Data Protection

Privacy Policy goal55

At goal55, your privacy is not just a priority — it is our responsibility. We are committed to protecting every piece of personal information you entrust to us with the highest security standards.

Last Updated: 1 January 2026

How Does goal55 Protect Your Data?

Every layer of our protection is specifically designed to ensure your personal information remains safe, private, and used only for purposes you have authorized.

🔒
256-bit SSL Encryption

All data transmitted between your device and goal55 servers is protected by 256-bit SSL encryption — the same security standard used by leading banking institutions in Malaysia.

🧾
Minimum Data Collection

Goal55 only collects data that is strictly necessary to operate our services, comply with legal requirements, and deliver the best user experience. No excess data is collected.

🚫
No Data Sales

Goal55 has never and will never sell, rent, or disclose your personal data to advertisers or third parties for commercial purposes. Your data belongs entirely to you.

🛂
Strict Access Control

Only authorized personnel who require data access to perform their official duties are permitted to view member personal information. All access is logged and continuously monitored.

🔍
Regular Security Audits

The goal55 security system undergoes regular internal and external audits to identify and address any potential vulnerabilities before they pose a threat to member data.

✅
Malaysia PDPA Compliance

The goal55 Privacy Policy is drafted in compliance with Malaysia's Personal Data Protection Act (PDPA) 2010. We take seriously every right granted to you under that act.


Section 01
Introduction

This Privacy Policy explains how goal55 ("Platform", "We") collects, uses, stores, and protects your personal information when you use our official website at goal55.vin, the goal55 mobile app for Android and iOS, and all related services we provide.

This policy is drafted in compliance with Malaysia's Personal Data Protection Act (PDPA) 2010 and international best practices in data protection. By registering an account or using any goal55 service, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy.

If you disagree with any part of this Privacy Policy, please discontinue use of our platform and contact the support team to close your account. We always welcome questions and feedback from members on privacy matters.

This Privacy Policy is part of Terms and Conditions goal55. Please read both documents together for a complete understanding.

Section 02
Personal Data We Collect

Goal55 collects your personal information through various means as you interact with our platform. Below are the categories of data we collect:

Data Category Sample Information Primary Purpose
Identity Data Full name, identity card number (MyKad), date of birth Identity verification (KYC), legal compliance
Contact Data Email address, mobile number, residential address Account communications, notifications, customer support
Financial Data Bank account number, bank name, transaction records Deposit and withdrawal processing
Technical Data IP address, device type, operating system, browser Account security, fraud detection
Usage Data Game history, betting records, login timestamps Service improvement, responsible gaming
Document Data MyKad copy, passport, bank statement Enhanced identity verification and KYC

We do not collect sensitive data such as health information, political affiliations, or religious beliefs unless required by applicable law.

Section 03
How We Use Your Data

Every piece of information we collect from you is used for clear, lawful, and limited purposes. goal55 will not process your data beyond the scope of the purposes stated below:

  • Account Management: Creating, managing, and securing your member account, including the registration process, login, and two-factor authentication.
  • Transaction Processing: Processing deposits, withdrawals, and all financial transactions carried out through the goal55 platform securely and efficiently.
  • Identity Verification (KYC): Fulfilling legal requirements related to identity verification and anti-money laundering in compliance with Malaysia's AMLA.
  • Customer Support: Responding to enquiries, resolving complaints, and providing technical assistance via live chat, email, and other support channels.
  • Platform Security: Detecting, investigating, and preventing fraudulent activity, unauthorised account access, and cybersecurity threats.
  • Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and provide appropriate support to members who need it.
  • Marketing (with Consent): Sending promotions, bonus offers, and platform updates via email or push notifications — only if you have given your consent.
  • Legal Compliance: Maintaining records required under Malaysian law and complying with court orders or directives from legitimate regulatory bodies.

You can opt out of marketing communications at any time via your account settings or by contacting the goal55 support team.

