Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how gcup88 ("gcup88", "we", "us", "our"), the operator of the online casino and sports betting platform located at https://gcup88.cam ("Platform"), collects, uses, stores, and protects the personal data of individuals ("Player", "User", "you") who register an account or otherwise interact with our Platform.

gcup88 is committed to protecting your personal data and handling it in a responsible, transparent, and lawful manner. This Policy should be read alongside our Terms & Conditions, which together constitute the complete legal framework governing your use of the Platform.

By registering an account on the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the Platform.

2. Definitions

For the purposes of this Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, email address, date of birth, financial information, and online identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this case, gcup88.
• "Data Processor" means a third party that processes Personal Data on behalf of gcup88 under written instructions.
• "KYC" means Know Your Customer — the identity verification process required to comply with anti-money laundering regulations.
• "Cookies" means small text files placed on your device by the Platform for purposes of session management, analytics, and personalisation.
• "Platform" means the gcup88 website, mobile interface, and any related services accessible at https://gcup88.cam.

3. Data Controller

gcup88 is the Data Controller in respect of all Personal Data collected through the Platform. As Data Controller, gcup88 determines the purposes for which your data is processed and the means by which such processing takes place.

All data-related enquiries, including requests to exercise your rights under this Policy, should be directed to our Data Protection team via the contact details provided in Section 16 of this Policy.

4. Data We Collect

4.1 Registration Data

When you create an account on gcup88, we collect the following information:

• Full legal name
• Date of birth (to verify you are 21 years of age or older)
• Email address
• Telephone number
• Residential address
• Preferred currency (MYR by default for Malaysian players)
• Username and encrypted password hash

4.2 Identity Verification (KYC) Data

To comply with our anti-money laundering (AML) and responsible gambling obligations, we may request the following documents:

• Copy of government-issued photo identification (e.g., Malaysian MyKad, passport)
• Proof of residential address (e.g., recent utility bill, bank statement)
• Proof of payment method ownership (e.g., screenshot of eWallet account registered in your name)
• Source of funds documentation where required by our compliance team

4.3 Financial & Transaction Data

We record all financial transactions on the Platform, including:

• Deposit amounts, dates, and payment methods used (Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, cryptocurrency)
• Withdrawal requests, amounts, and processing records
• Bonus claims, wagering activity, and promotional usage
• Account balance history

4.4 Gameplay & Betting Data

The Platform automatically records details of all wagering and gaming activity, including game titles, bet amounts, outcomes, session durations, and betting patterns. This data is used for player account management, responsible gambling monitoring, and dispute resolution.

4.5 Technical & Usage Data

When you access the Platform, we automatically collect certain technical data, including:

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Pages visited, navigation paths, and time spent on pages
• Session identifiers and login timestamps
• Error logs and performance diagnostics

4.6 Communications Data

We retain records of all communications between you and gcup88, including live chat transcripts, email correspondence, and support ticket history. These records are maintained for quality assurance, compliance, and dispute resolution purposes.

5. How We Collect Data

gcup88 collects your Personal Data through the following channels:

• 5.1 Directly from you — when you register an account, complete KYC verification, make deposits or withdrawals, contact our support team, or update your account settings.
• 5.2 Automatically via the Platform — through server logs, cookies, web beacons, and analytics tools that record your interactions with the Platform.
• 5.3 From payment processors — when you deposit or withdraw funds, our payment service providers (including operators of Touch 'n Go eWallet, DuitNow, FPX, and supported cryptocurrency networks) share transaction confirmation data with us.
• 5.4 From identity verification services — where we use third-party KYC providers to assist with document verification, those providers share the outcome of their verification process with us.
• 5.5 From fraud prevention services — we may receive signals from third-party fraud detection tools that help us identify and prevent prohibited conduct on the Platform.

6. Purposes of Processing

gcup88 processes your Personal Data for the following purposes:

• Account creation and management — to register your account, authenticate your identity, and maintain your player profile.
• Service delivery — to enable you to access games, place bets, and use all Platform features.
• Financial processing — to process deposits, withdrawals, and bonus credits, and to maintain accurate financial records.
• KYC and AML compliance — to verify your identity, assess the source of your funds, and comply with applicable anti-money laundering requirements.
• Responsible gambling — to monitor your betting patterns, apply account-level limits you have set, and identify potential signs of problem gambling.
• Customer support — to respond to your enquiries, process complaints, and resolve disputes.
• Security and fraud prevention — to detect, investigate, and prevent fraudulent transactions, money laundering, and other prohibited conduct.
• Platform improvement — to analyse usage patterns, diagnose technical issues, and improve the design and functionality of the Platform.
• Legal compliance — to comply with applicable laws, regulatory requirements, and court orders.
• Marketing communications — to send you promotional offers and updates, subject to your marketing preferences and applicable law.

7. Legal Basis for Processing

gcup88 processes your Personal Data on the following legal bases:

• Contractual necessity — processing required to perform our obligations under the Terms & Conditions, including account management, game access, and financial transactions.
• Legal obligation — processing required to comply with applicable laws, including KYC, AML, and regulatory reporting requirements.
• Legitimate interests — processing for fraud prevention, Platform security, responsible gambling monitoring, and Platform improvement, where these interests are not overridden by your privacy rights.
• Consent — processing for marketing communications, where we have obtained your prior consent. You may withdraw this consent at any time by updating your communication preferences in your account settings.

