Gcup5 Privacy Policy – Malaysia Personal Data Protection

Gcup5 takes the privacy of every member seriously. This Privacy Policy explains exactly what data we collect, how it is used, who can access it, and what rights you have as a gcup5 platform user in Malaysia.

Updated: 1 January 2026 SSL 256-bit Protected
10
Section
256-bit
SSL Encryption
0
Data Sales
256-bit SSL
Secure Data
No Data Sales
User Rights
PDPA Compliant
24x7 Support

Gcup5's Privacy Commitment to Malaysian Members

Six core principles that form the foundation of how gcup5 handles and protects your personal data

Industry-Standard Encryption

All data transmitted between your device and gcup5 servers is protected by 256-bit SSL encryption — the same standard used by leading banking institutions in Malaysia. This ensures your login credentials, personal data, and financial transaction details cannot be intercepted by any unauthorised third party in transit.

No Data Sales

Gcup5 has never sold, rented, or traded members' personal data to any third party for commercial purposes, and never will. Your data is not our product. The information you provide to gcup5 is used solely for platform operations, identity verification, payment processing, and improving your own user experience.

PDPA Malaysia Compliant

The gcup5 Privacy Policy is built in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). We understand our obligations under local law to protect user privacy, and we implement data protection standards that go beyond the minimum requirements set out in that legislation to ensure our members are always safeguarded.

Full Control in Your Hands

Gcup5 members have full control over their personal data. You may access, update or request deletion of your data at any time through your account settings or by contacting our support team. gcup5 does not collect data beyond what is necessary for the platform's operation, and processes all data-related requests within a reasonable timeframe.

Secure Data Storage

Gcup5 members' personal data is stored on servers protected by multi-layered access controls, advanced firewalls, and round-the-clock security monitoring. Access to member data is restricted to staff with a legitimate need, and all access is logged and periodically audited to detect any suspicious activity.

Clear Change Notification

Whenever gcup5 makes changes to this Privacy Policy, we will notify members via their registered email or in-platform notification at least 14 days before the changes take effect. We will not make abrupt changes without appropriate notice, so you are always kept informed of how your data is handled at all times.

Important Notice:

This Privacy Policy applies to all users and members of the gcup5.best platform. By registering or using gcup5, you agree to the data collection and usage practices described herein. Please read this document in full before proceeding with registration.

Introduction – Who Is Responsible for Your Data

This Privacy Policy is published by gcup5 ("we", "the platform" or "gcup5") and describes how we collect, process, store and protect your personal data as a user or member of the gcup5.best platform. gcup5 is the data controller and processor responsible for all personal information collected through our platform.

Gcup5 provides online entertainment services including slots, table games, live casino, and Sports Betting to users in Malaysia. In delivering these services, we require certain personal information from you for purposes that will be explained further in the sections of this policy below.

We have built this policy on a principle of complete transparency – there is nothing we hide about how we handle your data. If at any time you have a question not answered by this document, the gcup5 privacy team can be contacted directly by email at support@gcup5.best and we will respond within 48 business hours.

Summary: gcup5 is the party responsible for your data. We operate transparently and in compliance with Malaysia's Personal Data Protection Act (PDPA 2010).

Personal Data gcup5 Collects

Gcup5 only collects data that is strictly necessary to provide the services you request and to meet our relevant legal obligations. The following are the categories of data we collect:

Data you provide directly to gcup5:

  • Registration information: Full name, email address, Malaysian phone number, date of birth and the password you choose when registering your gcup5 account.
  • Identity verification information: MyKad number, identity document image, or other relevant documents requested during the KYC (Know Your Customer) process for age and identity verification purposes.
  • Financial information: Details of the payment methods you use, including account numbers or digital wallet IDs (Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay) or bank account information for FPX Maybank2u or CIMB Clicks transactions. gcup5 does not store full credit or debit card numbers — only secure tokens authorised by the payment provider.
  • Communication with gcup5: Records of all live chat conversations, emails, and WhatsApp interactions with our support team.

Data collected automatically while you use the gcup5 platform:

  • Technical data: IP address, device type, operating system, web browser, screen resolution, and other related technical information.
  • Usage data: Pages visited, games played, session duration, buttons clicked, and navigation patterns within the gcup5 platform.
  • Transaction data: A complete record of all deposits, withdrawals, bets, winnings, and bonuses associated with your gcup5 account.
  • Approximate location data: Country or region based on your IP address for the purpose of service eligibility verification.
Data Category Sample Information Requirements
Identity Name, date of birth, MyKad Mandatory – age verification & KYC
Contact Email, phone number Mandatory – communications & login
Finance E-wallet ID, bank account details Mandatory – deposits & withdrawals
Technical IP, device, browser Automatic – security & analytics
Usage Games played, session duration Automatic – platform improvements
Transactions Deposit, betting and winnings records Mandatory – financial records & audit
How gcup5 Uses Your Data

Gcup5 uses the personal data collected for legitimate and necessary purposes only. We do not process your data for any purpose unrelated to the provision of gcup5's services to you. The following are the primary purposes for which your data is used:

  • Account management: To create, manage and maintain your gcup5 account, including the login process, identity verification and account settings management.
  • Service provision: To allow you to access and use all features of the gcup5 platform, including slots, Table Games, Live Casino, and Sports Betting covering football, badminton, and e-sports.
  • Payment processing: To process deposits via Touch 'n Go eWallet, GrabPay, DuitNow, FPX, Boost and ShopeePay, and to process your winnings withdrawals to the payment method registered under your name.
  • Security and fraud prevention: To detect and prevent unauthorized access, fraud, money laundering, and activities that violate gcup5's Terms & Conditions.
  • Customer support: To provide accurate and effective assistance when you contact the gcup5 support team via live chat, email or WhatsApp.
  • Legal compliance: To fulfil relevant legal obligations, including KYC (Know Your Customer) and AML (Anti-Money Laundering) requirements set by the relevant regulatory authorities.
  • Platform improvements: To analyse aggregated and anonymised usage patterns in order to improve the user experience, refine the interface and develop new features relevant to Malaysian users.
  • Service communications: To send important notifications regarding your account, policy updates, transaction confirmations, and relevant security information.
  • Direct marketing (with consent): To send you promotional information, bonus offers, and the latest gcup5 updates – but only if you have given explicit consent to receive such marketing communications. You may withdraw this consent at any time.

gcup5 does not use your data to make automated decisions that materially affect you without human oversight. Any significant account-related decisions involve manual review by the gcup5 team.

Sharing Data with Third Parties

Gcup5 does not sell, rent, or trade members' personal data to third parties for commercial purposes under any circumstances. However, there are limited situations where gcup5 needs to share certain data with trusted third parties for platform operational purposes:

  • Payment service providers: gcup5 shares the necessary transaction information with payment gateway providers such as Touch 'n Go, GrabPay, DuitNow, Boost, and ShopeePay solely for the purpose of processing your deposits and withdrawals. These providers maintain their own privacy policies and are required to comply with strict payment security standards.
  • Game software providers: To deliver a high-quality gaming experience to gcup5 members, we work with world-class game providers such as Pragmatic Play and Microgaming. Data shared with these providers is limited to the technical information required for game functionality, and no personal identifying data is shared beyond what is strictly necessary.
  • Cloud services and infrastructure: gcup5 uses reputable cloud service providers to store and process platform data. All such providers are bound by strict data processing agreements and are required to comply with international security standards.
  • Law enforcement authorities: gcup5 will disclose personal data to the relevant authorities when required to do so by law, court order, or lawful directive from Malaysian authorities. In such cases, we will notify you of the disclosure unless prohibited by law from doing so.

All third parties that gcup5 works with are required to sign confidentiality agreements and data processing agreements that bind them to privacy and security standards equivalent to or exceeding gcup5's own.

gcup5 Guarantee: We never share member data with third-party advertising companies, data brokers or any entity that does not have a legitimate operational need to access it.

gcup5 Data Security Measures

Gcup5 implements a range of technical and organisational security measures to protect members' personal data from unauthorised access, loss, destruction, or accidental disclosure:

