Privacy Policy

This Privacy Policy ("Policy") sets out the basis on which 55win ("55win", "we", "us", "our") collects, processes, stores, and discloses personal data obtained from individuals ("User", "Member", "you", "your") who access or use the 55win platform at 55win.casa and any associated mobile-optimised interfaces, subdomains, or related services (collectively, "the Platform").

55win is committed to handling your personal data with transparency, integrity, and in accordance with applicable data protection legislation. This Policy should be read alongside our Terms & Conditions, which govern your use of the Platform as a whole, and our Responsible Gambling Policy.

By registering a member account on 55win or by continuing to use the Platform after the effective date of this Policy, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not consent to these practices, you must cease using the Platform and close your account.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies, or could reasonably be used to identify, a living individual, either alone or in combination with other information held by 55win.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, organisation, adaptation, retrieval, use, disclosure, combination, restriction, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this case, 55win.
• "Data Processor" means a third party that processes Personal Data on behalf of 55win under a binding data processing agreement.
• "Consent" means a freely given, specific, informed, and unambiguous indication of the Member's agreement to the processing of their Personal Data for one or more specified purposes.
• "Cookie" means a small text file placed on a Member's device by a website to record information about browsing behaviour, preferences, and session activity.
• "KYC" means Know Your Customer — the identity verification process required under applicable anti-money laundering regulations.
• "Sensitive Personal Data" means special categories of personal data requiring heightened protection, such as biometric data, health information, or data relating to criminal convictions, which 55win does not intentionally collect unless required by law.

55win acts as the Data Controller in respect of the personal data collected through the Platform. As Data Controller, 55win is responsible for ensuring that Personal Data is processed in accordance with this Policy and applicable data protection law.

Where 55win engages third-party service providers to process Personal Data on its behalf — including payment processors, KYC verification partners, fraud detection vendors, and customer support platform providers — those parties act as Data Processors under written agreements that bind them to process your data only as instructed by 55win and to maintain appropriate security standards.

55win collects the following categories of Personal Data from Members and Platform visitors:

55win collects Personal Data through the following channels and methods:

• Direct submission: When you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, update your account settings, or respond to a survey or promotion.
• Automated technical collection: When you browse the Platform, technical data (IP address, device identifiers, session logs) is automatically collected through our web servers and analytics infrastructure.
• Cookies and similar technologies: First-party cookies and session identifiers are placed on your device to manage your login session, remember preferences, and support basic Platform functionality. See Section 8 for full details.
• Third-party payment processors: When you complete a transaction via DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, or other integrated payment methods, relevant transaction confirmation data is received from the payment processor to complete and verify the transaction.
• KYC and fraud detection partners: During identity verification, data may be cross-referenced against verification databases to confirm identity and detect fraudulent activity.

55win processes your Personal Data on one or more of the following legal bases:

• Contractual necessity: Processing required to register and manage your account, process deposits and withdrawals, settle bets, apply bonuses, and deliver the services you have contracted for under the Terms & Conditions.
• Legal obligation: Processing required to comply with applicable anti-money laundering (AML) law, KYC regulatory requirements, financial crime prevention obligations, and any other mandatory legal or regulatory duty.
• Legitimate interests: Processing necessary for 55win's legitimate interests in operating a secure, fraud-free platform, improving Platform performance, and maintaining the integrity of gaming outcomes — provided those interests are not overridden by your fundamental data protection rights.
• Consent: Processing for purposes such as marketing communications, where you have given explicit opt-in consent. You may withdraw consent at any time by updating your communication preferences within your account or by contacting support.

55win does not sell your Personal Data. We share your data with third parties only in the following circumstances and only to the minimum extent necessary for each purpose:

• Payment service providers: Transaction data and relevant identity confirmation are shared with payment processors — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency processing services — solely to execute and verify financial transactions.
• KYC and identity verification services: Identity documents and biographic data are shared with regulated third-party KYC providers to fulfil identity verification obligations. These providers process data only under strict contractual terms.
• Fraud detection and AML screening providers: Technical and transactional data may be shared with third-party fraud prevention and anti-money laundering screening services to identify suspicious activity.
• Customer support platform providers: Communications data is processed through our live chat and ticketing system providers, who act as Data Processors under appropriate data processing agreements.
• Legal and regulatory authorities: 55win may be required to disclose Personal Data to competent government authorities, law enforcement agencies, or regulatory bodies where required by law, court order, or regulatory directive. 55win will notify affected Members where legally permitted to do so prior to making such disclosures.
• Corporate restructuring: In the event of a merger, acquisition, or sale of assets involving 55win, Personal Data may be transferred as part of that transaction, subject to the same privacy commitments outlined in this Policy.

55win uses cookies and similar technologies to operate and improve the Platform. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in, security tokens that protect your account, and load-balancing cookies. These cookies cannot be disabled without affecting Platform functionality.
• Functional Cookies: Used to remember your preferences, such as language settings, display preferences, and responsible gambling tool configurations (e.g., your deposit limit settings). Disabling these cookies may affect your experience.
• Analytics Cookies: Used to collect anonymised or pseudonymised data about how Members use the Platform — pages visited, session duration, error rates — to enable us to improve performance and usability. This data is aggregated and does not identify individual users.

55win does not use third-party advertising cookies or cross-site tracking technologies for the purpose of targeting you with personalised advertisements on other websites.

