This Privacy Policy explains how KM555 ("we", "platform") processes your personal data as a member or visitor of our platform. This policy applies to all services we provide at km555.asia. By registering for or using the KM555 platform, you agree to the data protection practices described here. For enquiries, contact us at support@km555.asia.
1Personal Data We Collect
KM555 only collects personal data that is strictly necessary to deliver our services safely and effectively. We do not collect excessive or irrelevant data beyond what is needed to operate the platform. Below are the categories of data we collect and the reasons they are required.
- Account registration data: full name, Malaysian phone number, email address, date of birth and password (in encrypted format). This data is required to create and verify your account identity and to ensure only individuals aged 21 and above use the platform KM555.
- Identity verification data (KYC): a copy of your MyKad or passport, your MyKad number and proof of current Malaysian address. This is required for identity verification prior to your first withdrawal and to comply with anti-money laundering legal requirements.
- Financial transaction data: records of deposits and withdrawals including amounts, timestamps, payment methods used (FPX, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow) and transaction status. This data is required to process payments, resolve disputes and maintain financial records as required by law.
- Game activity data: betting history, games played, session duration, wins and losses. This data is used to operate games correctly, verify jackpot wins and monitor playing patterns for responsible gaming purposes.
- Device technical data: IP address, device type, operating system, web browser, and limited location data. This information is required for account security, detection of suspicious access, and optimising platform performance on your device.
- Support communication data: live chat transcripts, support emails, and WhatsApp or Telegram communications with our team KM555. This data is retained for reference, training and continuous improvement of our support service quality.
| Data Category |
Example |
Retention Period |
| Registration |
Name, phone number, email address, date of birth |
Throughout the active account period + 7 years |
| KYC |
MyKad, passport, proof of address |
Throughout the active account period + 7 years |
| Transactions |
Deposit, withdrawal and payment method records |
7 years (legal requirement) |
| Games |
Betting history, wins, losses |
3 years after account closure |
| Technical |
IP address, device type, access logs |
90 days |
| Support |
Chat records, emails, support tickets |
2 years |
2How Your Personal Data Is Used
KM555 uses the personal data we collect solely for purposes directly related to delivering our services to you. We do not use your data in ways you would not reasonably expect, or in any manner that could harm your interests.
- Account management and identity verification: to create and manage your account KM555 you, verify your identity at login, process withdrawal requests and protect your account from unauthorised access.
- Financial transaction processing: to process deposits via FPX, Touch 'n Go eWallet, DuitNow, GrabPay, Boost or ShopeePay; credit winnings to your account balance; and process withdrawal requests to your Malaysian bank account or eWallet.
- Gaming service provision: to properly and fairly operate all slots, Live Casino games, Sports Betting (Liga Super Malaysia, EPL, and other leagues), lottery, and progressive jackpots, and to accurately record all game outcomes.
- Security and fraud prevention: to detect and prevent fraudulent activity, money laundering, multiple account usage, and any conduct that violates our Terms & Conditions KM555 or applicable Malaysian law.
- Customer support: to enable our 24/7 support team KM555 resolving your enquiries, complaints and technical issues quickly and effectively, using records of previous interactions as reference.
- Responsible gaming: to monitor your playing patterns in order to identify early signs of problem gambling and to reach out to you sensitively if our systems detect concerning behaviour, in line with the commitment KM555 towards responsible gaming.
- Legal compliance: to fulfil legal obligations under Malaysia's Personal Data Protection Act 2010, the Anti-Money Laundering Act 2001, and any reporting requirements imposed by the relevant authorities.
Note: KM555 does not use your data to build automated profiles that negatively affect you, or to make significant automated decisions regarding your eligibility for services without human involvement where required.
3Third-Party Data Disclosure & Sharing
Core principles KM555 is that your personal data is never sold, rented, or shared with third parties for marketing, advertising, or commercial purposes. However, there are limited circumstances where data sharing is necessary and legally justified.
- Payment service providers: to process deposits and withdrawals, the necessary transaction details are shared with payment service providers such as FPX, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay and DuitNow processors. This sharing is limited to the minimum required to complete each transaction, and all providers are bound by strict confidentiality agreements.
- Game providers: to operate slots, Live Casino and jackpot games properly, limited game session data is shared with the relevant game providers (such as Microgaming, NetEnt, Playtech, Pragmatic Play). This data does not include your full personally identifiable information.
- Competent authority: KM555 will disclose the required data to Malaysian police authorities, courts, or regulatory bodies when mandated by law or a valid court order. We will not disclose your data beyond what is legally required.
- Technical service providers: certain limited technical data may be processed by cloud infrastructure or cybersecurity service providers that assist in operating the platform KM555. All such providers are bound by data processing agreements that require them to protect your data to the same or higher standard as KM555 itself.
- Business merger or acquisition: if KM555 involved in any restructuring, merger, or acquisition, members' personal data may be transferred to the new entity — however, your privacy rights will remain protected and you will be notified in advance of any material changes to how your data is handled.
4Data Security & Storage at KM555
KM555 continuously investing in security infrastructure to ensure your personal data is protected against unauthorised access, alteration, disclosure or destruction. Below are the concrete security measures we have in place.
