Privacy Policy main55 – Personal Data Protection for Malaysian Players

Main55 (referred to as "we", "the platform" or "main55.vin") is fully committed to protecting the privacy and personal data security of every player who registers and uses our services. This Privacy Policy is drafted in compliance with the Malaysia Personal Data Protection Act 2010 (PDPA) and the highest international standards in data protection.

This document transparently and thoroughly explains the types of information we collect, the purposes for collection, how we protect your data, and the rights you hold regarding your personal data. We believe that transparency is the foundation of trust, and your trust is our priority.

By registering an account on main55 or by continuing to use our platform, you agree that you have read and understood this Privacy Policy. If you are under 18 years of age, you are not permitted to use our platform and we do not knowingly collect data from minors.

We collect various types of information based on your interactions with the main55 platform. The following are the main categories of data we collect:

We only collect data that is strictly necessary for the stated purposes. We do not collect sensitive information such as biometric data, political views, or religious beliefs unless required by law.

Main55 uses your personal data for a variety of legitimate and transparent purposes. We do not use your data for any purpose not stated in this policy without first obtaining your additional consent.

• Account Management: Creating and maintaining your player account, including the registration process, login, and two-factor authentication (2FA).
• Transaction Processing: Processing deposits, withdrawals, bonus payments, and all financial transactions related to your account.
• Legal Compliance & KYC: Meeting identity verification requirements, anti-money laundering (AML) compliance, and applicable gambling law obligations.
• Platform Security: Detecting and preventing fraud, hacking, unauthorized access, and any suspicious activity on the platform.
• Service Communications: Sending important notifications regarding your account, transactions, policy updates, and security information.
• Service Improvement: Analyzing usage patterns to improve the interface, platform performance, and overall gaming experience.
• Promotions & Personalised Offers: With your consent, to send promotional information, exclusive bonuses, and relevant offers based on your gaming preferences.
• Responsible Gaming: Monitoring wagering patterns to identify players who may need assistance and to enforce player-set limits.

Main55 continually invests in the latest security infrastructure to ensure your personal data is always protected. We employ multiple layers of protection that work together to form a secure and trusted digital environment.

• 256-bit SSL Encryption: All communications between your browser and the main55 servers are protected by 256-bit SSL/TLS encryption, ensuring no data can be intercepted while in transit.
• Data-at-Rest Encryption: Sensitive data stored in our databases uses AES-256 encryption — the same standard used by leading financial institutions and government agencies worldwide.
• Environment Segregation: Our production system is fully isolated from development and testing environments, minimising the risk of accidental data exposure.
• 24/7 Monitoring: Our cybersecurity team continuously monitors network and system activity around the clock to detect any threats or intrusion attempts.
• Two-Factor Authentication (2FA): main55 supports and encourages the activation of 2FA on all player accounts to add an extra layer of security.
• Regular Security Audits: We conduct regular security audits and penetration testing by qualified independent third parties.

Main55 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Data sharing only occurs in the following limited and controlled situations:

• Payment Processors: Required financial information is shared with licensed payment processors such as FPX, DuitNow, digital wallet, and card network providers to complete your transactions.
• Technical Service Providers: Selected cloud, hosting, and technical infrastructure service providers bound by strict data protection agreements.
• Supervisory & Regulatory Body: When required by law, we may need to disclose certain information to relevant authorities, regulatory bodies, or law enforcement agencies.
• KYC & AML Providers: Certified identity verification and AML monitoring service providers bound by the same confidentiality obligations as we are.
• Game Providers: Minimal, anonymised technical data is required by gaming platform providers for technical purposes only.

Every third party that receives your data is contractually bound to protect that information and use it only for the stated purpose. We do not permit any third party to use your data for their own marketing purposes.

Main55 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

• Essential Cookies: Required for core platform functions such as login session verification, security management, and language preferences. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting anonymized data on how visitors use our platform, helping us identify areas for improvement.
• Functional Cookies: Saving your preferences such as language, display settings, and gaming preferences so you do not need to reconfigure them each time.
• Analytics Cookies: Used alongside internal analytics tools to understand usage patterns and continuously improve our services.

You can control and manage cookies through your web browser settings at any time. However, disabling certain cookies may affect the functionality or your experience on the main55 platform.

As a main55 player and under the provisions of the Malaysia Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data that we hold:

To exercise any of these rights, please contact our support team via Live Chat or our support email. We will process your request within 30 business days from the date of receipt.

Main55 does not retain your personal data longer than is necessary for the original purpose of its collection or as required by applicable law. The following are general guidelines for our retention periods:

• Active Account Data: For as long as your account remains active and you continue using the main55 platform.
• Data After Account Closure: Minimum 5 years after account closure, in line with Malaysia's financial and anti-money laundering legal requirements.
• Financial Transaction Records: Minimum 7 years as required by the Financial Services Act and applicable AML/CFT regulations.
• Communication & Support Logs: 3 years from the date of last interaction for dispute resolution and service improvement purposes.
• Anonymous Analytics Data: May be retained longer as this information cannot personally identify you.

Once the relevant retention period has ended, your data will be securely deleted or anonymised in accordance with our internal procedures.

Main55 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or technological developments. We will notify you of any significant changes through:

• In-platform notifications on main55 upon your next login.
• Email notifications sent to the address registered on your account.
• Updates are reflected on the "Updated" date shown at the top of this document.

Your continued use of the main55 platform after the effective date of any amendments constitutes your acceptance of the updated policy. We encourage you to review this page periodically to stay informed about how we protect your information. If you disagree with any changes, you have the right to close your account and withdraw your remaining funds through the standard procedure.

If you have any questions, concerns, or wish to exercise your rights regarding your personal data, our Data Protection team is ready to assist you.

We are committed to responding to all privacy-related enquiries within 5 business days. For access or data deletion requests requiring thorough review, we will notify you within 30 business days as stipulated by Malaysia's PDPA.