Official Documents

Gcup7 Privacy Policy — Data Protection Malaysia Member Privacy

Gcup7 is committed to protecting every member's privacy. This policy explains what data we collect, how we use it, who it may be shared with, and how you can control your personal information. We believe transparency is the foundation of trust.

Updated: 1 January 2026  |  Malaysia (PDPA 2010)
SSL 256
Bit Encryption
PDPA
Full 2010 Compliance
24 /7
Security Monitoring
0
Sale of Data to Third Parties
Privacy Commitment

Why Is Your Data Safe with gcup7?

Gcup7 invests in world-class security infrastructure and fully complies with Malaysia's data protection laws to ensure your personal information is always kept safe.

256-bit SSL Encryption

All data transmitted between your browser and gcup7's servers is protected by military-grade 256-bit SSL encryption. No third party can intercept or read your information in transit, including login credentials and financial details.

Fully Segregated Funds

Gcup7 member funds are held in segregated accounts, separate from the company's operational funds. This means your money cannot be used for internal business purposes and is always available for withdrawal without any technical restrictions.

Malaysia PDPA Compliance

Gcup7 operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). All our data collection, processing, and storage practices have been assessed and confirmed to comply with all PDPA principles set by the Personal Data Protection Commissioner.

No Data Sales to Third Parties

Gcup7 has never and will never sell members' personal information to advertisers, data brokers, or any third party for commercial purposes. Your data is used exclusively for platform operations and to improve your gaming experience.

User Data Controls

You have full control over your personal data at gcup7. Through your account settings, you can review, update, or request deletion of your data at any time. gcup7 respects your privacy rights and processes every request within 30 days.

24/7 Threat Monitoring

Gcup7's cybersecurity team monitors our systems around the clock to detect and respond to any threats or unauthorised access attempts. Any security incident involving member data will be communicated to the affected member within 72 hours.

Contents
Questions about your data privacy? Contact our team via 24/7 live chat on the gcup7 platform.

This Privacy Policy explains how gcup7 ("we", "the platform") collects, uses, stores, and protects your personal information when you use services on the gcup7.win website. This document is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and forms part of the overall agreement between you and gcup7.

By registering and using the gcup7 platform, you consent to the collection and processing of your personal data as described in this Privacy Policy. If you do not agree, you should stop using our platform. gcup7 reserves the right to amend this policy from time to time, and changes will take effect as soon as they are published on this website.

This Privacy Policy is to be read together with gcup7's Terms and Conditions. In the event of any conflict between the two documents regarding data privacy matters, this Privacy Policy shall take precedence.

1

Personal Data Collected by gcup7

Gcup7 collects various types of information from members to ensure the platform runs smoothly, securely, and in a way that meets each user's needs. Data is collected only when necessary for a legitimate purpose and in a transparent manner.

Data you provide directly:

  • Full name as shown on a valid identity card or passport.
  • Identity card number (MyKad) or passport number.
  • Date of birth for age verification (minimum 18 years old).
  • Active email address used for account communications.
  • An active Malaysia mobile phone number.
  • Bank or e-wallet details for financial processing.
  • Residential address for KYC verification and legal compliance.
  • Identity verification documents submitted during the KYC process.

Automatically collected data:

  • IP address and network information used to access the platform.
  • Your device type, operating system and web browser version.
  • Session data including pages visited, time spent, and navigation patterns.
  • Game and betting history for record-keeping and responsible gaming monitoring purposes.
  • Deposit and withdrawal transaction history.
  • Cookie and similar tracking technology information.

Gcup7 does not collect sensitive data such as health information, political views, or religious beliefs, except where required by anti-money laundering (AML) laws under very limited and specific circumstances.

2

How gcup7 Uses Your Personal Data

Gcup7 uses collected personal data solely for legitimate, necessary purposes directly related to platform operations. We do not use your data for any purpose not stated in this policy without first obtaining your consent.

