Privacy Policy KM555 – Data Protection & Privacy for Malaysian Players

This Privacy Policy ("Policy") is published by KM555 ("we," "Platform") and applies to all users who access or use the km555.site website, the KM555 mobile app, and all related services including Sports Betting, online casino, slots, and e-sports.

KM555 understands that your trust depends on how we handle your personal information. We do not take this responsibility lightly. Every decision we make regarding your data — from how it is collected, to how it is stored, and who can access it — is made with your privacy interests as the priority.

This Policy applies to all Malaysians and other individuals using the KM555 platform. It complies with the Malaysian Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards.

KM555 collects personal data on a "minimum necessary" basis — we only gather information that is genuinely required to provide our services to you safely and effectively. The categories of data we collect are as follows:

KM555 does not collect sensitive data such as medical information, political views, religious beliefs or biometric data, unless specifically required by applicable law.

Your personal data is collected through several channels as you interact with the KM555 platform. Understanding how your data is collected helps you make more informed decisions about your privacy.

• Account Registration: When you register a KM555 account, you provide basic information such as your name, date of birth, phone number, and email address directly. This is the most fundamental data we need to create your account.
• KYC Process: To meet compliance requirements, we collect identity documents such as a MyKad or passport when you make your first withdrawal or when further verification is requested.
• Financial Transactions: Every time you make a deposit via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, or FPX (Maybank2u, CIMB Clicks), the transaction details are recorded for financial record-keeping and fraud prevention purposes.
• In-Platform Activity: Our system automatically records your betting activity, the games you play, bonuses you use, and other interactions with the KM555 platform for account management purposes.
• Cookies & Tracking Technologies: The KM555 website uses cookies and similar tracking technologies to enhance user experience and analyze how the platform is used. Further details are provided in Section 7.
• Support Communications: When you contact the KM555 support team via live chat, Telegram, or email, the content of those communications is retained for the purposes of complaint resolution and service improvement.

KM555 only uses your personal data for legitimate, stated purposes. Below are the primary purposes for which your data is used:

1. Account Management: Creating, verifying, and managing your KM555 account, including the login process, account recovery, and profile information updates.
2. Transaction Processing: Processing deposits and withdrawals via your chosen Malaysian payment method, maintaining accurate financial records, and ensuring all transactions are correctly processed.
3. Legal & Licensing Compliance: Meeting compliance requirements including KYC (Know Your Customer), anti-money laundering (AML), and any other requirements set by the relevant regulatory bodies.
4. Security & Fraud Prevention: Detecting, investigating, and preventing any fraudulent activity, account misuse, or behaviour that violates KM555's Terms & Conditions.
5. Customer Support: Providing assistance when you contact the KM555 support team, resolving complaints and ensuring a positive user experience.
6. Responsible Gambling: Monitoring gameplay activity patterns to identify signs of problem gambling and providing appropriate assistance to players who may need support.
7. Experience Personalisation: Tailoring the content, promotions, and recommendations you see based on your preferences and activity patterns on KM555, including sport preferences such as EPL or Liga Super Malaysia.
8. Service Communications: Sending important notifications about your account, transactions, policy updates, and security information you need to be aware of.

KM555 does not use your data to make automated decisions that carry legal or equivalent effects without human oversight, unless stated otherwise and you are given the right to request a review by an individual.

KM555 takes a highly cautious approach to sharing personal data. Our core principle is straightforward: we do not sell, rent, or transfer your data to third parties for their own marketing purposes. However, there are limited circumstances where data sharing is necessary and lawful:

• Payment Service Providers: Required transaction information is shared with approved payment providers — including Touch 'n Go, GrabPay, DuitNow, and FPX processors — solely for the purpose of processing your deposits and withdrawals. These providers are bound by strict confidentiality agreements.
• Game Software Providers: Minimum technical data is shared with the casino and slots game providers that partner with KM555 to ensure games function correctly. No personally identifiable data is shared beyond what is strictly necessary.
• Regulatory Body & Law Enforcement: KM555 will disclose required data to Malaysian authorities or relevant regulatory bodies when required to do so by law, court order, or valid legal process.
• Fraud Prevention: In cases suspected to involve fraud, money laundering, or serious security threats, KM555 may share relevant information with the appropriate authorities or recognised fraud prevention services.
• Professional Advisors: Our legal counsel, accountants, and business advisors may need to access certain data in order to provide professional services to KM555. They are bound by strict confidentiality obligations.

