gcup3 Privacy Policy

1. Introduction and Scope

This Privacy Policy is issued by gcup3 ("we", "platform" or "gcup3") and applies to all users who register, use or browse the gcup3 website at gcup3.one. By registering an account or continuing to use gcup3 services, you agree to the terms set out in this Privacy Policy.

This document describes the types of personal data we collect, the purposes of that collection, how we use it, who may receive it, how long it is retained, and your rights as a data subject. We encourage you to read this document carefully in full.

gcup3 operates under international licensing and complies with data protection requirements set by the relevant licensing body. We also recognise the principles contained in Malaysia's Personal Data Protection Act (PDPA) as best practice guidelines.

2. Personal Data We Collect

gcup3 collects personal data from you in several ways, including when you register an account, make a deposit or withdrawal, contact customer support, or use certain features on our platform.

Information you provide directly:

• Full name as shown on your identity card or MyKad
• Date of birth and age information (for verification of the 21-and-above age requirement)
• Active email address
• Mobile phone number
• Account password (stored in hashed form)
• E-wallet, bank account or crypto wallet details for financial transactions
• Identity verification documents when required (e.g. identity card, MyKad)

Information collected automatically:

• IP address and regional-level geolocation data
• Device type, operating system and web browser
• Game session history and betting activity
• Cookie data and related tracking technologies
• Access time logs and transaction records

3. Purposes of Data Use

Personal data collected is used solely for legitimate purposes related to gcup3 operations. We ensure every use of data has a sound legal basis, whether based on your consent, contractual necessity, or the legitimate interests of the platform.

• Registration, verification and member account management
• Processing deposits via Touch 'n Go eWallet, DuitNow, FPX, ShopeePay and cryptocurrencies
• Processing withdrawals within the stipulated timeframe
• Identity verification and compliance with Know Your Customer (KYC) requirements
• Prevention of fraud, money laundering and unlawful activity
• Provision of 24/7 customer support via live chat and email
• Notifications regarding account updates, bonuses and promotions (with consent)
• Improvement of user experience and platform functionality
• Compliance with licensing requirements and reporting to relevant authorities

4. Data Sharing with Third Parties

gcup3 does not sell or disclose your personal data to third parties for marketing or commercial purposes. However, in certain limited situations, data may be shared with the following parties:

• Payment service providers: e-wallet providers, banks and crypto payment processors that handle your deposit and withdrawal transactions, subject to strict confidentiality agreements.
• Identity verification services: third parties that assist with the KYC process and document verification to maintain platform security.
• Licensing bodies and authorities: where lawfully required by law, court order or the requirements of a regulatory body.
• Platform technology providers: gaming software companies and technical infrastructure providers that support gcup3 operations, subject to data protection agreements.

Every data-sharing arrangement involves a contractual agreement requiring the receiving party to protect that information to a standard equivalent to or higher than gcup3's own standards.

5. Data Security and Protection

gcup3 invests in robust security infrastructure to ensure your personal data is protected from unauthorised access, loss, destruction or unintended disclosure.

• SSL/TLS encryption for all data communications between clients and servers
• Password storage using up-to-date hashing algorithms
• Two-factor authentication (2FA) available for additional account security
• Continuous system monitoring to detect suspicious activity
• Regular penetration testing by independent third parties
• Data security training for all staff who handle personal information
• A comprehensive incident response plan in the event of a data breach

In the event of a data breach that affects your personal information, gcup3 will notify you within a reasonable timeframe via email or account notification, along with steps you can take to protect yourself.

6. Data Retention Periods

gcup3 retains your personal data for as long as your account is active or for as long as it is needed for the purposes stated in this policy. Specific retention periods are determined based on the type of data and applicable legal or licensing requirements.

• Active account data is retained for the duration the account remains active and until a deletion request is made
• Financial transaction records are retained for the period required by the licensing body
• Customer service logs are retained for the period needed for dispute resolution purposes
• Data for fraud prevention purposes may be retained longer for platform security

When data is no longer required, gcup3 will ensure it is deleted or disposed of securely so that it cannot be recovered.

7. Cookies and Tracking Technologies

gcup3 uses cookies and similar tracking technologies to improve your experience on our platform. Cookies are small files stored on your device when you visit our website.

• Essential cookies: required for core platform functions such as login authentication and session security. These cannot be disabled.
• Functional cookies: store your preferences such as language and display settings to provide a better experience.
• Analytics cookies: help us understand how users interact with the platform for improvement purposes. This data is anonymous.

You can manage your cookie settings through your web browser at any time. Please note that disabling essential cookies may affect the full functionality of the platform.

8. Cross-Border Data Transfers

As gcup3 operates as an online platform under international licensing, your personal data may be processed or stored on servers located outside Malaysia. In such cases, gcup3 ensures that such data transfers are carried out with adequate safeguards, including standard data transfer agreements and other recognised protection mechanisms.

gcup3 only works with service providers that comply with recognised international data protection standards and that provide adequate contractual assurances regarding the handling of personal data.