Privacy Policy

grab555 ("we", "us", "our", "the Operator", "the Platform") is committed to protecting the privacy and personal data of all users who access and interact with the website at https://grab555.cam ("the Platform"). This Privacy Policy ("Policy") describes in detail how we collect, use, store, share, and protect personal information provided by users, with particular relevance to Malaysian players who constitute a significant part of our user base.

This Policy applies to all personal data processed in connection with your use of grab555, including account registration, identity verification (KYC), deposits and withdrawals via Malaysian payment methods, sports betting activity, casino gaming, and customer support interactions. It applies whether you access the Platform via a desktop browser, a mobile device, or any other compatible interface.

By registering an Account on grab555, you acknowledge that you have read, understood, and consent to the data practices described in this Policy. This Policy should be read in conjunction with our Terms & Conditions, which govern the broader contractual relationship between you and grab555.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information that identifies or can reasonably be used to identify a living natural person, directly or in combination with other available data.
• "Processing" means any operation performed on Personal Data, including but not limited to collection, storage, use, disclosure, erasure, and transfer.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this context, grab555 (the Operator).
• "Data Processor" means a third party that processes Personal Data on behalf of grab555 under contractual instruction and appropriate data processing agreements.
• "KYC" means Know Your Customer — the identity, age, and source-of-funds verification process required under our licensing and AML obligations.
• "AML" means Anti-Money Laundering — regulatory obligations requiring us to monitor transactions and report suspicious activity to competent authorities.
• "Cookie" means a small data file stored on your device by the Platform for session management, analytics, or preference storage purposes.
• "Consent" means a freely given, specific, informed, and unambiguous indication of agreement to the processing of Personal Data for a stated purpose.

The Data Controller responsible for your Personal Data is the legal entity operating the grab555 Platform at https://grab555.cam. grab555 operates under international licensing, and the Operator's registered details are available upon request by contacting our support team as described in Section 17 of this Policy.

All data processing activities are conducted by or on behalf of the Operator in accordance with this Policy and the applicable requirements of our operating licence. Where Personal Data is processed by third-party Data Processors (for example, payment processing partners or KYC verification services), such processors act under written agreements that impose data protection obligations consistent with the standards described in this Policy.

We collect the following categories of Personal Data, to the extent necessary for the purposes outlined in this Policy:

We do not intentionally collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, or health information, unless such data is incidentally included in KYC documentation submitted to us.

grab555 collects Personal Data through the following channels:

• Direct submission: Data you provide when creating an Account, completing KYC verification, making deposits or withdrawals via Malaysian payment methods (Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, USDT TRC20), contacting customer support, or participating in promotions
• Automated collection: Technical and behavioural data collected automatically when you access the Platform, including IP address, session data, device information, and browsing patterns on the Platform, via cookies and server logs
• Third-party sources: Identity verification data from KYC service providers; fraud and sanctions screening data from compliance databases; payment confirmation data from payment processors
• Platform interactions: Gaming session data generated through your use of casino games, sports betting markets, and other Platform features

We process your Personal Data on one or more of the following legal grounds:

• Contractual necessity: Processing required to perform the contract between you and grab555 — specifically, to operate your Account, process transactions, and deliver gaming and betting services
• Legal obligation: Processing required to comply with applicable laws and our licensing obligations, including KYC identity verification, AML transaction monitoring, age enforcement (21+ requirement), and responses to lawful requests from regulatory or law enforcement authorities
• Legitimate interests: Processing necessary for our legitimate business interests, including fraud detection and prevention, platform security, service improvement, and responsible gambling monitoring — where such interests are not overridden by your rights and freedoms
• Consent: Processing activities for which you have provided explicit consent, such as receiving marketing communications about grab555 promotions (where applicable). You may withdraw consent at any time by contacting support or updating your communication preferences in Account settings

We use the Personal Data collected for the following specific purposes:

