Privacy Policy

Dana55 ("the Company", "we", "us", "our") operates the online casino and sports betting platform accessible at dana55.lat. As part of providing our services to players across Malaysia, we collect and process certain categories of personal data. This Privacy Policy describes what data we collect, why we collect it, how it is used, who it may be shared with, how long it is retained, and what rights you hold in relation to your data.

This Policy applies to all individuals who access or use dana55.lat, including registered account holders, visitors who browse the platform without registering, and individuals who contact our support team. It covers data collected through the website, through our customer support channels, and through payment processing interactions.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, both of which are incorporated by reference.

For the purposes of this Privacy Policy, the following definitions apply:

Dana55 collects personal data across several categories, depending on the nature of your interaction with the platform. The categories below outline what we collect and the context in which it arises.

• Full legal name
• Date of birth (used for age verification — 21+ requirement)
• Malaysian IC number (MyKad) or passport number
• Gender (where provided during registration)
• Username and password (stored in encrypted form)
• Profile photograph (where submitted for KYC purposes)

• Email address
• Mobile phone number
• Residential address (including city — e.g., Kuala Lumpur, Petaling Jaya, Johor Bahru)

• Payment method identifiers (e.g., Touch 'n Go eWallet ID, Boost account reference, bank account number fragments used for verification)
• Transaction history — deposit and withdrawal records including amounts in MYR and cryptocurrency equivalents
• Cryptocurrency wallet addresses where crypto payments are used
• Source of funds documentation (where requested as part of AML checks)

• IP address and approximate geolocation
• Device type, operating system, and browser version
• Session data — login timestamps, session duration, pages visited
• Game activity logs — wagers placed, games accessed, outcomes
• Communication records with our support team

Dana55 collects personal data through the following channels:

1. Account Registration: When you create a Dana55 account, you provide core identity and contact data directly through the registration form.
2. KYC Verification: When you complete identity verification (required before your first withdrawal), you upload identity documents which are processed by our KYC compliance team.
3. Deposits and Withdrawals: Financial data is captured when you initiate payment transactions via supported Malaysian payment methods (Touch 'n Go, DuitNow, FPX, Maybank, CIMB, etc.) or cryptocurrency channels.
4. Platform Usage: Technical and behavioural data is collected automatically as you navigate the platform — through server logs, cookies, and analytics tools.
5. Customer Support Interactions: When you contact our support team via Live Chat, WhatsApp, or email, we record the contents of those communications for quality assurance and dispute resolution purposes.
6. Promotional Participation: Where you opt into a bonus or promotional campaign, relevant data related to your participation is recorded.
7. Third-Party Verification Partners: Identity and payment verification services may provide additional data points to confirm your identity or validate payment method ownership.

Dana55 processes your personal data for the following defined purposes. We do not process data for purposes beyond those listed below without first obtaining your explicit consent or establishing a new legal basis.

Dana55 processes personal data only where a valid legal basis exists. The primary bases on which we rely are as follows:

• Contractual Necessity: Processing required to fulfil the contract between Dana55 and the Player — including account management, payment execution, and service delivery.
• Legal Obligation: Processing required to comply with applicable laws, including anti-money laundering (AML) regulations, age verification requirements, and obligations to cooperate with competent authorities.
• Legitimate Interests: Processing that serves Dana55's legitimate business interests — such as fraud prevention, platform security, and internal analytics — provided those interests are not overridden by the Player's rights and interests.
• Consent: Where we rely on your consent as the legal basis (for example, for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To withdraw consent, contact our support team.

Dana55 does not sell or rent personal data to third parties. We may disclose personal data to the following categories of recipients where necessary and in accordance with this Policy:

Third-party vendors engaged by Dana55 to support platform operations — including payment processors (FPX, DuitNow, Touch 'n Go, Boost, GrabPay, Maybank, CIMB, cryptocurrency networks), identity verification providers, cloud infrastructure hosts, and customer support software providers. These parties process data under contractual data processing agreements and are not permitted to use your data for their own purposes.

Dana55 may be required to disclose personal data to competent regulatory bodies, law enforcement agencies, or courts of law where required by applicable law, court order, or regulatory directive. We will notify affected Players of such disclosures where we are legally permitted to do so.

Where Dana55 suspects or detects activity indicative of money laundering, fraud, or other financial crime, we may share relevant data with financial intelligence units, law enforcement agencies, or industry fraud prevention databases without prior notice to the Player.

Dana55 uses cookies and similar tracking technologies on dana55.lat to ensure the platform functions correctly, to remember your preferences, and to understand how users navigate the site. The following categories of cookies are used:

You may adjust your cookie preferences through your browser settings. Disabling essential cookies will impair platform functionality and may prevent you from accessing your account. Dana55 does not use advertising or tracking cookies for third-party ad networks.

Dana55 retains personal data only for the period necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following general retention periods apply:

• Account data and KYC records: Retained for a minimum of 5 years following account closure, in accordance with applicable anti-money laundering recordkeeping obligations.
• Transaction and payment records: Retained for 7 years from the date of the transaction for financial compliance purposes.
• Gaming activity logs: Retained for 3 years from the date of the activity, used for dispute resolution and responsible gambling monitoring.
• Customer support communication records: Retained for 2 years from the date of the interaction.
• Technical / server log data: Retained for up to 12 months in identifiable form; thereafter anonymised for analytical purposes.
• Marketing consent records: Retained for the duration of consent and for 1 year after withdrawal of consent.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data destruction procedures. Players who close their accounts voluntarily may request immediate deletion of non-legally-required data by contacting our support team.

Dana55 implements a layered approach to data security, combining technical controls, administrative procedures, and physical safeguards to protect personal data against unauthorised access, disclosure, alteration, or destruction.

• 256-bit SSL/TLS encryption for all data transmitted between the user's device and dana55.lat
• Encryption at rest for all sensitive data stored in our databases, including identity documents and financial records
• Two-factor authentication (2FA) available for all Player accounts and mandatory for internal administrative access
• Regular automated vulnerability scanning and periodic penetration testing of platform infrastructure
• Intrusion detection systems and real-time monitoring for unusual access patterns

• Access to personal data restricted to authorised personnel on a strict need-to-know basis
• All staff with access to personal data are subject to confidentiality obligations and data protection training
• Formal incident response procedures in place for data breach detection, containment, and notification

While Dana55 takes all reasonable measures to protect your data, no online platform can guarantee absolute security. In the event of a data breach that poses a risk to your rights and interests, Dana55 will notify affected individuals and relevant authorities in accordance with applicable legal requirements.

As a Data Subject, you hold a number of rights in relation to your personal data held by Dana55. We are committed to facilitating the exercise of these rights in a timely and transparent manner.

Dana55 is an adults-only platform. Our services are strictly restricted to individuals aged 21 years or older. We do not knowingly collect, solicit, or process personal data from individuals under the age of 21.

If Dana55 becomes aware that personal data has been collected from an individual under 21 — whether through a fraudulent registration or otherwise — we will immediately suspend the associated account, delete all personal data related to that individual to the extent permitted by law, and take all reasonable steps to prevent further access.

The Dana55 platform may contain references to or integrations with third-party services — including payment networks (such as DuitNow, FPX, and cryptocurrency blockchain networks) and identity verification providers. These third parties operate under their own privacy policies and data protection practices, for which Dana55 bears no responsibility.

When you initiate a payment via Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, or any other supported payment method, the relevant transaction data is handled by the respective payment provider's infrastructure. Dana55 receives only the confirmation and reference data necessary to credit your account. We do not have access to your full banking credentials or card numbers.

We encourage you to review the privacy policies of any third-party service you interact with in connection with your Dana55 account.

Dana55 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. The "Last Updated" date at the top of this page will be revised to reflect any changes.

Where changes are material — meaning they substantively alter how we process your personal data or affect your rights as a Data Subject — we will notify registered Players by email at least fourteen (14) days before the changes take effect. Non-material clarifications or corrections may take effect immediately upon publication.

Your continued use of the Dana55 platform following the effective date of any updated Privacy Policy constitutes your acknowledgment of and agreement to the revised terms. If you do not accept the changes, you should discontinue use of the platform and contact our support team to close your account.

For any questions, concerns, or requests related to this Privacy Policy — including requests to exercise your data subject rights — please contact the Dana55 data protection team using the following details:

• Email: [email protected] — include "Privacy Request" in the subject line for faster routing.
• Live Chat: Available 24/7 on dana55.lat. Average first response: 3–5 minutes.
• Languages: English, 中文 (Chinese), Bahasa Melayu.
• Response Time: We aim to respond to all privacy-related requests within 14 business days of receipt. Complex requests may take longer; we will notify you if an extension is required.