Privacy Policy gcup7 —
Your Data, Our Responsibility

Gcup7 collects various categories of personal information from members to ensure the platform operates securely and smoothly. The information collected includes the following:

Gcup7 does not collect sensitive information such as biometric data, medical records, or religious beliefs unless specifically required by applicable law.

Gcup7 collects your personal information through several different channels:

• Account registration: When you register a new gcup7 account, you directly provide information such as your name, phone number and email address.
• KYC process: During identity verification, you submit copies of official documents such as your MyKad or passport along with any other required supporting documents.
• Financial transactions: Each time you make a deposit or withdrawal, gcup7 records the transaction details including payment method, amount and timestamp.
• Platform usage: The gcup7 system automatically collects technical data such as IP addresses, device information and usage patterns through cookies and related tracking technologies.
• Support communications: Each time you contact the gcup7 customer support team via Live Chat or email, the conversation is recorded for quality assurance and dispute resolution purposes.
• Referral program: If you participate in the gcup7 referral programme, information related to your referral code usage will also be recorded.

Gcup7 uses the personal data collected solely for legitimate and necessary purposes, including:

• Account management: Creating, verifying, and securely managing member accounts, including login processing and two-factor authentication.
• Transaction processing: Processing deposits, withdrawals, and bonus payments accurately and securely through gcup7's supported payment methods.
• KYC and AML verification: Meeting Know Your Customer (KYC) and Anti-Money Laundering (AML) legal obligations as required by the authorities.
• Customer support: Identifying members, processing complaints, resolving disputes, and providing effective technical assistance.
• Platform security: Detecting and preventing fraudulent activity, multi-account usage, cyberattacks, and platform abuse.
• Service communications: Sending important notifications related to your account, transactions, promotions, and relevant policy updates.
• Analytics and improvement: Analyzing usage patterns in aggregate (without identifying individuals) to improve gcup7 platform features.
• Legal compliance: Fulfilling reporting obligations to relevant authorities when required by law.

Gcup7 does not sell or share your personal data for third-party commercial purposes. However, in the following limited situations, gcup7 may need to share your information:

• Payment service provider: Required transaction information is shared solely with approved banks and digital wallet providers to process your deposits and withdrawals.
• Game software provider: Minimum required game data is shared with licensed game providers (such as Pragmatic Play, Evolution Gaming) to enable gameplay and verify wins.
• KYC service provider: Identity verification documents are processed through approved third-party KYC platforms that comply with strict security standards.
• Legal authority: gcup7 will disclose required information to authorities, regulatory bodies or law enforcement when mandated by applicable law or a valid court order.
• Professional advisors: Lawyers, accountants, and auditors subject to confidentiality obligations may access limited data in the context of their professional services.

All third parties that receive gcup7 data are required to comply with data protection standards equal to or stricter than those set out in this Privacy Policy.

Gcup7 continually invests in the latest security infrastructure to ensure member personal data is always protected. The key security measures we employ include:

• 256-bit SSL/TLS encryption: All data in transit is secured with the strongest industry-standard encryption protocols currently available.
• Encryption of data at rest: Sensitive data stored in the gcup7 database is also encrypted for additional protection.
• Strict access control: Access to member personal data is restricted to authorised gcup7 staff only, following the principle of least privilege.
• 24/7 monitoring: The gcup7 security monitoring system operates around the clock to detect suspicious activity or unauthorised access attempts.
• Regular security audits: gcup7 conducts regular penetration testing and security audits through independent security experts.
• Two-factor authentication (2FA): All gcup7 internal staff accounts with access to member data are protected with mandatory 2FA.
• Incident response plan: gcup7 has clear procedures in place to respond to any data breach, including notifying affected members within the stipulated timeframe.

Gcup7 uses cookies and similar tracking technologies to enhance your experience on the platform. The following are the types of cookies we use:

• Essential cookies: Required for core platform functions such as login, session verification, and security. Cannot be disabled as the platform will not function without them.
• Performance cookies: Collecting information about how you use the gcup7 platform (e.g., most frequently visited pages) in aggregate form without personally identifying you.
• Functional cookies: Remembering your preferences such as language, font size, and display settings to provide a more personalized experience.
• Security cookies: Helps gcup7 identify suspicious usage patterns and protect your account from unauthorized access.

You can manage cookie settings through your web browser. However, disabling certain cookies may affect the functionality or performance of the gcup7 platform.

As a gcup7 member, you have the following rights regarding your personal data under Malaysia's Personal Data Protection Act 2010 (PDPA):

Gcup7 retains your personal data for as long as necessary for the purposes stated in this Privacy Policy or as required by applicable law. Generally:

• Active account data: Retained for the duration your account is active at gcup7, plus an additional period following account closure as required by law.
• Financial transaction records: Retained for a minimum of 7 years as required by Malaysia's financial and tax laws.
• KYC Documents: Retained for a minimum of 5 years after the member's business relationship ends, in line with AML/CFT requirements.
• Security logs: Retained for 12–24 months for security investigation and audit purposes.
• Support communication records: Retained for 3 years for quality assurance and dispute resolution purposes.

Once the retention period expires, gcup7 will securely delete or anonymise your data using industry-recognised methods.

The gcup7 platform may contain links or references to third-party websites or services in certain contexts, such as game providers or payment partners. gcup7 is not responsible for the privacy practices or content of those third-party websites.

Gcup7 recommends that you read the privacy policy of each third-party website you visit separately, as this gcup7 Privacy Policy does not apply to websites or services outside our direct control.

Gcup7 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our business practices, legal requirements or technology used. Members will be notified of any significant amendments via:

• Clear notices on the gcup7 platform's home page
• Notification email to your registered email address
• In-account notifications on gcup7 when you log in

It is your responsibility to review gcup7's Privacy Policy page periodically. Continued use of the gcup7 platform after any amendments take effect will be considered your acceptance of the updated terms.

The "Updated" date shown at the top of this document indicates when the gcup7 Privacy Policy was last amended. Previous versions of the Privacy Policy are available upon request through gcup7 customer support.

If you have any questions, concerns, or complaints regarding gcup7's Privacy Policy or how we handle your personal data, please contact our Data Privacy Officer:

Gcup7 takes every privacy complaint seriously and will investigate and respond to all enquiries received within the stipulated timeframe. If you are not satisfied with gcup7's response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant regulatory body.