Privacy Policy

This Privacy Policy (the "Policy") describes how vip55 (referred to herein as "vip55", "we", "us", or "our") collects, processes, stores, discloses, and protects personal data submitted by or collected from individuals (referred to as "you", "your", or "the User") in connection with your access to and use of the vip55 online gaming and sports betting platform, accessible at vip55.casa.

vip55 is committed to processing personal data in a responsible, transparent, and lawful manner. We recognise that the trust our members — across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and throughout Malaysia — place in us when they share their personal information is something we must earn and continuously maintain.

This Policy applies to all personal data collected through: the vip55 website and mobile platform; account registration and verification processes; deposit and withdrawal transactions; customer support interactions; promotional and marketing communications; and any other interaction between you and vip55.

This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, each of which forms part of the overall agreement governing your use of the vip55 platform.

For the purposes of this Privacy Policy, the following definitions apply:

vip55 collects only the personal data that is necessary to provide, operate, and improve our services, fulfil our legal and regulatory obligations, and communicate with you effectively. The categories of personal data we collect are set out below.

vip55 collects personal data through the following means:

• Direct submission: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or responding to surveys or promotions.
• Automated collection: Technical data collected automatically when you access the Platform, including via cookies, server logs, and session tracking technologies.
• Third-party sources: Identity verification data received from KYC service providers; payment processing data received from FPX, DuitNow, e-wallet providers, and banking partners; fraud detection signals from security vendors.
• Publicly available sources: In limited circumstances, information from publicly available databases used for identity verification or fraud prevention purposes.

We do not purchase personal data from data brokers or third-party marketing lists. All data collected by vip55 is either submitted directly by you or received in the course of providing our contracted services.

vip55 processes your personal data for the following specific, documented purposes:

vip55 relies on the following legal bases when processing your personal data:

• Contractual necessity: Processing required to enter into or perform the contract between you and vip55 — including account creation, payment processing, and service delivery.
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC identity verification, AML transaction monitoring, and record retention obligations.
• Legitimate interests: Processing for the purpose of fraud prevention, platform security, and service improvement, where our interests do not override your fundamental privacy rights.
• Consent: For non-essential processing activities — particularly direct marketing communications — we rely on your freely given, specific, and revocable consent. You may withdraw consent at any time without affecting processing activities carried out before withdrawal.

Where processing is based on consent, we will obtain that consent in a clear and unambiguous manner. Withdrawing consent will not affect the lawfulness of processing based on consent before its withdrawal.

vip55 does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

• Payment processors and banking partners: We share necessary financial data with FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank, Hong Leong Bank, and cryptocurrency processing services strictly to execute payment transactions.
• Identity verification service providers: KYC and age verification data may be shared with accredited third-party identity verification providers to fulfil our regulatory obligations.
• Fraud prevention and security vendors: Technical and transactional data may be shared with security service providers for the purpose of detecting and preventing fraudulent activity.
• Regulatory and law enforcement authorities: We may disclose personal data to competent authorities where required by applicable law, court order, or regulatory directive. vip55 will, where legally permissible, notify affected Members of such disclosures.
• Group companies and affiliates: Personal data may be shared with entities within the vip55 corporate group, subject to equivalent data protection standards, for the purpose of providing coordinated services.
• Professional advisers: Legal advisers, auditors, and compliance consultants engaged by vip55 may access relevant personal data under strict confidentiality obligations.

vip55 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, accounting, or reporting obligations.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with our data destruction procedures. Anonymised data from which no individual can be identified may be retained indefinitely for statistical and analytical purposes.

The vip55 platform uses cookies and similar tracking technologies to enhance your experience, maintain session continuity, and gather analytical data to improve platform performance. The categories of cookies we use are as follows:

• Strictly necessary cookies: Essential for the Platform to function. These cookies enable core features such as secure login, session management, and load balancing. They cannot be disabled without impairing Platform functionality.
• Performance and analytics cookies: Collect anonymised data about how you interact with the Platform — pages visited, time spent, errors encountered — to help us improve the user experience. No personally identifiable information is collected via these cookies.
• Functionality cookies: Remember your preferences such as language settings, display preferences, and previously visited sections of the Platform to provide a more personalised experience.
• Security cookies: Support authentication, fraud detection, and session integrity. These are essential for maintaining the security of your account.

