Privacy Policy

This Privacy Policy (the "Policy") sets out how good55 (the "Operator", "we", "us", or "our"), operating the online gaming and sports betting platform atgood55.cam, collects, uses, stores, shares, and protects the personal data of individuals who access or use the Platform (each, a "Player", "User", or "you").

This Policy applies to all personal data collected through your use of the good55 website, mobile-optimised interfaces, live chat, email correspondence, and any other good55 service channels. It should be read alongside our Terms & Conditions, which together govern the full terms of your relationship with good55.

good55 serves Malaysian players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and nationwide. We are committed to handling all personal data responsibly, transparently, and in accordance with applicable data protection principles. By registering an Account or using the Platform, you acknowledge that you have read and understood this Policy.

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person — an individual who can be identified, directly or indirectly, by reference to an identifier such as a name, ID number, or online identifier.
• "Processing" means any operation or set of operations performed on personal data, whether by automated means or otherwise, including collection, recording, storage, use, disclosure, or deletion.
• "Data Controller" means the entity that determines the purposes and means of processing personal data — in this case, good55.
• "Data Processor" means a third party that processes personal data on behalf of good55, strictly under good55's instructions.
• "KYC" means Know Your Customer — the identity verification procedures required under applicable anti-money laundering (AML) and gaming regulatory frameworks.
• "Cookie" means a small text file placed on your device by a website that stores information about your activity and preferences.
• "MYR" means Malaysian Ringgit, the primary transaction currency of the Platform.

The Data Controller for personal data collected through good55.cam is the good55 Platform operator, operating under an international online gaming licence. good55 determines the purposes and means of processing personal data collected through the Platform and is responsible for ensuring that such processing complies with applicable data protection laws and principles.

For all data protection enquiries, rights requests, or complaints, Players may contact the good55 Data Protection team directly via the contact details set out in Section 16 of this Policy.

good55 collects and processes the following categories of personal data in connection with the operation of the Platform:

4.1 Registration & Account Data

• Full legal name;
• Date of birth (to verify the21+ age requirement);
• Gender;
• Residential address (including city and postcode);
• Email address;
• Mobile phone number;
• Username and encrypted password.

4.2 Identity Verification (KYC) Data

• Copies of government-issued identity documents (Malaysian MyKad, Passport, or Driver's Licence — front and back);
• Proof of residential address (utility bill, bank statement, or official correspondence dated within three months);
• Selfie photograph for liveness verification.

4.3 Financial & Transaction Data

• Deposit and withdrawal amounts and timestamps;
• Payment method identifiers (e.g., masked Touch 'n Go account reference, FPX bank reference, cryptocurrency wallet address);
• Transaction history and account balance records;
• Bonus and promotional activity records.

4.4 Gaming & Betting Activity Data

• Games played, bets placed, and sports markets wagered on;
• Session duration and frequency data;
• Win/loss records and RTP data aggregated at account level;
• Responsible gambling tool usage (deposit limits set, self-exclusion requests).

4.5 Technical & Device Data

• IP address and geolocation data (country/region level);
• Device type, operating system, and browser information;
• Session timestamps and page interaction logs;
• Cookie and tracking data (see Section 9).

4.6 Communications Data

• Live chat transcripts and email correspondence with the good55 support team;
• Records of any complaints, disputes, or formal requests submitted to good55.

good55 collects personal data through the following channels:

• Directly from you: When you register an Account, complete the KYC process, make a deposit or withdrawal, use live chat, send an email, set responsible gambling tools, or otherwise interact with the Platform.
• Automatically: Through cookies, web beacons, server logs, and similar tracking technologies when you access and use the Platform (see Section 9 for full details).
• From third-party payment processors: When you make a payment via FPX, Touch 'n Go eWallet, DuitNow, Boost, GrabPay, Maybank, CIMB, Public Bank, or cryptocurrency networks, relevant transaction confirmation and reference data is shared with good55 by the respective payment processor for the purpose of crediting your Account and maintaining financial records.
• From identity verification services: During the KYC process, good55 may use third-party identity verification tools to assist in validating submitted documents. These providers process data strictly under good55's instructions and are bound by data processor agreements.

good55 processes personal data for the following specific purposes:

• Account management: Creating, maintaining, and administering your good55 Account, including authentication, password recovery, and account settings management.
• Service delivery: Enabling you to access and use the Platform's games, sportsbook, and all associated features.
• Payment processing: Processing your deposits and withdrawals in MYR via your chosen payment methods, including Touch 'n Go eWallet, DuitNow, FPX, Boost, GrabPay, and cryptocurrency.
• Identity verification (KYC): Verifying your age (21+ requirement), identity, and source of funds in compliance with applicable AML obligations and good55's regulatory licence conditions.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, money laundering, unauthorised account access, and other security threats.
• Responsible gambling: Monitoring gaming activity to identify potential signs of problem gambling and to administer self-exclusion, deposit limit, and other responsible gambling tools you have activated.
• Customer support: Responding to your enquiries, resolving complaints, and providing assistance via live chat, email, and other support channels.
• Legal and regulatory compliance: Meeting good55's obligations under applicable gaming regulatory frameworks, AML legislation, and any lawful requests from competent regulatory or law enforcement authorities.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the Platform's features, performance, and user experience.
• Marketing communications: Where you have provided explicit consent, sending you promotional offers, bonus notifications, and Platform updates. You may withdraw consent at any time by contacting support.

good55 processes personal data on the following legal bases as applicable to each processing activity:

• Contractual necessity: Processing necessary for the performance of the contract between you and good55 — including account management, payment processing, and service delivery.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC identity verification, AML record-keeping, and responding to lawful authority requests.
• Legitimate interests: Processing carried out in pursuit of good55's legitimate interests in fraud prevention, platform security, and service improvement, where such interests are not overridden by your fundamental privacy rights.
• Consent: Processing based on your explicit consent, primarily in relation to direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

good55 does not sell, rent, or trade your personal data to any third party. We share personal data only in the following limited and controlled circumstances:

8.1 Payment Processors

When you make a deposit or request a withdrawal, the minimum personal data necessary to process the transaction is shared with the relevant payment provider — including Touch 'n Go eWallet, DuitNow, FPX (and the underlying banks: Maybank, CIMB, Public Bank, Hong Leong), Boost, GrabPay, and cryptocurrency network providers. All such providers operate under their own privacy policies and are bound by applicable financial data protection requirements.

8.2 Identity Verification (KYC) Providers

KYC document data may be shared with regulated, third-party identity verification service providers engaged by good55 to assist in verifying player identity. These providers act as Data Processors under contractual obligations that prohibit any use of data beyond the specific verification purpose.

8.3 Regulatory & Law Enforcement Authorities

good55 may disclose personal data to regulatory bodies, gaming authorities, financial intelligence units, or law enforcement agencies where required to do so by applicable law, court order, or regulatory direction. We will only provide the minimum data necessary to satisfy the lawful request.

8.4 Service Providers

good55 may engage third-party service providers (e.g., cloud infrastructure providers, IT security vendors, customer support platforms) who process personal data on our behalf. All such providers are bound by data processor agreements that restrict their processing to the purposes specified by good55.

good55 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files placed on your device when you visit a website. They allow the Platform to recognise your device, remember your preferences, and collect aggregate usage data.

9.1 Types of Cookies Used

• Essential cookies: Required for the Platform to function correctly — including session authentication, login persistence, and security token management. These cookies cannot be disabled without impairing core functionality.
• Functional cookies: Used to remember your preferences such as language setting, display preferences, and responsible gambling tool configurations.
• Analytics cookies: Used to collect anonymised, aggregate data about how players navigate the Platform, which games are most accessed, and where technical issues arise. This data is used solely to improve Platform performance and is not used to identify individual users.
• Security cookies: Used to detect and prevent fraudulent activity, unusual login patterns, and bot traffic.

