Privacy Policy — prada55

This Privacy Policy ("Policy") issued by the operator of prada55 ("prada55", "we", "us", "our"), the online gaming and sports betting platform accessible athttps://prada55.cam ("the Platform"). This Policy governs the collection, use, storage, disclosure, and protection of personal data provided by or relating to users ("you", "your") of the Platform.

prada55 takes data privacy seriously. We recognise that Malaysian players — whether based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, or Shah Alam — trust us with sensitive personal and financial information when they register an account, make deposits via channels such as DuitNow, FPX, Touch 'n Go eWallet, or Maybank, or engage in gaming activity on the Platform. This Policy sets out how that trust is honoured.

This Policy should be read in conjunction with prada55's Terms and Conditions and Responsible Gambling Policy, which together form the complete framework governing your relationship with the Platform.

The following defined terms apply throughout this Privacy Policy:

prada55 collects Personal Data in the following categories. The scope of data collected is proportionate to the purpose for which it is required and is limited to what is necessary to deliver the services and meet applicable regulatory obligations.

3.1 Registration and Identity Data

• Full legal name as shown on official identity documents
• Date of birth (to verify the21+ age requirement)
• Malaysian identity card number (MyKad) or passport number
• Residential address, including city and postcode
• Email address and mobile phone number
• Username and encrypted password credential

3.2 Financial and Payment Data

• Deposit and withdrawal transaction records, including amounts MYR and timestamps
• Nominated payment method details (e.g., Touch 'n Go eWallet account reference, bank account number, DuitNow registered mobile number, FPX bank details)
• KYC documentation including copies of government-issued identity documents and proof of payment method ownership

3.3 Gaming and Betting Activity Data

• Complete record of all Wagers placed, including game type, market, stake amount, odds, and settlement outcome
• Bonus activation and wagering requirement fulfilment records
• Session logs including login timestamp, duration, and activity summary
• Responsible gambling tool usage, including deposit limits set and self-exclusion requests

3.4 Technical and Device Data

• IP address and approximate geolocation at time of login
• Device type, operating system, and browser version
• Session identifiers and cookie data (see Clause 9)
• Performance and error logs used for technical diagnostics

3.5 Communications Data

• Records of all communications between you and prada55 support staff, including live chat transcripts and email correspondence
• Feedback, complaints, and dispute records

Personal Data is collected through the following mechanisms:

• Direct Submission: Data you actively provide during account registration, KYC verification, deposit and withdrawal requests, support interactions, and responsible gambling tool configuration.
• Automated Technical Collection: Data collected automatically when you access the Platform, including IP address, device identifiers, browser session data, and cookie information.
• Third-Party Verification Providers: Data received from KYC and identity verification service providers engaged by prada55 to authenticate documents and screen against sanction lists and PEP (Politically Exposed Persons) databases.
• Payment Infrastructure Partners: Transaction confirmation and fraud screening data received from payment processors, including FPX, DuitNow, and e-wallet gateway partners such as Touch 'n Go eWallet and Boost.
• Fraud and Risk Management Systems: Behavioural and transactional data flaged by automated risk management tools deployed on the Platform.

prada55 processes Personal Data for the following specific, identified purposes. We do not process Personal Data for any purpose not listed below without first obtaining your explicit consent or complying with a legal obligation to do so.

prada55 processes Personal Data on the following legal bases, each of which is applied to the relevant processing activity described in Clause 5:

• Contractual Necessity: Processing required to perform the contract with you as an Account holder — including account management, game access, payment processing, and customer support.
• Legal Obligation: Processing required to comply with applicable law — including KYC verification, AML record-keeping, and regulatory reporting.
• Legitimate Interests: Processing for purposes of fraud prevention, platform security, responsible gambling monitoring, and aggregated analytics, provided these interests do not override your fundamental rights and freedoms.
• Consent: Processing for marketing communications and any non-essential data collection, where you have provided explicit, freely given consent. You have the right to withdraw this consent at any time without affecting the lawfulness of prior processing.

prada55 does not sell, rent, or trade your Personal Data to any third party for commercial or marketing purposes. Personal Data is disclosed to third parties only in the following limited and controlled circumstances:

• Payment Service Providers: Transaction data is shared with payment processors (including FPX operators, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, and connected Malaysian banks such as Maybank, CIMB, Public Bank, RHB, and Hong Leong) to the extent necessary to process deposits and withdrawals.
• KYC and Identity Verification Providers: Identity document data is processed by contracted third-party KYC service providers for the purpose of identity verification and AML screening. These providers operate under strict data processing agreements.
• Fraud Prevention and Risk Management Systems: Relevant transactional and behavioural data may be processed by fraud prevention systems to detect and prevent financial crime.
• IT and Infrastructure Providers: Technical service providers who host, maintain, and support the Platform's infrastructure, operating under binding data processing agreements that prohibit any use of data beyond the specified technical purpose.
• Legal and Regulatory Authorities: Personal Data will be disclosed to competent governmental or regulatory authorities where required to do so by law, court order, or lawful request. prada55 will notify affected users of such disclosures where legally permissible to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of prada55's business, Personal Data may be transferred to the acquiring entity. Affected users will be notified of any such transfer in advance.

