gol55 Privacy Policy

1. Introduction

This Privacy Policy describes how gol55 ("gol55", "the Platform", "we", "us", "our") collects, uses, stores, and discloses personal data in connection with the online sportsbook and casino services available at gol55.pro. This Policy applies to all current and former Members of the gol55 platform, as well as any individual who accesses or browses the gol55 website in any capacity.

By registering a gol55 Account or continuing to use the gol55 platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any aspect of this Policy, you should discontinue your use of the gol55 platform and may request Account closure in accordance with the Terms & Conditions.

This Policy should be read alongside the gol55 Terms & Conditions, which govern the overall contractual relationship between gol55 and its Members. Defined terms used but not defined in this Policy have the meanings assigned to them in the Terms & Conditions.

2. Data Controller

The data controller responsible for the personal data of gol55 Members is the entity operating the gol55 platform under its international gaming license. As data controller, gol55 determines the purposes for which, and the means by which, Member personal data is processed. All data protection inquiries, subject access requests, and complaints should be directed to the gol55 data protection contact detailed in Section 14 of this Policy.

gol55 appoints third-party processors — including KYC verification providers, payment processors, and cloud infrastructure providers — to handle certain categories of Member data on its behalf. All third-party processors are bound by formal data processing agreements that require them to implement appropriate technical and organizational security measures and to process Member data only on gol55's documented instructions.

3. Personal Data We Collect

gol55 collects the following categories of personal data from its Members:

3.1 Identity Data

Full legal name; date of birth; nationality; and government-issued identity document details (Indonesian National Identity Card number / KTP, or passport number) collected as part of the KYC verification process.

3.2 Contact Data

Email address; Indonesian mobile telephone number; and residential address in Indonesia (including city — Jakarta, Surabaya, Bandung, Medan, Bali, Yogyakarta, Semarang, or other Indonesian cities as applicable).

3.3 Financial Data

Bank account details for deposit and withdrawal purposes — including account holder name and account number for Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and registered e-wallet identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja. gol55 does not store full card numbers or CVV codes. Financial data is used exclusively for transaction processing and fraud prevention.

3.4 Account & Activity Data

Username; account registration date; login history (including timestamps and IP addresses); betting and gaming history (sports markets wagered on, casino games played, stakes, returns); deposit and withdrawal records; bonus and promotion activity; and customer support interaction records.

3.5 Technical Data

IP address; device type and operating system; browser type and version; screen resolution; referral URL; session duration; and pages viewed during each platform visit. This data is collected automatically when you access the gol55 website and is used for platform security, fraud detection, and service optimization purposes.

3.6 Communications Data

Records of all communications between you and the gol55 support team, including live chat transcripts, email correspondence, and any documentation submitted in connection with a complaint, KYC review, or withdrawal request.

4. How We Collect Your Data

gol55 collects personal data through the following channels:

• Account Registration: When you complete the gol55 registration form, you directly provide identity and contact data;
• KYC Verification: When you submit identity documents and payment method evidence to satisfy our Know Your Customer requirements;
• Deposits and Withdrawals: When you initiate financial transactions, our payment processing partners provide us with the transaction details necessary to credit or debit your Account;
• Platform Usage: Technical and activity data is collected automatically as you navigate the gol55 website, place bets, play games, and interact with platform features;
• Customer Support: When you contact gol55 via live chat or email, the content of those communications is recorded and stored;
• Cookies and Tracking Technologies: As described in Section 10 of this Policy, gol55 uses cookies and similar technologies to collect technical data about your browsing sessions.

5. Purpose & Legal Basis for Processing

gol55 processes your personal data only where a valid legal basis exists. The table below sets out the primary purposes for which we process Member data and the corresponding legal basis for each:

Where gol55 relies on consent as the legal basis for processing (primarily for marketing communications), you may withdraw that consent at any time by updating your communication preferences within your Account dashboard or by contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

6. Data Sharing & Third-Party Disclosure

gol55 does not sell, rent, or trade Member personal data. We share personal data with third parties only in the following limited circumstances:

6.1 Payment Processors

To process IDR deposits and withdrawals, gol55 shares relevant financial and identity data with the payment processors and banking partners that facilitate transactions via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay, ShopeePay, and LinkAja. These processors act as data processors on gol55's behalf and are contractually prohibited from using Member data for any purpose other than completing the relevant payment transaction.

6.2 KYC and Identity Verification Providers

gol55 uses third-party KYC service providers to verify the identity documents and payment method evidence submitted by Members. These providers process identity data on gol55's behalf under formal data processing agreements and are required to implement appropriate security standards equivalent to those maintained by gol55.

6.3 Game Content Providers

Third-party game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, and Spribe — may receive limited technical session data (such as a session token and bet amount) necessary to deliver their game content to your device. These providers do not receive your full identity profile and are bound by their own data protection obligations under their licensing agreements with gol55.

6.4 Fraud Prevention and Security Services

gol55 may share technical data (IP address, device fingerprint, betting pattern indicators) with specialist fraud prevention and cybersecurity services for the purpose of detecting and preventing fraudulent activity, account takeover attempts, and money laundering. This processing is carried out on the basis of gol55's legitimate interest in protecting the integrity of the platform and the financial security of all Members.

6.5 Legal and Regulatory Authorities

gol55 will disclose Member personal data to law enforcement agencies, regulatory bodies, licensing authorities, or courts of competent jurisdiction where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of gol55, its Members, or the public. Such disclosures will be limited to the minimum data necessary to fulfill the legal requirement.