  • SSL 256-bit Encryption: All communications between your browser and gcup5's servers are encrypted using the latest TLS/SSL protocol with 256-bit encryption keys, making interception virtually impossible.
  • Data-at-rest encryption: Sensitive data stored in gcup5's database is encrypted using robust encryption algorithms, ensuring the data remains unreadable even in the event of unauthorized physical access to the servers.
  • Strict access controls: Access to gcup5 member data is restricted to staff with a documented, legitimate need. All access requires multi-factor authentication and is automatically logged for audit purposes.
  • 24-hour security monitoring: gcup5's automated security monitoring system operates around the clock to detect and alert on any suspicious activity or anomalies in data access.
  • Regular security testing: gcup5 conducts regular penetration testing and security audits by independent security experts to identify and address any vulnerabilities before they can be exploited.
  • Incident response procedures: gcup5 has a tested incident response procedure in place to address any data breach quickly and effectively, including a process for notifying affected members within a stipulated timeframe.

While gcup5 takes all reasonable steps to protect your data, no security system can guarantee absolute protection. You also play an important role in your account's security by using a strong password, not sharing your login credentials, and reporting any suspicious activity to us promptly.

Cookies and Tracking Technologies

Gcup5 uses cookies and similar tracking technologies to enhance your experience on our platform. The types of cookies we use are as follows:

  • Essential cookies (mandatory): These cookies are required for core gcup5 platform functions such as login authentication, session management, and security. Without them, the platform will not work properly. These cookies cannot be disabled.
  • Performance and analytics cookies: We use analytics tools (with anonymised data) to understand how users interact with the gcup5 platform. This information helps us identify issues and improve the overall user experience.
  • Functional cookies: These cookies remember your preferences — such as language, preferred odds format and other display settings — so you don't need to reconfigure them each time you log in to gcup5.
  • Marketing cookies (optional): With your consent only, gcup5 may use marketing cookies to show you more relevant promotions based on your interests and activity within the gcup5 platform. You may opt out of these cookies at any time.

You can manage your cookie settings through your web browser settings. Please note that disabling certain cookies may affect the functionality of the gcup5 platform. For more information on how to manage cookies, please refer to your web browser's help documentation.

gcup5 does not use third-party cookies for cross-site advertising purposes. We do not track your online activity outside the gcup5.best platform.

Data Retention Period

Gcup5 retains your personal data only for as long as necessary for the purposes stated in this policy, or as required by applicable law. The general principles governing gcup5's data retention periods are as follows:

  • Active account data: For as long as your gcup5 account remains active and has not been closed, all data associated with your account will be retained to allow the platform to function properly.
  • Data after account closure: Once your gcup5 account is closed, we will retain your personal data and transaction records for a minimum period of 7 years as required under Malaysia's applicable financial and anti-money laundering legislation.
  • Financial transaction records: All deposit, withdrawal, betting, and winnings records are retained for the period required under Malaysian accounting and financial legislation.
  • Security logs: Access logs and security logs are retained for a reasonable period for the purposes of detecting security threats and investigating incidents.
  • Support communication records: Customer support conversation records are retained for a sufficient period to resolve any disputes that may arise.

Once the specified retention period has elapsed, gcup5 will delete or destroy your personal data securely in accordance with established data deletion procedures, ensuring the data cannot be recovered or accessed once the deletion process is complete.

Your Privacy Rights as a gcup5 Member

As a gcup5 member in Malaysia, you have the following rights regarding your personal data held by gcup5, in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia:

Right to Access

You have the right to request a copy of the personal data gcup5 holds about you at any time. gcup5 will provide this information within 14 business days of receiving your request.

Right to Rectification

If the personal data gcup5 holds about you is inaccurate or out of date, you have the right to request a correction. You may update certain information directly through your gcup5 account settings.

Right to Erasure

You may request deletion of your personal data under certain circumstances. Please note that gcup5 may need to retain some data to fulfil legal obligations even after a deletion request is received.

Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes at any time. gcup5 will honour that request and stop sending you marketing communications.

Right to Data Portability

You may request gcup5 to provide your personal data in a machine-readable format for the purpose of transferring it to another service provider of your choice.

Right to Withdraw Consent

Where data processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing that took place prior to the withdrawal.

To exercise any of the rights above, please contact gcup5 by email at support@gcup5.best, stating the type of request, your full name, and the email address registered to your gcup5 account. gcup5 may need to verify your identity before processing any privacy rights request, to ensure your information is not disclosed to an unauthorised party.

