grab555 Privacy Policy

1. Introduction

grab555 ("we", "us", "our") operates the online gaming platform accessible at grab555.club. We are committed to protecting the privacy and personal data of our registered members, prospective users, and website visitors ("you", "your") in accordance with applicable data protection legislation.

This Privacy Policy describes the categories of personal data grab555 collects, the purposes for which that data is processed, the legal bases relied upon, the circumstances in which data may be shared with third parties, and the rights available to you in respect of your personal data.

By registering on the grab555 platform or continuing to use it after this Policy has been updated, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read together with grab555's Terms & Conditions and Responsible Gaming Policy.

2. Data We Collect

grab555 collects personal data through a number of means, including directly from you during registration and account use, automatically through your use of the platform, and in some cases from third-party verification and payment service providers. The categories of data we collect include:

grab555 does not collect sensitive personal data (such as racial or ethnic origin, health data, or biometric data) except where strictly required by applicable law for identity verification or responsible gaming compliance purposes.

3. How We Use Your Data

grab555 processes your personal data for the following purposes:

• Account administration: Creating and maintaining your grab555 account, verifying your identity, and managing your profile information.
• Service delivery: Providing access to the grab555 platform, processing deposits and withdrawals, recording bets, and crediting winnings.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, money laundering, and unauthorised account access.
• Regulatory compliance: Meeting obligations under applicable anti-money laundering legislation, age verification requirements, and responsible gaming regulations.
• Customer support: Responding to your enquiries, resolving disputes, and managing account-related issues.
• Responsible gaming: Monitoring gaming patterns to identify potential problem gambling behaviour and administering self-exclusion and deposit limit requests.
• Marketing communications: Sending you promotional offers, bonus notifications, and platform updates where you have provided consent or where a legitimate interest applies. You may opt out at any time by contacting [email protected].
• Platform improvement: Analysing aggregated usage data to improve the grab555 platform's performance, features, and user experience.

4. Legal Basis for Processing

grab555 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and grab555 — specifically, operating your account and delivering the gaming services you have requested.
• Legal obligation: Processing required for grab555 to comply with applicable laws, including anti-money laundering legislation, age verification obligations, and tax reporting requirements.
• Legitimate interests: Processing carried out to serve grab555's legitimate business interests, including fraud prevention, platform security, and service improvement, where those interests are not overridden by your data protection rights.
• Consent: Processing based on your explicit consent, including direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

5. Data Sharing

grab555 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with third parties only in the following circumstances:

• Payment service providers: Including Touch 'n Go eWallet, Boost, DuitNow, FPX, and Malaysian banking partners, for the purpose of processing deposits and withdrawals.
• Identity verification services: Third-party KYC (Know Your Customer) providers used to verify your identity and age in compliance with applicable regulations.
• Game software providers: Certified game studios whose software is integrated into the grab555 platform. These providers may receive technical session data necessary for game delivery.
• Regulatory authorities: Competent regulatory bodies, law enforcement agencies, and financial intelligence units where disclosure is required by applicable law or a lawful order.
• Professional advisers: Legal counsel, auditors, and accountants where required in connection with the operation of the business.
• Corporate transactions: In connection with any merger, acquisition, or sale of grab555's business or assets, where the acquiring entity would be bound by this Privacy Policy.

All third parties with whom grab555 shares personal data are required to handle that data in a manner consistent with applicable data protection legislation and grab555's data protection requirements.

6. Cookies & Tracking Technologies

grab555 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small data files stored on your device when you access a website. They serve the following functions on the grab555 platform:

• Essential cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during an active grab555 session. These cannot be disabled without affecting platform functionality.
• Analytics cookies: Used to collect aggregated data about how users interact with the grab555 platform, enabling us to identify and resolve performance issues and improve the user experience.
• Preference cookies: Used to remember your platform preferences, such as language settings and display options.

You may configure your browser to refuse or delete cookies. However, disabling essential cookies will affect your ability to log in to and use the grab555 platform. grab555 does not use third-party advertising cookies or share cookie data with external advertising networks.

7. Data Retention

grab555 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Specifically:

• Account data is retained for the duration of the active account relationship and for a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements.
• Transaction and betting records are retained for a minimum of five (5) years from the date of the transaction.
• Support communications are retained for a minimum of two (2) years from the date of the interaction.
• Technical and log data is typically retained for up to twelve (12) months, except where longer retention is required for security investigations.

Where grab555 is required by law to retain personal data for longer periods, the statutory retention period will take precedence over the periods stated above.

8. Data Security

grab555 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the grab555 platform.
• Encrypted storage of sensitive account credentials.
• Role-based access controls limiting internal access to personal data to authorised personnel only.
• Regular security assessments and penetration testing of the platform infrastructure.
• Two-factor authentication available to all registered grab555 members.
• Automated monitoring for suspicious login activity and anomalous transaction patterns.

Notwithstanding the foregoing, no method of electronic transmission or storage is entirely secure. grab555 cannot guarantee the absolute security of your data, and you are responsible for maintaining the confidentiality of your account credentials.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, grab555 will notify affected individuals and, where required, the relevant regulatory authority, in accordance with applicable law.

9. Your Data Rights

Subject to applicable law and certain exceptions, you have the following rights in respect of the personal data grab555 holds about you:

• Right of access: You may request a copy of the personal data grab555 holds about you.
• Right to rectification: You may request the correction of inaccurate or incomplete personal data.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to grab555's legal retention obligations.
• Right to restriction: You may request that grab555 restrict the processing of your personal data in certain circumstances.
• Right to object: You may object to processing carried out on the basis of legitimate interests, including direct marketing.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, submit a written request to [email protected]. grab555 will respond to all data rights requests within 30 days of receipt. We may require you to verify your identity before processing a data rights request.

10. Children's Privacy

The grab555 platform is strictly intended for adults aged 21 years and above. grab555 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the relevant account.

If you believe that a minor has registered on the grab555 platform, please notify us immediately at [email protected].

11. International Data Transfers

grab555 operates primarily in Malaysia, and personal data is processed predominantly within Malaysia. Where it is necessary to transfer personal data to service providers or partners located outside Malaysia — for example, to certified game software providers or cloud infrastructure operators — grab555 will ensure that appropriate safeguards are in place to protect your personal data in accordance with applicable data protection legislation.

Such safeguards may include contractual data protection clauses, adherence to recognised international data protection frameworks, or the establishment of data processing agreements with recipient organisations.

12. Policy Amendments

grab555 reserves the right to amend this Privacy Policy at any time. The date of the most recent revision is displayed at the top of this page. Where material changes are made, we will notify registered members via the platform or by email to the registered address.

Your continued use of the grab555 platform following the publication of any amendments constitutes your acceptance of the revised Privacy Policy. If you do not agree to the amended Policy, you must cease using the platform and may request account closure.

13. Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or to grab555's data handling practices, please contact us:

Please include "Privacy" in the subject line of your message so our team can route your enquiry to the appropriate person promptly.