VIP55 Privacy Policy – Malaysia Member Personal Data Protection

Vip55 ("we", "Platform", or "vip55.plus") takes the privacy protection of our members extremely seriously. As an online betting and gaming platform serving users in Malaysia, we understand that your trust is the most valuable asset we must safeguard wholeheartedly.

This Privacy Policy applies to all personal information collected through:

• The vip55.plus website and all associated sub-domains.
• The vip55 mobile app for Android and iOS.
• All communications between you and the vip55 customer support team.
• Third-party services integrated with the vip55 platform, such as payment processors and game providers.

This policy does not apply to third-party websites or services that may be linked from our platform. We encourage you to review the privacy policy of each external platform separately.

Vip55 only collects data that is genuinely necessary to provide a secure, seamless service that meets legal requirements. The following are the categories of data we collect:

Every piece of data we collect has a clear and legitimate purpose. vip55 uses your personal information for the following purposes:

• Account management: Creating, verifying, and maintaining your member account, including the KYC process required by compliance regulations.
• Transaction processing: Processing deposits, withdrawals, and all financial transactions made through the vip55 platform securely and accurately.
• Platform security: Detecting and preventing fraud, money laundering, multi-account usage, and any other suspicious activity that could compromise member security.
• Legal compliance: Fulfilling reporting obligations to the relevant regulatory bodies and authorities in accordance with applicable Malaysian law.
• Service improvement: Analysing usage patterns to improve the user experience, platform performance, and product offerings.
• Marketing communications: Sending information about promotions, bonuses, and platform updates — only to members who have given consent to receive such communications.
• Customer support: Resolving complaints, answering enquiries, and providing the technical assistance members require.

Vip55 continuously invests in state-of-the-art security infrastructure to ensure your personal data is always protected against cyber threats. The technical and organisational measures we implement include:

• 256-bit SSL Encryption: All data transmitted between your device and vip55 servers is encrypted using TLS 1.3 protocol — the highest encryption standard in the industry.
• Data encryption at rest: Sensitive data such as bank details and KYC documents are encrypted at rest using AES-256 on secure servers protected both physically and digitally.
• Two-factor authentication (2FA): All member accounts are backed by an additional security layer through 2FA to prevent unauthorised access even if your password is compromised.
• 24/7 Monitoring: Our security system monitors login activity and transactions around the clock and will trigger immediate alerts upon detecting any anomalies.
• Penetration testing: vip55 conducts regular security testing by independent third parties to identify and address any vulnerabilities before they can be exploited.
• Staff access limits: Member personal data is accessible only to staff who require it to carry out their duties, based on the principle of least privilege.

Vip55 does not sell, rent, or trade members' personal data to any third party for their own marketing purposes. However, in the normal course of platform operations, we may share certain data with the following parties in limited and controlled circumstances:

• Payment processors: Transaction information that must be shared with FPX, DuitNow, TNG eWallet, Boost, GrabPay, and banking institutions to process your deposits and withdrawals.
• Game providers: Minimum game session data required by game software providers to verify member eligibility and ensure game integrity.
• KYC service providers: Identity information shared with trusted digital identity verification providers for the purpose of authenticating your documents.
• Regulatory authority: Data required by law to be shared with regulatory bodies, law enforcement agencies, or courts when ordered to do so.
• Technology service providers: Hosting, cybersecurity, and analytics partners bound by strict confidentiality agreements that prohibit disclosure or use of your data for any other purpose.

All third parties receiving data from vip55 are required to uphold data protection standards equal to or higher than those practised by vip55 itself. Every instance of data sharing is recorded and auditable.

Vip55 uses cookies and similar tracking technologies to enhance user experience, maintain session security, and understand how our platform is used. The following are the categories of cookies we use:

You can manage your cookie settings through your internet browser at any time. Please note that disabling essential cookies may affect the login functionality and security of your account on the vip55 platform.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by vip55. We are committed to helping you exercise these rights easily and without unnecessary barriers:

Vip55 does not retain your personal data longer than necessary to fulfil the purpose for which it was collected or to comply with legal obligations. Our data retention schedule is as follows:

• Active account data: Retained for the duration your account is active plus any legally required period following account closure.
• Financial transaction records: Retained for seven years in line with financial reporting requirements and the Anti-Money Laundering Act (AMLA).
• KYC documents: Retained for five years from the date of verification or account closure, whichever is later.
• Customer service communication logs: Retained for three years for quality control and dispute resolution purposes.
• Technical and security logs: Retained for 12 months for security investigation and digital forensics purposes.

Once the retention period expires, your data will be securely deleted using methods that ensure it cannot be recovered. For data stored in physical format, secure document destruction procedures are fully observed.

Vip55 is strictly for individuals aged 18 and above. We do not knowingly collect, store, or process personal data of minors. All new account registrations require age verification through a rigorous KYC process.

Should we detect that personal data of an individual under 18 has been collected without parental or guardian knowledge, we will take immediate steps to delete that data and close the account in question. Parents or guardians who become aware of such a situation are encouraged to contact our team immediately.

Vip55 reserves the right to update this Privacy Policy from time to time to reflect changes in business operations, legal requirements, or industry practices. When material changes are made, we will:

• Displaying a clear notice on the platform's home page for at least 14 days.
• Sending notification emails to all registered members with a summary of key changes.
• Updating the "Last Updated" date shown at the top of this page.

Continued use of the vip55 platform after notice of changes is considered your acceptance of the updated terms. If you do not agree with the changes, you have the right to close your account before the changes take effect.

If you have any questions, concerns, or wish to exercise your rights regarding your personal data, you can contact vip55's Data Protection Officer (DPO) through the following channels:

• Email: [email protected] (plain text display only — please state "Privacy Inquiry" in your subject line)
• Live Chat: Available 24/7 via the chat icon at the bottom right corner of the vip55 platform.
• Response time: Privacy-related requests will be answered within five business days.