• Account creation and management: Registering and maintaining your Account, including verifying your identity and age (21+ enforcement), processing login credentials, and managing Account settings
• Transaction processing: Processing deposits via Malaysian payment methods and facilitating withdrawals to your verified payment accounts in MYR
• KYC and AML compliance: Verifying your identity documents, screening your name against sanctions lists, monitoring transaction patterns for suspicious activity in accordance with our licensing obligations
• Platform security: Detecting and preventing fraud, unauthorised access, collusion, bot use, and other prohibited conduct as defined in our Terms & Conditions
• Customer support: Responding to your enquiries, resolving disputes, and maintaining records of support interactions
• Responsible gambling: Monitoring gaming patterns for indicators of problem gambling behaviour, applying responsible gambling tools you have configured, and communicating responsible gambling resources when appropriate
• Service improvement: Analysing Platform usage patterns (in aggregated or pseudonymised form where possible) to improve product features, performance, and user experience
• Legal compliance: Retaining records as required by applicable law and our licensing conditions; responding to lawful regulatory or law enforcement requests
• Promotional communications: Notifying you of relevant grab555 promotions and bonus offers where you have not opted out of such communications

grab555 does not sell, rent, or trade your Personal Data. We share Personal Data only in the following limited circumstances:

• Payment processors: Your financial data is shared with payment processing partners (including the operators of Malaysian payment platforms such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX gateways) to the extent necessary to complete deposit and withdrawal transactions
• KYC and identity verification providers: Your identity documents and related personal data are shared with third-party KYC service providers for identity and age verification and sanctions screening
• Game studios and technology partners: Limited technical data (such as anonymised session identifiers) may be shared with licensed game studio partners to facilitate game delivery and resolve technical disputes
• Regulatory and law enforcement authorities: We may disclose Personal Data to competent authorities where legally required to do so, including in response to valid court orders, regulatory investigations, or AML reporting obligations
• Professional advisers: We may share Personal Data with legal, audit, or compliance advisers under strict confidentiality obligations where necessary for the operation of our business
• Business transfers: In the event of a merger, acquisition, or sale of all or part of the business, Personal Data held by grab555 may be transferred to the successor entity, with prior notice provided to affected users where practicable

As grab555 operates under international licensing and uses technology infrastructure and service providers located in various countries, your Personal Data may be transferred to and processed in jurisdictions outside Malaysia. Such transfers may include countries whose data protection laws differ from those applicable in Malaysia.

Where Personal Data is transferred internationally, we take appropriate steps to ensure that such transfers are conducted with adequate safeguards in place. These may include contractual clauses between grab555 and the receiving entity requiring the recipient to uphold data protection standards equivalent to those described in this Policy.

By creating an Account and using the grab555 Platform, you acknowledge and consent to the transfer of your Personal Data to other jurisdictions as described in this section, subject always to the protections outlined in this Policy.

We retain Personal Data for as long as necessary to fulfil the purposes for which it was collected, taking into account our legal and regulatory obligations. The following general retention principles apply:

• Account data: Retained for the duration of your active Account plus a minimum of five (5) years following Account closure, in line with AML and licensing record-keeping requirements
• Transaction records: Financial transaction data is retained for a minimum of five (5) years to satisfy AML, tax, and audit obligations
• KYC documentation: Identity verification documents are retained for a minimum of five (5) years after the end of your relationship with grab555, as required by our licensing framework
• Gaming activity records: Bet history and gaming session data is retained for a minimum of three (3) years for dispute resolution and regulatory compliance
• Support communications: Customer support interactions are retained for a minimum of two (2) years
• Technical and log data: Server and access logs are retained for up to twelve (12) months unless required to be retained longer in connection with a security investigation

Upon expiry of applicable retention periods, Personal Data is securely deleted or anonymised. Where data cannot be fully deleted due to technical backup constraints, we ensure such data is not used for any active processing purpose.

grab555 uses cookies and similar tracking technologies when you access the Platform. Cookies are small data files stored on your browser or device that help us deliver a functional and consistent experience. We use the following categories of cookies:

• Strictly necessary cookies: Required for the Platform to function correctly — including session authentication, account login state, and security tokens. These cannot be disabled without affecting core functionality
• Functional cookies: Store your preferences, such as language settings, notification preferences, and responsible gambling tool configurations, to provide a consistent experience across sessions
• Analytics cookies: Collect aggregated, anonymised data about how users navigate the Platform to help us identify areas for improvement. We use this data internally and do not share it with external advertising networks
• Security cookies: Help us detect suspicious login activity, prevent cross-site request forgery, and identify automated or bot-like access patterns

We do not use cookies for third-party advertising profiling or cross-site behavioural tracking for commercial purposes. You can manage or disable non-essential cookies via your browser settings; however, doing so may affect the functionality of certain Platform features.

