grab555 Privacy Policy

grab555 collects personal data from you in the following categories and circumstances:

2.1 Registration Data. When you create a grab555 account, we collect your full name, date of birth, nationality, residential address, email address, and mobile phone number. This information is required to establish and maintain your account and to verify your identity in accordance with our Know Your Customer (KYC) obligations.

2.2 Identity Verification Documents. To comply with our obligations under international gaming authority licensing guidelines and Anti-Money Laundering (AML) regulations, we may request copies of government-issued identification documents (e.g., MyKAD, passport), proof of address (e.g., utility bill, bank statement), and proof of payment method ownership. This is particularly relevant for Malaysian members processing withdrawals above defined thresholds.

2.3 Financial Data. We collect information about payment methods used for deposits and withdrawals, including bank account identifiers, e-wallet account references (e.g., Touch 'n Go eWallet, Boost, DuitNow), and transaction records. We do not store full card numbers or sensitive payment credentials on our own servers — these are processed by our certified payment service providers.

2.4 Platform Usage Data. We collect records of your activity on the grab555 Platform, including login timestamps, pages visited, games played, bets placed, betting history, session durations, and device and browser information. This data is used to operate the Platform, detect fraud, and improve the user experience for Malaysian members.

2.5 Communications Data. When you contact our support team via live chat or email, we retain a record of that communication, including your account details and the content of the conversation, for quality assurance and dispute resolution purposes.

2.6 Technical Data. We automatically collect certain technical data when you access the Platform, including your IP address, browser type and version, operating system, device identifiers, referral URLs, and cookie data. This data is used for platform security, fraud prevention, and analytics purposes.

grab555 uses your personal data for the following purposes:

• Account Management: To create, maintain, and manage your grab555 account, including processing deposits and withdrawals in Malaysian Ringgit (RM) and enforcing account limits.
• Identity Verification & Compliance: To verify your identity, age (21+ requirement), and eligibility to use the Platform; to comply with KYC, AML, and licensing obligations under international gaming authority requirements.
• Platform Operation: To provide and improve our sportsbook, live casino, slots, poker, and arcade game services; to settle bets and resolve disputes; to personalise your grab555 experience.
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent transactions, collusion, money laundering, and other prohibited conduct; to protect the integrity of the Platform and its members.
• Customer Support: To respond to your enquiries, resolve complaints, and provide technical assistance via our 24/7 live chat and email support channels.
• Responsible Gaming: To enforce responsible gaming tools including deposit limits, loss limits, session limits, and self-exclusion; to monitor for signs of problem gambling behaviour and intervene appropriately.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates, subject to your communication preferences. You may opt out at any time.
• Legal Obligations: To comply with applicable legal requirements, regulatory directives, and court orders, including reporting obligations to licensing authorities.

grab555 processes your personal data on one or more of the following legal bases:

• Contractual Necessity: Processing necessary to perform our contract with you, including providing the grab555 Platform services and processing payments.
• Legal Obligation: Processing necessary to comply with our legal and regulatory obligations, including KYC, AML, and gaming licensing requirements.
• Legitimate Interests: Processing necessary for our legitimate business interests, including fraud prevention, platform security, and improving our services, where these interests are not overridden by your rights.
• Consent: Where we rely on your consent (e.g., for direct marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing based on consent prior to its withdrawal.

grab555 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Service Providers: Certified payment processors handling Touch 'n Go eWallet, Boost, DuitNow, FPX, Maybank, CIMB, Public Bank, and other accepted Malaysian payment methods.
• Game Content Providers: Licensed third-party casino game studios and sportsbook data providers who supply games and market data to the grab555 Platform.
• Identity Verification Services: Authorised KYC and AML screening service providers used to verify member identity and conduct sanctions checks.
• Regulatory Authorities: Licensing authorities, law enforcement agencies, and regulatory bodies where we are legally required to disclose information.
• Technology Service Providers: Cloud infrastructure, cybersecurity, analytics, and customer support platform providers who process data on our behalf under binding data processing agreements.