Purpose of Use Types of Data Involved Legal Basis
Account management & registration Name, email, phone number, password Contract performance
Identity verification (KYC) MyKad, passport, address, date of birth Legal obligation
Financial processing Bank details, e-wallet, transaction history Contract performance
Fraud prevention & security IP address, session data, activity patterns Legitimate interests of gcup7
Customer Support Name, email, communication history Contract performance
Marketing communications (with consent) Email, phone number Consent
AML/legal compliance Identity data, financial transactions Legal obligation
Platform improvement & analytics Anonymized usage data, cookies Legitimate interests of gcup7

Gcup7 will not use your personal data for automated decision-making that materially affects you without human oversight. Any profiling carried out is solely to improve your gaming experience and is never used to discriminate against any member.

You may withdraw consent for marketing communications at any time via your account settings or by contacting our support team. Withdrawing marketing consent does not affect other data processing required for your account's operation.

3

Data Sharing with Third Parties

Gcup7 does not sell, rent, or disclose members' personal data to third parties for their own commercial purposes. However, there are limited situations where gcup7 needs to share data with trusted third parties as part of platform operations.

  • Payment service providers: Financial institutions, banks, e-wallet operators and payment gateways that process your deposits and withdrawals. Data shared is limited to information required for transaction settlement.
  • KYC service providers: A third-party identity verification platform that helps gcup7 verify new members' identities in accordance with regulatory requirements.
  • Game providers: Gaming software providers (such as Pragmatic Play and Evolution) may receive the minimum session data required to run games within the gcup7 platform.
  • Legal authority: gcup7 will disclose data to law enforcement agencies, courts, or regulatory bodies when required by a valid court order or applicable law.
  • Technology infrastructure providers: Cloud and hosting service providers that support the technical infrastructure of the gcup7 platform, subject to strict confidentiality agreements.

All third parties working with gcup7 are required to meet data protection standards equal to or higher than those of gcup7. Legally binding data processing agreements are signed with all third-party service providers.

If your data needs to be transferred outside Malaysia (for example, to international cloud service providers), gcup7 ensures equivalent data protection is maintained through appropriate contractual safeguard mechanisms.

4

Gcup7 Data Security Measures

Protecting the personal and financial data of our members is gcup7's highest priority. We have invested in a multi-layered security infrastructure encompassing technical, organisational and physical safeguards to ensure your data remains secure at all times.

  • 256-bit SSL encryption for all data communications between browser and server.
  • Passwords are stored using one-way hashing algorithms that cannot be decrypted.
  • Member funds are segregated in dedicated bank accounts, separate from operational funds.
  • 24/7 security monitoring by gcup7's in-house cybersecurity team.
  • Role-based access control — staff can only access data required for their specific duties.
  • Regular security audits by independent assessors to identify and address any vulnerabilities.
  • Intrusion detection systems (IDS) and next-generation firewalls.
  • Regularly encrypted data backups stored at secure, geographically separated locations.

While gcup7 takes all reasonable steps to protect your data, no security system is entirely infallible. In the event of a data breach affecting members, gcup7 will notify the affected members and relevant authorities within the timeframe prescribed by law.

Your account security also depends on your own actions. gcup7 recommends using a strong, unique password, enabling two-factor authentication (2FA) and never sharing your login credentials with anyone.

5

Use of Cookies and Tracking Technologies

Gcup7 uses cookies and similar tracking technologies to enhance the user experience, analyze platform performance, and ensure account security. Cookies are small text files stored on your device by your web browser.

Types of cookies used by gcup7:

  • Essential cookies: Required for core platform functions such as login verification, session management, and security. These cookies cannot be disabled without affecting platform functionality.
  • Performance cookies: Collects anonymous information about how you use the platform to help us improve the user experience — for example, which pages are visited most often and any technical errors that may occur.
  • Functional cookies: Saves your preferences such as language, display layout and other settings so you don't need to reconfigure them every time you log in.
  • Analytics cookies: Helps gcup7 understand aggregate platform usage patterns to make better product development decisions.

You can control and manage cookies through your web browser settings. However, disabling certain cookies may affect the functionality of the gcup7 platform. gcup7 does not use third-party cookies for advertising purposes that track you across other websites.

Most modern web browsers let you view, manage and delete cookies through the settings menu. Refer to your browser's documentation for detailed guidance on managing cookies according to your preferences.

6

Your Privacy Rights as a gcup7 Member

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by gcup7. gcup7 fully respects these rights and will handle every request carefully and in a timely manner.

Right of Access

You have the right to obtain a copy of the personal data we hold about you. Requests are processed within 30 days.

Right to Rectification

You may request gcup7 to correct any inaccurate or incomplete personal data.

Right to Erasure

Under certain circumstances, you may request the deletion of your personal data from gcup7's systems.

Right to Object

You may object to the processing of your personal data for direct marketing purposes at any time.

Right to Data Portability

You may request a copy of your data in a machine-readable format for transfer to another platform.

Right to Restriction of Processing

In certain situations, you may request gcup7 to restrict how we use your data.

To exercise any of the above rights, contact gcup7's data protection team via live chat or our support email. We may need to verify your identity before processing your request. There is no charge for reasonable requests; however, gcup7 reserves the right to apply a nominal fee for excessive or unfounded requests.

Please note that the right to erasure does not apply to data that gcup7 is legally required to retain, such as financial transaction records mandated under Malaysia's Anti-Money Laundering laws (AMLA).

7

Data Retention Period and Deletion Policy

Gcup7 does not retain your personal data longer than necessary for its original collection purpose or as required by applicable Malaysian law. We maintain a clear data retention policy for each category of information.

  • Active account data: Retained for as long as your account is active and for 7 years after account closure, in accordance with Malaysian legal requirements.
  • Financial transaction records: Retained for a minimum of 7 years in accordance with the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLA).
  • KYC documents: Retained for 6 years after the business relationship ends or the date of the last transaction, whichever is later.
  • Log and session data: Retained for 90 days for security purposes and technical troubleshooting.
  • Customer support communications: Retained for 3 years to enable consistent and ongoing support.
  • Marketing data (with consent): Retained until you withdraw consent or for 2 years without interaction, whichever comes first.
  • Cookies and analytics data: Most cookies expire between 30 days and 2 years depending on their function.

Once the retention period expires, gcup7 will securely delete or anonymize the data using industry-standard deletion methods. Data pending deletion will be locked and isolated until secure deletion can be carried out.

An account deletion request will not remove financial transaction records that must be retained by law. However, this data will not be used for any marketing or operational purpose after your account is closed.

8

Contact gcup7 for Privacy Enquiries

Gcup7 takes every data privacy inquiry and complaint seriously. If you have any questions about this Privacy Policy, wish to exercise your privacy rights, or want to report a concern about how we handle your personal data, please reach out to us through the following channels.

  • 24/7 Live Chat: The fastest way to get an immediate response. Click the live chat icon at the bottom corner of the gcup7 platform.
  • Privacy Email: [email protected] — For written inquiries requiring a detailed response. We aim to reply within 3 business days.
  • Support Page: Visit our FAQ section at gcup7.win/faq for answers to frequently asked questions about privacy and account security.

Gcup7 will acknowledge all privacy inquiries within 3 business days and aims to resolve issues within 30 calendar days. For more complex complaints, this period may be extended and you will be notified accordingly.

If you are not satisfied with how gcup7 handles your privacy complaint, you have the right to escalate it to the Personal Data Protection Commissioner of Malaysia, appointed under PDPA 2010.

Gcup7's Data Protection Team is specifically trained in Malaysia PDPA requirements and is committed to handling every request professionally, transparently and within the stipulated timeframe.

Trusted Platform

Ready to Play Safely at gcup7?

Gcup7 protects your privacy with 256-bit SSL encryption, full PDPA compliance, and a zero-data-selling policy. Join over 500,000 Malaysian members who already trust gcup7 as their gaming platform of choice — secure, transparent, and responsible.

Secure Data
256-bit SSL Encryption
PDPA Compliant
Malaysia 2010
No Data Selling
Privacy Guaranteed
24/7 Support
Malay
Bahasa Melayu