Son55 Privacy Policy — Your Personal Data Security Is Our Priority

Welcome to the son55 Privacy Policy. This document is an agreement between you as the user and son55 as the platform operator regarding how we handle your personal data. We care about your privacy — not merely as a legal obligation, but because your trust is the foundation of the long-term relationship we are building with over 500,000 Malaysian players.

This Privacy Policy applies to all services provided by son55, including the web platform at son55.app, the son55 mobile app, all games and betting products, as well as any interaction you have with our customer support team via Live Chat, email, or other communication channels we provide.

By registering a son55 account or continuing to use our platform, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the son55 platform and contact us to close your account.

Son55 collects personal data necessary to provide a secure, fair, and compliant service. We only collect data that is strictly required — our "data minimization" principle ensures no excess information is gathered without a clear purpose.

We may also receive data about you from trusted third-party sources, such as identity verification service providers, anti-fraud agencies, and registered payment partners — all within the framework of maintaining the security of the son55 ecosystem.

Son55 uses your personal data for the following purposes, all grounded in a valid and relevant lawful basis:

• Service Provision: Processing account registration, verifying identity, handling deposits and withdrawals, and providing access to all son55 games and products.
• Security & Fraud Prevention: Detecting and preventing unauthorized access, fraud, money laundering, and any other illegal activity that could harm players or the integrity of the platform.
• Legal Compliance: Meeting KYC (Know Your Customer), AML (Anti-Money Laundering), and reporting requirements mandated by regulatory authorities.
• Customer Support: Handling inquiries, complaints, and support requests more quickly and effectively using previous communication records.
• Platform Improvement: Analyzing usage patterns to improve the design, speed, and usability of the son55 platform for a better gaming experience.
• Consent-Based Marketing: Sending you promotional notifications, exclusive offers, and the latest updates — only if you have given consent to receive marketing communications.
• Responsible Gaming: Monitoring wagering patterns to proactively identify signs of problem gambling and offer appropriate support tools.

Son55 does not sell, rent, or transfer your personal data to third parties for their own marketing purposes. However, there are specific circumstances where we need to share your data with carefully selected parties:

• Third-Party Service Providers: Partners who help us operate the platform — including payment verification providers, cloud service providers, licensed game software suppliers, and analytics tools. All third parties are bound by strict data protection agreements and are only permitted to use your data for purposes specified solely by son55.
• Regulatory Authority: son55 will disclose data to legal authorities, regulatory bodies, or law enforcement agencies if required to do so by law or a valid court order.
• Fraud Prevention: We may share necessary information with accredited anti-fraud agencies for mutual protection across financial platforms.
• Change of Business Ownership: If son55 undergoes a merger, acquisition, or asset sale, user data may be transferred to the new entity — in which case you will be notified in advance and your rights will remain protected.

Son55 uses cookies and similar tracking technologies to ensure the platform functions correctly, enhance the user experience, and help us understand how players use our services. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login authentication, session security, and transaction processing. These cookies cannot be disabled as they are critical to son55's operations.
• Performance & Analytics Cookies: Collecting anonymous information about how you use the platform — pages visited, time spent, and navigation patterns. This data is used solely for platform improvement.
• Functional Cookies: Saving your preferences such as language, display settings, and game preferences so you do not need to reconfigure them every time you log in.
• Marketing Cookies: Used with your consent to show ads and promotions relevant to your interests. You may withdraw this consent at any time through your account settings.

You can manage your cookie preferences through your browser or via the privacy settings panel in your son55 account. Please note that disabling essential cookies may affect your ability to use certain platform features.

