goal55 | Privacy Policy and Personal Data Protection

Content

1 Introduction 2 Data Collected 3 Purpose of Data Use 4 Data Sharing 5 Data Security 6 Cookies & Tracking Technologies 7 Your Rights Under PDPA 8 Data Retention & Deletion 9 Privacy Policy Amendments 10 Contact Us

Latest version: July 2026 · Effective immediately upon publication

Important Note: By using the Goal55 platform or registering an account, you confirm that you have read and understood this Privacy Policy. If you do not agree with any aspect of this policy, please discontinue your use of the Goal55 platform. For any privacy-related enquiries, contact us at support@goal55.my.

Introduction

Goal55 takes your privacy seriously. As an online casino platform serving over 500,000 members across Malaysia, we have a significant responsibility to protect the personal data of every individual who trusts us.

This Privacy Policy outlines our practices regarding the collection, use, storage, protection, and disclosure of personal data you provide when using the Goal55 platform — including the goal55.my website, the Goal55 mobile app, and all related services.

This policy is written in Bahasa Malaysia to ensure it is easily understood by all Malaysian members, and we encourage you to read it in full before registering or making any transactions on Goal55.

Data Controller: For the purposes of Malaysia's Personal Data Protection Act (PDPA) 2010, the data controller for personal information collected through the Goal55 platform is the entity operating goal55.my. For enquiries regarding the data controller, please contact support@goal55.my.

Personal Data We Collect

2.1 Data You Provide Directly

During registration and use of the Goal55 platform, you may provide the following information:

Identity information — full name as per MyKad, MyKad or passport number, date of birth
Contact information — an active Malaysian phone number, email address
Financial information — e-wallet details (Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay) or FPX account details (Maybank2u / CIMB Clicks) for deposit and withdrawal purposes
Identity verification documents — a copy of your MyKad or other official document when required for KYC (Know Your Customer) verification

2.2 Automatically Collected Data

When you use the Goal55 platform, our systems automatically collect certain technical data:

Data Type	Example	Purpose
Device data	Device type, operating system, phone model	Platform optimisation & security
Network data	IP address, internet connection type	Fraud detection & security
Usage data	Games played, session duration, pages visited	Product improvement & user experience
Transaction data	Deposit, withdrawal, betting, and winnings records	Financial records & legal compliance
Communication data	Customer support conversation records	Service quality assurance

2.3 Sensitive Data

Goal55 does not collect sensitive data such as health information, religious beliefs, political views, or sexual orientation. The only exception is where Malaysian law requires us to collect certain information for anti-money laundering (AMLA) compliance purposes.

How We Use Your Personal Data

Goal55 uses your personal data only for legitimate and transparent purposes. The key purposes are as follows:

3.1 Account Management & Services

Registering and verifying your identity as a Goal55 member
Processing deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or FPX
Processing winnings withdrawals to your preferred payment method in Malaysian Ringgit (MYR)
Crediting bonuses, rebates, and promotional offers to your account
Providing 24/7 customer support in Bahasa Malaysia and English

3.2 Security & Legal Compliance

Detecting and preventing fraud, money laundering, and platform abuse
Complying with legal obligations under Malaysia's PDPA and related regulations
Conducting KYC (Know Your Customer) checks as required by financial regulations
Complying with instructions from relevant Malaysian regulatory bodies or authorities

3.3 Product Improvement & Communications

Analysing usage patterns to improve your gaming experience at Goal55
Sending important notifications related to your account, transactions, and security
With your consent, sending information about promotions, new offers, and platform updates that may be of interest to you

Marketing Opt-Out: You can opt out of marketing communications at any time by clicking the "unsubscribe" link in our emails or by contacting customer support. This will not affect important communications related to your account and transactions.

Data Sharing & Disclosure

Goal55 does not sell, rent, or trade your personal data. However, there are limited situations where we may need to share your data with third parties:

4.1 Trusted Service Providers

We share necessary data with service providers that help us operate the Goal55 platform, including:

Payment providers — e-wallet and FPX transaction processors to facilitate your deposits and withdrawals
Cloud hosting providers — for secure data storage and platform delivery
Identity verification services — to conduct required KYC checks
Analytics providers — aggregated, anonymised data for product improvement purposes only

All service providers are bound by strict confidentiality agreements and are only permitted to use your data for the specified purposes.

