Privacy Policy son55 — Data Protection & Personal Information

1 Information We Collect

Son55 collects various types of information when you register, use the platform, or contact our support team. This data collection is necessary to ensure a secure, fair, and personalised experience for you as a member.

Information you provide directly:

• Full name, date of birth, and identity card or passport number (for the KYC process).
• Email address and mobile number for account verification and communication purposes.
• Bank account details, debit card numbers, or digital wallet information for transaction processing.
• Identity document photos and proof of residence submitted during the KYC verification process.
• Any messages or enquiries you send to the son55 support team.

Information collected automatically:

• IP address, device type, operating system, and browser version used.
• Game session data including date, time, game type, betting amounts, and outcomes.
• Cookie data and similar tracking technologies to enhance the user experience.
• Login and logout activity is logged for security and audit purposes.

2 How We Use Your Information

Every piece of data collected by son55 has a clear and legitimate purpose. We do not process your data beyond the scope required to deliver quality services to you.

• Service Delivery: Managing your account, processing deposits and withdrawals, and ensuring access to all available games and promotions.
• Identity Verification: Meeting KYC and AML requirements to keep the platform free from fraud and money laundering.
• Platform Security: Identifying and preventing suspicious activity, unauthorised access, or system abuse.
• Important Communications: Sending account security notices, transaction confirmations, and important policy updates.
• Marketing Preferences: With your consent, sending promotional information, bonuses, and exclusive offers via email or SMS.
• Product Improvement: Analysing usage patterns in aggregate (not individually) to improve game quality and the overall platform experience.
• Legal Compliance: Fulfilling regulatory obligations, enforcing court orders, or assisting law enforcement investigations when legally required.

3 Information Sharing & Disclosure

Son55 takes a strictly limited and cautious approach to data sharing. Your personal information will never be sold, rented, or traded to any third party for their commercial purposes.

Under limited and lawful circumstances, son55 may share your data with the following parties:

• Payment Processors: FPX providers, online banking, digital wallets such as Touch 'n Go, GrabPay and Boost, and cryptocurrency processors — solely to execute the transactions you request.
• Technology Service Providers: Hosting providers, cybersecurity services, and fraud detection systems contracted by son55 — all subject to strict confidentiality agreements.
• Game Providers: Third-party game software providers supplying casino and sports content — receiving only the minimum data necessary to operate the games.
• Regulatory Body: The licensed authority regulating son55's operations, when required by applicable laws or regulations.
• Law Enforcement: Government agencies or law enforcement bodies when son55 receives a court order or a legally valid request.

4 Data Security and Protection Measures

Son55 continuously invests in cybersecurity infrastructure to ensure your data is always protected against unauthorised access, breaches, or misuse. Our security approach is layered and comprehensive.

• Data Encryption in Transit: All communications between your device and son55's servers are encrypted using TLS 1.3 protocol with a 256-bit SSL certificate issued by a recognised certificate authority.
• Data Encryption at Rest: Sensitive information such as passwords is stored using the bcrypt hashing algorithm — meaning even if our systems were ever compromised, your password cannot be read directly.
• Internal Access Controls: Only staff who require access to specific data to perform their duties are permitted. All access is logged and regularly audited.
• Continuous Monitoring: Intrusion detection (IDS) and prevention (IPS) systems operate 24/7 to detect and block cyber threats in real time.
• Regular Security Testing: son55 conducts penetration testing and independent security audits at least twice a year.
• Incident Response Plan: In the rare event of a data breach, son55 has clear response procedures in place, including notifying affected users within the timeframe required by law.

5 Cookies and Tracking Technologies

Son55 uses cookies and similar technologies to enhance your experience on our platform. Cookies are small files stored on your device when you visit the son55 website.

• Essential Cookies: Required for core platform functions such as login verification, session management, and security. These cookies cannot be disabled without affecting platform functionality.
• Preference Cookies: Saving your preferences such as language, display theme, and game settings for a more personalised experience.
• Analytics Cookies: Collecting anonymised usage data to help us understand how members use the platform and where improvements are needed.
• Performance Cookies: Helping son55 monitor platform speed and reliability, identify technical issues, and optimise overall performance.

You can manage your cookie preferences through your browser settings. However, disabling essential cookies may affect your ability to use certain son55 features properly.

6 User Rights Regarding Personal Data

Son55 respects and upholds your rights as a data subject. The following are the rights you hold regarding the personal information we store about you:

To exercise any of the above rights, contact the son55 support team via Live Chat or email at [email protected]. Requests will be processed within 30 business days from the date of receipt, subject to identity verification.

7 Cross-Border Data Transfers

As an online platform operating globally, son55 may process or store your data on servers located outside Malaysia. Any such data transfers are carried out with appropriate safeguards in place, including:

• Ensuring that recipient countries maintain a level of data protection equivalent to or higher than Malaysia.
• Implementing standard contractual clauses that require recipients to comply with son55's privacy standards.
• Obtaining your explicit consent where required by applicable law.

All cross-border data transfers are subject to the same strict security protocols as local data processing — end-to-end encryption is maintained throughout the entire data journey.

8 Minor Accounts & Underage User Protection

Son55 strictly prohibits use of the platform by individuals under the age of 18. We do not knowingly collect or process personal information from minors.

If you believe that someone under the age of 18 has registered an account on son55, please contact our support team immediately. We will investigate the matter and close the account, deleting all associated data without delay.

9 Changes to This Privacy Policy

Son55 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or service improvements. When material changes are made:

• The "Updated" date at the top of this page will be revised to reflect the date of the latest review.
• An email notification will be sent to all active members to inform them of important changes.
• For significant changes, you may be required to re-accept the updated policy before continuing to use the platform.
• Continued use of the son55 platform after changes take effect will be considered your acceptance of the updated policy.

We encourage you to review this page regularly to stay informed on how son55 protects your privacy.

10 Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how son55 handles your personal data, our privacy team is ready to assist.

• Privacy Email: [email protected]
• Live Chat: Available 24 hours a day, 7 days a week — click the chat icon at the bottom-right corner of your screen.
• Response Time: Privacy-related requests are typically handled within 3 business days; complex requests within 30 business days.