Gcup2 Privacy Policy – Malaysia Member Personal Data Protection

1 Introduction

Gcup2 ("we", "Platform") is fully committed to protecting the privacy and security of the personal information of all members using the gcup2.org platform and the gcup2 mobile app. This Privacy Policy explains in detail the types of information we collect, the purposes for which it is used, how we protect it, and the rights you hold as a member.

This document is prepared in accordance with the provisions of Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection standards. We take every aspect of your privacy seriously — from how data is collected to how it is stored and deleted when no longer needed.

If you have any questions about this Privacy Policy, our team is ready to assist through the 24/7 customer support channels available on the gcup2 platform.

2 Information We Collect

Gcup2 collects members' personal information through several methods to ensure a smooth, secure user experience that meets legal requirements. The types of information we collect are as follows:

Account Registration Information:

• Full name as shown on official identity documents.
• Date of birth for minimum age verification of 21 years.
• Active email address for communication and account verification.
• A valid Malaysia phone number.
• Passwords stored in encrypted hash form — we do not store passwords in plain text.

Identity Verification (KYC) Information:

• A copy of your Malaysia identity card (MyKad) or valid passport.
• Recent proof of address documents such as bank statements or utility bills.
• A selfie with your identification document when required for further verification.

Financial Information:

• Bank account or eWallet details for processing deposits and withdrawals.
• Financial transaction records on the gcup2 platform.
• Source of funds for anti-money laundering (AML) compliance purposes.

Platform Usage Data:

• IP address, device type, operating system, and web browser used.
• Game activity records, betting history and bonus transaction records.
• Login times, session duration and general platform usage patterns.
• Approximate location data based on IP address for security purposes.

3 How We Use Your Data

Every piece of information collected by gcup2 is used for clear, legitimate purposes directly related to delivering platform services. We do not use your data for unrelated purposes without your consent. The primary purposes of data use are:

• Account management: Securely create, verify and manage member accounts.
• Transaction processing: Process deposits, withdrawals and all financial transactions on the platform.
• Identity verification: Conduct the KYC process to ensure platform security and legal compliance.
• Service communications: Send important notifications related to your account, transactions and security updates.
• Platform security: Detect and prevent fraudulent activity, money laundering and unauthorized access.
• Service improvements: Analyze usage patterns to improve the gcup2 platform user experience.
• Legal compliance: Meet reporting and compliance obligations with the relevant authorities.
• Promotions and offers: Send relevant promotional information based on your preferences — you may unsubscribe at any time.

4 Information Sharing with Third Parties

Gcup2 does not sell, rent or disclose members' personal information to any third party except in the following circumstances required for platform operations or legal compliance:

• Payment providers: Required financial information is shared with authorized payment providers such as banks, eWallet operators and card processors solely for transaction processing purposes.
• Game software providers: Minimum required technical data is shared with game software providers to ensure proper and fair game operation.
• Regulatory authorities: gcup2 will disclose required information to regulatory authorities, law enforcement or government bodies when mandated by law or court order.
• Identity verification services: KYC information is shared with accredited third-party identity verification service providers to conduct the required background checks.
• Analytics services: Anonymised usage data is shared with analytics platforms for service improvement purposes, without exposing your personal identity.

All third parties we work with are bound by strict data confidentiality agreements and are required to comply with data protection standards equivalent to or higher than gcup2's own.

5 Personal Data Security

Gcup2 continuously invests in sophisticated cybersecurity infrastructure to ensure members' personal data remains protected at all times. The security measures we implement include:

• End-to-end encryption: All data communications are protected with 256-bit SSL/TLS encryption, ensuring no third party can intercept your information during transmission.
• Secure password storage: Member passwords are stored using the strong bcrypt hashing algorithm — we do not store and cannot read your original password.
• Two-factor authentication (2FA): An additional security layer is available to protect your account from unauthorized access.
• 24/7 security monitoring: Our automated monitoring system is always active, detecting any suspicious activity or unauthorised access attempts.
• Multi-layered firewall: Our servers are protected with multi-layered firewall configurations that block unauthorized external access.
• Regular security audits: gcup2 conducts regular penetration testing and security audits by independent cybersecurity firms.

While we take all reasonable precautions, no online system can be guaranteed 100% secure against every threat. We encourage members to play their part in keeping their accounts safe by using strong passwords and never sharing their login credentials with anyone.

6 Cookies and Tracking Technologies

Gcup2 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you browse gcup2.org.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session management and security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collect anonymous data on how members use the platform to help us improve our services.
• Functional Cookies: Save your preferences such as language, region and display settings to streamline your browsing experience.
• Analytics Cookies: Helps us understand overall usage patterns for product improvement purposes.

You can manage cookie settings through your web browser at any time. Please note that disabling certain cookies may affect specific functionality on the gcup2 platform.

7 Your Rights as a gcup2 Member

As a gcup2 member, you have the following rights regarding your personal data in accordance with Malaysia's PDPA:

To exercise any of the above rights, please contact the gcup2 customer support team via live chat or our support email. We will process your request within 30 business days.

8 Data Storage and Deletion

Gcup2 retains members' personal data only for as long as necessary for the purposes stated in this policy or as required by applicable law. Retention periods vary by type of information:

Once the retention period expires, personal data will be securely deleted or permanently anonymised so it can no longer be linked to your identity.

9 Changes to This Privacy Policy

Gcup2 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements or new platform features. Whenever a significant amendment is made, we will notify members via an in-platform notification or email to their registered address.

The "Updated" date shown at the top of this page indicates when this Privacy Policy was last reviewed. We encourage you to check this page periodically. Your continued use of the gcup2 platform after any amendments are published will be considered your acceptance of the latest version of this policy.

10 Contact Us Regarding Privacy

If you have any questions, concerns or complaints regarding this Privacy Policy or how gcup2 handles your personal data, please do not hesitate to contact us through the following channels:

• Live chat: Available 24/7 via the chat icon at the bottom corner of the gcup2 platform.
• Support email: [email protected] (displayed as text — not a link).
• FAQ Section: Visit FAQ page for answers to frequently asked questions about privacy and security.

The gcup2 Privacy Team will act on all enquiries and complaints within 3 working days and will resolve more complex issues within 30 business days as stipulated by Malaysia's PDPA.