gcup88 Privacy Policy

1. Introduction

1.1 gcup88 ("we", "us", "our") operates the online casino and sportsbook platform accessible at gcup88.app. We are committed to protecting the privacy and personal data of all individuals who interact with the gcup88 platform, including registered players, prospective players, and website visitors.

1.2 This Privacy Policy explains what personal data gcup88 collects, why it collects it, how it is used and protected, who it may be shared with, and what rights you have in relation to your data. This Policy applies to all personal data processed by gcup88 in connection with the Platform and any associated services.

1.3 This Privacy Policy should be read alongside the gcup88 Terms & Conditions. By registering an account or using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not accept the terms of this Policy, you should discontinue use of the Platform.

2. Data Controller

2.1 For the purposes of this Privacy Policy, gcup88 acts as the data controller in respect of personal data collected through the Platform. As data controller, gcup88 determines the purposes and means of processing your personal data.

2.2 For data protection enquiries, correction requests, deletion requests, or complaints, please contact gcup88's support team via the contact details set out in Section 15 of this Policy.

3. Personal Data We Collect

3.1 Registration & Identity Data. When you register an account with gcup88, we collect your full legal name (as it appears on your government-issued identity document), date of birth, residential address, email address, and mobile phone number.

3.2 Identity Verification (KYC) Data. To comply with anti-money laundering (AML) and know-your-customer (KYC) obligations, gcup88 collects copies of government-issued identity documents (Malaysian IC/MyKad or passport), and may request utility bills or bank statements as proof of address.

3.3 Financial Data. gcup88 collects information about deposits, withdrawals, and transaction history on the Platform. We do not store full bank account or credit card numbers; payment method data is handled by regulated third-party payment processors. gcup88 stores tokenised references and masked identifiers only.

3.4 Gaming Activity Data. We collect records of your gaming and betting activity on the Platform, including games played, wagers placed, outcomes, session duration, and responsible gaming interactions (e.g., limit settings and self-exclusion requests).

3.5 Technical & Device Data. gcup88 automatically collects technical information when you access the Platform, including your IP address, device type, operating system, browser type and version, referring URL, and session timestamps.

3.6 Communications Data. If you contact gcup88 support via live chat, email, or any other channel, we retain a record of that communication, including the content of messages and any files shared.

3.7 Marketing Preferences. Where you have opted in to marketing communications, we store your communication preferences and any marketing interaction history (e.g., email opens or offer redemptions).

4. How We Collect Your Data

4.1 Directly from you — when you register an account, submit identity documents, make deposits or withdrawals, contact support, or update your account settings.

4.2 Automatically — through cookies, server logs, and similar tracking technologies when you access or navigate the Platform (see Section 7).

4.3 From third parties — identity verification providers, payment processors, fraud prevention services, and (where applicable) regulatory databases may provide gcup88 with data necessary to verify your identity or assess risk.

5. Purpose and Legal Basis for Processing

5.1 gcup88 processes your personal data for the following purposes and on the following legal bases:

• Account registration and platform access — necessary to perform the contract between you and gcup88.
• Identity and age verification (KYC) — necessary to comply with legal and regulatory obligations, and to fulfil contractual obligations.
• Processing deposits, withdrawals, and gameplay — necessary to perform the contract.
• Fraud prevention and security monitoring — necessary for the legitimate interests of gcup88 and the protection of Players.
• AML compliance and transaction monitoring — necessary to comply with legal obligations.
• Customer support — necessary to perform the contract and for legitimate interests in operating the Platform.
• Responsible gaming monitoring and intervention — necessary for compliance with licensing obligations and for the protection of Players' vital interests.
• Marketing communications — based on your prior consent, which may be withdrawn at any time.
• Platform analytics and improvement — based on gcup88's legitimate interest in understanding how the Platform is used and improving it for Players.

6. Sharing of Personal Data

6.1 gcup88 does not sell, rent, or trade personal data. We share personal data only in the following circumstances:

• Payment processors — to process deposits and withdrawals via Touch n Go eWallet, Boost, DuitNow, FPX, and partner Malaysian banks. Payment processors receive only the minimum data required to process the transaction.
• Identity verification providers — to perform KYC and AML checks as required by the Platform's licensing obligations.
• Fraud prevention and security services — to protect the Platform and Players from fraud, collusion, and unauthorised access.
• Regulatory and law enforcement authorities — where gcup88 is legally obligated to disclose data, for example in response to a lawful order from a regulatory body or law enforcement agency.
• Professional advisors — legal, audit, and compliance professionals acting in relation to gcup88's business operations, subject to confidentiality obligations.
• Business transfers — in the event of a merger, acquisition, or sale of all or part of gcup88's business, personal data may be transferred as part of that transaction, subject to equivalent data protection commitments.

6.2 All third parties with whom gcup88 shares personal data are required to process that data in accordance with applicable data protection law and gcup88's data processing requirements.

7. Cookies & Tracking Technologies

7.1 gcup88 uses cookies and similar tracking technologies (including web beacons and session storage) on the Platform. Cookies are small text files stored on your device by your browser.

7.2 gcup88 uses the following categories of cookies:

• Strictly necessary cookies — required for the Platform to function (e.g., session management, login state, wallet balance display). These cannot be disabled without impairing Platform functionality.
• Performance & analytics cookies — used to understand how Players use the Platform, identify technical issues, and measure the effectiveness of Platform features. Data collected is aggregated and anonymised where possible.
• Functional cookies — used to remember your preferences (e.g., language settings, game lobby filters, responsible gaming limit settings).
• Marketing cookies — used only where you have consented, to deliver relevant promotional offers based on your Platform activity.

7.3 You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from accessing the Platform but may affect certain personalisation features.

8. Data Security

8.1 gcup88 implements appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These measures include SSL/TLS encryption for all data in transit, encrypted storage for data at rest, access controls limiting data access to authorised personnel on a need-to-know basis, regular security testing and vulnerability assessments, and multi-factor authentication for internal system access.

8.2 Despite these measures, no internet-based platform can guarantee absolute security. You are responsible for keeping your own account credentials confidential and for notifying gcup88 promptly if you suspect any security breach affecting your account.

8.3 In the event of a personal data breach that poses a risk to your rights and freedoms, gcup88 will notify affected individuals in accordance with applicable legal requirements.

9. Data Retention

9.1 gcup88 retains personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Account and KYC data — retained for a minimum of 5 years following account closure to meet AML regulatory requirements.
• Transaction records — retained for a minimum of 5 years following the date of the transaction.
• Support communications — retained for 3 years following the closure of the support interaction.
• Marketing data — retained until you withdraw consent, or for 2 years following the last marketing interaction, whichever is earlier.
• Technical logs — retained for up to 12 months in rolling format for security and fraud prevention purposes.

9.2 Where data is no longer required for any lawful purpose, gcup88 will securely delete or anonymise it.

10. Your Data Rights

10.1 Subject to applicable law, you have the following rights in relation to your personal data held by gcup88:

• Right of access — to request a copy of the personal data gcup88 holds about you.
• Right to rectification — to request correction of inaccurate or incomplete personal data.
• Right to erasure — to request deletion of your personal data where there is no lawful basis for its continued retention (note: regulatory retention obligations may limit the extent to which deletion is possible).
• Right to restriction — to request that gcup88 restrict processing of your personal data in certain circumstances.
• Right to data portability — to receive your personal data in a structured, commonly used, machine-readable format where technically feasible.
• Right to object — to object to processing of your personal data for direct marketing purposes at any time. Other objections will be assessed against the applicable legal basis for processing.
• Right to withdraw consent — where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

10.2 To exercise any of these rights, please contact gcup88 support via live chat or email (see Section 15). gcup88 will respond to data rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 60 days; gcup88 will notify you if an extension is required.

11. Children and Minors

11.1 The gcup88 Platform is strictly for individuals aged 21 years and above. gcup88 does not knowingly collect personal data from individuals under the age of 21.

11.2 If gcup88 discovers or is notified that personal data has been collected from a person under the age of 21, gcup88 will take immediate steps to close the associated account and delete the relevant personal data, subject to any legal retention obligations.

11.3 If you believe that gcup88 has inadvertently collected data from a minor, please contact the support team immediately at the contact details in Section 15.

12. International Data Transfers

12.1 gcup88 may transfer personal data to service providers or infrastructure located outside of Malaysia where necessary to operate the Platform (for example, cloud hosting providers, identity verification services, or fraud prevention platforms operating internationally).

12.2 Where personal data is transferred internationally, gcup88 takes steps to ensure that adequate protections are in place — including contractual data processing agreements that impose obligations on the recipient equivalent to those required under applicable data protection law.

13. Third-Party Links

13.1 The gcup88 Platform does not include links to third-party websites or services in its main content areas. Where any such links appear in informational or support contexts, gcup88 is not responsible for the privacy practices of third-party websites and recommends that you review the privacy policies of any external website you visit.

14. Changes to This Privacy Policy

14.1 gcup88 reserves the right to update this Privacy Policy at any time. Material changes — such as new purposes for processing personal data, new categories of data collected, or changes to data sharing arrangements — will be communicated to registered Players via the email address on file before the changes take effect.

14.2 The current version of this Privacy Policy, identified by the "Last Updated" date at the top of this page, is always the operative version. Continued use of the Platform following notification of changes constitutes your acceptance of the updated Policy.

15. Contact Us

For privacy-related enquiries, data rights requests, or complaints, please contact gcup88 through the following channels:

• Live Chat: Available 24/7 on the Platform. Average response time 3–5 minutes.
• Email: [email protected]

If you are dissatisfied with gcup88's response to a privacy complaint, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.

This Privacy Policy was last updated on 1 June 2026. The version published on this page is always the current operative version.