You may manage cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect the functionality of the Platform. Strictly necessary and security cookies cannot be disabled without compromising your account security.

vip55 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes:

• 256-bit TLS 1.3 encryption applied to all data in transit between your device and our servers — the same standard employed by leading Malaysian banking portals including Maybank2u and CIMB Clicks.
• AES-256 encryption for sensitive data at rest, including identity documents, financial records, and account credentials.
• Two-factor authentication (2FA) available to all Members, providing an additional layer of account access protection.
• Real-time intrusion detection and prevention systems (IDPS) monitoring the Platform infrastructure for anomalous activity around the clock.
• Role-based access controls (RBAC) ensuring that internal staff can only access personal data relevant to their specific role and operational need.
• Regular security audits and penetration testing conducted by qualified external security professionals.
• Segregated data storage ensuring that player funds data and personal identity data are maintained in separate, independently secured environments.
• PCI-DSS compliant payment processing for all financial transaction data passing through vip55's payment infrastructure.

While vip55 takes all reasonable steps to protect your data, no system of transmission over the internet or method of electronic storage is entirely infallible. In the event of a data security incident that is likely to result in a risk to your rights and freedoms, vip55 will notify you without undue delay in accordance with applicable data breach notification obligations.

As a data subject, you have meaningful rights in respect of the personal data vip55 holds about you. These rights are described below. To exercise any of these rights, please contact our data protection contact at [email protected] (plain text — not a clickable link).

We will respond to all valid data rights requests within 30 calendar days. In complex cases, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reasons for it. There is no charge for exercising your data rights in ordinary circumstances.

The vip55 platform is strictly intended for use by individuals aged 21 years and above. We do not knowingly collect, process, or retain personal data relating to individuals under the age of 21 in connection with use of our gaming services.

Age verification is a mandatory component of our KYC process. Any account found to be operated by a person under the age of 21 will be immediately suspended, any deposits returned, and any winnings forfeited in accordance with our Terms & Conditions.

If you have reason to believe that a minor has accessed the Platform or submitted personal data to vip55, please contact us immediately at [email protected] (plain text only). We will take immediate steps to investigate and, where confirmed, delete the relevant data and close the account.

The vip55 platform may, from time to time, reference or link to third-party services — including payment gateway interfaces (FPX, DuitNow, and e-wallet provider apps) that open within their own separate environments. vip55 does not control the privacy practices of these third-party services and is not responsible for the content, policies, or data practices of any third-party platform.

When you interact with a third-party payment interface — for example, authenticating a bank transfer through Maybank2u, CIMB Clicks, or Public Bank Online — you are subject to that third party's own privacy policy and terms of service. We encourage you to review the privacy policies of any third-party service you use in connection with your vip55 account.

vip55's Privacy Policy applies exclusively to data collected and processed by vip55 on its own Platform. Data submitted directly to third-party services is governed solely by those services' own policies.

vip55 reserves the right to update or amend this Privacy Policy at any time. We will provide notice of material changes — defined as changes that meaningfully alter how your personal data is processed — through the Platform and, where possible, via email to your registered address, at least 14 days prior to the changes taking effect.

Non-material amendments — such as typographical corrections, improved plain-language explanations that do not alter the substantive processing activities described, or updates reflecting changes in applicable law — may take effect immediately upon publication.

The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. We encourage you to review this Policy periodically. Your continued use of the vip55 platform following the effective date of any amendment constitutes acceptance of the revised Policy.

For all matters relating to this Privacy Policy — including exercising your data rights, raising a privacy concern, or requesting information about our data processing activities — please contact vip55 through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly on the vip55 platform. Average first response: under 90 seconds. Select "Privacy / Data" as your enquiry category where available.
• Email: [email protected] — plain text, not a clickable link. Please use the subject line "Privacy Enquiry – [your Member ID]" to ensure your message is routed to the correct team. We aim to respond within 2 business hours during operating hours (9am–11pm MYT).

When submitting a data rights request, please provide: your full registered name, your Member ID, the specific right you wish to exercise, and relevant details supporting your request. We may request additional verification to confirm your identity before processing a data rights request, to protect against unauthorised access to your personal data.

We are committed to resolving all data and privacy enquiries fairly, transparently, and within the timeframes required by applicable law. If you are not satisfied with our response, you have the right to escalate your complaint to the relevant supervisory authority.