Fanta55 Privacy Policy

This Privacy Policy ("Policy") is published by Fanta55 ("the Company", "we", "us", "our") and applies to all personal data collected, processed, stored, or otherwise handled in connection with the operation of the Fanta55 online gaming platform, accessible at https://fanta55.cam, and all associated services, features, and communications (collectively, "the Services").

Fanta55 is primarily a Malaysian-market platform and the majority of our registered players are based in Malaysia — in cities including Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, Johor Bahru, Ipoh, and Kota Kinabalu. This Policy is written in plain English and is intended to be understood by any player using our Services, without the need for legal expertise.

By registering an Account on the Fanta55 Platform or otherwise using our Services, you acknowledge that you have read and understood this Privacy Policy in its entirety. If you do not agree with any part of this Policy, you should cease using the Services and, if you have already registered an Account, contact our support team to request Account closure.

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

Fanta55 acts as the Data Controller in respect of all Personal Data collected through the Platform. As Data Controller, Fanta55 is responsible for determining the purposes for which Personal Data is collected and the manner in which it is processed.

Questions, concerns, or requests relating to the processing of your Personal Data should be directed to the Fanta55 data protection team via email at [email protected] with the subject line "Data Protection Request". Our support team is available 24 hours a day, seven days a week, including Malaysian public holidays.

Fanta55 collects personal data across the following categories. The specific data collected will depend on the nature of your interaction with the Platform and the Services you use.

Fanta55 collects personal data through the following mechanisms:

1. Direct Collection: Information you provide when you register an Account, complete the KYC verification process, make deposits or withdrawals, contact customer support, participate in promotions, or update your Account profile.
2. Automated Collection: Technical and device data collected automatically through cookies, web beacons, server logs, and similar tracking technologies when you access and use the Platform. See Section 10 (Cookies & Tracking) for further detail.
3. Third-Party Sources: Identity verification data obtained from our KYC partners who assist in verifying the authenticity of documents you provide. Payment data received from our payment processing partners (e.g., FPX operators, e-wallet providers including Touch 'n Go eWallet, Boost, and GrabPay) to confirm the status of your transactions. Fraud and risk screening data from specialist third-party service providers.

Fanta55 processes your Personal Data only where a lawful basis for doing so exists. The table below sets out the primary purposes of processing and the corresponding legal basis for each:

We process your Identity Data, Contact Data, and Financial Data to create and manage your Account, verify your eligibility, process deposits and withdrawals, operate the gaming and sports betting services you use, and communicate with you regarding your Account. Legal basis: Performance of a contract (your Account Agreement with Fanta55).

We process your Identity Data, KYC Data, Financial Data, and Gaming Data to comply with our legal and regulatory obligations, including anti-money laundering (AML) requirements, Know Your Customer (KYC) obligations, age verification (minimum 21 years), and responsible gambling duties. Legal basis: Legal obligation.

We process Technical Data, Financial Data, and Gaming Data to detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, money laundering, and other prohibited conduct on the Platform. Legal basis: Legitimate interest (protecting the integrity of the Platform and the interests of legitimate players).

Where you have provided explicit consent, we may process your Contact Data to send you promotional emails, SMS notifications, and personalised offers related to Fanta55 products and services — including bonus offers relevant to the games and sports markets (such as Liga Super Malaysia and EPL) you engage with. Legal basis: Consent. You may withdraw your consent at any time by updating your communication preferences in Account Settings or by contacting our support team.

We process Technical Data and aggregated, anonymised Gaming Data to analyse player behaviour patterns, improve the performance and usability of the Platform, optimise the game library and sports betting offering, and conduct internal research and reporting. Legal basis: Legitimate interest (improving the Services we offer to all players).

Fanta55 does not sell, rent, or trade your Personal Data to any third party for their own commercial or marketing purposes. We may share your Personal Data with carefully selected third parties only in the following circumstances:

• Payment Service Providers: We share financial transaction data with our payment processing partners — including operators of Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX banking infrastructure (Maybank, CIMB, Public Bank, Hong Leong Bank), and cryptocurrency processing services — solely for the purpose of processing your deposits and withdrawals.
• KYC & Identity Verification Partners: Identity documents and related data submitted during the KYC process are shared with specialist identity verification service providers who assist us in confirming the authenticity of your documents and verifying your age.
• Regulatory Authorities: We may be required to disclose Personal Data to regulatory bodies, law enforcement agencies, or government authorities where required to do so by applicable law, court order, or regulatory direction.
• Fraud Prevention & AML Services: We share relevant transaction and behavioural data with specialist third-party fraud screening and anti-money laundering service providers as part of our legal compliance obligations.
• Technology Infrastructure Providers: Our Platform is hosted and operated on enterprise-grade cloud infrastructure provided by reputable third-party technology partners. These providers act as Data Processors and are bound by data processing agreements that restrict their use of your data to the provision of infrastructure services only.
• Group Companies: We may share data within the Fanta55 group of companies for internal administrative and operational purposes, subject to the same data protection standards as set out in this Policy.