4.2 Legally Required Disclosures

Goal55 may disclose your personal data to Malaysian authorities where we are required to do so by a court order, warrant, or lawful directive from a Malaysian law enforcement agency with the relevant jurisdiction. We will not disclose your data beyond what is legally required.

4.3 Business Transfer

In the event of a merger, acquisition, or sale of Goal55's assets, members' personal data may be transferred as part of those assets. Members will be notified in advance and given the option to delete their accounts before the transfer if they do not agree to the new terms.

Data Security at Goal55

We continually invest in our security infrastructure to ensure your personal data remains protected at all times. Key security measures we have in place:

256-bit SSL Encryption — all data transmitted between your device and Goal55's servers is encrypted using the latest TLS 1.3 protocol, the same standard used by Malaysian banking institutions
Encryption of stored data — sensitive data such as financial details and identity documents are stored in encrypted format on our servers
Multi-layered access controls — Goal55 staff only have access to the data required for their specific role, with a full audit log maintained for every access
Two-factor authentication (2FA) — available to all members as an additional security layer for your Goal55 account
24/7 monitoring — our security systems are monitored around the clock to detect any unusual activity or unauthorised access attempts
Regular penetration testing — independent cybersecurity experts conduct regular security testing on our systems

Shared Responsibility: While Goal55 invests heavily in security, the safety of your account also depends on your own actions. Always use a strong, unique password for your Goal55 account, never share your login credentials, and enable two-factor authentication for optimal protection.

Cookies & Tracking Technologies

6.1 What Are Cookies?

Cookies are small text files stored on your device when you visit the Goal55 website. They help us recognise you on subsequent visits, remember your preferences, and make your gaming experience smoother and more personalised.

6.2 Types of Cookies We Use

Essential cookies — required for core platform functions such as login, session security, and transaction processing. These cookies cannot be disabled without affecting platform functionality.
Performance cookies — collects information on how you use the Goal55 platform (for example, which pages are visited most frequently) in anonymised form to help us improve our services.
Functional cookies — saving your preferences such as language and display settings so you do not need to reconfigure them each time you log in.

6.3 Managing Cookies

You can manage and delete cookies through your browser settings. However, disabling certain cookies may affect the functionality of the Goal55 platform. Essential cookies cannot be disabled as they are required for platform security and core operations.

Your Rights Under Malaysia's PDPA

As a Goal55 member based in Malaysia, you are protected under the Personal Data Protection Act (PDPA) 2010. You have the following rights regarding your personal data:

Right of Access

You have the right to request a copy of the personal data we hold about you. Access requests will be processed within 21 business days of receiving your written request.

Right to Rectification

If the personal data we hold about you is inaccurate, incomplete, or out of date, you have the right to request a correction at no additional charge.

Right to Restriction of Processing

You may request that we restrict the processing of your data in certain circumstances — for example, while you are disputing the accuracy of the data we hold.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time. Your objection will be honoured without any additional conditions.

Right to Erasure

You may request the deletion of your personal data when it is no longer needed, subject to our legal obligations to retain certain records under Malaysian law.

Data Portability Rights

You have the right to receive your personal data in a machine-readable format (such as CSV or JSON) for transfer to another service, should you wish to do so.

How to Submit a Privacy Rights Request: To exercise any of the rights above, submit a written request to support@goal55.my with the subject line "PDPA PRIVACY RIGHTS REQUEST" along with your full name and Goal55 account number. We will acknowledge receipt of your request within 3 business days and resolve it within 21 business days, in line with Malaysia's PDPA requirements.

Data Retention & Deletion

8.1 Retention Period

Goal55 retains your personal data in accordance with the following schedule, determined by our operational requirements and Malaysia's legal obligations:

Active account data — retained for as long as your account remains active on Goal55
Financial transaction records — retained for 7 years in accordance with Malaysian accounting and financial regulatory requirements
KYC records (identity verification) — retained for 5 years after account closure in accordance with anti-money laundering (AMLA) requirements
Customer support communication records — retained for 2 years for quality assurance and dispute resolution purposes
Activity and security logs — retained for 1 year for fraud detection and security purposes

8.2 Secure Data Disposal

When your personal data is no longer needed and the mandatory retention period has expired, Goal55 will dispose of it securely using methods that ensure it cannot be recovered. This includes secure deletion from all servers and backups, as well as the physical destruction of any printed documents containing that data.