Child Protection

The gcup5 platform is intended solely for individuals aged 18 and above. gcup5 does not knowingly collect or process personal data from individuals under the age of 18.

All gcup5 account registrations are subject to a strict age verification process. Should gcup5 determine that a minor's personal data has been collected without valid parental or guardian consent, we will take immediate steps to delete that data and close the account in question.

If you believe a minor has registered a gcup5 account or that a child's data has been inadvertently collected by our platform, please contact us immediately at support@gcup5.best so we can take the appropriate action without delay.

Important Notice: If you become aware that someone under the age of 18 is using the gcup5 platform, please report it to us immediately. gcup5 takes the protection of minors extremely seriously.

Contact gcup5 for Privacy Enquiries

If you have any questions, concerns, or complaints regarding the gcup5 Privacy Policy or how we handle your personal data, you can reach us through the following channels:

  • Privacy email: support@gcup5.best (please write "Privacy Enquiry" in the subject line)
  • Live chat: Available on gcup5.best, 24 hours a day, 7 days a week
  • WhatsApp: Number available after logging in to your gcup5 account

Gcup5 is committed to responding to all privacy-related enquiries within 48 business hours. For more formal or serious complaints involving a privacy breach, gcup5 has a structured complaints handling procedure and will provide a written response within 7 business days.

If you are dissatisfied with gcup5's response to your privacy complaint, you have the right to refer the matter to the Department of Personal Data Protection under the Ministry of Communications and Digital Malaysia, as provided for under the Personal Data Protection Act 2010.

Gcup5 will continue to update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The date last updated is always displayed at the top of this document. We encourage you to review this policy periodically to stay informed about how gcup5 protects your privacy.

The gcup5 support team operates 24 hours a day, 7 days a week, including public holidays. For privacy-related inquiries requiring immediate attention, use live chat for the fastest response.

FAQ – gcup5 Privacy Policy

The most frequently asked questions from members regarding privacy and data protection at gcup5

No, gcup5 has never sold, rented, or traded members' personal data to any advertiser or third-party data broker, and never will. The data you provide to gcup5 is used solely to operate your account, process payments via Touch 'n Go, GrabPay, DuitNow, and other local methods, and improve your experience on the gcup5 platform. You can use gcup5 with full confidence that your data will never be sold to any party for advertising purposes.

gcup5 uses SSL 256-bit encryption to protect all payment data in transit between your device and our servers. For digital wallet payment methods such as Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay, gcup5 stores only a secure token authorised by the wallet provider – not your full account details. For FPX Maybank2u and CIMB Clicks, transactions are processed directly through the respective bank's gateway and gcup5 does not store your banking login credentials in any form.

Yes, you have the right to request deletion of your personal data and gcup5 will process that request. Please note, however, that gcup5 may need to retain certain data for a specified period to fulfil legal obligations such as financial record-keeping and anti-money laundering requirements under Malaysian law. Data retained for these legal reasons will not be used for any other purpose. To initiate a data deletion request, send an email to support@gcup5.best with your account details, clearly stating your data deletion request.

Once your gcup5 account is closed, your personal data and transaction records will be retained for a minimum of 7 years as required under Malaysian financial and anti-money laundering laws. During this period, your data is securely stored and accessible only for legal compliance purposes or related dispute resolution. Upon expiry of the legally mandated retention period, your data will be securely destroyed in accordance with gcup5's established data deletion procedures.

Yes, gcup5 uses cookies to ensure the platform functions correctly, enhance the user experience, and analyse platform usage on an aggregate basis. Some cookies are essential (and cannot be disabled, as they are required for core functions such as login and session security), while optional cookies (such as marketing cookies) can be managed by you. You may control optional cookie settings through your web browser settings or through the cookie preference settings within the gcup5 platform where available. Disabling certain cookies may affect platform functionality, such as the ability to remember your preferences.

Your Privacy is gcup5's Priority

Gcup5 is built on a foundation of trust. With industry-grade data protection, no third-party data sales, and full control in your hands, you can play and bet on gcup5 with complete peace of mind.

SSL 256-bit Protected No Data Sales Full Control in Your Hands PDPA Malaysia Compliance
Bahasa Melayu