All third parties with whom Personal Data is shared are required by contract to implement appropriate technical and organisational measures to protect the data and to process it only for the specified, authorised purpose.

prada55 retains Personal Data only for as long as necessary to fulfil the purpose for which it was collected or to comply with applicable legal, regulatory, or contractual obligations. The following indicative retention periods apply:

• Account and Registration Data: Retained for the duration of the active Account, plus a minimum of five (5) years following Account closure, in compliance with applicable anti-money laundering record-keeping requirements.
• Financial and Transaction Records: Retained for a minimum of seven (7) years from the date of each transaction, in accordance with financial record-keeping obligations.
• KYC Documents: Retained for a minimum of five (5) years from the date of verification or the closure of the associated Account, whichever is later.
• Gaming Activity Logs: Retained for a minimum of three (3) years for operational and dispute resolution purposes.
• Customer Support Communications: Retained for three (3) years from the date of the last communication, or longer where the communication relates to an active dispute or legal matter.
• Marketing Consent Records: Retained for the duration of the consent and for one (1) year following withdrawal of consent, as evidence of prior lawful processing.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised in accordance with industry-standard data destruction procedures. Anonymised, aggregated data that cannot identify any individual may be retained indefinitely for analytical purposes.

prada55 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small data file placed on your device by the Platform when you access it. Cookies do not contain personally identifiable information in isolation, but may be associated with Account data in some contexts.

The following categories of cookies are used on the prada55 Platform:

• Strictly Necessary Cookies: Essential for the Platform to function, including session management, authentication tokens, and security cookies. These cannot be disabled without impairing core functionality.
• Functional Cookies: Remember your preferences such as language settings, regional preferences (e.g., MYR currency display), and layout choices to improve your experience across sessions.
• Analytical Cookies: Used in anonymised form to understand how users interact with the Platform — pages visited, session duration, feature usage. This data informs platform improvements and is never used to identify individual users.
• Security Cookies: Used to detect and prevent fraudulent activity, unauthorised access attempts, and other security threats.

prada55 implements a layered set of technical and organisational security measures comensurate with the sensitivity of the Personal Data processed and the risks inherent in operating a financial gaming platform. Key measures in place include:

• SSL/TLS 256-bit Encryption: All data transmitted between your device and the prada55 Platform is encrypted using industry-standard SSL/TLS protocols, preventing interception in transit.
• Encrypted Data Storage: Sensitive Personal Data, including identity documents and payment information, is stored in encrypted form at rest on secured infrastructure.
• Access Controls: Access to Personal Data is restricted to authorised personnel who require it to perform their specific job function. All internal access is logged and audited.
• Two-Factor Authentication (2FA): Available to all Account holders and required for internal staff access to systems holding Personal Data.
• Continuous Monitoring: Real-time security monitoring systems detect and respond to anomalous access patterns, potential intrusion attempts, and data breach indicators on a 24/7 basis.
• Regular Security Audits: The Platform's security posture is reviewed through regular internal audits and periodic independent security assessments.

While prada55 maintains robust security measures, no digital platform can guarantee absolute immunity from security incidents. Users are strongly advised to maintain strong, unique passwords for their accounts and to enable two-factor authentication.

As a user of the prada55 Platform and a data subject, you hold the following rights with respect to your Personal Data. These rights may be exercised by contacting the prada55 Data Privacy team at the contact details provided in Clause 14.

prada55 will respond to all verifiable data rights requests within thirty (30) calendar days of receipt. Where a request is complex or involves a high volume of data, this period may be extended by a further two months with prior notification. Requests must be submitted by the Account holder and may require identity verification before processing.

The prada55 Platform is strictly intended for individuals who are 21 years of age or older. We do not knowingly collect, store, or process Personal Data of individuals under the age of 21. The collection of Personal Data from minors is expressly prohibited.

Age verification is conducted as part of the account registration process and again during KYC verification prior to the first withdrawal. Any account found to belong to a user under the age of 21 will be immediately closed, all balances forfeited, and all associated Personal Data permanently deleted from our systems, except where retention is required by law.

If you believe that a minor has registered an account on prada55 or that prada55 has inadvertently collected Personal Data from a person under 21, please contact us immediately at the details provided in Clause 14 so that prompt remedial action can be taken.

prada55 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our data processing practices, or the services offered on the Platform. The effective date at the top of this document will be updated upon each revision.

Where material changes are made to this Policy — particularly changes that affect your rights or the way we use your Personal Data — we will notify registered users by posting a prominent notice on the Platform and, where practicable, by sending a notification to your registered email address. Your continued use of the Platform following the publication of a revised Policy constitutes acceptance of the updated terms.

We encourage you to review this Privacy Policy periodically to remain informed of how your data is being processed.

For any questions, concerns, or formal requests relating to this Privacy Policy or the processing of your Personal Data, please contact prada55 using the details below. All data privacy communications must be submitted in English.

prada55 is committed to resolving all data privacy enquiries promptly and transparently. If you are dissatisfied with our response to a data rights request, you retain the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction.