Privacy Policy

1 Introduction

gee55 ("we", "us", "our", "the Platform") operates the online casino and sports betting platform accessible at https://gee55.cam. We are committed to safeguarding the privacy and personal data of every individual who accesses our Platform, registers an account, or interacts with our services ("you", "User", "Player").

This Privacy Policy ("Policy") sets out, in accordance with applicable data protection legislation, the types of personal data we collect from Players in Malaysia and internationally, the lawful bases upon which we process that data, the purposes for which it is used, the parties with whom it may be shared, and the rights available to you in respect of your personal data.

This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, both of which form part of your agreement with gee55. By registering an account or using the gee55 Platform, you acknowledge that you have read and understood this Privacy Policy.

2 Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

• "Personal Data" means any information that identifies or can reasonably identify a living natural person, either directly or indirectly.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transmission, alteration, or deletion.
• "Data Controller" means gee55, which determines the purposes and means of processing Personal Data collected via the Platform.
• "Data Processor" means any third party that processes Personal Data on behalf of gee55 pursuant to a written agreement and the instructions of gee55.
• "Cookies" means small text files placed on your device by the Platform for functionality, analytics, or personalisation purposes.
• "KYC" means Know Your Customer — the identity verification process required under our compliance and licensing obligations.
• "Sensitive Data" means a subset of Personal Data that warrants heightened protection, including identification document numbers and financial account details.

3 Personal Data We Collect

gee55 collects the following categories of Personal Data from Players in the course of providing our services:

3.1 Identity & Contact Data

• Full legal name as it appears on your identification document.
• Date of birth (used to verify that you are aged 21 or above).
• Residential address, including city (e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam).
• Email address and mobile phone number.
• Government-issued identification document details (e.g., Malaysian MyKad number, passport number).

3.2 Financial Data

• Payment method details sufficient to process deposits and withdrawals, including e-wallet account identifiers (GrabPay, Touch 'n Go eWallet, Boost), bank account names and numbers (Maybank, CIMB, Public Bank, Hong Leong Bank), DuitNow registered credentials, FPX transaction references, and cryptocurrency wallet addresses where applicable.
• Transaction history, including deposit amounts, withdrawal requests, and dates of transactions, all denominated in Malaysian Ringgit (MYR / RM).

3.3 Account & Gaming Activity Data

• Username, encrypted password (we do not store passwords in plain text), and account preferences.
• Wagering history, game sessions, win/loss records, and betting patterns across all games including live casino, slots, sports betting, Liga Super Malaysia markets, EPL, UFC, and other events.
• Responsible gambling settings configured by you, including deposit limits, session limits, and self-exclusion status.
• Bonus and promotion participation history and associated wagering records.

3.4 Technical & Device Data

• IP address and approximate geolocation data derived from IP.
• Device type, operating system, browser type and version.
• Session timestamps, page views, click-stream data, and Platform navigation patterns.
• Cookie identifiers and similar tracking technologies as described in Section 10.

3.5 Communications Data

• Records of correspondence between you and our customer support team via live chat, email, or any other support channel.
• Survey responses and feedback submitted through the Platform.

4 How We Collect Personal Data

gee55 collects Personal Data through the following channels and mechanisms:

• Direct registration and account management: Information you provide when creating an account, completing KYC verification, updating your profile, or communicating with our support team.
• Platform interaction: Data generated automatically as you navigate and use the gee55 Platform, including game sessions and transaction activity.
• Payment processors: Transaction confirmation data received from third-party payment providers such as GrabPay, Touch 'n Go eWallet, Maybank, CIMB, DuitNow, and FPX in the processing of deposits and withdrawals.
• Cookies and tracking technologies: Automatically collected technical data when you access the Platform via browser or mobile device, as detailed in Section 10.
• Identity verification providers: Data obtained from third-party KYC and identity verification service providers used to authenticate the identity and age of Players.
• Fraud prevention and compliance services: Data received from third-party risk management and anti-money-laundering (AML) screening providers where required by our compliance obligations.

5 Data Processing & Use

gee55 processes your Personal Data for the following purposes:

6 Legal Basis for Processing

gee55 processes Personal Data under the following lawful bases, depending on the nature of the processing activity:

• Contractual necessity: Processing required to perform our contractual obligations to you as a registered Player, including account management, payment processing, and delivery of gaming services.
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC and AML obligations imposed by our gaming licence conditions.
• Legitimate interests: Processing carried out in pursuit of gee55's legitimate business interests, including fraud prevention, platform security, responsible gambling monitoring, and product analytics — provided such interests are not overridden by your rights and interests.
• Consent: Processing for marketing communications and non-essential cookies, where your prior consent has been obtained. You may withdraw consent at any time by contacting us or adjusting your account settings.

7 Data Sharing & Disclosure

gee55 does not sell, rent, or otherwise commercially distribute your Personal Data to unaffiliated third parties. However, we may share your data with the following categories of parties where necessary and permitted by applicable law:

• Payment service providers: GrabPay, Touch 'n Go eWallet, Boost, Maybank, CIMB, Public Bank, Hong Leong Bank, DuitNow, FPX, and cryptocurrency gateway providers — solely for the purpose of processing transactions.
• KYC and identity verification providers: Third-party services engaged to verify your identity and age as part of our mandatory compliance obligations.
• Game software providers: Licensed game studios whose software is integrated into the gee55 Platform may receive session and wagering data to the extent required for game functionality and audit purposes.
• Fraud prevention and AML services: Third-party risk management and financial crime compliance providers who assist in monitoring transactions for suspicious activity.
• Regulatory and licensing authorities: Our gaming regulatory authority and any other competent authority to which we are obligated to report under our licence conditions or applicable law.
• Law enforcement and legal process: Where required by a valid court order, subpoena, regulatory request, or other legally compelled process.
• Professional advisors: Legal counsel, auditors, and financial advisors bound by confidentiality obligations, where engagement requires access to relevant data.

