This Privacy Policy explains how gcup4 collects, uses, stores, and protects the personal data of players accessing our platform. We take data privacy seriously — this document tells you exactly what we do with your information and why.
gcup4 collects only the personal data that is strictly necessary for the purposes described in this Policy. We do not harvest data speculatively or retain it beyond the periods stated herein.
All personal data held by gcup4 is stored on encrypted servers with access controls limited to authorised personnel. Payment credentials are never stored in plain text and are handled exclusively through certified payment processors.
gcup4 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Any third-party data sharing is limited to what is necessary for platform operations and is governed by strict data processing agreements.
You have the right to access, correct, and request deletion of your personal data held by gcup4, subject to applicable legal and regulatory retention obligations. Exercise these rights by contacting our support team.
gcup4 operates with awareness of the Personal Data Protection Act 2010 (PDPA) of Malaysia. Players in Kuala Lumpur, Penang, Johor Bahru, and across Malaysia can be assured their data is handled with compliance in mind.
In the unlikely event of a data breach affecting your personal information, gcup4 will notify affected players promptly and take all reasonable steps to contain and remedy the breach in accordance with applicable notification obligations.
1.1 This Privacy Policy ("Policy") sets out how gcup4 ("gcup4", "we", "us", or "our"), the operator of the online gaming platform accessible at gcup4.co, collects, uses, discloses, stores, and protects the personal data of individuals ("you", "your", or "Player") who access or use the gcup4 Platform.
1.2 gcup4 is committed to protecting the privacy and security of your personal data. This Policy is intended to be read in plain, accessible English so that every player — whether based in Kuala Lumpur, Penang, Johor Bahru, Ipoh, or elsewhere in Malaysia — understands precisely how their information is handled.
1.3 This Policy should be read alongside the gcup4 Terms & Conditions. By registering for a gcup4 Account or using any part of the Platform, you acknowledge that you have read and understood this Policy.
1.4 gcup4 takes note of the Personal Data Protection Act 2010 (PDPA) of Malaysia and operates in a manner consistent with its data protection principles, as well as the data protection requirements applicable under gcup4's international gaming authority licence.
gcup4 collects personal data in the following categories, depending on the nature of your interaction with the Platform:
gcup4 does not store full payment card numbers. Card-based payment processing, where applicable, is handled exclusively by certified PCI-DSS compliant payment processors.
3.1 Directly from you. The majority of personal data gcup4 holds is provided by you directly — during registration, KYC submission, deposit and withdrawal requests, or when you contact our support team.
3.2 Automatically through the Platform. Technical data (IP address, device information, session data) is collected automatically as you interact with the gcup4 Platform. This collection is necessary for Platform security, fraud detection, and regulatory compliance.
3.3 Through cookies and similar technologies. gcup4 uses cookies and similar tracking technologies to maintain session state, detect fraud, and improve Platform performance. See Section 7 for full details.
3.4 From third-party verification services. Where gcup4 engages third-party KYC or identity verification providers to verify the information you have provided, those providers may supply gcup4 with verification results and associated data. gcup4 retains only the minimum data required for compliance purposes from such checks.
3.5 From payment processors. Payment transaction data — including transaction status, amount, and reference numbers — is received from gcup4's authorised payment processing partners as part of the deposit and withdrawal workflow.
gcup4 uses your personal data for the following purposes:
gcup4 processes your personal data on the following legal bases:
6.1 gcup4 does not sell, rent, or trade your personal data. Data is shared with third parties only in the following circumstances:
6.2 All third parties with whom gcup4 shares personal data are contractually bound to use that data only for the specified purpose and to maintain appropriate security measures.
7.1 gcup4 uses cookies and similar technologies (such as local storage and session tokens) to operate and improve the Platform. These technologies serve the following purposes:
7.2 Most browsers allow you to control cookie settings. Disabling essential cookies will impair your ability to use the gcup4 Platform, including the login function. Disabling non-essential cookies will not prevent you from using the Platform but may affect the quality of your experience.
8.1 gcup4 retains personal data for as long as is necessary to fulfil the purposes described in this Policy and to comply with applicable legal and regulatory obligations.
8.2 Account data (identity, contact, and financial records) is retained for a minimum of five (5) years following Account closure, in accordance with anti-money laundering and gaming regulatory record-keeping requirements.
8.3 Technical and session data is retained for a shorter period (typically twelve (12) months) unless longer retention is required for fraud investigation or regulatory purposes.
8.4 Marketing communications opt-in records are retained for the duration of your subscription to such communications and for a reasonable period thereafter for compliance evidence purposes.
8.5 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to any individual.
9.1 gcup4 implements technical and organisational security measures appropriate to the risk presented by the processing of your personal data. These measures include:
9.2 Notwithstanding these measures, no internet transmission or electronic storage system is completely secure. gcup4 cannot guarantee absolute security, and Players should also take reasonable steps to protect their own Account credentials.
10.1 As an internationally licensed gaming operator, gcup4 may transfer personal data to servers or service providers located outside Malaysia. Any such transfer is made subject to appropriate safeguards — including contractual obligations requiring the recipient to maintain data protection standards equivalent to those described in this Policy.
10.2 Where personal data is transferred outside Malaysia, gcup4 takes steps to ensure that the transfer is lawful and that appropriate protections are in place for your data rights.
Subject to applicable law and regulatory restrictions (including data retention obligations under gcup4's gaming licence), you have the following rights in respect of your personal data held by gcup4:
To exercise any of these rights, please contact gcup4 at [email protected]. gcup4 will respond to verified requests within thirty (30) days. In complex cases, this period may be extended by a further sixty (60) days with notice.
12.1 The gcup4 Platform is strictly intended for adults aged 21 and above. gcup4 does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the registration process, and accounts identified as belonging to persons under 21 are suspended immediately.
12.2 If you believe that gcup4 has inadvertently collected personal data from a person under the age of 21, please contact [email protected] immediately. gcup4 will investigate and take prompt corrective action, including deletion of the relevant data.
13.1 The gcup4 Platform does not contain links to third-party websites for commercial or advertising purposes. Game software interfaces delivered within the gcup4 Platform by third-party providers operate under separate privacy terms applicable to those providers, and gcup4 is not responsible for the data practices of its game software partners beyond the terms of their data processing agreements with gcup4.
14.1 gcup4 reserves the right to amend this Privacy Policy at any time. Material changes will be communicated to registered Players via their registered email address and/or by a prominent notice on the Platform prior to the change taking effect.
14.2 The date of the most recent revision is displayed at the top of this page. We encourage Players to review this Policy periodically to stay informed about how gcup4 handles personal data.
14.3 Your continued use of the gcup4 Platform following notification of an amended Policy constitutes your acknowledgement of the updated version.
15.1 If you have any questions about this Privacy Policy or wish to exercise any of your data rights, please contact gcup4 at:
15.2 If you are not satisfied with gcup4's response to a data-related complaint, you may escalate the matter to the relevant data protection authority in your jurisdiction or to the dispute resolution body applicable under gcup4's gaming licence.
15.3 gcup4 targets an initial response to all data-related queries within five (5) business days.
gcup4 is committed to protecting your personal information. Play with confidence — your data is encrypted, secured, and never sold.
21+ only. Please gamble responsibly.