Privacy Policy

This Privacy Policy ("Policy") is published by detik55 ("we", "us", "our") and applies to all personal data collected from individuals ("you", "User", "Player") who access, register with, or otherwise interact with the detik55 platform at https://detik55.cam, including all associated mobile experiences and communications.

detik55 is committed to handling your personal data with integrity, transparency, and in compliance with applicable data protection legislation. We recognise that the players who trust us with their personal information — whether they are based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, or anywhere else in Malaysia — deserve to understand exactly how that information is used and protected.

This Policy describes the categories of personal data we collect, the lawful bases on which we process it, the circumstances in which it may be shared with third parties, how long we retain it, the security measures we apply to protect it, and the rights you hold as a data subject.

This Policy should be read alongside our Terms & Conditions, which together form the complete agreement governing your use of detik55.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, email address, phone number, identification number, IP address, device identifiers, and financial account details.
• "Processing" means any operation or set of operations performed on personal data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Controller" means detik55 in its capacity as the entity that determines the purposes and means of processing your personal data.
• "Data Processor" means a third party that processes personal data on behalf of detik55, under a contractual agreement that governs the scope and nature of that processing.
• "KYC" means Know Your Customer — the regulatory identity verification process applied to player accounts prior to withdrawal processing.
• "Cookies" means small text files stored on your device by a website to maintain session state, remember preferences, and collect analytics data.
• "Consent" means a freely given, specific, informed, and unambiguous indication of a data subject's agreement to the processing of their personal data.

detik55 collects personal data through several channels, including account registration, ongoing platform use, payment processing, KYC verification, customer support interactions, and automated technical systems. The categories of data collected are set out in the table below:

We do not intentionally collect sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, or health data) and request that you do not submit such information to the platform. Where sensitive data is incidentally included in documents submitted for KYC purposes, it is processed only to the extent necessary for identity verification and is not retained beyond the minimum required period.

detik55 processes your personal data only where a valid legal basis exists. The legal bases we rely upon are:

• Contractual Necessity: Processing is necessary to perform our obligations under the Terms & Conditions you have agreed to, including operating your account, processing deposits and withdrawals, and delivering the services you have requested.
• Legal Obligation: Processing is necessary to comply with applicable legal requirements, including anti-money laundering (AML) regulations, KYC obligations, fraud prevention mandates, and responses to lawful requests from competent authorities.
• Legitimate Interests: Processing is carried out to pursue the legitimate interests of detik55, provided these interests are not overridden by your privacy rights. This includes platform security monitoring, fraud detection, responsible gambling analysis, and service improvement activities.
• Consent: Where we process personal data for purposes not covered by the above bases — such as sending you promotional communications beyond transactional notifications — we will seek your explicit prior consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Personal data collected by detik55 is used for the following specific purposes:

• Account Management: Creating, maintaining, and operating your detik55 account, including authentication, account recovery, and profile management.
• Transaction Processing: Facilitating deposits and withdrawals across all supported Malaysian payment channels, including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, and USDT TRC20.
• KYC and AML Compliance: Verifying your identity, age, and eligibility to use the platform, and monitoring transactions for indicators of money laundering or fraud as required by applicable law.
• Customer Support: Responding to your queries, resolving disputes, and managing support tickets through our 24/7 support channels.
• Responsible Gambling: Monitoring account activity to identify indicators of problem gambling, applying self-exclusion and deposit limit controls where requested, and fulfilling our responsible gambling obligations.
• Platform Security: Detecting and preventing fraud, cheating, unauthorised access, and other integrity violations on the platform.
• Service Improvement: Analysing aggregated usage data to improve platform functionality, user experience, and game selection.
• Communications: Sending transactional notifications related to your account, deposits, withdrawals, and security alerts. Marketing communications are sent only with your consent and can be unsubscribed from at any time.
• Legal Compliance: Fulfilling obligations under applicable law, including responding to court orders, regulatory inquiries, and law enforcement requests.

detik55 does not sell, rent, or trade your personal data. We share personal data with third parties only in the following defined circumstances:

• Payment Service Providers: We share financial and identity data with payment processors and e-wallet providers as necessary to execute your transactions. These providers act as data processors under binding data processing agreements.
• KYC and Identity Verification Services: We engage specialist third-party verification services to perform identity, age, and sanctions checks. These providers process identity documents and biometric data strictly in accordance with our instructions.
• Game Content Providers: Game providers integrated into the detik55 platform receive session data necessary to deliver gameplay. These providers do not receive your full identity or financial data.
• IT Infrastructure Providers: Cloud hosting, content delivery, and cybersecurity providers process technical data in the course of maintaining platform infrastructure. All providers are bound by data processing agreements.
• Fraud Prevention Services: We share technical and transactional data with fraud detection services to protect the integrity of the platform and comply with our AML obligations.
• Legal and Regulatory Authorities: We disclose personal data to competent authorities where required by law, court order, or regulatory mandate. We will notify you of such disclosure where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of detik55's business, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and the privacy terms applicable to your data under the new entity.