Son55 implements comprehensive technical and organizational security measures to protect your personal data from unauthorized access, loss, destruction, or accidental disclosure:

• Data Encryption in Transit: All communications between your device and son55 servers are secured with TLS 1.3 protocol and AES-256 encryption, ensuring no third party can intercept or read your data in transit.
• Data Encryption at Rest: All sensitive data stored in the son55 database — including identity and financial information — is encrypted using high-level encryption.
• Two-Factor Authentication (2FA): son55 supports and encourages the use of 2FA on all accounts to add an extra layer of security that prevents unauthorized access even if your password is compromised.
• Internal Access Controls: Only son55 staff with a legitimate business need are permitted to access player personal data, and all access is recorded in strict audit logs.
• Regular Security Testing: son55 conducts regular penetration testing and security audits by independent security experts to identify and address system vulnerabilities before they can be exploited.
• Incident Response Plan: We have tested incident response procedures in place to address any data breach quickly and effectively, including notification protocols for affected users.

Son55 retains your personal data for as long as necessary to fulfil the original purpose of collection and to comply with legal obligations. Retention periods depend on the type of data and applicable legal requirements:

• Active Account Data: Retained for the duration your account remains active and in use on son55.
• Data After Account Closure: son55 retains financial transaction records and KYC data for a minimum of 7 years following account closure to comply with anti-money laundering and tax reporting legal requirements.
• Technical Logs: System logs and technical data are retained for 12 months before being automatically deleted.
• Communication Records: Records of interactions with customer support are retained for 3 years for dispute resolution and service improvement purposes.

Once the retention period expires or upon a valid deletion request from you, son55 will securely delete or anonymize your personal data in a manner that prevents it from being recovered or re-associated with your identity.

Son55 respects your rights regarding your personal data. Below are the rights you hold and how to exercise them:

• Right of Access: You have the right to request a copy of the personal data we hold about you. This request can be submitted via your account panel or directly to our privacy team.
• Right to Rectification: If any data we hold about you is inaccurate or outdated, you have the right to request a correction. You can also update most of your profile information directly through your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data once it is no longer needed for its original purpose, subject to our legal obligations to retain certain records.
• Right to Restrict Processing: In certain circumstances, you may request that we restrict how we process your data while a dispute or request is being resolved.
• Right to Data Portability: You have the right to receive your personal data in a structured, machine-readable format and to transfer it to another data controller if you choose.
• Right to Object: You have the right to object to the processing of your data for direct marketing purposes at any time. Your objection will be acted on immediately.

To exercise any of the rights above, contact the son55 Privacy & Data Protection team at [email protected]. We will process your request within 30 business days from the date we receive your complete submission.

To deliver high-quality services to Malaysian players, son55 may need to transfer your personal data to servers or service providers operating outside Malaysia. When this occurs, son55 ensures that a level of protection equivalent to the standards applicable in Malaysia is maintained through the following mechanisms:

• Use of Standard Contractual Clauses in agreements with recipients outside Malaysia.
• Ensuring that the recipient country or region has adequate data protection laws or has received appropriate adequacy recognition.
• Implementing additional technical security measures to protect data during cross-border transfers.

Son55 is a betting platform intended exclusively for individuals aged 18 years and above only. We do not knowingly collect, process, or store any personal data from individuals under the age of 18.

As part of the registration and KYC verification process, son55 takes active steps to verify the age of every player. If we detect that data has been collected from a person under the age of 18, the account will be closed immediately and all related data will be deleted promptly in accordance with established security procedures.

If you are a parent or guardian and discover that your child has registered an account on son55 without your knowledge, please contact us immediately at [email protected] and we will take immediate action.

Son55 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or platform improvements that require data to be processed differently.

When we make significant changes to this Privacy Policy, we will:

• Updating the "Last Updated" date at the top of this document.
• Displaying a clear notice on the son55 platform homepage regarding any changes made.
• Sending notification emails to all registered users with an active email address in our system.
• For changes that fundamentally affect how we use your data, we will ask for your explicit consent again before those changes take effect on your account.

Your continued use of the son55 platform after any Privacy Policy changes take effect will be considered your acceptance of the revised policy. We therefore encourage you to review this page periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or how son55 handles your personal data, our Privacy & Data Protection team is ready to assist you.

When submitting any privacy rights request, please include the following information to help us process it faster: your son55 username or account ID, the type of request you wish to submit, and any additional details relevant to your request. We are committed to responding to every request within the specified timeframe and handling all communications in strict confidence.