Gcup2 Privacy Policy — Data Security Malaysian Users

Gcup2 ("we", "Platform" or "gcup2.pro") takes user privacy extremely seriously. This Privacy Policy has been established to explain clearly and transparently how we handle personal data collected through the use of the gcup2 platform — whether via the official gcup2.pro website or the gcup2 mobile app for Android and iOS.

This document is drafted in accordance with responsible data protection principles and best practices in the online gaming industry. gcup2 operates with full transparency and is committed to ensuring every user in Malaysia understands their rights regarding the personal data they share with us.

This Privacy Policy should be read together with gcup2 Terms and Conditions and Responsible Gaming Guide us, which together form the overarching agreement between you and gcup2.

Gcup2 collects user personal data through several key channels: the account registration process, KYC verification, financial transactions, daily platform usage and communications with our support team. The following are the categories of data we collect:

For users who register via the gcup2 mobile app, our platform may request access to your device camera solely for KYC document upload purposes. No camera data is accessed or stored outside of this context.

Personal data collected by gcup2 is used solely for lawful, transparent purposes directly related to platform operations. gcup2 does not use user data for any purpose not stated in this Privacy Policy without obtaining additional consent from the user concerned.

• Account Management: Creating, verifying, and maintaining gcup2 user accounts, including the required KYC and identity verification processes.
• Transaction processing: Processing deposits, withdrawals, and all financial transactions made through the gcup2 platform securely and accurately.
• Platform security: Detecting and preventing fraud, unauthorized access, multi-account usage, and any activity that violates gcup2's Terms and Conditions.
• Customer support: Processing inquiries, complaints, and assistance requests from users via live chat, email, and other support channels.
• Responsible gaming: Monitoring gameplay patterns to identify users who may need addiction support and activating appropriate limit tools.
• Legal compliance: Fulfilling legal and regulatory obligations including anti-money laundering (AML) compliance and reporting requirements set by relevant authorities.
• Service improvement: Analyzing usage patterns in aggregated and anonymized form to improve the interface, performance, and overall user experience of the gcup2 platform.
• Operational communications: Sending important notifications regarding accounts, transactions, security updates, and terms changes that require user attention.

Gcup2 understands that user trust is the foundation of our relationship. As such, your personal data will not be shared, sold, rented or transferred to any third party except in the following limited and specific circumstances:

• Payment service providers: Local banks, e-wallet providers (Touch 'n Go, GrabPay, Boost), and payment gateways used to process your transactions. These providers receive only the minimum data required to complete the relevant transaction.
• Game Software Providers: Third-party gaming companies that provide slot games, Live Casino, Fish Shooting Games and sports betting on the gcup2 platform. Data shared is limited to the game session information required.
• Regulatory authority: Regulatory authorities, law enforcement agencies, or courts issuing a valid legal order requiring gcup2 to disclose specific user information.
• Technical service providers: Cloud storage, cybersecurity and IT infrastructure companies that support gcup2 platform operations. All such providers are bound by strict data confidentiality agreements.
• Fraud investigation process: Fraud prevention agencies and identity verification bodies that help gcup2 authenticate the legitimacy of user accounts and transactions.

Every third-party provider that receives gcup2 user data is required to comply with data protection standards equivalent to or exceeding our own. A legally binding data processing agreement is signed before any data exchange takes place.

The gcup2 platform uses cookies and similar tracking technologies to enhance user experience, ensure account security and analyse platform usage patterns. The following types of cookies are used:

• Essential Cookies: These cookies are required for the basic operation of the gcup2 platform, including login session authentication, security, and core functionality. The platform cannot function without these cookies and they cannot be disabled.
• Preference Cookies: Used to remember your preferences such as interface language, display settings, and other personal preferences, enabling a more personalised experience.
• Analytics Cookies: Enabling gcup2 to understand how users interact with the platform — most visited pages, time spent, and navigation patterns — for continuous improvement purposes.
• Security Cookies: Helping detect suspicious activity, unauthorized login attempts, and abnormal usage patterns to protect your account.

The gcup2 mobile app uses equivalent mobile analytics technology to monitor app performance, detect technical errors, and understand usage patterns for continuous improvement. This analytics data is processed in aggregate and is not linked to individual user identities.

Gcup2 continuously invests in robust security infrastructure to ensure user personal data is always protected. The key security measures we employ include:

• End-to-End Encryption: All data communications between the gcup2 platform and user devices are secured using TLS 1.3 and 256-bit SSL encryption, ensuring no third party can intercept or read the data in transit.
• Two-factor authentication (2FA): gcup2 provides and encourages the use of two-factor authentication for all accounts, adding an extra layer of security beyond passwords alone.
• 24/7 Monitoring: gcup2's cybersecurity team continuously monitors the platform around the clock to detect and respond to any security threats in real time.
• Regular security audits: Penetration testing and independent security audits are conducted periodically by accredited third-party cybersecurity firms to identify and address any vulnerabilities.
• Role-based access controls: Access to user data within gcup2's internal systems is restricted on a "minimum privilege" basis — staff can only access data that is strictly necessary for their specific role.
• Secure data backup: User data is regularly backed up to a secure, separate location, ensuring service continuity and data recovery in the event of an unexpected incident.

As a gcup2 platform user, you have the following rights regarding your personal data. gcup2 fully respects and facilitates the exercise of these rights:

To exercise any of the above rights, please contact the gcup2 support team via live chat or email at [email protected]. gcup2 will process your request within 7 working days and may require identity verification before fulfilling the request.

The gcup2 platform is strictly for users aged 18 and above. gcup2 does not knowingly collect, store or process any personal data from individuals under the age of 18.

Should gcup2 determine that a child's personal data has been collected without valid age verification, we will immediately take the following steps:

• Immediately closing the account in question and deleting all related data.
• Returning any remaining fund balance through the appropriate channels.
• Reviewing our age verification procedures to prevent similar incidents in the future.

The gcup2 platform may contain links or integrations to third-party gaming platforms, payment providers or other services. Once you leave the gcup2 platform and enter a third-party platform, gcup2's Privacy Policy no longer applies.

Gcup2 is not responsible for the privacy practices or content of third-party platforms. We encourage users to read and understand the privacy policy of each platform they visit separately.

Gcup2 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in platform operations, legal requirements or current industry practices. All amendments take effect immediately upon publication on this page.

In the event of significant amendments that materially affect user rights, gcup2 will notify users via their registered email or in-platform notification at least 14 days before the amendments take effect.

• Effective date: Each version of the Privacy Policy will display an "updated" date at the top of this page for user reference.
• Previous version: Users may request a copy of a previous version of gcup2's Privacy Policy by contacting our support team.
• Continued Use: Continued use of the gcup2 platform after any amendments take effect constitutes acceptance of the revised terms.

If you have any questions, concerns, or requests regarding this Privacy Policy or how gcup2 handles your personal data, our Data Protection Officer (DPO) team is ready to assist.

For formal requests relating to personal data rights (access, correction, deletion), please include "Data Rights Request" in your email subject line along with your gcup2 account number to expedite our verification and response process.