🔒 Official Data Protection Policy

Gcup4 Privacy Policy – Personal Data Protection for Malaysian Members

Gcup4 takes your privacy seriously. This document clearly explains how we collect, use, store, and protect your personal information in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Updated: 1 January 2026
Version: 3.1
Compliance: PDPA 2010

Our Six Data Protection Principles

These principles form the foundation of how gcup4 handles every piece of your personal data.

1 🎯
Purpose-Driven Collection

Gcup4 only collects data that is strictly necessary for clear and legitimate purposes. We do not collect more data than is needed to provide our services to you.

2
Data Accuracy

Gcup4 strives to ensure that the personal data we hold is accurate, complete, and up to date. You have the right to correct any information that is inaccurate.

3 🔐
Data Security

We employ robust technical and organisational security measures, including SSL 256-bit encryption, to protect your data from unauthorised access.

4 🤝
Full Transparency

Gcup4 is committed to being transparent about how we use your data. We keep you informed of policy changes and obtain your consent where required.

5 ⏱️
Retention Limit

Personal data is not retained beyond what is necessary for the original purpose of collection or to comply with applicable legal obligations in Malaysia.

6 👤
Individual Rights

Gcup4 respects your rights as a data subject — including the right to access, rectification, erasure, and the right to withdraw consent at any time.

1Introduction – gcup4's Privacy Commitment

Gcup4 is an online betting and digital entertainment platform operating in Malaysia and serving members nationwide. We understand that entrusting your personal information to any online platform requires confidence and the assurance that your data is in responsible hands.

This Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), the primary legislation governing the collection, use, disclosure and storage of personal data in Malaysia. All gcup4 data processing activities are in full compliance with the requirements of the PDPA 2010.

By using the gcup4 platform — whether via the website or mobile app — you consent to the collection and use of your personal information as described in this Privacy Policy. If you do not agree with any part of this policy, please stop using the gcup4 platform and contact us to close your account.

gcup4 is the responsible Data Controller under PDPA 2010 for all personal data collected from Malaysian members.

2Types of Personal Data Collected by gcup4

Gcup4 collects various types of personal data depending on how you interact with our platform. Below are the main categories of data we collect and the reasons for collection:

Data Categories Example Information Purpose of Collection
Identity Data Full name, MyKad/passport number, date of birth, photo Identity verification (KYC), fraud prevention
Contact Data Email address, phone number, residential address Service communications, delivery of notifications
Financial Data E-wallet details (Touch 'n Go, GrabPay, DuitNow), transaction records Processing deposits/withdrawals, AML compliance
Technical Data IP address, device type, operating system, web browser Account security, fraud detection
Usage Data Betting history, games played, session duration Service improvement, responsible gambling
Cookie Data Session cookies, preference cookies, analytics cookies Enhancing user experience, traffic analysis

Gcup4 does not collect sensitive data such as health information, religious beliefs or political views unless you voluntarily provide it to us in the context of responsible gambling.

Financial data related to Malaysian payment methods such as Touch 'n Go eWallet, GrabPay, and DuitNow is handled using bank-grade security protocols and is never stored directly in gcup4's systems — only transaction tokens are retained.

3How gcup4 Uses Your Personal Data

Gcup4 uses collected personal data for legitimate, specific and transparent purposes. We do not use your data for any purpose other than those stated below without first obtaining your additional consent:

  • Account Management: To create, verify and manage your gcup4 account, including the KYC process and age verification.
  • Transaction Processing: Deposits are processed securely via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX (Maybank2u, CIMB Clicks), with withdrawals returned to the same payment method.
  • Service Delivery: Providing access to all gcup4 services, including Malaysia Super League and EPL football betting, online slots, Live Casino, lottery, and e-sports.
  • Security & Fraud Prevention: To detect and prevent fraudulent activity, money laundering, account abuse and any security threats.
  • Legal Compliance: To fulfil legal obligations under the PDPA 2010, the Anti-Money Laundering Act 2001 (AMLA) and other applicable regulations in Malaysia.
  • Service Communications: Sending important notifications about your account, transactions, policy changes, and security information. These are mandatory communications that cannot be unsubscribed from.
  • Marketing (with consent): Sending promotions, bonus offers, and new gcup4 product updates — only if you have opted in to receive them.
  • Service Improvement: Analyzing usage patterns to improve the interface, platform performance, and overall member experience on gcup4.
  • Responsible Gaming: Monitoring betting patterns to identify members who may need support with their gambling habits.

4Third-Party Data Sharing & Disclosure

Gcup4 does not sell, rent or trade members' personal data to any third party for their own marketing purposes. This is an absolute commitment gcup4 makes to every member.