Most browsers allow you to control cookies through their settings. Blocking all cookies may impair your ability to use the Platform, including preventing you from staying logged in. For more information on managing cookies, refer to your browser's help documentation.

55win retains your Personal Data for no longer than is necessary for the purposes described in this Policy, taking into account applicable legal, regulatory, and operational requirements. Our general retention approach is as follows:

• Active account data: Retained for the duration of your account's active status plus any mandatory post-closure period required by applicable AML and financial record-keeping regulations.
• Financial and transaction records: Retained for a minimum of five (5) to seven (7) years following the transaction date, consistent with standard financial record-keeping obligations in the jurisdictions in which 55win operates.
• KYC documents: Retained for the regulatory-minimum period following account closure or the completion of a relevant transaction — typically five (5) years — and then securely destroyed.
• Support communications: Retained for a maximum of three (3) years following resolution of the support interaction, unless the communication forms part of a legal dispute or regulatory investigation requiring longer retention.
• Marketing preferences and consent records: Retained until you withdraw consent or for a reasonable period thereafter to evidence the existence of consent.
• Technical and usage logs: Retained for up to twelve (12) months for security and performance monitoring purposes, then anonymised or deleted.

When Personal Data is no longer required, it is securely deleted from active systems or, where technical deletion is not immediately practicable, moved to secure archival storage from which it cannot be accessed for operational purposes pending scheduled destruction.

55win implements a multi-layered approach to data security designed to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• Encryption in transit: All data transmitted between your device and 55win servers is protected using 256-bit SSL/TLS encryption — the same standard used by major financial institutions.
• Encryption at rest: Sensitive Personal Data, including KYC documents and financial records, is stored in encrypted form on access-controlled servers.
• Access controls: Access to Personal Data is restricted to 55win personnel and Data Processors on a strict need-to-know basis. All staff with access to Personal Data receive data protection training and are bound by confidentiality obligations.
• Fraud detection systems: Automated monitoring systems flag unusual login activity, large or atypical transactions, and other potential indicators of account compromise or fraudulent behaviour in real time.
• Penetration testing and security audits: 55win conducts regular security assessments to identify and remediate vulnerabilities in its technical infrastructure.

Notwithstanding these measures, no system is entirely invulnerable. In the event of a personal data breach that poses a risk to your rights, 55win will notify you and the relevant authorities within the required timeframe and will take prompt remedial action.

55win's primary operations serve the Malaysian market and our core data processing infrastructure is operated with that user base in mind. However, certain Data Processors engaged by 55win — such as global KYC verification services, fraud detection vendors, and customer support platform providers — may process data in jurisdictions outside Malaysia.

Where Personal Data is transferred outside the country of collection to a country that may not offer an equivalent level of data protection, 55win takes steps to ensure that such transfers are lawful and that the recipient provides appropriate safeguards. These safeguards may include contractual clauses requiring the data importer to maintain equivalent data protection standards, or transfers to jurisdictions recognised as providing adequate protection.

By using the 55win Platform, you acknowledge that your Personal Data may be transferred to and processed in countries outside Malaysia as described in this section.

As a data subject, you have the following rights in relation to your Personal Data held by 55win. You may exercise any of these rights by contacting our support team via live chat or email. 55win will respond to all verifiable rights requests within 30 calendar days of receipt.

To exercise any of the above rights, please contact 55win support via live chat or by emailing [email protected]. We may ask you to verify your identity before processing a rights request to protect against unauthorised access to your Personal Data.

The 55win Platform is intended exclusively for individuals aged 21 years and above. We do not knowingly collect Personal Data from individuals under the age of 21. Our registration process includes age declaration requirements and KYC verification is conducted to confirm Members meet the minimum age requirement.

If 55win becomes aware that Personal Data has been collected from a person under 21 years of age, we will take immediate steps to delete that data from our systems and close the associated account in accordance with our Terms & Conditions.

If you have reason to believe that a minor has registered on the 55win Platform, please notify us immediately via live chat or email so we can investigate and take appropriate action.

The 55win Platform may contain links to or integrations with third-party websites, services, or resources — for example, payment method provider portals accessed during deposit and withdrawal flows. 55win is not responsible for the privacy practices of those third parties, and this Policy does not govern the collection or use of your data by them.

We encourage you to review the privacy policies of any third-party service you access via a link or integration originating from the 55win Platform before providing them with your Personal Data.

55win reserves the right to update or modify this Privacy Policy at any time. Material changes to the Policy — changes that meaningfully alter the way we collect, use, or share your Personal Data — will be communicated to active Members via email notification or by prominent notice on the Platform, with at least fourteen (14) days' advance notice where practicable.

The date of the most recent revision is displayed at the top of this document. Where required by applicable law, we will seek fresh consent from existing Members for any new processing activities not covered by previously collected consent.

Continued use of the 55win Platform following the effective date of any amended Policy constitutes your acceptance of the changes. If you do not agree to the revised Policy, you must cease using the Platform and contact support to request account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or to 55win's data processing practices, please contact us through any of the following channels:

• Live Chat: Available 24/7 on the 55win Platform. For the fastest response, live chat is the recommended channel for privacy enquiries.
• Email: [email protected] — please include "Privacy Enquiry" or "Data Rights Request" in the subject line so your message is routed to our data protection team promptly.

55win will acknowledge receipt of all privacy-related enquiries within 48 hours and will provide a substantive response to rights requests within 30 calendar days, as required by applicable data protection law. For complex requests, we may request an extension and will notify you accordingly.