Privacy Policy son55 – Personal Data Protection for Malaysian Members

Son55 understands that privacy is more than a legal obligation — it is a fundamental right of every person who uses our platform. This Privacy Policy has been carefully drafted to openly and honestly explain how son55 handles members' personal data, why that data is collected, and what protective measures we take to keep your information safe at all times.

This policy applies to all individuals who use the son55 platform — including registered players, unregistered website visitors, and anyone who interacts with any son55 service, including live chat, support email, and WhatsApp channels. It also covers all of son55's digital channels, including the main website and any related applications we may launch in the future.

As a platform operating in Malaysia and serving Malaysian players, son55 fully complies with the Personal Data Protection Act (PDPA) 2010 and all regulations and guidelines issued by the Personal Data Protection Commissioner of Malaysia. We take these compliance obligations seriously, as they safeguard the interests of every son55 member who entrusts us with their personal information.

If you have any questions about how son55 handles your personal data or wish to exercise any of your rights under the PDPA, please contact our privacy team by email at support@son55.xyz. We are committed to responding to all privacy-related enquiries within 3 working days.

Son55 only collects data that is genuinely necessary to deliver quality services and meet applicable legal requirements. The categories of data we collect are as follows:

Son55 does not collect credit or debit card details directly — all financial transactions are processed through certified third-party payment processors, and no sensitive financial information is stored in our systems.

Son55 uses the personal data collected solely for the following purposes. We do not use your data for any purpose not listed here without first obtaining your explicit consent:

Account Management & Service Delivery: Your identity and contact information is used to create and manage your son55 account, verify your identity at login, process deposit and withdrawal transactions in MYR, and ensure a smooth and secure experience across the platform.

Legal & Regulatory Compliance: son55 is legally required to carry out strict KYC (Know Your Customer) and AML (Anti-Money Laundering) procedures. Your personal and financial data is used to fulfil these legal obligations, including complying with lawful requests from Malaysian authorities where required by court order or applicable legislation.

Platform Security and Fraud Detection: Technical data such as IP addresses, device information, and behavioural patterns are used by son55's security systems to detect and prevent fraudulent activity, unauthorised access, bonus abuse, and other security threats. This protects not only son55 but also the account security of every member.

Customer Support: Communication records with the son55 support team — including live chat history, emails, and WhatsApp enquiries — are retained to enable our team to deliver better service, track the progress of ongoing issues, and train staff to improve support quality.

Marketing & Promotional Communications: With your consent, son55 uses your email address and phone number to send information about the latest bonus offers, seasonal promotions (Hari Raya, Gawai, Thaipusam, and other Malaysian festivities), newly launched games, and important platform updates. You may withdraw this consent at any time.

Platform Improvements: Aggregated, anonymised usage data is used to understand platform usage patterns, identify areas for improvement, and make better-informed decisions about developing new features relevant to Malaysian players.

Son55 does not sell, rent, or trade members' personal data to any third party for their own commercial purposes — without exception. However, in the course of operating the platform, son55 may need to share certain information with a limited set of third-party categories as follows:

Payment Processors: Transaction information required to process payments is shared with the e-wallet and FPX processors integrated into the son55 platform — including the technical providers behind Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, Maybank2u, and CIMB Clicks. This sharing is limited strictly to what is necessary to complete each transaction, and all providers are bound by rigorous data protection agreements.

Game Providers: Game providers such as Evolution Gaming, Pragmatic Play, and others may receive game data necessary to deliver their games to you. This data is limited to technical game session information only and does not include complete financial or identity details.

IT Service Providers: Companies that provide server infrastructure, cloud services, and technical support to son55 may have access to member data as part of their services. All such providers are bound by data processing agreements that require them to protect your data to the same standard as son55.

Lawful Authorities: son55 will disclose information to Malaysian authorities — such as the police, courts, or relevant government agencies — when required by law, a valid court order, or in situations where disclosure is necessary to protect public safety or prevent crime.

Member data security is a top priority at son55, and we continuously invest in best-in-class technology and processes to ensure the most effective protection. The technical and organisational security measures we implement include:

Data Encryption in Transit: All communications between your device and son55's servers are secured with TLS 1.3 protocol and 256-bit encryption. This ensures that every button you click, every password you enter, and every transaction you make cannot be intercepted or read by third parties while in transit over the internet.

Data Encryption at Rest: Sensitive data stored in son55's databases — including passwords (stored as irreversible hashes) and financial information — is protected with database-level encryption that is separate from transit encryption.

Layered Access Controls: Access to systems containing member data is governed by a Role-Based Access Control system. Each son55 staff member can only access the data required to perform their role — for example, a customer support agent can view communication history but not full financial records.

24/7 Security Monitoring: son55's automated monitoring system keeps watch over server and database activity around the clock to detect any unauthorised access attempts, unusual usage patterns, or signs of a security incident. Our IT team receives instant alerts whenever suspicious activity is identified.

Regular Security Testing: son55 conducts regular penetration testing and security audits through independent cybersecurity firms to identify and address vulnerabilities before they can be exploited. The findings from these audits are used to continuously strengthen the platform's security posture.

Staff Training: All son55 staff with access to member data undergo regular cybersecurity awareness and data protection training. Strict data handling protocols are enforced, and breaches of these protocols may result in disciplinary action.

Son55 retains members' personal data only for as long as necessary for the purposes stated in this Privacy Policy or as required by applicable Malaysian law. The following are general guidelines for our data retention periods:

Active Account Data: For as long as your account remains active on son55, we retain all profile data, transaction history, and game records necessary to deliver our services to you effectively. This data is not deleted while the account is active unless you specifically request it.

Data After Account Closure: When your son55 account is closed at your request, we will process your data deletion request within 30 days. However, certain data may need to be retained for a longer period under legal requirements — specifically, financial and transaction records that must be kept for a minimum of 7 years for Malaysian financial law compliance purposes.

Technical Log Data: Server logs and technical data are typically retained for 12 months and then automatically deleted or anonymised. Security logs related to ongoing incidents or investigations may be retained for longer until the investigation is concluded.

Support Communication Records: Conversation history with the son55 customer support team is retained for 2 years from the date of the last communication, enabling us to provide better, more consistent support should you contact us again about the same issue.

After the Retention Period: When data is no longer needed and is not subject to legal retention requirements, son55 will securely delete it using methods that ensure it cannot be recovered. For data in digital format, deletion is carried out in accordance with recognised security standards.

Under Malaysia's Personal Data Protection Act (PDPA) 2010, you have the following rights regarding your personal data held by son55. We fully respect and uphold these rights:

To exercise any of the rights above, contact us by email at support@son55.xyz with the subject line "PDPA Rights Request" and specify the right you wish to exercise along with your son55 account details for identity verification. We will respond within 3 business days with an acknowledgement and an estimated processing timeline.

Son55 uses cookies and related tracking technologies to keep the platform running properly and to enhance your user experience. Cookies are small text files stored in your browser when you visit the son55 website.

Essential Cookies (Required): These cookies are required for the core functionality of the son55 platform and cannot be disabled without affecting your ability to use the platform. They include login session management cookies, security cookies to prevent CSRF attacks, and language preference cookies. These cookies do not store any personally identifiable information.

Performance & Analytics Cookies: These cookies help son55 understand how members use the platform — which pages are visited most frequently, where users encounter issues, and how long a typical session lasts. This information is collected in aggregate and anonymised form for platform improvement purposes only.

Functional Cookies: These cookies allow the son55 platform to remember your preferences — such as language selection, display settings, and information you have entered into forms — so you do not need to re-enter them each time. They improve the overall usability of the platform.

How to Manage Cookies: You can manage and delete cookies through your browser settings. Most browsers allow you to view stored cookies, delete individual cookies, or block all cookies from specific sites. Please note that disabling essential cookies may affect the functionality of the son55 platform.

The son55 platform is strictly not intended for individuals under the age of 18. son55 does not knowingly collect, store, or process the personal data of children or minors under the age of 18.

All individuals registering a son55 account are required to confirm that they are 18 years of age or older. son55 employs age verification procedures including phone number verification and KYC processes to prevent registration by underage individuals.

If son55 discovers or is notified that personal data belonging to a minor under the age of 18 has been collected through deception or error, we will take immediate action to delete all related data and close the account in question. Parents or guardians who discover that their child has registered a son55 account are strongly encouraged to contact us right away at support@son55.xyz.

Son55 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or changes to the services we offer. We are committed to keeping members informed of significant amendments in a clear and timely manner.

Material Amendment Notification: Any material amendments to this Privacy Policy — such as changes to how we use or share your data — will be communicated to all active members via their registered email address and an in-platform notification at least 14 days before the changes take effect. This gives you sufficient time to review the updates and make an informed decision.

Minor Amendments: For minor amendments such as typographical corrections, language clarifications, or contact information updates, son55 may make changes without a dedicated notification, but the "Updated" date at the top of this document will be revised to reflect the latest update.

Acceptance of Amendments: Continued use of the son55 platform after any Privacy Policy amendment takes effect constitutes acceptance of the amended policy. If you do not agree with the changes, you have the right to stop using the platform and request account closure with a refund of any eligible balance.

The latest version of son55's Privacy Policy is always available on this page, and you are encouraged to review it periodically to stay informed about how we protect your privacy.

If you have any questions, concerns, or complaints regarding son55's Privacy Policy or how we handle your personal data, we encourage you to reach out to us directly. Our team is ready to assist, and we take every privacy enquiry seriously.

You can reach the son55 privacy team through:

• Email: support@son55.xyz — use the subject line "Privacy Inquiry" for priority processing. We respond within 3 business days.
• Live Chat: Available 24 hours within the son55 platform for general privacy enquiries.
• WhatsApp: For a prompt response during Malaysian business hours — available on working days.

If you are not satisfied with our response to your privacy enquiry or complaint, you have the right to contact the Personal Data Protection Commissioner of Malaysia for guidance or to file a formal complaint in accordance with the procedures set out under the PDPA 2010.