Protecting your data is more than a technical obligation — it is a business priority that KM555 takes seriously at every level of the organisation. Below are the specific security measures we have put in place:

• 256-bit SSL Encryption: All data transmitted between your device and KM555's servers is encrypted using TLS 1.3 with 256-bit encryption. This ensures no third party can intercept or read your data in transit.
• Data at Rest Encryption: Sensitive data stored in our databases — including personal identification details and financial information — is encrypted using AES-256 encryption, which cannot be decrypted without the appropriate key.
• Two-Factor Authentication (2FA): KM555 offers 2FA for all accounts, providing an additional layer of protection that ensures only you can access your account, even if your password is compromised.
• Intrusion Detection System: The KM555 platform is equipped with a real-time security monitoring system that detects and alerts on any suspicious activity or unauthorised access attempts.
• Internal Access Controls: KM555 staff access to player data is restricted on a need-to-know basis. All access is logged and regularly audited to detect any inappropriate use.
• Regular Penetration Testing: KM555 conducts penetration testing carried out by independent security experts at least once a year to identify and address vulnerabilities before they can be exploited.
• Staff Training: All KM555 staff who handle player data undergo comprehensive data protection training, with regular updates on the latest security threats.

Despite all these security measures, no system can guarantee absolute security. In the event of a data breach that may affect you, KM555 is committed to notifying you within the timeframe required by law and to taking appropriate remedial steps without delay.

Like most online platforms, KM555 uses cookies and similar tracking technologies to enhance the user experience and understand how our platform is used. Below is an explanation of the types of cookies we use:

• Essential Cookies: These cookies are essential for the basic functioning of the KM555 platform, such as maintaining your login session, securing transactions, and remembering your language preferences. Without them, the platform cannot function properly. These cookies cannot be disabled.
• Performance & Analytics Cookies: We use analytics cookies to understand how users interact with the KM555 platform — which pages are visited most, time spent on specific sections, and any technical issues that may be encountered. This data is used in aggregated form and does not identify individual users.
• Functional Cookies: These cookies allow the KM555 platform to remember your preferences — such as your favourite sports (EPL, Malaysia Super League, badminton), display settings and notification preferences — to deliver a more personalised experience.
• Security Cookies: Used to identify and prevent fraudulent activity, verify your identity during active sessions, and protect your account from unauthorised access.

You can manage your cookie settings through your browser at any time. However, disabling essential cookies may affect the functionality of the KM555 platform and your overall user experience. For more information on managing cookies in your browser, please refer to your browser's help documentation.

As a KM555 player in Malaysia, you have specific rights regarding your personal data under the Personal Data Protection Act 2010 (PDPA) and KM555's own policies. We respect and facilitate the exercise of these rights:

To exercise any of the rights above, please contact the KM555 support team at support@km555.site with the subject line "Privacy Rights Request." Include your full name and account number to help expedite the process. KM555 will verify your identity before processing any data-related request.

KM555 does not retain your personal data for longer than necessary for the purposes it was collected, or beyond any period required by law. Below is a general guide to our data retention periods by category:

• Active Account Data: For the duration of your active account and for 5 years after account closure, in line with Malaysian legal requirements for financial records.
• Financial Transaction Records: Minimum 7 years from the date of transaction, in line with Malaysian tax and financial legal requirements as well as anti-money laundering obligations.
• KYC Documents: For the duration of the active account and a minimum of 5 years after account closure, or longer if required by the relevant regulatory authority.
• Support Communication Logs: 3 years from the date of communication, for dispute resolution and service improvement purposes.
• Analytics Data & Technical Logs: Up to 2 years in individually identifiable form, after which data is aggregated or deleted.
• Gaming Activity History: Minimum 5 years for responsible gambling purposes, dispute resolution and compliance.

Once a retention period has expired, KM555 will securely delete or destroy the data using methods that ensure it cannot be recovered. For physical data, destruction is carried out through certified shredding.

KM555 is a platform intended exclusively for individuals aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. Our platform includes age verification procedures to prevent registration by underage individuals.

Should KM555 discover that personal data has been collected from a minor, we will take the following steps immediately:

• Closing the account in question immediately.
• Deleting all related personal data within a reasonable timeframe.
• Refunding any actual deposits (excluding winnings) to the original payment method.
• Reporting the incident to the relevant authorities where necessary.

If you become aware that a minor has registered for or is using the KM555 platform, please contact us immediately at support@km555.site so we can take the appropriate action.

KM555 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or improvements to data protection. For material changes — those that significantly affect your privacy rights — we will:

• Sending notifications via email to the address registered on your account.
• Displaying a clear notice within the KM555 platform at least 14 days before the changes take effect.
• Updating the "Last Updated" date at the top of this document.

Continued use of the KM555 platform after any changes take effect will be considered acceptance of the updated Privacy Policy. If you do not agree with the changes made, you have the right to close your account before they come into force.

For any enquiries, concerns, or requests relating to this Privacy Policy or how KM555 handles your personal data, please contact us via: