Privacy Policy 55win – Member Data Protection

1 Policy Introduction & Scope

55win values the privacy of every individual who uses our platform. This Privacy Policy explains in detail how we collect, process, store, disclose and protect your personal information when you use the 55win website and services in Malaysia.

This policy applies to all users of the 55win platform, including website visitors, prospective members and registered members. By registering an account or continuing to use this platform, you agree to the terms set out in this Privacy Policy.

55win operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection standards. We are committed to ensuring that your personal data is always handled responsibly, transparently and securely.

2 Types of Information We Collect

55win collects various types of information depending on how you interact with our platform. Below are the main categories of data we collect:

3 How We Collect Information

Your personal information is collected through several key channels when you interact with the 55win platform:

• Account Registration — information you provide when creating a new account, including name, date of birth, and phone number.
• KYC Verification Process — identity documents submitted for identity verification prior to the first withdrawal.
• Financial Transactions — information required when processing deposits and withdrawals via DuitNow, FPX, or e-wallets.
• Platform Usage — game activity records, session duration, preferences, and wagering behavior automatically recorded by the system.
• Support Communications — information you share when interacting with the 55win customer support team via live chat.
• Cookies and Tracking Technologies — technical data collected via cookies, tracking pixels, and similar technologies to improve website performance.

We do not collect your information from third-party sources without your knowledge, except for fraud prevention and identity verification purposes as permitted by law.

4 Purpose of Data Use

55win uses collected information solely for legitimate and stated purposes. The use of your data includes:

• Operating and managing your member account securely and efficiently.
• Processing financial transactions including deposits and withdrawals promptly.
• Carrying out KYC processes and Anti-Money Laundering (AML) legal compliance.
• Providing responsive customer support and helping resolve any technical issues.
• Sending important notifications related to your account, security, and policy changes.
• Analysing usage patterns to improve the gaming experience and platform performance.
• Monitoring activity to detect fraud, unauthorised use, and terms violations.
• Supporting responsible gaming programmes including betting limits and self-exclusion.
• Sending marketing communications where you have given your consent to do so.

5 Data Sharing & Disclosure

55win understands that your trust is our most valuable asset. We are committed to never selling or disclosing your personal information to third parties except in the following limited circumstances:

• Payment Service Providers — the minimum transaction information required by DuitNow, FPX, Touch 'n Go, Boost, or GrabPay to process your transaction.
• Legal Compliance — when required by law or by directive from a competent authority in Malaysia.
• Fraud Prevention — sharing data with recognized anti-fraud organizations to protect the security of the platform and all members.
• Technical Service Providers — selected third parties that assist in operating the platform's technical infrastructure under strict confidentiality agreements.
• Game Providers — information required by licensed game providers to ensure a fair and seamless gaming experience.

6 Data Security & Protection

Your data security is a top priority for 55win. We continuously invest in the latest security technologies and procedures to ensure your information remains protected at all times.

Security measures we employ include:

• 256-bit SSL encryption for all data transmitted between your browser and 55win servers.
• Password storage using one-way hashing algorithms that cannot be decrypted.
• Two-factor authentication (2FA) available for all member accounts.
• Continuous security monitoring 24 hours a day, 7 days a week by our cybersecurity team.
• Regular penetration testing by independent security experts.
• Strict internal access controls — only authorised staff may access sensitive data.
• A clear incident response procedure to swiftly address any security breaches.

7 Cookies & Tracking Technologies

55win uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies — required for core website operations such as secure login and session management. These cookies cannot be disabled.
• Performance Cookies — collects information on how you use the website to help us improve performance and user experience.
• Functional Cookies — remembers your preferences such as language and display settings to provide a more personalized experience.
• Analytics Cookies — helps us understand aggregated usage patterns for internal analytics purposes only.

You can manage cookie settings through your web browser. Please note that disabling certain cookies may affect the functionality of the 55win platform.

8 Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data:

To exercise any of these rights, please contact the 55win support team via live chat. Requests will be processed within 30 calendar days.

9 Data Retention Period

55win retains your personal data only for as long as it is needed for the stated purposes or as required by applicable law.

• Active Account Data — retained for the duration your account is active plus 5 years after account closure for legal compliance purposes.
• Financial Transaction Records — retained for 7 years as required by Malaysia's financial and tax laws.
• KYC Documents — retained for 5 years from the date of verification or account closure, whichever is later.
• Activity Logs — retained for 2 years for security and dispute resolution purposes.
• Support Communication Records — retained for 3 years for service quality and historical reference purposes.

Once the retention period expires, your data will be securely deleted or anonymized in accordance with established data disposal procedures.

10 Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how 55win handles your personal data, we encourage you to contact us.

The 55win Data Protection Team can be reached via:

• Live Chat — available 24 hours a day, 7 days a week via the chat icon at the bottom-right corner of the platform.
• Email — [email protected] (response within 2 business days).

We are committed to addressing all privacy-related inquiries seriously and within a reasonable timeframe. If you are not satisfied with our response, you have the right to lodge a complaint with the Malaysia Personal Data Protection Department.