The security of financial data submitted in connection with MYR deposits and withdrawals is of paramount importance to grab555. We apply the following measures to protect payment-related Personal Data:

• All payment data transmissions are protected by SSL/TLS encryption (minimum TLS 1.2)
• Payment method credentials (e-wallet account details, bank account numbers) are never stored in plain text on our systems; where stored, they are encrypted at rest using industry-standard algorithms
• Deposits and withdrawals are processed through established, licensed payment gateways. grab555 does not directly process credit or debit card data on its own servers; card transactions are handled by PCI-DSS compliant payment processors
• Access to financial data within our systems is restricted to authorised personnel on a strict need-to-know basis
• Transaction monitoring systems are in place to detect unusual patterns that may indicate fraud, unauthorised access, or money laundering activity

In the event of a data security incident that materially affects the security of your financial data, we will notify affected users and relevant authorities in accordance with our obligations under applicable law and our licensing conditions.

You have the following rights in relation to the Personal Data we hold about you. These rights are exercisable by submitting a written request to our support team at the contact details provided in Section 17:

• Right of Access: Request confirmation of whether we process your Personal Data and, if so, a copy of that data together with information about how it is processed. We will respond within 30 calendar days of receipt of a verified request
• Right to Rectification: Request correction of inaccurate or incomplete Personal Data. For routine Account data updates, please contact support directly
• Right to Erasure ("Right to be Forgotten"): Request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent. This right is subject to our legal retention obligations, particularly in relation to AML, KYC, and licensing record-keeping requirements
• Right to Restriction of Processing: Request that we restrict active processing of your data in certain circumstances — for example, while the accuracy of disputed data is being investigated
• Right to Data Portability: In certain circumstances, request a structured, machine-readable copy of the Personal Data you have provided to us, for the purpose of transferring it to another service provider
• Right to Object: Object to processing based on our legitimate interests where you have grounds relating to your particular situation. We will assess and respond to such objections on a case-by-case basis
• Right to Withdraw Consent: Where processing is based on consent, withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal

grab555 operates strictly for players aged 21 years and above. We do not knowingly collect or process Personal Data belonging to individuals under the age of 21. The grab555 Platform is not directed at, intended for, or designed to attract users under the age of 21.

As part of our KYC process, we verify the age of all users before activating full Account functionality, including the ability to make deposits, claim bonuses, or request withdrawals. Where age verification reveals that a user is under 21, the Account will be immediately closed, any deposits will be returned to the original payment method, and all bonus-related data will be permanently deleted.

If you believe that we have inadvertently collected Personal Data from a person under the age of 21, please contact us immediately at the details in Section 17. We will investigate and, where confirmed, take prompt action to delete such data.

The grab555 Platform may from time to time reference or link to third-party services — for example, information about Malaysian payment methods such as Touch 'n Go eWallet, Boost, or DuitNow as operated by their respective companies. When you access such third-party services, their own privacy policies govern the collection and use of your data.

grab555 has no responsibility for the privacy practices of third-party websites, services, or applications, even where a link or reference to them appears on the Platform. We encourage you to review the privacy policies of any third-party services you interact with, particularly those of your chosen payment method providers, before submitting personal or financial information.

grab555 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or operational needs. When material changes are made, we will notify registered users via email or a prominent on-Platform notice prior to the changes taking effect. The "Effective Date" at the top of this Policy reflects the date of the most recent revision.

Your continued use of the grab555 Platform after the effective date of any updated Policy constitutes your acceptance of the revised privacy practices. If you do not accept the revised Policy, you should cease using the Platform and may request Account closure in accordance with our Terms & Conditions.

We encourage you to review this Policy periodically. The current version is always accessible at https://grab555.cam/privacy-policy.

For any questions, concerns, or requests relating to this Privacy Policy, the processing of your Personal Data, or the exercise of your data rights, please contact the grab555 privacy team using the following details:

When contacting us regarding your Personal Data, please include your registered email address and a clear description of your request. We may request additional information to verify your identity before processing data access, rectification, or erasure requests.

For responsible gambling-related concerns, including self-exclusion requests, please visit our dedicated Responsible Gambling page or contact support with the subject line "Responsible Gambling Request".