Privacy Policy goal55 — Malaysia Member Data Security

Goal55 is an online entertainment platform operating under a recognised international licence. We take the privacy of every individual who interacts with our platform seriously — whether you are a registered member, a casual visitor, or a customer support applicant.

This Privacy Policy transparently and comprehensively explains how goal55 handles your personal information, including the types of data collected, the reasons it is collected, how it is used, and the security measures we take to ensure maximum protection. We comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection standards.

Every time you log in to your goal55 account, make a deposit, contact our support team, or simply browse our website, certain information may be collected automatically or provided directly by you. We are committed to ensuring this information is never misused, sold to third parties for marketing purposes, or shared without your consent — except as specifically stated in this policy.

Goal55 collects various categories of information depending on your interactions with our platform. Below is a detailed breakdown of the types of data that may be collected:

The personal data we collect is used solely for lawful, transparent, and necessary purposes to operate the goal55 platform safely and efficiently. We do not use your data for purposes beyond the scope stated below:

• Identity Verification & KYC: Verifying that every member is a legitimate individual, aged 18 and above, and not a person at risk from a financial security standpoint.
• Transaction Processing: Verifying and processing all deposits, withdrawals, and bonus payments quickly and securely.
• Service Delivery: Enabling access to all platform features including slot games, Live Casino, sports betting, and Bingo.
• Customer Support: Providing relevant and personalized assistance when you contact the goal55 support team.
• Legal Compliance: Meeting regulatory obligations, including anti-money laundering (AML) requirements and reporting duties set by the authorities.
• Account Security: Detecting and preventing unauthorized access, fraud, system exploitation, and other suspicious activity.
• Platform Improvements: Analyzing usage patterns in aggregate and anonymized form to improve the overall user experience.
• Marketing Communications: Sending promotional information, exclusive bonuses, and the latest offers — only to members who have given explicit consent.

Goal55 will not sell, rent, disclose, or share your personal information with any third party for commercial marketing purposes without your explicit prior consent. However, there are limited situations where data sharing is necessary and legally permissible:

• Trusted Service Providers: Technical and operational partners who help us run the platform — such as payment processors, identity verification providers, and cloud infrastructure vendors — are bound by strict confidentiality agreements.
• Regulatory Authority: When required by court order, legal authority, or a valid request from the relevant financial regulatory body.
• Fraud & AML Investigation: In cases involving suspected fraud, money laundering, or financial criminal activity, relevant information may be shared with qualified financial intelligence units.
• Business Transfers: In the event of a merger, acquisition, or sale of goal55 business assets, your data may be transferred to the successor entity — with prior notice provided to you.

All third parties we work with are required to comply with data security and confidentiality standards no less stringent than our own. We conduct regular audits of all third-party service providers.

Goal55 continuously invests in the latest cybersecurity infrastructure to ensure your personal and financial information is always kept in the most secure environment. The layers of protection we employ include:

• 256-bit SSL Encryption: All data transmitted between your device and goal55 servers is encrypted using TLS 1.3 protocol — the same standard used by leading banking institutions.
• Data Encryption at Rest: Sensitive information stored in our databases is encrypted using AES-256 algorithms, keeping your data secure even at rest.
• Two-Factor Authentication (2FA): An additional security feature that requires a second verification through your registered device each time you log in from a new device.
• Real-Time Monitoring: An automated threat detection system that monitors account activity 24/7 and sends immediate alerts upon detecting any unusual activity.
• Internal Access Control: Access to member data within the goal55 organisation is restricted based on a need-to-know principle, with comprehensive audit logs maintained for every access.
• Regular Penetration Testing: Independent security testing is conducted periodically by third-party cybersecurity experts to identify and close any system vulnerabilities.

Goal55 uses cookies and similar tracking technologies to enhance the user experience, understand how our platform is used, and deliver more relevant content to you. Below are the categories of cookies we use:

• Essential Cookies: Required for core platform functions such as session login, account security, and navigation. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting anonymized usage data to help us understand which pages are most visited and how users interact with the platform. This data is used solely for technical improvements.
• Functional Cookies: Saving your preferences such as language, display settings, and login information (if you choose to be remembered) so your experience is more seamless on future visits.
• Marketing Cookies: Activated only with your consent, these cookies help us deliver more relevant promotions and offers based on your interests and usage patterns.

You can manage or disable cookies through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality and experience of using the goal55 platform.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and internationally adopted data protection principles, you have the following rights regarding the personal data we hold:

Goal55 only retains your personal information for as long as it is needed for the purposes stated in this policy, or for as long as required by applicable laws and regulations.

• Active Account Data: Retained for the duration your account remains active and for the stipulated period following account closure to comply with legal requirements.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's AML compliance and financial regulatory requirements.
• KYC Verification Documents: Retained for the period required by the relevant authorities, typically 5 to 7 years from the date of verification.
• Support Communication Logs: Retained for 2 years from the date of last interaction for quality assurance and reference purposes.
• Cookie & Analytics Data: Usage data collected through cookies is typically retained for no more than 13 months.

Once the defined retention period has lapsed and there is no legal requirement to continue storing your data, it will be securely deleted using irreversible deletion methods.

Goal55 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or platform improvements. Any material changes will be communicated to you via:

• A clear notice on the home page or your account page.
• Email notification to all registered members if the changes directly affect your privacy rights.
• Update the "Last Updated" date at the top of this page.

Continued use of the goal55 platform after any changes take effect will be considered acceptance of the updated terms. We encourage you to review this page periodically to stay informed about how your data is protected.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, do not hesitate to contact the goal55 Data Protection Officer (DPO).

You can reach us via:

• Email: [email protected]
• Live Chat: Available 24/7 via the support icon at the bottom-right corner of the platform.
• FAQ Page: Visit our FAQ page for answers to frequently asked questions about privacy.

We are committed to responding to all privacy-related inquiries within 5 working days. For more complex cases requiring in-depth investigation, the response period may take up to 30 working days — we will keep you updated on the progress of your case periodically.