Privacy Policy son55 – How We Protect Your Personal Data

Son55 ("we", "the platform") is committed to protecting the privacy of all users and members who use our platform in son55.click. This Privacy Policy clearly and transparently outlines how we manage your personal data — from the moment you first visit our website, through your time as an active son55 member, and beyond.

This policy applies to all information collected through the son55.click website, our customer support services, email and WhatsApp communications, and all other digital interactions between you and son55. It covers all products and services we offer, including slots, live baccarat, badminton betting, virtual sports, and progressive jackpots.

Son55 acts as the data controller responsible for all personal data collected through this platform. We are in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA), and all our data management practices are designed to ensure your rights as a data subject are protected at all times.

Son55 only collects personal data that is strictly necessary for delivering our services. The following are the categories of data we collect and the reasons each is required:

We also collect anonymised data in aggregate form for internal analysis purposes, such as platform usage trends and game popularity. This type of data cannot be traced back to any specific individual and is not considered personal data under the PDPA.

Son55 does not collect sensitive data categories such as health information, political views, religious beliefs, or racial information unless specifically required by law and with your explicit consent. All data collection is carried out transparently — you are always welcome to ask us why a particular piece of data is needed.

Son55 uses collected personal data solely for legitimate purposes as stated below. We do not use your data for any other purpose without prior notice and your consent:

• Account management: To register, verify, and maintain your son55 account, including processing password reset requests and profile information updates.
• Transaction processing: Securely and accurately managing all deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, CIMB Clicks and FPX.
• Identity verification (KYC): To comply with legal requirements for customer identity verification and anti-money laundering (AML) prevention in accordance with Malaysian regulations.
• Platform security: To detect and prevent fraudulent activity, unauthorised access, account misuse, and suspicious behaviour on the son55 platform.
• Customer support: To respond to enquiries, resolve complaints, and provide technical assistance to son55 members through available support channels.
• Responsible gaming: To monitor usage patterns for signs of problem gambling and to enforce the self-exclusion limits you have set.
• Legal compliance: Meeting the legal and regulatory obligations applicable to son55 as a digital entertainment platform operator in Malaysia.
• Service communications: Sending important account notifications, security updates, changes to terms, and promotional information (if you have opted in to receive them).

Son55 does not sell your personal data to anyone. However, in the course of operating our platform, there are limited situations where data needs to be shared with trusted third parties:

• Payment service providers: Transaction information necessary for processing is shared with e-wallet and banking providers such as Touch 'n Go, GrabPay, DuitNow, and banking institutions via FPX solely for the purpose of processing your financial transactions.
• Game providers: Minimum required game session data is shared with licensed slot and game providers such as Pragmatic Play, PG Soft, and Spadegaming to ensure a seamless gaming experience and the resolution of any technical disputes.
• Identity verification services: Identity verification documents (KYC) may be submitted to a licensed third-party KYC service provider for authenticity verification purposes.
• Relevant authorities: son55 will disclose personal data to Malaysian authorities such as the Royal Malaysia Police or Bank Negara Malaysia where required by a court order, warrant, or other valid legal requirement.
• Professional advisors: Lawyers, accountants and cybersecurity consultants bound by professional confidentiality obligations may access certain data in the course of performing their duties for son55.

All third parties with whom your data is shared are required to protect it to a standard at least equivalent to our own, and may only use that data for purposes we have specified. son55 does not transfer Malaysian members' personal data overseas without adequate safeguards and in compliance with PDPA requirements on cross-border data transfers.

Son55 invests seriously and continuously in data security infrastructure to ensure your personal information remains protected at all times. The technical and organisational security measures we have in place include:

• 256-bit SSL Encryption: All data transmitted between your device and son55's servers is encrypted using TLS protocol with 256-bit encryption — the same technology used by Malaysia's major banking institutions such as Maybank and CIMB.
• Layered access controls: Access to members' personal data within son55's internal systems is restricted to staff who genuinely require it to carry out their duties. All access is logged and audited on a regular basis.
• Data encryption at rest: Sensitive personal data stored in son55's databases is encrypted at rest for an additional layer of protection against any unauthorised physical access.
• Penetration testing: son55 conducts regular security assessments by independent cybersecurity experts to identify and patch any system vulnerabilities before they can be exploited.
• Real-time threat monitoring: Our continuous security monitoring system oversees all platform activity 24 hours a day to detect any anomalies or suspicious access attempts.
• Staff training: All son55 staff who handle personal data receive regular data protection training and are bound by strict confidentiality agreements.