All third parties with whom Fanta55 shares Personal Data are required to process that data in accordance with applicable data protection laws and are prohibited from using it for any purpose beyond that for which it was shared.

Fanta55 retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following retention periods apply:

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised in accordance with our data destruction procedures. Anonymised, aggregated data derived from your Personal Data may be retained indefinitely for analytical purposes, as it can no longer be used to identify you.

Fanta55 implements appropriate technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include, but are not limited to:

• Encryption in Transit: All data transmitted between your browser or device and the Fanta55 Platform is encrypted using TLS 1.2 or higher (256-bit SSL). This applies to all page loads, login sessions, transactions, and API communications.
• Encryption at Rest: Sensitive personal data stored in our databases — including identity documents, payment method identifiers, and authentication credentials — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to systems containing Personal Data is restricted on a need-to-know basis. Staff access is controlled through role-based permissions, strong authentication requirements, and audit logging.
• Two-Factor Authentication (2FA): 2FA is available and encouraged for all player accounts. Players can enable 2FA through their Account security settings.
• Regular Security Assessments: The Fanta55 Platform undergoes regular security assessments, penetration testing, and vulnerability scanning by qualified information security professionals.
• Data Breach Response: Fanta55 maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to affected individuals, we will notify affected players and, where applicable, relevant regulatory authorities, in accordance with applicable law.

Whilst Fanta55 takes all reasonable steps to protect your Personal Data, no method of transmission over the internet or method of electronic storage is entirely secure. Players are responsible for maintaining the security of their own Account credentials and for promptly reporting any suspected unauthorised access.

Fanta55 uses cookies and similar tracking technologies on the Platform to enhance your user experience, maintain your session, and collect analytical data. The following types of cookies are used:

These cookies are essential for the Platform to function and cannot be disabled. They are used to maintain your login session, remember your language and currency preferences, manage your Account security status, and ensure the correct display of game content. No consent is required for strictly necessary cookies.

These cookies collect aggregated, anonymised information about how players navigate the Platform — including which pages are visited most frequently, how long sessions last, and which features are used most. This data is used to improve the Platform's performance and usability. These cookies require your consent and can be disabled through your browser settings.

These cookies remember choices you make — such as your preferred game categories or notification preferences — to provide a more personalised experience on return visits. These cookies require your consent.

You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform — in particular, disabling strictly necessary cookies will prevent you from logging in or using transactional features. Most modern browsers provide options to block, delete, or be notified of cookies through their privacy or settings menus.

As a data subject, you have the following rights in respect of your Personal Data held by Fanta55. You may exercise any of these rights by contacting our data protection team at [email protected] with the subject line "Data Rights Request". We will respond to all verified requests within thirty (30) days of receipt.

Please note that certain rights are subject to exceptions and limitations under applicable law. For example, Fanta55 is legally required to retain certain data (such as KYC documents and financial transaction records) for a prescribed period following Account closure, even if you exercise your right to erasure. We will always explain clearly any limitations that apply to your request.

The Fanta55 Platform and all associated Services are strictly intended for individuals aged 21 years and above. Fanta55 does not knowingly collect Personal Data from individuals under the age of 21. The age restriction of 21+ reflects our commitment to responsible gambling and the protection of young people from gambling-related harm.

If Fanta55 becomes aware that Personal Data has been collected from an individual under the age of 21, we will take immediate steps to permanently close the associated Account, return any deposited funds, and securely delete the relevant Personal Data in accordance with applicable law. Any winnings associated with an underage Account will be forfeited.

Age verification is a mandatory step in the KYC process and is conducted for every Account that submits a withdrawal request. Fanta55 may conduct age verification checks at any time during the Account lifecycle where there is any reason to doubt the age of an Account holder.

As an online platform serving a primarily Malaysian user base, Fanta55 may transfer Personal Data to, and process it in, countries outside of Malaysia. Such transfers may occur when we use technology infrastructure partners, payment processors, or KYC verification services whose systems are located in jurisdictions other than Malaysia.

Where Personal Data is transferred internationally, Fanta55 takes appropriate safeguards to ensure that the transferred data continues to receive a level of protection equivalent to that required under Malaysian data protection law and applicable international standards. Such safeguards may include contractual arrangements with the relevant data recipients requiring them to implement appropriate security and data protection standards.

Fanta55 may update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or the structure of our business. The "Last Updated" date at the top of this document will reflect the date on which the most recent revision was made.

Where changes to this Policy are material — meaning they significantly affect the way we process your Personal Data or the rights available to you — Fanta55 will provide notice to registered players via email and by posting a prominent notice on the Platform, no less than seven (7) days before the amended Policy takes effect. For minor or administrative changes (such as corrections of typographical errors or clarifications that do not alter the substance of the Policy), no prior notice will be provided.

Your continued use of the Fanta55 Platform after the effective date of any amended Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with any changes, you should cease using the Platform and contact our support team to arrange Account closure and, where applicable, withdrawal of your remaining balance.

If you have any questions, concerns, or requests relating to this Privacy Policy, the processing of your Personal Data, or the exercise of your data rights, please contact our data protection team using the details below: