Throughout the active account period |
| Financial Data | Payment processing | 7 years (legal requirement) |
| Activity Log | Security & audit | 2 years |
| Technical Data | Platform improvement | 12 months |
| Session Cookies | User experience | Session end / 30 days |
3 Purpose of Personal Data Use
Gcup3 uses the personal data collected for legitimate, clearly stated purposes. We will not use your data for any other purpose without obtaining your consent first.
- Verifying member identity and processing gcup3 account registrations
- Conducting KYC processes to ensure compliance with legal requirements
- Processing deposits, withdrawals and all financial transactions accurately
- Detecting and preventing fraud, money laundering and other unlawful activities
- Providing responsive and effective customer support
- Sending important notifications related to your gcup3 account, transactions and promotions
- Improving overall platform services and user experience
- Complying with applicable legal and regulatory requirements
4 Data Sharing with Third Parties
Gcup3 does not sell or disclose members' personal data to third parties for marketing purposes. However, there are limited situations where data sharing is necessary for smooth platform operations and legal compliance.
Parties Who May Receive Your Data
- Payment Provider: Transaction data is shared with trusted payment gateways to process deposits and withdrawals
- KYC Service Provider: Identity documents are shared with verified identity verification partners
- Legal Authority: gcup3 will comply with any lawful request from the relevant authorities
- Hosting & Infrastructure Provider: Data stored on servers managed by certified infrastructure providers
All third parties receiving data from gcup3 are bound by strict confidentiality agreements and must comply with the data protection standards set by gcup3.
5 Data Security and Protection Measures
The security of member personal data is gcup3's highest priority. We continuously invest in security infrastructure to ensure your data is always protected against increasingly sophisticated cyber threats.
- 256-bit SSL encryption for all data communications between users and the server
- Sensitive data encrypted at rest using AES-256 standards
- Enterprise-grade firewall and intrusion detection system
- Round-the-clock security monitoring by our cybersecurity team, 24 hours a day, 7 days a week
- Periodic penetration testing by independent security experts
- Established incident response procedures for any data breach
While gcup3 takes all reasonable steps to protect your data, no system is completely foolproof. We encourage members to use strong passwords and never share their login credentials.
6 Use of Cookies and Tracking Technologies
Gcup3 uses cookies and similar tracking technologies to enhance your browsing experience on our platform. Cookies are small text files stored on your device when you visit the gcup3 website.
Types of Cookies Used by gcup3
- Essential Cookies: Required for core platform functions such as login and navigation
- Performance Cookies: Helping us understand how users interact with the platform for continuous improvement
- Preference Cookies: Saving your personal preferences such as language and display theme
You can manage or disable cookies through your web browser settings. However, disabling essential cookies may affect certain functions of the gcup3 platform.
7 Your Rights as a Data Owner
As a gcup3 member, you have certain rights regarding your personal data protected under Malaysia's Personal Data Protection Act 2010. gcup3 fully respects these rights and will assist you in exercising them.
Right to Access
You may request a copy of the personal data gcup3 holds about you at any time.
Right to Rectification
You may request gcup3 to correct any inaccurate or incomplete personal data.
Right to Erasure
You may request that your personal data be deleted, subject to legal requirements.
Right to Object
You may object to the processing of your data for direct marketing purposes at any time.
Right to Data Portability
You may request your data in a portable format for transfer to another platform.
Right to Restriction
You may request gcup3 to restrict the processing of your data in certain situations provided by law.
8 International Data Transfer
In the course of its operations, gcup3 may transfer member personal data to servers or service providers operating outside Malaysia. Any such transfer is only carried out when an adequate level of data protection can be ensured.
Gcup3 ensures all international data transfers are carried out with appropriate contractual safeguards, including the use of standard data protection clauses and binding data processing agreements.
9 Child Data Protection
The gcup3 platform is not intended for individuals under the age of 18. gcup3 does not knowingly collect personal data from minors. Should we discover that data has been collected from an underage individual, we will promptly take steps to delete that information and close the relevant account.
If you become aware that someone under the age of 18 has registered a gcup3 account, please contact our support team immediately via live chat.
10 Changes to the Privacy Policy
Gcup3 reserves the right to amend or update this privacy policy at any time to reflect changes in our practices, legal requirements, or the services we offer. Members will be notified of any material changes via in-platform notifications or email at least 14 days before the changes take effect.
The "Last Updated" date at the top of this document will always reflect the latest version of the gcup3 privacy policy. We encourage you to review this page periodically to stay informed about how we protect your information.
11 Contact Us for Privacy Enquiries
If you have any questions, concerns, or wish to exercise your data rights, the gcup3 Data Protection Officer team is ready to assist you. We are committed to responding to all privacy enquiries within 5 working days.
You can reach the gcup3 support team via live chat, available 24 hours a day, 7 days a week. All data rights requests are handled seriously and recorded for internal audit purposes.