All third parties who process personal data on behalf of grab555 are required to maintain appropriate technical and organisational security measures and are prohibited from using your data for any purpose other than performing the services for which they have been engaged.

In the course of operating the grab555 Platform and fulfilling the purposes described in this Policy, your personal data may be transferred to and processed in countries outside Malaysia. Where such transfers occur, grab555 ensures that appropriate safeguards are in place to protect your data in accordance with applicable data protection standards, including contractual protections such as standard data protection clauses. If you have questions about specific international transfer safeguards applicable to your data, please contact us using the details in Section 14.

grab555 retains your personal data for as long as your account is active and for a period thereafter as required to fulfil the purposes for which the data was collected, to comply with legal and regulatory obligations (including AML record-keeping requirements which typically mandate retention for a minimum of five years), and to resolve any outstanding disputes or claims. When your data is no longer required, we will securely delete or anonymise it in accordance with our data retention schedule.

Account closure does not result in the immediate deletion of all personal data — certain records are retained for the periods required by our licensing and regulatory obligations. You may request details of our retention periods by contacting our support team.

The grab555 Platform uses cookies and similar tracking technologies to operate and improve the Platform. The following types of cookies may be used:

• Strictly Necessary Cookies: Essential for the Platform to function correctly, including maintaining your logged-in session and remembering your preferences during a visit.
• Analytical Cookies: Used to collect aggregate information about how members use the grab555 Platform, helping us identify areas for improvement. Data collected via analytical cookies is anonymised or pseudonymised.
• Functional Cookies: Used to remember your preferences (e.g., preferred language, display settings) to provide a more personalised experience on subsequent visits.

Most web browsers allow you to control cookies through their settings. Disabling strictly necessary cookies may affect the functionality of the grab555 Platform. To manage your cookie preferences, please refer to the help documentation of your browser (Chrome, Safari, Firefox, Samsung Internet, etc.).

grab555 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the grab555 Platform.
• Encryption of sensitive data at rest within our secure data infrastructure.
• Role-based access controls limiting data access to authorised personnel only.
• Regular security audits, penetration testing, and vulnerability assessments conducted by independent security specialists.
• Two-factor authentication available for all grab555 member accounts.
• Continuous monitoring for suspicious activity and automated fraud detection systems.

While grab555 takes all reasonable precautions to protect your personal data, no data transmission over the internet can be guaranteed to be 100% secure. You are also responsible for maintaining the security of your own grab555 login credentials.

Subject to applicable law and our regulatory obligations, you may have the following rights in relation to your personal data held by grab555:

• Right of Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You may request that inaccurate or incomplete personal data be corrected or updated.
• Right to Erasure: You may request the deletion of your personal data in certain circumstances, subject to our legal and regulatory retention obligations.
• Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances, for example while the accuracy of data is being disputed.
• Right to Data Portability: Where processing is based on your consent or contractual necessity, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on our legitimate interests, subject to our demonstrating compelling grounds for that processing.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact the grab555 support team using the details in Section 14. We will respond to your request within a reasonable timeframe and in accordance with applicable legal requirements.

The grab555 Platform is strictly restricted to individuals aged 21 years and above. 21+ We do not knowingly collect personal data from persons under the age of 21. If you have reason to believe that a person under 21 has registered an account with grab555 or otherwise provided us with personal data, please contact us immediately. Upon becoming aware of such a situation, grab555 will take prompt steps to delete the relevant data and close the account.

The grab555 Platform may contain references to third-party payment providers and game studios whose data practices are governed by their own privacy policies. grab555 is not responsible for the privacy practices of third-party service providers operating under their own regulatory frameworks. We encourage you to review the privacy policies of any third-party providers you interact with through the Platform.

grab555 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered members by email or via an in-platform notification. Your continued use of the grab555 Platform following the posting of an updated Privacy Policy constitutes your acceptance of the changes. We recommend that you review this Policy periodically to stay informed about how we protect your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the manner in which grab555 processes your personal data, please contact us through the following channels:

We are committed to resolving any privacy concern promptly and transparently. If you are unsatisfied with our response, you may have the right to lodge a complaint with a relevant data protection supervisory authority in your jurisdiction.