Privacy Policy gcup7 – Personal Data Protection for Malaysian Members

Gcup7 is an online betting and gaming platform operating for users in Malaysia. As the platform operator, gcup7 is the "Data Processor" as defined under Malaysia's Personal Data Protection Act 2010 and bears full responsibility for how members' personal data is handled.

This Privacy Policy applies to:

• All users who register a gcup7 account.
• Visitors to the gcup7 website who have not yet registered.
• All transactions and interactions that take place through the gcup7 platform.
• All devices and access methods used to access the gcup7 platform.

This Policy does not apply to third-party websites or services that may be linked to or integrated with the gcup7 platform. gcup7 encourages you to read the privacy policies of those third-party services separately.

Gcup7 collects several categories of personal data for the purposes outlined in Section 3. We only collect what is strictly necessary – nothing more.

A. Data You Provide Directly:

• Registration Information – Full name, date of birth, phone number, email address, and the username you choose when registering your gcup7 account.
• Identity Verification Information – A copy of your MyKad or other identity document requested during the KYC (Know Your Customer) process for account verification or prior to your first withdrawal.
• Financial Information – Payment method details you provide (e-wallet number, account holder name) to process deposits and withdrawals via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, or FPX.
• Communications with gcup7 – Any inquiry, complaint, or communication you send to the gcup7 support team via live chat or email.

B. Data Collected Automatically:

• Platform Usage Data – Betting history, markets browsed, gaming products used, login and logout times, and general activity on the gcup7 platform.
• Device & Technical Data – IP address, browser type, operating system, device type (smartphone or computer), screen resolution, and other technical information automatically transmitted when you access gcup7.
• Cookie & Session Data – Information collected through cookies and similar tracking technologies to enhance your user experience and protect the security of your login session.
• Location Data – Country or region information derived from your IP address for legal compliance and risk management purposes.

Gcup7 uses collected personal data solely for legitimate, stated purposes. We do not process your data for any purpose unrelated to the operation of the gcup7 platform.

Primary Purposes of Data Use:

• Account Management – Creating and managing your gcup7 account, processing registrations, verifying identity, and enabling secure login.
• Transaction Processing – Securely and accurately processes deposits and withdrawals via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX.
• Service Provision – Gives you access to all gcup7 products, including Malaysia Super League and EPL football betting, e-sports, Live Casino, slots, lottery, and virtual sports.
• Security & Fraud Prevention – Detecting and preventing fraudulent activity, money laundering, multiple account ownership, and any activity that violates gcup7's Terms & Conditions.
• Customer Support – Providing relevant and accurate assistance when you reach out to the gcup7 support team via live chat or email.
• Legal Compliance – Fulfilling Malaysian legal requirements, including PDPA 2010, anti-money laundering regulations, and applicable licensing obligations.
• Platform Improvements – Analysing usage patterns in aggregate (without identifying individuals) to improve the functionality, performance, and user experience of the gcup7 platform.
• Service Communications – Sending you important notifications relating to your account, changes to terms, security updates, and relevant transaction information.
• Direct Marketing – With your consent, sending you information about gcup7 promotions, bonuses, and offers that may interest you. You may unsubscribe from marketing communications at any time.

Gcup7 does not sell or rent members' personal data to any third party. That said, in the course of operating the platform, there are limited situations where gcup7 may need to share your personal data with certain parties.

Third Parties That May Receive Your Data:

• Payment Service Providers – Such as Touch 'n Go eWallet, GrabPay, DuitNow, and FPX providers that process your financial transactions. They receive only the data necessary to process the relevant transaction.
• IT Service Providers – Companies that provide the technical infrastructure, server hosting, cybersecurity, and other technical services required to operate the gcup7 platform. They are bound by strict confidentiality agreements.
• KYC Service Providers – Third-party identity verification services that assist gcup7 in verifying members' identities for anti-money laundering compliance purposes.
• Malaysian Authorities – gcup7 may be required to disclose data to Malaysian authorities such as the police, the Attorney General's Chambers, or financial regulators if ordered to do so by law or a valid court order.

In all cases where data is shared, gcup7 ensures that the receiving party is bound by an appropriate data protection agreement and uses the data solely for the specified purpose.

Gcup7 continually invests in security infrastructure to ensure members' personal data is always protected against unauthorised access, loss, misuse, or unintended disclosure.

gcup7 Technical Security Measures:

• 256-bit SSL Encryption for all data transmitted between your browser and gcup7's servers.
• Data encryption at rest – Sensitive data is stored in encrypted form within gcup7's databases.
• Tiered access controls – Only gcup7 staff who genuinely require access to specific data in order to perform their duties are permitted to access it.
• 24/7 security monitoring – An automated monitoring system that detects suspicious activity or intrusion attempts in real time.
• Regular security audits – gcup7 conducts regular security assessments and penetration testing to identify and address vulnerabilities before they can be exploited.
• Two-factor authentication (2FA) – Available to gcup7 members as an additional layer of protection for their accounts.

While gcup7 takes all reasonable steps to protect your data, no security system in the world can guarantee 100% protection against every threat. You also play an important role in safeguarding your own account.

Gcup7 uses cookies and similar tracking technologies to enhance your experience on the platform and to keep your login session secure. Below is an explanation of the types of cookies gcup7 uses.

Types of Cookies Used by gcup7:

• Essential Cookies – Required for the core functions of the gcup7 platform, such as maintaining your login session, processing bets, and managing your bet slip. These cookies cannot be disabled without affecting platform functionality.
• Preference Cookies – Saves your preferences such as language, time zone, and display settings to ensure a more personalised and consistent experience every time you use gcup7.
• Analytics Cookies – Helps gcup7 understand how members use the platform – which pages are visited most frequently, how long sessions last, and which features are most popular. This data is collected in aggregate and does not personally identify individual users.
• Security Cookies – Used to detect suspicious activity, prevent fraud, and protect the integrity of your login session on gcup7.

Managing Your Cookies:

You can manage or delete cookies through your web browser settings. Please note, however, that disabling certain cookies may affect the functionality and your overall experience on the gcup7 platform. Essential cookies cannot be disabled without causing significant functional issues.

Under Malaysia's Personal Data Protection Act 2010 and gcup7's commitment to privacy, you as a member hold several important rights regarding the personal data gcup7 holds about you.