- Encryption in transit: all communications between your device and the KM555 protected by TLS 1.3 protocol with a 256-bit SSL certificate. This ensures that no third party can intercept or read your data as it travels across the internet.
- Encryption of stored data: sensitive data including KYC details, bank account information and transaction records are stored in encrypted format on our servers. Even in the unlikely event of a server breach, the stored data cannot be read without the appropriate encryption key.
- Role-based access control: only authorised staff KM555 with a legitimate business need may access members' personal data. All access is logged and monitored. Access to sensitive data requires additional verification and is audited on a regular basis.
- Real-time threat monitoring: security monitoring system KM555 operates 24/7 to detect intrusion attempts, suspicious activity and any anomalies in data access patterns. All threats are addressed immediately by our security team.
- Secure data backups: data is regularly backed up to a secure, isolated location to ensure recovery is possible in the event of a major technical disruption. All backups are also encrypted and protected by the same strict access controls.
- Regular penetration testing: KM555 conducts regular penetration testing by independent security experts to identify and address any vulnerabilities before they can be exploited by malicious parties.
Data Breach Notification: In the event of a data breach that materially affects your personal data, KM555 committed to notifying you within 72 hours of becoming aware of an incident, in line with industry best practices and Malaysia's PDPA requirements.
5Cookies & Tracking Technology Policy
KM555 uses cookies and similar tracking technologies to enhance your experience on our platform. This section explains the types of cookies we use, why we use them, and how you can manage them.
- Essential Cookies: these cookies are essential for the platform KM555 function correctly. This includes session cookies that keep you logged in as you navigate the platform, and security cookies that help identify suspicious access. Disabling these cookies will affect core platform functionality.
- Performance Cookies: used to gather information on how visitors interact with the platform KM555 — which pages are visited most frequently, how long sessions last and any errors that may occur. This data is used in aggregated, anonymised form to improve platform performance and usability.
- Functional Cookies: enables the platform KM555 remembering your preferences such as display language, interface theme and account settings. These cookies enhance your personalised experience on the platform without collecting data that could be used to identify you.
- Game session tracking: to properly operate live casino games, slots and football betting, KM555 uses locally stored session tokens to maintain game continuity in the event of a brief connection interruption.
Cookie Controls: You can manage or delete cookies through your browser settings at any time. However, disabling certain cookies may affect the functionality of the platform KM555. For detailed instructions, refer to the help section of your web browser (Chrome, Firefox, Safari or Edge).
6Your Rights Under Malaysia's PDPA 2010
Personal Data Protection Act 2010 Malaysia grants you several important rights regarding the personal data held by KM555. We are committed to respecting and facilitating the exercise of these rights.
- Right to access data: you have the right to request a copy of the personal data we hold about you. Submit your request by emailing support@km555.asia. KM555 will process access requests within 21 days of receiving a complete request.
- Right to rectify data: if you find that your personal data held by KM555 is inaccurate, incomplete or out of date, you have the right to request a correction. Some corrections can be made directly through your "Account Profile" section, while others may require additional verification.
- Right to withdraw consent: for data processing activities based on your consent (such as optional marketing communications, where applicable), you may withdraw that consent at any time without affecting the validity of any processing carried out prior to withdrawal.
- Right to object to certain processing: under certain circumstances, you have the right to object to KM555 processes your personal data for specific purposes. However, this right does not apply to processing that is necessary to fulfil the service agreement between you and KM555, or to fulfil our legal obligations.
- Rights related to account closure: upon account closure KM555, your data will be retained for the period required by law (particularly financial records for 7 years) and then deleted or anonymised in accordance with our data retention policy.
To exercise any of the above rights or for enquiries regarding this Privacy Policy, please contact our data privacy officer at support@km555.asia. Include your account details and a description of your request. We will acknowledge your request within 3 business days.
7Contact Us About Data Privacy
If you have any questions, concerns, or complaints regarding how KM555 handling your personal data, we strongly encourage you to contact us directly. We are always open to feedback and committed to resolving any privacy concerns promptly and transparently.
- Privacy email: send your privacy enquiries or complaints to support@km555.asia with the email subject line "Data Privacy Enquiry" or "PDPA Request". We will acknowledge receipt within 3 business days and provide a full response within 21 days.
- 24/7 Live Chat: for general privacy enquiries or if you need immediate assistance, our support team KM555 is reachable via live chat available 24 hours a day, 7 days a week on the platform. Our team operates in Bahasa Malaysia, English and Mandarin.
- WhatsApp & Telegram: you may also reach our support team KM555 via WhatsApp or Telegram for non-urgent privacy enquiries. Support channel numbers and links are available once you log in to your account.
- Complaints to the authorities: if you are not satisfied with the response KM555 regarding your privacy complaint, you have the right to lodge a complaint with Malaysia Personal Data Protection Department responsible for enforcing the PDPA 2010. Further information is available on that Department's official website.
This Privacy Policy was last updated on 1 January 2026. KM555 reserves the right to update this Privacy Policy from time to time to reflect changes in law, technology or our business practices. Any material changes will be communicated via email or in-platform notification at least 14 days before taking effect. Continued use of the platform after such notice constitutes acceptance of the updated policy.