8. Data Sharing

8.1 Authorised Third Parties

gcup88 may share your Personal Data with the following categories of third parties where necessary to deliver the Platform's services:

• Payment processors — operators of Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, and supported cryptocurrency networks, to facilitate your deposit and withdrawal transactions.
• KYC and identity verification providers — third-party services that assist us in verifying your identity and documentation.
• Fraud prevention services — providers of tools that help us detect and prevent fraudulent activity and money laundering.
• Cloud infrastructure providers — hosting and storage providers that process data on gcup88's behalf under data processing agreements.
• Analytics providers — services that help us understand how the Platform is used, in aggregated or pseudonymised form.
• Legal and regulatory authorities — courts, law enforcement agencies, and regulatory bodies, where we are legally required to disclose your data.

8.2 No Sale of Personal Data

gcup88 will never sell, rent, or trade your Personal Data to any third party for marketing or commercial purposes. Any data sharing is conducted solely for the purposes described in this Policy.

9. International Data Transfers

Some of the third parties with whom gcup88 shares your data may be located outside Malaysia. Where such international transfers occur, gcup88 ensures that appropriate safeguards are in place to protect your Personal Data, including contractual obligations on recipient parties to maintain data protection standards equivalent to those described in this Policy.

By using the Platform, you acknowledge and consent to the transfer of your Personal Data to other countries as described in this Section.

10. Data Retention

gcup88 retains your Personal Data only for as long as necessary to fulfil the purposes for which it was collected or as required by applicable law. The following general retention periods apply:

• Account data — retained for the duration of your account's active status plus a minimum of five (5) years following account closure, to comply with AML record-keeping requirements.
• Transaction records — retained for a minimum of seven (7) years in accordance with financial record-keeping obligations.
• KYC documents — retained for five (5) years following the completion of the verification process or the closure of your account, whichever is later.
• Support communications — retained for three (3) years from the date of the communication.
• Technical and usage logs — typically retained for twelve (12) months, unless a longer retention period is required for security investigations.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised in accordance with our data disposal procedures.

11. Your Rights

Subject to applicable law, you have the following rights with respect to your Personal Data held by gcup88:

Right	Description
Right of Access	You may request a copy of the Personal Data we hold about you, together with information about how it is processed.
Right of Rectification	You may request correction of any inaccurate or incomplete Personal Data we hold about you.
Right of Erasure	You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
Right to Restriction	You may request that we restrict processing of your Personal Data in certain circumstances, such as where you contest its accuracy.
Right to Portability	You may request a copy of your Personal Data in a structured, machine-readable format for transfer to another service provider.
Right to Object	You may object to processing of your Personal Data for direct marketing purposes at any time, and to processing based on legitimate interests where you have grounds relating to your particular situation.
Right to Withdraw Consent	Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact our Data Protection team using the details in Section 16. We will respond within ten (10) business days of receiving your verified request. We may ask you to verify your identity before processing your request.

12. Cookies & Tracking Technologies

12.1 What Are Cookies?

Cookies are small data files placed on your device by the Platform. They allow the Platform to recognise your browser, remember your preferences, and provide a more consistent and secure experience.

12.2 Types of Cookies We Use

• Strictly necessary cookies — required for the Platform to function, including session authentication and security tokens. These cannot be disabled.
• Functional cookies — used to remember your preferences, such as language settings and display options.
• Analytics cookies — used to understand how players interact with the Platform in aggregate, helping us improve navigation and performance.
• Marketing cookies — used, with your consent, to display relevant promotional content. You may opt out of marketing cookies at any time via your browser settings.

12.3 Managing Cookies

You may control and delete cookies through your browser settings. Please note that disabling strictly necessary cookies may impair the functionality of the Platform, including the ability to log in to your account.

13. Protection of Minors

The Platform is strictly intended for persons aged 21 years and above. gcup88 does not knowingly collect Personal Data from persons under the age of 21. If we become aware that we have collected data from an underage individual, we will take immediate steps to delete that data and close the associated account.

If you have reason to believe that a person under 21 years of age has registered an account on the Platform, please contact our support team immediately.

14. Data Security

gcup88 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Encryption of sensitive data fields at rest, including payment instrument details and identity documents.
• Two-factor authentication (2FA) available for all player accounts.
• Role-based access controls restricting internal access to Personal Data on a need-to-know basis.
• Regular security assessments, penetration testing, and vulnerability scanning of our infrastructure.
• Comprehensive audit logging of all access to Personal Data by internal personnel.

While we employ industry-standard security practices, no digital platform can guarantee absolute security. We encourage you to use a strong, unique password for your gcup88 account and to enable two-factor authentication.

15. Policy Amendments

gcup88 reserves the right to update this Privacy Policy at any time. When material changes are made, we will update the "Last Updated" date at the top of this page and, where practicable, notify registered Players via the email address associated with their account prior to the changes taking effect.

Your continued use of the Platform after any amendment to this Policy constitutes your acceptance of the revised terms. If you do not agree with the revised Policy, you should cease using the Platform and may request account closure in accordance with our Terms & Conditions.

16. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact our Data Protection team through any of the following channels:

• Live Chat — available on the Platform 24 hours a day, seven days a week.
• Email — [email protected] (plain text — not a clickable link)

For complaints relating to our handling of your Personal Data, you also have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.

For information about your rights regarding responsible gambling and self-exclusion, please visit our Responsible Gambling page.

For the full legal terms governing your use of the Platform, please refer to our Terms & Conditions.