Privacy Policy Amendments

Goal55 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new technologies, legal requirements, or other operational reasons. The "Updated" date at the top of this document will always reflect the date of the most recent amendment.

For material amendments — that is, changes that significantly affect how we use your data — Goal55 will provide at least 30 days' notice before the changes take effect, via:

Email to the address registered to your account
Prominent notice on the main page of the Goal55 platform
In-app notifications on the Goal55 mobile app for app users

Continued use of the Goal55 platform after the effective date of any amendments will be considered acceptance of the revised policy. If you do not agree with the changes, you may close your account and request deletion of your data before the amendments take effect.

Contact Us About Privacy

If you have any questions, concerns, or complaints regarding how Goal55 handles your personal data, we encourage you to contact us first before escalating to the relevant authorities:

Privacy Email — support@goal55.my with the subject line "PRIVACY ENQUIRY" (response within 3 business days)
Live Chat 24/7 — accessible directly from the Goal55 platform or mobile app in Bahasa Malaysia or English
Official PDPA Complaint — if you are not satisfied with our response, you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection (JPDP)

We are committed to addressing all privacy inquiries seriously and within a reasonable timeframe. Your trust is the foundation of our business, and we take every concern you raise about your personal data on the Goal55 platform seriously.

FAQ – Goal55 Privacy Policy

Frequently asked questions about data privacy and personal information protection at Goal55 Malaysia

Absolutely not. Goal55 does not sell, rent, or share your personal data with advertisers, marketing companies, or any third party for their own marketing purposes. Your data is only shared with service providers directly involved in platform operations — such as e-wallet payment processors handling your deposits and withdrawals — and only to the extent necessary, subject to strict confidentiality agreements.

All your financial details — including your Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX account information (Maybank2u or CIMB Clicks) — are encrypted using banking-grade 256-bit SSL protocols during transmission. This data is stored in encrypted format on our servers and is only accessible by authorised payment processing systems. Goal55 staff do not have access to your full e-wallet details or bank account numbers.

Yes, you have the right to request the deletion of your personal data under Malaysia's PDPA. Submit a written request to support@goal55.my with the subject line "PDPA DATA DELETION REQUEST". Please note that we may not be able to delete all data where a legal obligation to retain it exists — for example, financial transaction records must be kept for 7 years under Malaysian financial law, and KYC records for 5 years under AMLA. Data that can be deleted will be securely disposed of, and we will inform you of what has been deleted and what must be retained, along with the reasons.

When you close your Goal55 account, your personal data is not deleted immediately, as certain legal obligations apply. Financial transaction records are retained for 7 years, KYC documents for 5 years, and communication records for 2 years — in accordance with Malaysian legal requirements. Once the mandatory retention period has elapsed, your data will be securely disposed of. During the retention period, your data will not be used for any marketing or new operational purposes and may only be accessed for legal compliance purposes.

You can stop receiving Goal55 marketing emails easily in three ways: (1) click the "Unsubscribe" link found at the bottom of any marketing email we send; (2) go to Account Settings within the Goal55 platform and turn off marketing communications; or (3) contact our customer support via 24/7 Live Chat or email at support@goal55.my. Unsubscription will take effect within 5 business days. Please note that this only applies to marketing emails — you will still receive important communications regarding your account and transactions.

In the event of a data security breach affecting your personal data, Goal55 will notify you within 72 hours of becoming aware of it, via your registered email and an in-platform notification. We will clearly explain: what type of data was involved, when the breach occurred, what risks may arise, what steps we are taking to resolve the issue, and what actions you can take to protect yourself. We will also report material breaches to Malaysia's Department of Personal Data Protection (JPDP) in accordance with the procedures set out under the PDPA.

Privacy Policy Goal55 – Malaysia Personal Data Protection

Full PDPA Compliance

256-bit SSL Encryption

No Data Sales

Right to Full Access

Goal55's Privacy Commitment to You

Only Necessary Data Collected

Multi-Layer Protection with 256-bit SSL

No Third-Party Data Sharing

Full Compliance with Malaysia's PDPA 2010

Clear Data Retention Policy

Data Breach Notification within 72 Hours