6.6 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of gol55's assets, Member personal data may be transferred to the acquiring entity as part of that transaction. gol55 will provide advance notice to affected Members via their registered email address prior to any such transfer, and the acquiring entity will be required to adhere to data protection standards no less protective than those set out in this Policy.

7. International Data Transfers

gol55 operates infrastructure and engages service providers that may be located in jurisdictions outside Indonesia. Where personal data is transferred internationally — including to cloud hosting providers, KYC partners, and game content studios — gol55 ensures that appropriate safeguards are in place to protect the data during and after transfer.

These safeguards include contractual clauses that require recipient organizations to apply data protection standards consistent with those described in this Policy, as well as technical security controls (encryption in transit and at rest) that apply regardless of the jurisdiction in which data is stored or processed.

8. Data Retention

gol55 retains personal data for as long as necessary to fulfill the purpose for which it was collected, subject to the following retention considerations:

• Active Account Data: Identity, contact, financial, and activity data is retained for the lifetime of your gol55 Account and for a minimum of 5 years following permanent Account closure, to satisfy anti-money-laundering record-keeping obligations and to resolve any post-closure disputes;
• KYC Documents: Identity document copies and payment method verification records are retained for a minimum of 5 years from the date of submission, in compliance with applicable financial crime prevention requirements;
• Transaction Records: Full deposit and withdrawal histories are retained for a minimum of 5 years from the date of each transaction;
• Support Communications: Customer support correspondence is retained for 3 years from the date of the most recent interaction, unless the communication relates to an unresolved complaint or legal claim, in which case it is retained until the matter is fully resolved;
• Technical and Log Data: Server logs and session data are retained for 12 months, after which they are deleted or anonymized for aggregate analytics purposes;
• Marketing Consent Records: Records of marketing consent and consent withdrawal are retained for the duration of the Account and for 3 years following Account closure.

When personal data is no longer required for any of the above purposes, it is securely deleted or irreversibly anonymized in accordance with gol55's internal data lifecycle management procedures.

9. Your Data Protection Rights

As a gol55 Member, you hold the following rights with respect to your personal data. To exercise any of these rights, contact the gol55 support team at [email protected] with the subject line "Data Rights Request". gol55 will respond to all valid requests within 30 days of receipt.

10. Cookies & Tracking Technologies

gol55 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device by your web browser. The following categories of cookies are used on the gol55 platform:

You can control and delete cookies through your browser settings. Instructions for managing cookies are available in the help documentation of all major browsers. Note that disabling strictly necessary cookies will impair your ability to log in and use the gol55 platform.

11. Minors & Age Policy

The gol55 platform is strictly intended for individuals who are 21 years of age or older. gol55 does not knowingly collect personal data from any individual under the age of 21. If we become aware that we have inadvertently collected personal data from a minor, we will immediately close the associated Account, delete the data, and return any deposited funds to the originating payment method.

Parents and guardians who have reason to believe that a minor has registered a gol55 Account using false age information should contact us immediately at [email protected]. We will act on all such reports without delay.

12. Security Measures

gol55 implements the following technical and organizational security measures to protect Member personal data against unauthorized access, disclosure, alteration, and destruction:

• Encryption in Transit: All data transmitted between your browser and the gol55 platform is protected by TLS 1.3 (Transport Layer Security), visible via the HTTPS padlock in your browser's address bar;
• Encryption at Rest: Personal data and financial records stored in gol55 databases are encrypted using AES-256 encryption;
• Access Controls: Internal access to Member data is restricted to authorized personnel on a documented need-to-know basis, enforced via role-based access control and multi-factor authentication for administrative systems;
• Audit Logging: All internal access to Member personal data is logged and subject to periodic audit review;
• Penetration Testing: gol55 engages independent security professionals to conduct regular penetration tests and vulnerability assessments of its platform infrastructure;
• Incident Response: In the event of a data breach that poses a risk to Member rights and freedoms, gol55 will notify affected Members via their registered email address within 72 hours of becoming aware of the incident, and will take all reasonable steps to contain and remediate the breach.

While gol55 takes all reasonable precautions to protect your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own login credentials and for ensuring that your device is protected by appropriate security software.

13. Policy Amendments

gol55 reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. Where a material change is made to this Policy, gol55 will provide at least 14 days' advance notice by email to your registered address and by displaying a prominent notice on the gol55 platform prior to the change taking effect.

Your continued use of the gol55 platform after the effective date of any amended Privacy Policy constitutes your acceptance of the updated terms. The "Last Updated" date at the top of this Policy will always reflect the date on which the most recent version came into effect. We encourage you to review this Policy periodically to stay informed about how we protect your personal data.

14. Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data protection rights, or wish to raise a complaint about gol55's handling of your personal data, please contact us through the following channel:

• Email: [email protected] — use the subject line "Privacy Inquiry" or "Data Rights Request" for fastest routing;
• Live Chat: Available 24/7 via the chat widget within your gol55 Account dashboard;
• Response Time: gol55 aims to acknowledge all privacy-related contacts within 48 hours and to provide a substantive response within 30 days of receiving a valid request.

If you are not satisfied with gol55's response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection supervisory authority or dispute resolution body under gol55's applicable licensing and regulatory framework. gol55 will cooperate fully with any such regulatory inquiry.

All privacy communications are handled in English by our dedicated support team, with native Indonesian-speaking agents available around the clock to assist Members who prefer to communicate in Bahasa Indonesia on non-legal matters.