Privacy Policy gcup5 – How We Protect the Personal Data of Malaysian Members

This Privacy Policy explains how gcup5 ("Platform", "we") collects, stores, processes, uses, and protects your personal data as a member or user of the gcup5 platform at gcup5.click. It applies to all gcup5 services, including Sports Betting, Live Casino, slots, lottery, badminton, and all other games offered on the platform.

Gcup5 operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) — the primary legislation governing the handling of personal data in Malaysia. As a platform serving Malaysian users, we take this responsibility wholeheartedly, not merely as a legal obligation but as a core part of gcup5's values.

By registering a gcup5 account, you consent to the collection and use of your personal data as described in this Privacy Policy. You have the right to withdraw this consent at any time, which may affect your ability to use certain gcup5 services that require that data to function.

Gcup5 collects personal data from various sources when you use our platform. Below is a detailed breakdown of the data we collect, organised by category:

Gcup5 does not collect sensitive data such as health information, religious beliefs, political views, or ethnic origin unless required by law or necessary for identity verification in specific cases.

Gcup5 only collects and processes your personal data for legitimate, clearly defined purposes. The primary purposes for which gcup5 collects data are as follows:

• Account Management: Creating, verifying, and managing your gcup5 account — including the identity verification (KYC) process required to ensure account security and legal compliance.
• Payment Processing: Processing deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, CIMB Clicks, and FPX securely and accurately.
• Service Provision: Giving you access to all gcup5 services — EPL and Malaysia Super League Sports Betting, Live Casino, slots, badminton, lottery, and more.
• Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, unauthorised access, and misuse of the gcup5 platform.
• Customer Support: Providing technical support and issue resolution via live chat, email, and WhatsApp in Bahasa Melayu.
• Legal Compliance: Meeting the legal and regulatory obligations applicable to gcup5's operations in Malaysia.
• Platform Enhancement: Analysing usage patterns to improve the user experience, platform performance, and gcup5's game offerings.
• Service Communications: Sending transaction notifications, account security updates, and other important service information related to your account.

All use of gcup5 members' personal data is based on one or more valid legal grounds under Malaysia's PDPA 2010 — whether your consent, contractual necessity, a legal obligation, or a legitimate interest that does not override your rights and freedoms.

In the context of the gcup5 platform, this means we use your data to:

• Verifying your identity during registration and financial transactions as required under Malaysia's anti-money laundering laws.
• Processing deposits and withdrawals accurately to the correct payment method — whether TNG, GrabPay, or your bank account.
• Providing accurate betting activity records for accounting purposes and fair dispute resolution.
• Analysing betting patterns to detect signs of problem gambling and provide appropriate responsible gaming support.
• Personalising your platform experience to surface games and offers more relevant to your interests — for example, if you regularly bet on Super League football, gcup5 can give local matches greater prominence.
• Verifying that you meet the eligibility criteria for specific promotions and bonuses in accordance with the relevant offer terms.

Gcup5 does not employ any automated decision-making processes that produce legal or similarly significant effects on you without meaningful human involvement.

Gcup5 does not sell, rent, or share member personal data to third parties for marketing or other commercial purposes without your explicit consent. However, there are limited circumstances where gcup5 may need to share your data with certain parties to enable the platform to function:

• Payment Providers: Required transaction information is shared with e-wallet providers (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow) and Malaysian banks via FPX to process your deposits and withdrawals. This sharing is strictly limited to data necessary for the transaction.
• Game Providers: Minimal session data is shared with third-party game providers such as Pragmatic Play, PG Soft, and Evolution Gaming to enable gameplay and resolve game result disputes where necessary.
• Technical Service Providers: gcup5 uses trusted technical service providers for hosting, email delivery, and platform analytics. All such providers are bound by strict confidentiality agreements and may only use your data for purposes specified by gcup5.
• Legal Requirements: gcup5 may be required to disclose your personal data to Malaysian authorities such as the police, courts, or regulatory agencies if mandated by a court order or applicable law.

Gcup5 continually invests in security infrastructure to protect members' personal data from unauthorised access, disclosure, alteration, or destruction. The technical and organisational security measures gcup5 employs include:

• 256-bit SSL/TLS Encryption: All communications between your device and gcup5's servers are protected with banking-grade encryption. The padlock icon in your web browser confirms a secure connection.
• Data-at-Rest Encryption: Sensitive data stored in gcup5's databases — including payment information and identification numbers — is kept in encrypted form using industry-recognised encryption algorithms.
• Internal Access Controls: Only gcup5 staff with a legitimate work requirement are permitted to access member personal data. All access is logged and continuously monitored. Every staff member undergoes background checks and data security training before access is granted.
• 24/7 Monitoring: gcup5's security monitoring system operates around the clock to detect and respond to any suspicious activity or potential data breaches.
• Regular Penetration Testing: gcup5 conducts regular security assessments by independent third parties to identify and address potential vulnerabilities before they can be exploited.
• Two-Factor Authentication: 2FA is available on all gcup5 member accounts as an additional layer of protection against unauthorised access.