However, gcup4 may share your personal data with selected third parties in the following limited and controlled circumstances:

  • Payment Service Providers: Payment processors such as Touch 'n Go, GrabPay, DuitNow, and FPX receive only the minimum transaction data required to process your deposits and withdrawals.
  • Game Software Providers: Certified game providers such as Pragmatic Play, PG Soft, and Evolution Gaming may receive the minimum technical data required to deliver games within the gcup4 platform.
  • Enforcement Authority: gcup4 will disclose data to Malaysian authorities (police, MACC, BNM) when ordered by a court or as required by law.
  • Technical Service Providers: Cloud infrastructure and cybersecurity providers that support gcup4 in operating the platform securely — all bound by strict confidentiality agreements.
  • Analytics Services: Anonymised usage data (with no personal identifiers) may be shared with analytics platforms to help gcup4 improve its services.
All third parties with whom gcup4 shares data are bound by data processing agreements requiring them to uphold security and confidentiality standards equal to or higher than those practised by gcup4.

5gcup4 Data Security Measures

Gcup4 continually invests in the latest security technologies and procedures to protect members' personal data from all threats. Key security measures we have implemented include:

  • 256-bit SSL/TLS Encryption: All data transmitted between your browser and gcup4's servers is encrypted to the highest industry standards.
  • Two-Factor Authentication (2FA): gcup4 offers 2FA for all accounts, providing an additional layer of security during login.
  • 24/7 Monitoring: gcup4's security system continuously monitors account activity to detect any suspicious access attempts.
  • Strict Access Control: Only specifically authorised gcup4 staff with a legitimate business need may access member personal data, and all such access is logged and audited.
  • Periodic Penetration Testing: gcup4 conducts regular security testing by independent experts to identify and patch any vulnerabilities in the system.
  • Staff Training: All gcup4 staff who handle personal data receive regular data protection training.

While gcup4 takes all reasonable steps to protect your data, no security system is completely impenetrable. Should a security incident involving your personal data occur, gcup4 will notify you within the timeframe required by applicable Malaysian law.

6Cookies, Tracking Technologies & Analytics

Gcup4 uses cookies and similar tracking technologies to enhance your experience on the platform. Below are the types of cookies we use and their purposes:

  • Essential Cookies (Required): Required for core gcup4 platform functions such as login session management, security protection and platform stability. These cookies cannot be disabled.
  • Preference Cookies: Stores your personal settings such as your preferred language (Bahasa Melayu) and display preferences to ensure a more personalised experience each time you visit gcup4.
  • Analytics Cookies: Helps gcup4 understand how members use the platform — which pages are most popular and where technical issues occur — so we can continuously improve it.
  • Marketing Cookies (with consent): Used to show you relevant gcup4 promotions based on your interests and activity, with your consent only.

You can manage cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the gcup4 platform. For more information on managing cookies, please refer to your web browser's documentation.

gcup4 does not use cookies to track your activity on other websites. gcup4's analytics tracking is limited to the gcup4 platform only.

7gcup4 Data Retention Period

Gcup4 retains your personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy or to comply with legal requirements. In general, the retention periods are as follows:

  • Active Account Data: Retained for the duration your account remains active and for 7 years after account closure for audit and Malaysian legal compliance purposes.
  • Financial Transaction Records: Retained for a minimum of 6 years in accordance with Malaysia's Companies Act and applicable financial regulations.
  • Security Logs: Retained for 2 years for fraud detection and to support legal investigations where required.
  • Marketing Data (with consent): Retained until you withdraw your consent. You may opt out of gcup4 marketing communications at any time.
  • Cookie Data: It depends on the type of cookie — session cookies expire when you close your browser; persistent cookies are stored for a set period (typically 30 days to 2 years).

When data is no longer needed and there is no legal obligation to retain it, gcup4 will securely delete or anonymise the data using approved procedures.

8Your Rights Under PDPA 2010

As a data subject under the Malaysian Personal Data Protection Act 2010, you have the following rights regarding your personal data held by gcup4:

Right of Access

You have the right to request and obtain a copy of your personal data held by gcup4 at any time. gcup4 will process such requests within 21 business days.

Right to Rectification

If your personal data is inaccurate or out of date, you have the right to request that gcup4 correct it. Updates can be made via your account settings or by contacting support.

Right to Withdraw Consent

You may withdraw your marketing consent at any time. However, withdrawal does not affect any data processing carried out prior to that withdrawal.

Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes. gcup4 will honour your objection immediately.

Right to Data Portability

You have the right to receive your personal data in a machine-readable format (such as CSV or JSON) for transfer to another platform if you wish.

Right to Complain

If you believe gcup4 has violated your privacy rights, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP).

To exercise any of the above rights, please contact gcup4's Privacy Officer at privacy@gcup4.ws, stating the type of request and your account details.