Section 04
Data Sharing with Third Parties

Goal55 understands that your trust is our most valuable asset. We do not sell or disclose your personal data to third parties for their own commercial purposes. However, there are limited situations where data sharing is necessary to operate our services:

  • Payment Service Providers: Transaction data is shared with payment processors such as FPX, Touch 'n Go, GrabPay, and the involved banks solely for the purpose of processing your financial transactions.
  • Game Providers: Required technical information is shared with third-party game software providers to allow you to access their games on the goal55 platform.
  • KYC Services: Identity verification documents are shared with trusted and accredited KYC service providers for identity verification purposes only.
  • Regulatory & Law Enforcement Bodies: goal55 will disclose personal data to authorities when required by law, court order, or valid official directive.
  • Fraud Prevention Services: Technical data and usage patterns may be shared with security service providers to detect and prevent fraudulent activity.

All third parties receiving data from goal55 are bound by strict confidentiality agreements and are only permitted to use that data for the specified purposes.

goal55 is not responsible for the privacy practices of third parties whose links or services may be accessible through our platform. Please review their privacy policies separately.

Section 05
Data Security

The security of your personal data is the absolute top priority of goal55. We implement a range of technical and organisational measures to protect your information from unauthorised access, disclosure, alteration, or destruction:

  • Data Encryption in Transit: All communications between your device and goal55 servers are encrypted using TLS 1.3 with AES-256 encryption, ensuring your data cannot be read by third parties during transmission.
  • Data Encryption at Rest: Sensitive data stored in our databases — including financial information and identity documents — is encrypted to the highest industry standards.
  • Two-Factor Authentication (2FA): goal55 offers two-factor authentication for all accounts to provide a significant additional layer of security.
  • 24/7 Monitoring: Our systems are continuously monitored 24 hours a day, 7 days a week to detect any suspicious activity or intrusion attempts.
  • Network Segregation: Servers storing sensitive data are logically and physically isolated from the publicly accessible parts of the platform.
  • Staff Training: All goal55 staff with access to user data undergo comprehensive data security training on a regular basis.

While goal55 takes every reasonable measure to protect your data, no security system in the world can be guaranteed 100% secure. We encourage you to also take personal precautions, such as using a strong, unique password and never sharing your login credentials with anyone.

Section 06
Cookies & Tracking Technologies

Goal55 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

  • Essential Cookies: These cookies are required for the platform's basic functions such as login, session security, and navigation. Without them, the platform cannot operate properly. These cookies cannot be disabled.
  • Performance Cookies: Helping us understand how visitors interact with the platform, which pages are most frequently visited, and where technical issues occur. This data is used in aggregated and anonymised form.
  • Functionality Cookies: Allowing the platform to remember your preferences such as language, display settings, and login information to provide a more personalised experience.
  • Analytics Cookies: Used to analyze platform usage patterns for continuous improvement. goal55 uses analytics tools that comply with international privacy standards.

You can manage and delete cookies through your internet browser settings. However, disabling certain cookies may affect platform functionality. For more information on managing cookies, please refer to your browser's help guide.

Section 07
Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act (PDPA) 2010 and international best practices, you have the following rights regarding your personal data held by goal55:

Section 08
Data Retention Period

Goal55 retains your personal data only for as long as necessary to fulfill the purpose for which it was collected, or as required by applicable Malaysian law.

  • Active Account Data: Retained for the duration your account is active and for a reasonable period after account closure for dispute resolution purposes.
  • Financial Transaction Records: Retained for a minimum of 7 years in line with Malaysia's financial and tax legal requirements and AMLA obligations.
  • KYC Documents: Retained for a minimum of 6 years from the date of verification or account closure, whichever is later, in accordance with compliance requirements.
  • Security Logs: Technical and security log data is retained for 12 to 24 months depending on the log category.
  • Support Communication Data: Live chat session records and support tickets are retained for 2 years for quality control and dispute resolution purposes.

Once the retention period expires, your personal data will be securely deleted or anonymized so that it can no longer be re-identified. Data deletion is carried out in accordance with approved industry-standard procedures.

