Gcup5 takes your data privacy seriously. This page clearly explains what data we collect, why we need it, how it is protected and your full rights over your personal information as a Malaysian player.
A summary of how gcup5 protects your data — before you read the full policy below.
Every piece of data transmitted between your device and gcup5's servers is encrypted with 256-bit SSL — the same standard used by Maybank, CIMB and all major Malaysian banks. None of your information travels in a readable form without the encryption key.
Gcup5 has never sold, rented, or traded player personal data to any third party for marketing or commercial purposes, and never will. Your data belongs to you — gcup5 uses it solely for the purposes explicitly stated in this policy.
Gcup5 players have the full right to access, correct, download, and request deletion of their personal data at any time. This process can be initiated through your account settings or by contacting the gcup5 support team directly.
Gcup5 only collects data that is strictly necessary to operate your account, process financial transactions and meet regulatory requirements. We do not collect irrelevant or excessive information simply for the sake of having data.
You may opt out of promotional emails, SMS notifications and other marketing communications from gcup5 at any time via the unsubscribe link in any email or through the communication preferences settings in your account.
Gcup5 operates in accordance with international data protection standards and undergoes regular security reviews by independent auditors. Any significant data breach will be communicated to affected players within 72 hours of discovery.
This Privacy Policy ("Policy") describes how gcup5, accessible at gcup5.xyz collect, use, protect, and disclose your personal information when you use our platform and services.
By registering or using the gcup5 platform, you agree to the practices described in this Privacy Policy. This policy should be read together with gcup5 Terms & Conditions. If you do not agree with any part of this Policy, please discontinue use of the gcup5 platform.
Note: gcup5 is committed to protecting the privacy of Malaysian players. This policy is written in plain, straightforward language — not confusing legal jargon. If any section is unclear, reach out to us at support@gcup5.xyz.
Gcup5 is the controller of your personal data. This means we are responsible for determining how and why your personal data is collected and used. All data privacy matters may be directed to the gcup5 Data Privacy Officer by email support@gcup5.xyz with the subject line "Data Privacy Enquiry".
Gcup5 operates as an online betting platform serving Malaysian players. In providing this service, we require certain personal information to ensure the platform runs safely, fairly and in compliance with applicable legal requirements. We do not collect data beyond what is strictly necessary for those purposes.
This Privacy Policy applies to all information you provide to gcup5 through the gcup5.xyz platform, including during account registration, gameplay, financial transactions, interactions with customer support and any written communications with gcup5.
When you register and use your gcup5 account, you provide us with the following information directly:
When you use the gcup5 platform, our systems automatically record certain technical information required for security and service improvement purposes:
Payment Note: gcup5 does not store credit or debit card numbers directly. All payment processing via DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay is handled by third-party payment processors with their own security certifications.
Gcup5 uses your personal data solely for the following purposes. Any use beyond these requires your additional consent:
| Purpose of Use | Data Used | Legal Basis |
|---|---|---|
| Account management and verification | Name, email, phone number, date of birth | Contract performance |
| Processing deposits and withdrawals | Payment details, name, transaction records | Contract performance |
| Fraud prevention and security | IP address, activity logs, device data | Gcup5's legitimate interests |
| KYC compliance and anti-money laundering | Identity documents, financial transaction records | Legal obligation |
| Customer Support | All account data related to the reported issue | Contract performance |
| Marketing communications (with consent) | Email, phone number, game preferences | Your consent |
| Platform improvement and analytics | Anonymised usage data | Gcup5's legitimate interests |
Gcup5 does not sell, rent or trade players' personal data to any third party for their own marketing purposes. This is an absolute commitment with no exceptions.
Your personal data may be shared with selected third parties only in the following circumstances:
Gcup5 servers may be located outside Malaysia. Any transfer of personal data to other countries is carried out with appropriate safeguards, including data processing agreements that comply with internationally recognised data protection standards. gcup5 does not transfer data to countries lacking adequate data protection without additional contractual safeguards.
Gcup5 continually invests in security infrastructure to protect player personal data. The following are the key security measures in place:
All data in transit between your device and gcup5's servers is protected by TLS 1.3 encryption with 256-bit SSL. Sensitive data stored in gcup5's databases — including passwords and financial information — is encrypted using industry-standard encryption algorithms. Passwords are stored as one-way hashes that cannot be decrypted by anyone, including gcup5 staff.
Access to player personal data within the gcup5 system is restricted to staff with a legitimate business need, based on the principle of least privilege. All staff access to player data is automatically logged and monitored.
Gcup5's systems are monitored around the clock — 24 hours a day, 7 days a week — to detect and respond to security threats, unauthorised access attempts and suspicious activity. gcup5's cybersecurity team conducts regular penetration testing and independent security reviews to identify and remediate vulnerabilities before they can be exploited.
Data Breach: Should gcup5 experience a data security breach that may affect the rights or freedoms of players, we are committed to notifying potentially affected players within 72 hours of discovering the breach, in line with industry best practices.
Cookies are small text files stored on your device when you browse the gcup5 platform. They help gcup5 recognise your device on subsequent visits, remember your preferences, and deliver a more personalised and secure experience. Without certain cookies, some features of the gcup5 platform may not function correctly.
You can manage or delete cookies through your web browser settings. Most modern browsers allow you to view stored cookies, delete individual cookies, or block cookies from specific websites. Please note that disabling all cookies may affect the functionality of the gcup5 platform, particularly the login and session security features.
Gcup5 retains your personal data for as long as your account is active, and for a specified period after account closure, depending on the type of data and applicable legal compliance requirements:
Once the retention period expires, your data will be securely deleted or anonymized so that it can no longer be linked to you as an individual.
As a gcup5 player who is a Malaysian citizen or resident, you have the following rights over your personal data. gcup5 is committed to respecting and facilitating the exercise of all these rights:
You have the right to know what personal data gcup5 holds about you and to request a copy of that data. Requests can be submitted by email to support@gcup5.xyz and will be processed within 30 days.
If any personal data gcup5 holds about you is inaccurate or incomplete, you have the right to request a correction. Basic information can be updated directly in your account settings.
You may request that gcup5 delete your personal data under certain circumstances — for example, when the data is no longer needed for its original purpose or you withdraw your consent. This right is subject to our legal retention obligations.
You have the right to receive a copy of your personal data in a machine-readable format (such as JSON or CSV) for transfer to another service if required.
In certain circumstances — such as when you dispute the accuracy of your data or object to its processing — you may request that gcup5 restrict the processing of your data while the matter is being resolved.
You may object to the processing of your data for direct marketing purposes at any time, and gcup5 is obliged to stop. You may also object to processing based on our legitimate interests in certain circumstances.
How to Exercise Your Rights: To exercise any of the rights above, please contact the gcup5 Data Privacy Officer by email support@gcup5.xyz with the subject line "Data Privacy Rights Request" and specify the right you wish to exercise along with your account details. We will verify your identity before processing the request and will respond within 30 days.
The gcup5 platform is intended for adults aged 18 and above only. gcup5 does not knowingly collect any personal information from individuals under 18. All registrants must confirm they are 18 or older during the registration process.
If gcup5 becomes aware that personal data has been collected from someone under the age of 18, we will take immediate steps to delete that information and close the associated account. Any party who is aware of or suspects that a minor is using the gcup5 platform is urged to report this to us at support@gcup5.xyz without delay.
Gcup5 employs a range of technical and procedural measures to prevent access by minors, including Malaysia phone number verification during registration and an identity verification (KYC) process for the first withdrawal that requires submission of a valid identity document.
Gcup5 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform developments. Whenever this Policy is updated, the "Last Updated" date at the top of this page will be revised to reflect the date of the most recent amendment.
For material changes to this Privacy Policy — particularly changes that may affect how gcup5 uses your personal data — gcup5 will endeavour to provide advance notice via in-platform notifications when you log in, or by email to the address registered to your account. Such notice will be given at least 14 days before the changes take effect, where practicable.
Recommendation: gcup5 recommends that you review this Privacy Policy periodically, especially before providing any new personal information or using new platform features. Your continued use of the gcup5 platform after any amendments are published will be considered your acceptance of the revised Policy.
If you have any questions, concerns or complaints regarding how gcup5 handles your personal data, or if you wish to exercise any of your privacy rights, please contact us through the following channels:
We will acknowledge receipt of your request within two business days and provide a full response within 30 days of the request date. For more complex cases, we will notify you if additional time is required and explain the reason for the delay.
If you are not satisfied with how gcup5 has handled your privacy enquiry or complaint after going through our internal process, you have the right to refer the matter to the relevant data protection authority in your jurisdiction.
When you play on any online betting platform — including gcup5 — you share a fair amount of sensitive personal information. Your full name, date of birth, phone number, bank or e-wallet account details, and in many cases a copy of your MyKad or passport. This is information that deserves serious protection, and the platform you choose makes a significant difference in how well it is safeguarded.
Many Malaysian players are unaware that not all online betting platforms follow the same privacy practices. Some platforms use player data for aggressive marketing, sell email lists and phone numbers to third-party advertisers, or lack sufficient encryption to protect data in their databases. gcup5 takes a different approach — and this policy is the written proof of that commitment.
Many gcup5 players wonder why the platform requires a MyKad or passport copy during their first withdrawal. It is a completely reasonable question. This process is called KYC — Know Your Customer — and while it may seem inconvenient at first glance, it exists to protect you as a player.
Consider this scenario: someone somehow gains access to your gcup5 account without your knowledge. Without a rigorous KYC process, they could easily request a withdrawal to a different account and walk away with your winnings. The KYC process ensures that only you — the verified account owner — can withdraw funds from your account. It's a layer of protection that works in your favour, not against you.
Furthermore, KYC is a standard compliance requirement across the global financial and online betting industry. It helps platforms like gcup5 prevent money laundering, identity fraud, and other illicit activities that could compromise the integrity of the platform and ultimately harm legitimate players.
When you make a deposit using DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, or FPX via Maybank2u or CIMB Clicks, the technical process works as follows: gcup5 never sees or stores your full e-wallet or bank account details. Instead, you are connected directly to the secure interface of the relevant payment processor to complete the transaction. gcup5 only receives confirmation that the payment was successful along with the relevant amount — no full account numbers or other sensitive details are disclosed to gcup5.
For withdrawals, gcup5 stores the payment method details you used for deposits as your authorised withdrawal recipient. This is a security measure — ensuring funds can only be returned to the original payment method — and gcup5 ensures this information is stored with appropriate encryption and accessed only by the automated payment processing system when a withdrawal request is approved.
Many players are unaware that they have concrete legal rights over their personal data — and at gcup5, exercising those rights is straightforward. If you want to know what data gcup5 holds about you, send an email to support@gcup5.xyz with the subject line "Data Access Request" and we will provide a full report within 30 days. If you need to correct a misspelled name or update an old phone number, you can do so directly in your account settings or ask our support team for assistance.
If you decide to stop using the gcup5 platform and wish to have your data deleted, a deletion request can be submitted through customer support. gcup5 will delete all erasable data promptly, retaining only information we are legally required to keep — such as financial transaction records for audit compliance purposes. This is your right as a player, and gcup5 fully respects it.
The most frequently asked questions from Malaysian players about data privacy at gcup5.
This Privacy Policy should be read together with gcup5's Terms & Conditions and our Responsible Gaming Policy. Together, these three documents form the complete agreement between you and gcup5. The gcup5 platform is intended for adults aged 18 and above only. For any data privacy enquiries, contact support@gcup5.xyz.