All third parties with whom we share personal data are required to maintain appropriate technical and organisational security measures and to process personal data only for the purposes for which it was shared.

Some of the third-party service providers engaged by detik55 may be located in jurisdictions outside Malaysia. Where personal data is transferred internationally, detik55 implements appropriate safeguards to ensure that the transferred data receives a level of protection equivalent to that afforded within Malaysia.

These safeguards may include:

• Standard contractual clauses approved by competent data protection authorities.
• Binding corporate rules applicable to transfers within a corporate group.
• Adequacy decisions recognising equivalent data protection standards in the recipient jurisdiction.

You may request further information about the specific safeguards applied to any particular international transfer by contacting our support team at the details set out in Section 14 of this Policy.

detik55 retains personal data for the minimum period necessary to fulfil the purposes set out in this Policy, subject to our legal and regulatory obligations. The following retention periods apply as general guidance:

• Active Account Data: Retained for the duration of your active account relationship with detik55, plus a minimum of five years following account closure, in compliance with AML and financial record-keeping requirements.
• KYC and Identity Documents: Retained for a minimum of five years following account closure or the completion of the transaction to which the verification relates, whichever is later.
• Transaction Records: Retained for a minimum of seven years following the date of the transaction, in line with standard financial record-keeping obligations.
• Customer Support Communications: Retained for three years following the resolution of the support case, or longer if the communication is relevant to an ongoing legal matter.
• Marketing Consent Records: Retained for the duration of the consent and for three years following its withdrawal, to demonstrate compliance.
• Technical and Usage Data: Aggregated and anonymised after 24 months; individual-level technical data is retained for up to 12 months for security and fraud prevention purposes.

Upon the expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with our data destruction standards.

detik55 implements a layered security framework to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our technical and organisational security measures include:

• Encryption in Transit: All data transmitted between your browser or mobile device and the detik55 platform is encrypted using 256-bit TLS/SSL protocols. HTTPS is enforced across all platform endpoints.
• Encryption at Rest: Personal data stored on our servers — including identity documents, financial records, and account credentials — is encrypted at rest using AES-256 encryption standards.
• Access Controls: Access to personal data is restricted on a need-to-know basis. Staff access rights are reviewed quarterly, and privileged access requires multi-factor authentication.
• Intrusion Detection and Monitoring: Our platform is continuously monitored for suspicious activity, intrusion attempts, and anomalous data access patterns using automated detection systems.
• Penetration Testing: We conduct periodic third-party penetration testing to identify and remediate security vulnerabilities before they can be exploited.
• Data Breach Response: detik55 maintains an incident response plan for personal data breaches. Where a breach is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay in accordance with applicable data protection law.

Notwithstanding these measures, no internet transmission or electronic storage system is entirely secure. You are encouraged to use a strong, unique password for your detik55 account and to enable any additional security features available on the platform.

detik55 uses cookies and similar technologies to operate the platform effectively and to improve your experience. The categories of cookies we use are as follows:

You can manage cookie preferences through your browser settings. Please note that disabling strictly necessary or security cookies may impair the functionality of the platform or prevent you from accessing certain features. detik55 does not use third-party advertising or retargeting cookies.

As a data subject, you hold a range of rights with respect to your personal data held by detik55. These rights are set out below. To exercise any of these rights, please contact us via the channels described in Section 14.

We will respond to all data rights requests within 14 business days. Where a request is complex or numerous, we may extend this period by a further 30 days, in which case we will inform you of the extension and the reason for it. We do not charge for handling data rights requests except in cases of manifestly unfounded, excessive, or repetitive requests, where we reserve the right to charge a reasonable fee.

The detik55 platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. As part of our account registration and KYC verification process, all new players are required to confirm their age and provide documentary evidence of their date of birth.

If we become aware that personal data has been collected from an individual under the age of 21, we will take immediate steps to delete that data, close the associated account, and return any deposited funds to the payment source, in accordance with our responsible gambling obligations.

If you believe that a minor has registered on detik55 or that personal data of a minor is being held by us, please contact our support team immediately at the details provided in Section 14 so that we can investigate and take appropriate action without delay.

detik55 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing activities, applicable law, or regulatory guidance. The "Last Updated" date at the top of this page will be revised accordingly with each new version.

Where amendments are material — meaning they involve a significant change to how we process your personal data or to your rights as a data subject — we will notify you directly via the email address registered to your account at least 14 days before the changes take effect. For non-material updates, notification will be provided via a notice on the detik55 platform.

Your continued use of the detik55 platform following the effective date of any amended Policy constitutes your acknowledgement of and agreement to the revised terms. If you do not agree with any changes, you must cease using the platform and contact us to close your account.

For any questions, concerns, or requests relating to this Privacy Policy — including the exercise of your data rights — please contact the detik55 data team through the following channels:

We acknowledge all privacy-related emails within 2 business days and will provide a substantive response to data rights requests within 14 business days. We are committed to handling all privacy matters with professionalism and transparency, in line with our obligations as a responsible data controller.