Section 09
Changes to the Privacy Policy

Goal55 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, new legal requirements, or improvements in how we handle personal data.

When material changes are made to this Privacy Policy, goal55 will notify you via:

  • In-account notification on your goal55 account upon your next login
  • Email to the address registered to your account
  • Update the "Last Updated" date at the top of this page

Continued use of the goal55 platform after such changes take effect will be considered your acceptance of the updated Privacy Policy. We encourage you to review this page periodically to stay informed.

If you disagree with any changes made, you have the right to close your account and request deletion of your related data. Contact our support team for further guidance.

Section 10
Contact Us Regarding Privacy

If you have any questions, concerns, or wish to submit a request regarding your personal data, the goal55 Privacy team is ready to assist you:

  • Live Chat 24/7: The fastest way to get an immediate response — available directly on the goal55 platform.
  • Official Email: Send your written inquiry to [email protected]. We aim to respond within 2–3 business days.

For official data rights requests (access, correction, deletion), please include your account details and the type of request clearly. We may require additional identity verification before processing your request to ensure the security of your data.

Goal55 is committed to resolving every privacy-related inquiry and complaint fairly, transparently, and within a reasonable timeframe.


Data Subject Rights Under Malaysia's PDPA

As a goal55 member, you have the following rights protected under Malaysian law, and we are fully committed to upholding them.

👁️
Right of Access

You have the right to request a copy of the personal data we hold about you at any time. Requests will be processed within 21 business days.

✏️
Right to Rectification

If your personal data is inaccurate or outdated, you have the right to request that we correct or update it promptly.

🗑️
Right to Erasure

In certain legally permitted situations, you may request that your personal data be deleted from our systems.

🚫
Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes. Your objection will take effect immediately.

📦
Right to Data Portability

You can request a copy of your personal data in a machine-readable format for transfer to another service provider.

⏸️
Right to Restrict Processing

In certain circumstances, you may request that we restrict how we process your personal data while an issue is being resolved.

To exercise any of the above rights, contact the goal55 support team via live chat or email at [email protected]. We may require identity verification before processing your request.


Privacy Policy FAQ

Answers to the most frequently asked questions by goal55 members on data protection and privacy.

Absolutely not. goal55 has never and will never sell, rent, or disclose your personal data to any third party for their own marketing or commercial purposes. Your data is only shared with parties required to operate our services — such as payment processors and KYC providers — and solely for those purposes, bound by strict confidentiality agreements.

All your financial information is protected by 256-bit SSL encryption during transmission and secured with AES-256 encryption at rest. goal55 does not store credit or debit card numbers directly — transactions are processed through PCI-DSS certified payment gateways. Additionally, two-factor authentication (2FA) is available to protect your account from unauthorized access.

Yes, you have the right to request deletion of your personal data in certain situations permitted under Malaysia's PDPA. However, there is data we are legally required to retain — such as financial transaction records for 7 years and KYC documents for 6 years. To submit a data deletion request, contact the goal55 support team via live chat or email at [email protected], stating the type of data you wish to have deleted.

The Know Your Customer (KYC) process is a legal requirement under Malaysia's Anti-Money Laundering and Anti-Terrorism Financing Act (AMLA). Identity verification helps us ensure the safety of all members, prevent fraud and money laundering, and ensure only eligible individuals access the goal55 platform. Your documents are encrypted, stored securely, and accessed only by authorized personnel for verification purposes.

You can stop receiving promotional emails in two ways: first, click the "Unsubscribe" link at the bottom of any promotional email we send; or second, log in to your goal55 account, go to notification settings, and disable marketing communication preferences. Changes will take effect within 5–7 business days. Note: you will still receive important account-related emails such as transaction confirmations and security notifications.

Trusted Platform

Play with Confidence at goal55

Your data is protected. Your gaming is secure. Join millions of members who trust goal55 as their preferred online gaming platform in Malaysia — backed by world-class privacy and security standards.

Bahasa Melayu