While gcup5 takes reasonable measures to protect your data, no security system can guarantee 100% protection against all cyber threats. You also play an important role by keeping your password and devices secure when accessing gcup5.

Gcup5 does not retain your personal data longer than necessary for the purposes stated in this Privacy Policy, or as required by Malaysian law.

Gcup5's general data retention guidelines are as follows:

• Active Account Data: Retained for the duration your account remains active and for the post-closure period required by law — typically 7 years for financial records in accordance with Malaysian tax and company law requirements.
• Financial Transaction Records: Retained for a minimum of 7 years from the transaction date, as required under Malaysian law governing accounting and anti-money laundering.
• Support Communication Logs: Retained for 3 years for dispute resolution purposes and to support the continuous improvement of gcup5's customer support quality.
• Technical Data & Access Logs: Retained for a maximum of 12 months for security and fraud detection purposes.
• Marketing Data: Retained until you withdraw consent for marketing communications or close your gcup5 account.

Once a retention period expires, or upon your request for deletion, gcup5 will securely delete or destroy your data using methods that ensure it cannot be recovered. For data that must be retained for legal reasons, gcup5 will isolate it and strictly limit access.

Gcup5 uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device when you visit gcup5.click.

Types of cookies gcup5 uses:

• Essential Cookies: Required for the core functionality of the gcup5 platform — such as maintaining your login session, saving language preferences, and enabling payment processes to work. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collects information about how you use gcup5 — pages visited, time spent, and errors encountered. This data is collected in aggregate and anonymised form to help gcup5 improve the platform.
• Functional Cookies: Storing your preferences — such as favourite sports display, personal display settings, and notification preferences — to improve your experience on gcup5.

You can manage and disable cookies through your web browser settings. However, disabling essential cookies may affect your ability to log in and use certain gcup5 platform features properly.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection best practices, you have the following rights regarding your personal data held by gcup5:

• Right of Access: You have the right to request a copy of the personal data gcup5 holds about you. gcup5 will process this request within 14 business days.
• Right to Rectification: If any personal data held by gcup5 is inaccurate or out of date, you have the right to request a correction. You may also update your basic profile information directly through your gcup5 account settings.
• Right to Erasure: You may request the deletion of your personal data from gcup5's systems, subject to any applicable statutory data retention obligations. gcup5 will review and respond to such requests within 14 working days.
• Right to Withdraw Consent: Where data processing is based on your consent (such as marketing communications), you may withdraw that consent at any time through your account settings or by contacting gcup5.
• Right to Object You have the right to object to the processing of your personal data for direct marketing purposes at any time.
• Right to Lodge a Complaint If you are not satisfied with how gcup5 has handled your personal data, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.

To exercise any of the rights above, please contact the gcup5 privacy team by email at support@gcup5.click with the subject line "Data Privacy Request", and include your full name, gcup5 account number, and details of your request. We may need to verify your identity before processing certain requests as a security measure.

The gcup5 platform is for individuals aged 18 and above only. gcup5 does not knowingly collect personal data from individuals under the age of 18. All gcup5 account registration processes require age verification, and gcup5 takes reasonable steps to prevent registration by underage individuals.

Should gcup5 discover that personal data belonging to an individual under the age of 18 has been inadvertently collected, we will take immediate steps to delete that data and close the account in question. Parents or guardians who believe their underage child has registered a gcup5 account are urged to contact us immediately at support@gcup5.click.

Gcup5 also supports the efforts of the Malaysian government and civil society organisations in protecting young people from underage access to betting platforms. We encourage parents to have open conversations with their children about the risks of gambling and to make use of parental control tools available on their devices.

Gcup5 reserves the right to amend this Privacy Policy from time to time to reflect changes in our data practices, updated Malaysian legal requirements, or improvements to gcup5's services.

For material amendments that significantly affect how we handle your personal data, gcup5 is committed to:

• Notifying you via gcup5 platform notifications or email at least 14 days before changes take effect.
• Publishing the updated Privacy Policy on this page with a clearly stated effective date.
• Obtaining your renewed consent if an amendment involves using your personal data in a manner not originally agreed to.

It is your responsibility to review this Privacy Policy periodically. Continued use of the gcup5 platform after any amendments take effect will be considered acceptance of the revised terms, except for changes that require fresh explicit consent.

For any questions, concerns, or requests relating to gcup5's Privacy Policy and the handling of your personal data, please contact us through the following channels:

• Privacy Email: support@gcup5.click — use the subject line "Data Privacy Request" for formal requests relating to your data rights.
• Live Chat: Available 24/7 within the gcup5 platform for general enquiries about privacy and data security.
• WhatsApp: For urgent matters related to account security that may involve unauthorised access to your data.

Gcup5 is committed to responding to all privacy-related enquiries within 48 working hours and resolve formal data rights requests within 14 business days. For more complex cases requiring in-depth investigation, gcup5 will keep you informed of progress within the specified timeframe.

If you are unsatisfied with gcup5's response or handling of a privacy complaint, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia, under the Ministry of Communications.