While son55 takes all reasonable precautions, no digital security system can be guaranteed 100% secure against every threat. In the event of a data breach affecting your information, son55 will notify you and the relevant authorities within the timeframe stipulated by Malaysian law.

The son55 website uses cookies and similar tracking technologies to enhance your experience and ensure the platform functions correctly. Below are the types of cookies used and their respective purposes:

• Essential Cookies: These cookies are required for the basic functioning of the website — such as maintaining your login status during an active session and processing transactions securely. Without them, the son55 platform cannot operate properly. These cookies do not require your consent as they are a mandatory technical requirement.
• Preference Cookies: These cookies remember your preferred settings such as display language and interface configuration, so you do not need to reconfigure them each time you visit son55.
• Analytics Cookies: We use aggregated analytics data to understand how members use the son55 platform — which pages are most popular, where users encounter difficulties, and how we can improve the overall experience. This data does not identify any individual personally.
• Security Cookies: These cookies help us detect suspicious login activity, access attempts from unfamiliar locations, and other indicators that may signal fraud or account takeover attempts.

You can manage cookie settings through your web browser preferences. However, disabling essential cookies may affect the functionality of the son55 platform and your overall experience. For instructions on managing cookies across various popular browsers, please refer to your browser's help documentation.

Son55 retains your personal data only for as long as necessary for the purposes stated in this policy, or as required by applicable Malaysian law. The following are the general retention period guidelines we adhere to:

• Active account data: Retained for the duration of your active membership with son55, plus the mandatory retention period following account closure as required under Malaysia's AML laws and financial compliance regulations.
• Financial transaction records: Retained for a minimum of 7 years after every transaction, in line with Malaysia's financial reporting and tax legislation requirements.
• Identity verification records (KYC): Retained for 5 years after account closure, or longer where required by law.
• Customer support communication logs: Retained for 2 years from the date of last communication for reference and dispute resolution purposes.
• Analytics cookie data: Typically expires within 12 months from the date of collection.

Once the specified retention period has elapsed, son55 will securely delete or anonymise your data using industry-standard procedures. If you close your son55 account, we will initiate the data deletion process within 30 days, subject to legal retention obligations that may require certain data to be kept for a longer period.

Son55 takes child protection extremely seriously. Our platform is exclusively for individuals aged 18 and above only. We do not knowingly collect, process, or store the personal data of any individual under the age of 18.

If we discover that personal data belonging to an individual under the age of 18 has been collected in our systems — whether through registration using false information or by any other means — we will take the following action immediately:

• Closing and suspending the relevant account with immediate effect.
• Deleting all associated personal data from our systems as promptly as is practicable.
• Returning any related financial balances in accordance with established procedures.
• Reporting the matter to the relevant authorities where required by law.

Parents or guardians who suspect that their child or ward under the age of majority has registered on son55 are encouraged to contact our customer support team immediately at support@son55.click so that immediate action can be taken.

Under the Personal Data Protection Act 2010 (PDPA) of Malaysia, you have the following rights regarding your personal data held by son55. We respect and facilitate the exercise of all these rights:

To exercise any of the rights above, please contact us by email at support@son55.click by stating the right you wish to exercise and providing sufficient information for us to verify your identity. son55 will not charge any fee for the first data rights request made within a 12-month period. Repeated or unreasonable requests may be subject to a reasonable fee.

Son55 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements to how we handle personal data. When we make material changes to this policy:

• The "Last Updated" date at the top of this page will be revised accordingly.
• We will notify active son55 members via in-platform notifications or email for any material and critical changes.
• In cases of significant changes that fundamentally affect how we use your data, we may request your renewed consent before those changes take effect.

We encourage you to review this Privacy Policy page periodically to stay informed about how son55 protects your information. Your continued use of the son55 platform after any changes are published will be considered your acceptance of the updated policy, except for changes that require explicit consent as stated above.

If you have any questions, concerns, or requests regarding this Privacy Policy or how son55 handles your personal data, we encourage you to contact us directly. The son55 privacy and data protection team is ready to assist you:

• Email: support@son55.click — for privacy enquiries, data access requests and written complaints.
• Live Chat: Available on the son55 platform at any time, 24 hours a day, 7 days a week.

We are committed to responding to all privacy-related enquiries within 5 working days from the date of receipt. For more complex requests such as data access requests or formal complaints, the response period may be longer, but we will always provide updates within a reasonable timeframe.

Son55 values every piece of feedback we receive on privacy and data protection — it helps us continually improve our practices and policies for the benefit of all members. Please do not hesitate to reach out. Your privacy matters to us, and every enquiry you send will be taken seriously and handled with full professionalism.