gd55 Privacy Policy

1 Introduction

This Privacy Policy describes the standards applied by gd55 when handling information relating to an identified or identifiable user. It applies when a person visits gd55, registers an account, uses gaming information or entertainment services, completes identity checks, carries out an MYR transaction, communicates with support or uses responsible gambling tools.

gd55 recognises that account, identity and payment information can be sensitive. gd55 therefore seeks to collect only information reasonably connected with platform operation, security, fraud prevention, support, responsible gambling and applicable compliance obligations. This Policy should be read together with the Terms & Conditions.

2 Scope and Definitions

For this Policy, “personal data” means information that identifies a person directly or can reasonably be linked to that person. “Processing” includes collecting, recording, organising, storing, reviewing, using, sharing, restricting and deleting personal data.

“User” means any person who visits or uses gd55. “Account holder” means a user who has completed registration. “Payment provider” includes a bank, e-wallet provider, payment gateway or digital-asset service used to process an available transaction. References to gd55 include the platform and authorised personnel who require information to perform their duties.

This Policy covers information processed through gd55. It does not change the separate privacy practices of a bank, e-wallet or telecommunications provider. Users should review the notices presented by those providers when using their services.

3 Information We Collect

The categories collected by gd55 depend on the services used and the checks required for a particular account. Information may include:

• Registration details: full name, username, date of birth, residential address, email address, Malaysian phone number and account credentials.
• Identity records: an accepted identity document, document details, proof of address, verification status and, where required, a selfie or liveness-check result.
• Transaction information: deposit and withdrawal amounts, MYR currency records, payment references, account holder names, masked payment identifiers and transaction status.
• Platform activity: login time, session duration, game or sports market activity, bonus use, account preferences and safer-play control settings.
• Technical information: IP address, browser type, device category, operating system, language preference, approximate location, cookie identifiers and security logs.
• Communications: support conversations, complaint records, privacy requests and information voluntarily supplied when contacting gd55.

Users should provide accurate information and update material changes promptly. gd55 may be unable to complete verification or process an account request if essential details are incomplete, inconsistent or unreadable.

4 How Information Is Collected

gd55 collects information directly when users enter registration details, upload verification documents, set account controls, request a withdrawal or speak with support. Information is also generated automatically when a device connects to gd55, including session, browser and security data.

Relevant information may also be received from payment processors, identity verification services, game systems, sports data systems and fraud-prevention providers. For example, gd55 may receive confirmation that an FPX transaction was completed, that a DuitNow transfer failed or that the name registered with Maybank, CIMB, Public Bank or Hong Leong does not match the account holder name.

Where gd55 receives information from another service provider, that information is used only for relevant operational, security, account or compliance purposes.

5 Purposes of Data Processing

gd55 may process personal data to:

• Create, maintain and authenticate user accounts;
• Confirm identity and age eligibility;
• Process deposits, withdrawals, reversals and payment enquiries;
• Provide casino, live gaming and sports betting account functions;
• Settle activity associated with EPL, Liga Super Malaysia, UFC or other available markets;
• Detect duplicate accounts, abuse, fraud, suspicious transactions and unauthorised access;
• Respond to questions, complaints and technical support requests;
• Apply deposit limits, cooling-off periods and self-exclusion instructions;
• Improve mobile usability, reliability and platform performance;
• Maintain business, tax, dispute and compliance records where required;
• Communicate material service, security or policy changes.

gd55 does not use identity documents merely for advertising. Verification records are handled for security, age assurance, fraud prevention and other legitimate operational or regulatory purposes.

6 Legal and Operational Grounds

Depending on the circumstances and applicable law, gd55 may process information because it is necessary to provide requested account services, satisfy legal or regulatory obligations, protect legitimate operational interests, prevent fraud, defend legal claims or act with the user’s consent.

Legitimate interests considered by gd55 may include maintaining platform security, investigating misuse, improving services and protecting users from unauthorised activity. gd55 will consider the nature of the information and the effect on individual privacy before relying on those interests.

Where consent is the relevant basis, a user may withdraw that consent for future processing. Withdrawal does not affect processing already carried out and may not require gd55 to erase information that must be retained for another lawful reason.

7 Payments and Account Verification

Payment information may be processed when users select Touch 'n Go eWallet, Boost, GrabPay, FPX, DuitNow, Maybank, CIMB, Public Bank, Hong Leong or another method available on gd55. Payment availability can vary, and the relevant provider may collect information directly under its own terms.

gd55 may retain transaction references, amounts, dates, status, masked account details and evidence that the payment method belongs to the account holder. gd55 does not require users to send passwords, one-time verification codes or complete card security codes to support personnel.

KYC Documents

Verification may require a valid Malaysian identity document or passport, recent proof of address and an identity image. gd55 may compare submitted information with account and payment records. Documents should be uploaded only through an authorised gd55 verification area protected by HTTPS, not through an unsecured public message.

8 Cookies and Device Information

gd55 may use cookies, local storage and comparable technologies to keep users signed in, remember preferences, measure page performance and recognise unusual access patterns. Some technologies are necessary for account security and basic platform operation.

Users can manage certain cookie settings through their browser. Blocking essential storage may prevent login, payment confirmation or account security features from operating correctly. Device records can also help gd55 identify repeated failed login attempts, suspicious location changes or multiple accounts being controlled from the same environment.

Analytics information should be used in aggregated or appropriately limited form where reasonably possible. gd55 does not permit cookie data to override responsible gambling controls or an active self-exclusion.

9 Data Sharing and Service Providers

gd55 does not sell personal identity documents. Information may be disclosed to carefully selected service providers when reasonably necessary for platform operation. These recipients may include hosting services, payment processors, verification providers, fraud-monitoring services, customer support systems, professional advisers and game or sports platform operators.

gd55 may also disclose information when required by applicable law, a valid legal process or a competent authority, or when reasonably necessary to protect users, prevent crime, enforce the Terms & Conditions or defend legal rights. Only information relevant to the stated purpose should be shared.

Service providers acting for gd55 are expected to handle information under appropriate confidentiality, security and purpose-limitation requirements. Access should be limited to personnel who require the information to deliver the contracted service.

10 International Data Transfers

Online services may use infrastructure, support teams or specialist providers located outside Malaysia. As a result, information collected by gd55 may be stored or processed in another jurisdiction whose data protection rules differ from Malaysian requirements.

Where an international transfer occurs, gd55 seeks to apply reasonable safeguards appropriate to the information and the receiving service. These may include contractual data protection obligations, access restrictions, encryption and provider security reviews.

An international transfer does not permit unrestricted use. Information remains subject to the purposes and retention principles described in this gd55 Privacy Policy.

11 Data Retention

gd55 retains personal data only for as long as reasonably necessary for the relevant purpose. Retention periods depend on the type of record, account status, transaction history, dispute risk, responsible gambling controls and applicable legal or compliance requirements.

Account and payment records may need to remain available after closure to investigate fraud, answer transaction disputes, enforce self-exclusion or meet record-keeping obligations. Support messages with no continuing operational or legal value may be deleted sooner.

When information is no longer required, gd55 may securely delete, destroy or anonymise it. Anonymised statistics that can no longer reasonably identify a person may be retained for platform analysis.

12 Data Security

gd55 applies administrative, technical and organisational safeguards designed to protect information from accidental loss, unauthorised access, misuse, alteration or disclosure. Measures may include HTTPS encryption, account access controls, event logging, internal permission limits, security monitoring and staff confidentiality requirements.

No internet transmission or storage environment can be guaranteed completely secure. Users also have an important role: choose a unique password, protect one-time codes, keep devices updated and avoid signing in to gd55 over an untrusted public connection.

13 User Privacy Rights

Subject to applicable law, identity verification and relevant exemptions, a user may ask gd55 to:

• Confirm whether personal data relating to the user is being processed;
• Provide access to eligible personal data and related processing information;
• Correct inaccurate or incomplete account details;
• Delete data that no longer has a valid retention purpose;
• Restrict or object to particular processing in eligible circumstances;
• Withdraw consent where consent is the applicable processing basis;
• Receive eligible information in a structured format where required by law.

gd55 may request reasonable proof of identity before acting on a privacy request. This helps prevent another person from obtaining or changing account information. A request may be limited or refused where the law permits or requires continued retention, including for fraud prevention, legal claims, financial records or self-exclusion enforcement.

14 Responsible Gambling Information

gd55 may process responsible gambling information when a user sets deposit or loss limits, requests a break, completes a safer-play interaction or activates self-exclusion. Such records may include the requested control, its effective date, relevant support communication and the period for which access must remain restricted.

gd55 may retain self-exclusion data after account closure where necessary to prevent re-registration or circumvention. Responsible gambling information is treated as restricted account information and should be accessed only by authorised personnel who need it to apply player protection measures.

Further information about spending controls, session management and exclusion is available on the Responsible Gambling page. Gambling should remain entertainment, and only users aged 21 and above may participate.

15 Policy Changes and Contact Us

gd55 may update this Privacy Policy when services, technology, legal requirements or data-handling practices change. Material revisions may be communicated through a prominent platform notice or an account communication where appropriate. The effective date at the top of this page identifies the current version.

Continued platform use after an update does not remove any privacy rights available under applicable law. Users should review the gd55 Privacy Policy periodically and contact support if a change is unclear.