All third-party Data Processors engaged by gee55 are bound by data processing agreements that require them to process Personal Data only on our documented instructions and to maintain appropriate technical and organisational security measures.

8 Data Retention

gee55 retains Personal Data for as long as is necessary to fulfil the purposes for which it was collected, and in any event for the minimum periods required by applicable law and our gaming licence conditions. The following general retention principles apply:

• Active Account data: Retained for the full duration of your Account's active status.
• KYC and identity verification records: Retained for a minimum of five (5) years following Account closure, or longer if required by regulatory obligation.
• Financial transaction records: Retained for a minimum of seven (7) years following the date of each transaction, in accordance with financial record-keeping obligations.
• Customer support communications: Retained for a minimum of three (3) years following resolution of the relevant query or dispute.
• Technical and analytics data: Aggregated or anonymised data may be retained indefinitely for platform improvement purposes, provided it can no longer identify you individually.

Upon expiry of applicable retention periods, Personal Data is securely deleted or irreversibly anonymised in accordance with our data destruction procedures.

9 Data Security

gee55 implements and maintains robust technical and organisational security measures designed to protect your Personal Data against unauthorised access, loss, destruction, alteration, or disclosure. Our security infrastructure includes:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the gee55 Platform.
• Encrypted storage of sensitive account credentials. Passwords are stored using industry-standard one-way cryptographic hashing and are never stored in plain text.
• Two-factor authentication (2FA) available to all Players as an additional account security layer.
• Network-level firewalls, intrusion detection systems, and regular penetration testing conducted by qualified independent security professionals.
• Segregated access controls ensuring that internal staff can only access Personal Data commensurate with their specific role and on a strict need-to-know basis.
• Regular staff training on data protection obligations and information security best practices.

In the event of a data security incident that is reasonably likely to result in a risk to your rights and interests, gee55 will notify affected players and the relevant regulatory authority in accordance with applicable breach notification obligations.

10 Cookies & Tracking Technologies

The gee55 Platform uses cookies and similar tracking technologies to enable core functionality, improve user experience, and analyse Platform usage. The principal categories of cookies we use are as follows:

• Strictly necessary cookies: Essential to the operation of the Platform, including session management, login authentication, and security features. These cannot be disabled without impairing Platform functionality.
• Functional cookies: Store your preferences such as language settings, preferred game categories, and display options to personalise your experience.
• Analytics cookies: Used to collect aggregated, anonymised information about how Players navigate and interact with the Platform, enabling us to measure performance and identify areas for improvement. No personally identifiable information is transmitted via analytics cookies.
• Marketing and retargeting cookies: Used only where you have given explicit consent to receive personalised promotional content. You may withdraw this consent at any time via your account settings.

You may manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the gee55 Platform. Most modern browsers allow you to view, delete, and block cookies via the browser's settings menu.

11 Your Data Protection Rights

Subject to applicable data protection law, you have the following rights in respect of the Personal Data gee55 holds about you:

• Right of access: You may request a copy of the Personal Data we hold about you, together with information on how it is being processed.
• Right to rectification: You may request correction of any inaccurate or incomplete Personal Data we hold about you.
• Right to erasure: In certain circumstances, you may request deletion of your Personal Data. This right is subject to limitations where retention is required by law or legitimate interests (e.g., AML record-keeping obligations).
• Right to restrict processing: You may request that we limit the processing of your Personal Data in certain circumstances, such as where you contest the accuracy of the data.
• Right to data portability: Where processing is based on your consent or contractual necessity and is carried out by automated means, you may request that we provide your data in a structured, machine-readable format.
• Right to object: You may object to the processing of your Personal Data where it is based on legitimate interests, including profiling for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact our Data Protection team at the email address provided in Section 15. We will respond to verifiable requests within a reasonable timeframe and in any event within thirty (30) calendar days. We may request proof of identity before processing your request to prevent unauthorised disclosure.

12 International Data Transfers

gee55 operates with technology and service provider infrastructure that may involve the transfer of Personal Data to servers, systems, or personnel located outside of Malaysia. Where such transfers occur, gee55 ensures that appropriate safeguards are in place to protect your Personal Data to a standard equivalent to that required under applicable Malaysian data protection law, including:

• Contractual clauses binding the recipient to process data only in accordance with gee55's instructions and applicable privacy standards.
• Transfer to jurisdictions that have been assessed as providing an adequate level of data protection.
• Technical measures including encryption during transmission to protect data in transit.

13 Protection of Minors

The gee55 Platform is strictly intended for adult players aged 21 years and above. We do not knowingly collect Personal Data from persons under the age of 21. Our registration process includes mandatory age declaration and all accounts are subject to KYC age verification before withdrawal privileges are activated.

If gee55 becomes aware that Personal Data has been collected from an individual under the age of 21 without appropriate parental or guardian consent, we will take immediate steps to delete that data and close the associated Account. If you believe that a minor has registered on the gee55 Platform, please contact us immediately at the address provided in Section 15.

14 Amendments to This Policy

gee55 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, regulatory requirements, or Platform features. Material amendments will be communicated to registered Players via email to the address on file, or via a prominent notice on the Platform, no less than seven (7) days prior to the effective date of the change.

The current version of this Privacy Policy is always accessible at https://gee55.cam/privacy-policy. The "Last Updated" date at the top of this document reflects the date of the most recent revision. Your continued use of the Platform following the effective date of any amendment constitutes your acknowledgement of the updated Policy.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by gee55, please contact our Data Protection team using the details below. We are committed to responding to all privacy-related queries promptly and thoroughly.