9Children's Privacy & Minor Protection

The gcup4 platform is intended solely for individuals aged 18 and above. gcup4 does not knowingly collect, use, or store any personal data from individuals under the age of 18.

Should gcup4 discover that personal data belonging to a minor has been collected without our knowledge — for example, through account registration using false information — we will take immediate action to delete that data and close the account in question.

If you are a parent or guardian and believe your child who is underage has registered a gcup4 account, please contact us immediately at support@gcup4.ws and we will resolve the matter promptly.

10Amendments to the gcup4 Privacy Policy

Gcup4 may update this Privacy Policy from time to time to reflect changes in our privacy practices, relevant Malaysian legislation, or developments in gcup4 services that require adjustment.

When material changes are made to how we collect or use your personal data, gcup4 will:

  • A notification will be sent to your registered email address at least 14 days before any changes take effect.
  • Displaying a clear notice within the gcup4 platform regarding upcoming changes.
  • Updating the "Last Updated" date at the top of this page.
  • Obtaining your renewed consent if an amendment involves processing data for a new purpose that differs from the original.

You are encouraged to review this page periodically. Continued use of the gcup4 platform after any amendments take effect constitutes your acceptance of the updated Privacy Policy.

11How to Contact the gcup4 Privacy Officer

If you have any questions, concerns, or requests regarding gcup4's Privacy Policy or how we handle your personal data, please reach out to us through the following channels:

gcup4 Privacy Officer
Email (Privacy Enquiries)
privacy@gcup4.ws
General Customer Support
support@gcup4.ws
Response Time
Within 5 business days
Malaysian Regulatory Authority
Official Complaints Body
Department of Personal Data Protection (JPDP) Malaysia
Applicable Law
Personal Data Protection Act 2010 (Act 709)

Gcup4 is committed to responding to all privacy enquiries within 5 business days. For more complex cases requiring in-depth investigation, we will keep you informed of your request's status within that timeframe and provide a realistic resolution estimate.

Your Personal Data Journey at gcup4

A simple visualisation of how your personal data is collected, used, and protected within the gcup4 ecosystem.

📱
You Registered
Data submitted via the gcup4 registration form
🔒
Encrypted
Data encrypted with 256-bit SSL during transmission
🛡️
Stored Securely
Secure servers with strict access controls
⚙️
Lawfully Used
For agreed purposes only
🗑️
Deleted Securely
Once no longer required under the retention schedule

Gcup4's Privacy Commitment in Action

Not just words — these are the concrete steps gcup4 takes to protect your privacy.

🇲🇾
PDPA 2010 Compliance
Full compliance with Malaysian law

Gcup4 fully complies with Malaysia's Personal Data Protection Act 2010 (PDPA) — the primary legislation safeguarding the privacy rights of Malaysians in the digital space. All data processing activities are designed to meet PDPA requirements from the ground up.

PDPA Act 709 Annual Audit
🔐
Bank-Grade Encryption
256-bit SSL for all data

The same 256-bit SSL encryption technology used by Malaysia's major banks protects all communications between you and gcup4. Your financial data related to Touch 'n Go eWallet, GrabPay, and DuitNow is never stored in plain text.

SSL 256-bit Zero Data Breach
🚫
No Data Sales
Your data is not our product

Gcup4 has never and will never sell members' personal data to advertisers, data brokers, or any third party for their own marketing purposes. gcup4's business is about delivering the best entertainment to you — not monetising your data.

No Data Sales No Data Brokers
👁️
Full Control in Your Hands
You set your own privacy limits

Through your gcup4 account settings, you have full control over your privacy preferences — from managing marketing consent to submitting data access requests. gcup4 makes it straightforward to exercise your PDPA rights without unnecessary hassle.

Self-Control Easy to Manage
🔍
Independent Security Audit
Periodic third-party review

Gcup4 undergoes regular security and privacy audits by accredited independent firms. This ensures our privacy practices remain current and meet international industry standards — not merely the minimum requirements of Malaysia's PDPA.

Independent Audit Global Standards
📞
Dedicated Privacy Officer
Privacy specialists ready to assist

Gcup4 has a dedicated Privacy Officer who can be contacted directly at privacy@gcup4.ws. Any enquiries, complaints, or requests relating to your personal data will be handled by a specialist trained specifically in Malaysia's PDPA.

5 Business Day Response PDPA Specialist

Your Privacy Is Safe with gcup4

With robust data protection, full PDPA compliance, and a commitment to transparency, gcup4 is the Malaysia betting platform you can trust. Register now and bet with peace of mind.

For members aged 18 and above only. Your data is fully protected under Malaysia's PDPA 2010.

Bahasa Melayu