This Privacy Policy explains how main55 collects, uses, stores, and protects your personal data when you use our platform. We are committed to handling your information with transparency, integrity, and in full compliance with applicable data protection standards.
main55 ("we", "us", "our", "the Platform") operates the online casino and sports betting website at https://main55.asia. We understand that your personal privacy is important, and we take our responsibility as a data controller seriously. This Privacy Policy sets out, in plain and formal language, exactly what personal data we collect from users ("you", "the Player", "the User"), how we use it, with whom we may share it, how long we keep it, and what rights you hold in relation to your personal data.
This Policy applies to all personal data collected through the Platform, including data provided during account registration, KYC verification, deposit and withdrawal transactions, customer support interactions, and general Platform usage. It applies to all Players based in Malaysia — including those accessing from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam — as well as any other jurisdiction where our services are lawfully accessible.
Your Consent: By registering an account or continuing to use the main55 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must discontinue use of the Platform immediately.
For the purposes of this Privacy Policy, the following terms carry the meanings set out below:
main55 collects the following categories of personal data from Players:
main55 collects your personal data through the following means:
We use your personal data strictly for the following purposes:
| Purpose | Data Categories Used | Basis |
|---|---|---|
| Account creation & management | Identity, contact, KYC data | Contractual necessity |
| Age & identity verification (KYC) | KYC documents, identity data | Legal obligation |
| Processing deposits & withdrawals | Financial, transaction data | Contractual necessity |
| Providing betting & gaming services | Gaming activity, session data | Contractual necessity |
| Fraud prevention & security | Technical, transaction, identity data | Legitimate interest / Legal obligation |
| Regulatory compliance & AML | Identity, financial, transaction data | Legal obligation |
| Customer support | Communications, account, transaction data | Contractual necessity |
| Responsible gambling monitoring | Gaming activity, session, limit settings | Legal obligation / Legitimate interest |
| Platform analytics & improvement | Technical, device, behavioural data | Legitimate interest |
| Marketing communications (opted-in only) | Contact data, preferences | Consent |
main55 does not use your personal data for purposes other than those listed above. We do not sell your personal data to third parties for their own marketing use under any circumstances.
main55 processes your personal data on the following legal bases, which correspond to the purposes identified in Section 5:
main55 does not sell, rent, or trade your personal data. We may share your data only in the following limited and controlled circumstances:
To process your deposits and withdrawals, we share the minimum necessary data with our Malaysian payment partners, including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong Connect. These providers act as data processors and are contractually bound to handle your data in compliance with applicable data protection standards.
Identity documents and verification data are processed by licensed third-party KYC service providers operating under data processing agreements with main55. These providers are permitted to use your data solely for the purpose of verifying your identity on our behalf.
We may disclose personal data to applicable regulatory bodies, law enforcement agencies, or courts where we are legally required or compelled to do so, including in response to verified requests relating to fraud investigations, money laundering inquiries, or court orders.
We may share data with trusted technology and operational service providers who assist in running the Platform — such as hosting providers, analytics platforms, and customer service software vendors. All such providers are bound by contractual data protection obligations and are not permitted to process your data for their own purposes.
In the event of a merger, acquisition, or sale of all or part of main55's business, your personal data may be transferred to the acquiring entity as part of that transaction, subject to equivalent data protection commitments being maintained.
International Transfers: Where your data is transferred to service providers located outside Malaysia, we ensure that adequate data protection safeguards are in place, including contractual clauses or equivalent protections recognised under applicable law.
main55 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & identity data | Duration of account + 5 years post-closure | Regulatory / AML obligations |
| KYC documents | 5 years from verification date | Legal & regulatory requirement |
| Transaction records | 7 years from transaction date | Financial record-keeping obligations |
| Betting & gaming history | 5 years from last activity | Dispute resolution & compliance |
| Support communications | 3 years from last communication | Service improvement & dispute records |
| Technical / device data | 13 months from collection | Analytics & fraud prevention |
| Marketing consent records | Until consent withdrawn + 1 year | Proof of consent |
Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be associated with an identified individual. Where anonymised data is retained for analytical purposes, it is no longer considered personal data under applicable data protection standards.
The main55 Platform uses cookies and similar tracking technologies to operate core functionality, improve the user experience, and analyse Platform usage. The following categories of cookies are used:
You may manage cookie preferences through your browser settings. Note that disabling strictly necessary or functional cookies may impair your ability to log in or use core Platform features. Continued use of the Platform following acceptance of this Policy constitutes agreement to our use of cookies as described above.
main55 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security infrastructure includes:
While we take all reasonable measures to protect your data, no internet-based system can guarantee absolute security. You are responsible for maintaining the confidentiality of your Account credentials and should contact us immediately at [email protected] if you suspect your Account has been compromised.
Subject to applicable law and certain regulatory exceptions (including our obligations to retain data for AML and compliance purposes), you hold the following rights in relation to your personal data held by main55:
You may request a copy of the personal data we hold about you, together with information about how it is used and with whom it has been shared.
You may request correction of any inaccurate or incomplete personal data we hold about you. Certain data corrections may require supporting documentation.
You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations.
You may request that we limit the use of your data in certain circumstances, such as while you dispute the accuracy of data we hold about you.
Where processing is based on your consent or contractual necessity, you may request your data in a structured, machine-readable format for transfer to another provider.
You may object to processing based on legitimate interest, including profiling for marketing purposes. You may also withdraw consent for marketing communications at any time.
To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request". We will acknowledge your request within five (5) business days and respond within thirty (30) calendar days. We may ask you to verify your identity before processing your request.
Regulatory Exception: Please note that certain rights, including the right to erasure and the right to restrict processing, may be limited by our mandatory legal obligations to retain certain data for AML, regulatory, and dispute resolution purposes. We will clearly explain any applicable limitations when responding to your request.
The main55 Platform is strictly intended for individuals who are 21 years of age or older. We do not knowingly collect, use, or store personal data belonging to persons under the age of 21. Age verification is a mandatory step in our account registration and KYC process.
If you believe that a person under the age of 21 has registered an account or provided personal data to main55, please notify us immediately at [email protected]. Upon confirmation, we will promptly close the account, delete the personal data in question, and take any further action required under our responsible gambling obligations and applicable law.
🔞 21+ Only. Gambling is for adults. We enforce a strict minimum age of 21 years and conduct active age verification on all accounts.
The main55 Platform does not contain links to external third-party websites for general browsing purposes. Any references to third-party payment services (such as Touch 'n Go eWallet, Boost, GrabPay, or Maybank2u) are made in the context of our integrated payment processing infrastructure, within which your data is shared only as described in Section 7.
We are not responsible for the privacy practices or data handling policies of any third-party service providers with whom you interact independently outside of the main55 Platform. We encourage you to review the privacy policies of any third-party services you use.
main55 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform services. When material changes are made, we will post the updated Policy on this page with a revised effective date, and notify registered Players via an on-Platform notice or email where required.
We recommend reviewing this page periodically to remain informed of how we handle your personal data. Your continued use of the Platform after the effective date of any updated Policy constitutes your acceptance of the revised terms.
The current version of this Privacy Policy became effective on 1 January 2026. All prior versions are superseded by this document.
For any questions, concerns, or requests relating to this Privacy Policy or the personal data we hold about you, please contact the main55 Data & Privacy team through the following channels:
If you are not satisfied with our response to a privacy query or data rights request, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.
Six commitments that underpin our approach to data protection on every interaction
All data transmitted between your device and our servers is protected with industry-standard 256-bit SSL/TLS encryption. Your personal and financial data is never sent over unencrypted channels.
main55 does not sell, rent, or trade your personal data to third parties for marketing purposes. Your data is used only to operate your account and comply with our legal obligations.
Internal access to personal data is restricted on a strict need-to-know basis. All staff access is logged, monitored, and subject to regular audits. Unauthorised access triggers immediate review.
We publish our data retention periods openly. When data is no longer needed, it is securely deleted or anonymised — not quietly archived indefinitely or repurposed for other uses.
Data access, rectification, erasure, portability, and objection requests are handled by a dedicated team. We commit to acknowledging requests within five business days and responding within thirty.
In the event of a data breach affecting your personal data, we commit to notifying you and applicable regulatory authorities within legally required timeframes. We do not suppress breach notifications.
Privacy, security, and transparency are built into main55 from the ground up. Explore the platform with confidence. For players aged 21 and above only.
🔞 Play responsibly. For players aged 21 and above only. If gambling is affecting your life, please seek help.