9.2 Cookie Management

You may configure your browser to refuse non-essential cookies or to alert you when cookies are being set. Please note that disabling essential cookies will impair your ability to log in to and use the Platform. For instructions on managing cookies in commonly used browsers, please refer to your browser's official help documentation.

good55 does not use any third-party advertising cookies or tracking pixels that share your browsing behaviour with external advertising platforms.

good55 retains personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal and regulatory retention obligations.

Following the expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.

good55 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser or device and the good55 servers;
• AES-256 encryption for sensitive personal data stored in good55's databases, including KYC document records and financial data;
• Two-factor authentication (2FA) available on all Player Accounts to prevent unauthorised login;
• PCI-DSS compliant payment processing infrastructure for all card and e-wallet transactions;
• Role-based access controls ensuring that only authorised good55 personnel can access personal data, and only to the extent necessary for their role;
• Regular security audits and penetration testing conducted by independent cybersecurity specialists;
• Incident response procedures to detect, contain, and respond to any data security incidents promptly.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, good55 will notify affected players without undue delay in accordance with applicable regulatory requirements.

As a player whose personal data is processed by good55, you have the following rights in respect of your personal data. To exercise any of these rights, please contact the good55 Data Protection team using the contact details in Section 16.

• Right of Access: You have the right to request a copy of the personal data that good55 holds about you, along with information about how it is being processed.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay.
• Right to Erasure ("Right to Be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent — subject to any overiding legal or regulatory retention obligations.
• Right to Restrict Processing: You may request that good55 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to processing based on legitimate interests.
• Right to Data Portability: Where processing is based on consent or contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to request its direct transfer to another data controller.
• Right to Object: You have the right to object to processing of your personal data carried out on the basis of good55's legitimate interests, including direct marketing.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing carried out prior to withdrawal.

good55 will respond to all data rights requests within thirty (30) calendar days of receipt. Where requests are complex or numerous, we may extend this period by a further two months with notification.

The good55 Platform is strictly intended for individuals aged21 years and above. good55 does not knowingly collect personal data from any individual under the age of 21. Age verification is a mandatory step during the account registration and KYC processes.

If good55 becomes aware that personal data has been collected from an individual who was under the age of 21 at the time of collection, good55 will immediately suspend the associated Account, delete the relevant personal data to the extent not required to be retained for regulatory purposes, and notify the appropriate authorities where required.

If you believe that a minor has registered or is using an Account on good55, please contact our support team immediately via live chat or at the email address in Section 16.

good55 operates globally and may store or process personal data on servers located outside of Malaysia. Where personal data is transferred to a jurisdiction outside of Malaysia, good55 will ensure that appropriate safeguards are in place to protect the data to a standard equivalent to that applicable in Malaysia, including through the use of contractual data transfer mechanisms such as standard contractual clauses where applicable.

All third-party data processors engaged by good55 in connection with international data transfers are bound by data processing agreements that include obligations as to the security and confidentiality of personal data.

good55 reserves the right to update or amend this Privacy Policy at any time. Material changes — defined as changes that affect your rights, the categories of data collected, or the purposes of processing — will be communicated to registered Players via a notice on the Platform's homepage and/or by email to the registered Account address, with a minimum of seven (7) days' advance notice prior to the changes taking effect.

The effective date and version of the current Policy are displayed at the top of this page. Your continued use of the Platform following the effective date of any amended Policy constitutes your acknowledgement of the revised terms. We encourage you to review this Policy periodically to stay informed of how good55 protects your personal data.

For all privacy-related enquiries, data subject rights requests, or complaints about good55's handling of your personal data, please contact the good55 Data Protection team through the following channels:

• Live Chat: Available 24/7 directly on the Platform. Average response time: 3–5 minutes. Supported languages: English, Bahasa Melayu, and Chinese.
• Email: [email protected] (plain text — not a clickable link). Please include "Privacy Request" in the subject line and your registered username. Allow up to 30 days for written data rights requests.

Our support team is based in the Malaysian time zone (MYT, UTC+8) and serves players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all regions of Malaysia.