Data Protection
Your privacy matters to gcup4. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and the rights you hold as a Member of the gcup4 platform.
gcup4 ("we", "us", "our", "gcup4") operates the online casino, sportsbook, and gaming platform accessible at gcup4.app (the "Platform"). We are committed to protecting the privacy and personal data of all individuals who interact with the gcup4 Platform, including registered Members, visitors, and prospective users.
This Privacy Policy ("Policy") sets out, in accordance with applicable data protection legislation, how gcup4 collects, processes, stores, discloses, and otherwise handles personal data. It applies to all personal data collected through the Platform, our customer support channels, and any other interaction you have with gcup4.
By registering an account on gcup4 or continuing to use the Platform, you acknowledge that you have read and understood this Policy. If you do not agree with any aspect of this Policy, you should not use the gcup4 Platform.
When you create a gcup4 account, we collect the personal data you provide during the registration process, including:
As required by our anti-money laundering obligations and responsible gaming commitments, gcup4 may collect copies of identity documentation, including government-issued identification (Malaysian NRIC, passport), proof of address (utility bill, bank statement), and proof of payment method.
We collect details of all financial transactions conducted through the gcup4 Platform, including deposit amounts, withdrawal requests, payment methods used (such as Touch 'n Go eWallet, Boost, Maybank, CIMB, and Public Bank), and transaction reference numbers. We do not store full payment card numbers or full e-wallet credentials.
We collect records of your gaming activity on the gcup4 Platform, including games played, bets placed, wager amounts, outcomes, session duration, and any bonuses applied or claimed.
When you access the gcup4 Platform, we automatically collect technical data including your IP address, browser type and version, operating system, device type, referring URL, pages visited, and session timestamps. This data is collected via server logs and cookies.
We retain records of communications between you and gcup4, including live chat transcripts, email correspondence, and support ticket histories.
| Purpose | Data Used |
|---|---|
| Account creation and authentication | Registration data, technical data |
| Identity verification and KYC compliance | KYC documents, registration data |
| Processing deposits and withdrawals | Financial data, identity data |
| Delivering gaming services and personalisation | Gaming activity, usage data |
| Fraud prevention and security monitoring | Technical data, financial data, communications |
| Customer support and dispute resolution | Communications data, gaming data |
| Responsible gaming monitoring | Gaming activity, financial data |
| Regulatory compliance and audit | All categories as required |
| Service communications (account notices) | Contact details, account data |
gcup4 does not use your personal data for unsolicited marketing without your explicit consent. Where you have consented to receiving promotional communications, you may withdraw consent at any time via your account settings or by contacting customer support.
gcup4 processes personal data on the following legal bases:
gcup4 shares personal data with carefully selected third-party service providers who assist in operating the Platform, including payment processors, game software providers, identity verification services, cloud infrastructure providers, and fraud detection systems. All such third parties are contractually required to process personal data only for the specified purpose and in accordance with applicable data protection standards.
gcup4 may disclose personal data to regulatory authorities, law enforcement agencies, or other government bodies where required by applicable law, court order, or regulatory requirement. We will not disclose more data than is strictly necessary to satisfy the relevant legal obligation.
gcup4 does not sell, rent, or otherwise transfer your personal data to any third party for commercial purposes. Your data is not a product at gcup4.
In the event of a merger, acquisition, restructuring, or sale of all or part of gcup4's business, personal data held by gcup4 may be transferred to the acquiring entity as part of the transaction. Members will be notified of any such transfer that materially affects the processing of their personal data.
The gcup4 Platform uses cookies and similar tracking technologies to operate core platform functions, maintain session continuity after gcup4 login, analyse usage patterns, and deliver a personalised experience. The categories of cookies used include:
You may manage your cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the gcup4 Platform.
gcup4 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to applicable legal and regulatory retention requirements. In particular:
When personal data is no longer required for any identified retention purpose, gcup4 will securely delete or irreversibly anonymise it.
Subject to applicable law and certain exceptions applicable to regulated industries, you have the following rights with respect to your personal data held by gcup4:
To exercise any of these rights, contact gcup4's Data Protection team at [email protected]. gcup4 will respond to verified requests within thirty (30) calendar days.
gcup4 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
Notwithstanding these measures, no internet-based platform can guarantee absolute security. In the event of a data breach that poses a risk to Member rights and freedoms, gcup4 will notify affected Members and the relevant regulatory authority in accordance with applicable law.
The gcup4 Platform is strictly restricted to individuals aged twenty-one (21) years and above. gcup4 does not knowingly collect personal data from individuals under the age of 21. Age verification checks are conducted as part of the KYC process. If gcup4 becomes aware that an account has been registered by an individual under the minimum age, the account will be suspended immediately, all associated data will be handled in accordance with applicable law, and the matter will be escalated to the relevant regulatory authority where required.
gcup4's operations involve the use of cloud infrastructure and third-party service providers that may process personal data in jurisdictions outside Malaysia. Where personal data is transferred to a country that does not provide an equivalent level of data protection, gcup4 ensures that appropriate safeguards are in place, such as standard contractual clauses or equivalent contractual protections, prior to any such transfer.
gcup4 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The effective date at the top of this document indicates when the current version came into force. Where material changes are made that significantly affect Member rights, gcup4 will notify registered Members via the email address held on their account with a reasonable period of notice prior to the changes taking effect. Continued use of the Platform following notification constitutes acceptance of the revised Policy.
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by gcup4, please contact us via the following channels:
gcup4 aims to acknowledge all data protection-related enquiries within five (5) business days and to resolve substantive requests within thirty (30) calendar days. Complex requests may take longer, in which case gcup4 will provide an interim acknowledgement with an estimated resolution timeframe.
Data Protection Commitments
gcup4 does not sell, rent, or trade your personal data to any third party for commercial purposes. Your information is used solely to operate the Platform, fulfil regulatory obligations, and improve your experience.
Every data transmission between your browser and gcup4's servers is encrypted using 256-bit SSL — the same standard applied by major Malaysian banks like Maybank and CIMB for online banking.
Access, correct, export, or request deletion of your gcup4 data at any time. Submit a data request to our support team and receive a verified response within 30 calendar days.
gcup4 only collects data that is necessary for account operation, financial processing, regulatory compliance, and platform improvement. We do not collect data beyond what is required for these purposes.
gcup4 retains personal data only for as long as legally required or operationally necessary. Financial records are kept for regulatory audit purposes; usage data is anonymised after 24 months.
gcup4 will not send promotional communications without your explicit consent. You can withdraw consent at any time from your account settings or by contacting support — no questions asked.
Secure & Trusted
Your data is protected. Your privacy is respected. gcup4 is Malaysia's premier online gaming platform — built with trust at its foundation.