Privacy Policy — slot123

This Privacy Policy ("Policy") sets out the data protection practices of slot123 ("slot123", "we", "us", "our"), the operator of the online gaming platform accessible at https://slot123.cam ("Platform"). This Policy applies to all users and registered players of the Platform ("you", "your", "Player").

slot123 is committed to protecting the privacy and security of personal data provided by all individuals who interact with our Platform. We process personal data in accordance with applicable data protection legislation and the principles of transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.

This Policy explains:

• What categories of personal data we collect from you and how we collect it.
• The purposes for which we process your personal data and the legal bases upon which we rely.
• With whom we share your personal data and under what circumstances.
• How long we retain your personal data.
• The rights you hold in respect of your personal data and how to exercise them.
• How we use cookies and similar tracking technologies on the Platform.

By registering an Account on slot123 or otherwise using the Platform, you acknowledge that you have read and understood this Policy. If you do not agree with how we process your personal data as described herein, you should not use the Platform.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

slot123 collects only the personal data that is necessary for the purposes described in this Policy. The categories of data we collect include:

3.1 Identity & Contact Data

• Full legal name, date of birth, and gender.
• National identification number (MyKad for Malaysian citizens, passport number for non-citizens).
• Residential address, including city (e.g., Kuala Lumpur, Penang, Shah Alam, Johor Bahru, Petaling Jaya).
• Email address and mobile phone number.

3.2 Financial & Transaction Data

• Bank account details, e-wallet identifiers (Touch 'n Go eWallet, Boost, GrabPay), and FPX/DuitNow reference data used for deposits and withdrawals.
• Transaction history including deposit amounts, withdrawal requests, and timestamps — all denominated in MYR.
• Bonus claims, wagering history, and account balance information.

3.3 Gaming & Behavioural Data

• Game session data including games played, stakes, wins, losses, and session duration.
• Sports betting selections, odds accepted, and market preferences.
• Responsible gambling indicators including session time, frequency of play, and deposit/loss patterns.

3.4 Technical & Device Data

• IP address and approximate geolocation derived from IP.
• Device type, operating system, browser type and version.
• Session logs, login timestamps, and Platform usage data.
• Cookie identifiers and tracking pixel data (see Section 11).

3.5 Communications Data

• Records of communications between you and our customer support team, including live chat transcripts and email correspondence.
• Feedback, complaint records, and dispute-related communications.

slot123 collects personal data through the following means:

4.1 Directly from You — when you register an Account, complete KYC verification, make a deposit or withdrawal, contact customer support, or respond to surveys or promotions.

4.2 Automatically — when you use the Platform, we automatically collect technical and behavioural data through cookies, server logs, and similar technologies embedded in the website and mobile interface.

4.3 From Third Parties — we may receive data from the following third-party sources:

• Identity Verification Providers: Organisations that verify the authenticity of government-issued identification documents as part of the KYC process.
• Payment Processors: Transaction confirmation data from Maybank, CIMB, Public Bank, Hong Leong Bank, DuitNow, FPX, Touch 'n Go eWallet, Boost, and GrabPay to reconcile payments.
• Fraud Prevention Services: Third-party risk assessment providers that flag potentially fraudulent or high-risk account activity.
• Regulatory Authorities: Data provided by competent authorities pursuant to legal obligations, such as responses to lawful information requests.

We process your personal data for the following clearly defined purposes:

slot123 processes your personal data only where a valid legal basis exists. The following legal bases apply to our processing activities:

• Contractual Necessity: Processing required to perform our obligations under the Terms & Conditions you accepted upon registration — including Account management, payment processing, and game delivery.
• Legal Obligation: Processing necessary to comply with applicable laws, including anti-money laundering regulations, age verification requirements, and responses to lawful authority requests.
• Legitimate Interests: Processing we carry out in pursuit of slot123's legitimate business interests, where those interests are not overridden by your rights — including fraud prevention, platform security, and service improvement, provided we have conducted an appropriate balancing assessment.
• Consent: Where we rely on your consent — for example, in relation to marketing communications or optional analytics cookies — we will obtain it explicitly and you may withdraw it at any time without affecting the lawfulness of prior processing.

slot123 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share personal data only in the following limited circumstances and only to the extent necessary:

7.1 Service Providers & Data Processors: We engage third-party service providers who process data on our behalf under written data processing agreements. These include:

• Payment processors and banking partners (Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay) for transaction facilitation.
• Identity verification and KYC service providers for document authentication.
• Cloud hosting and infrastructure providers for Platform operation.
• Customer support software providers for live chat and ticketing systems.
• Fraud detection and cybersecurity service providers.

7.2 Licensed Game Studios: Game studios whose products are integrated into the Platform may receive anonymised session data for game performance analytics. No identifiable personal data is shared with game studios beyond what is technically required to deliver the game session.

7.3 Regulatory & Legal Authorities: We may disclose personal data to competent authorities — including financial intelligence units, law enforcement agencies, or courts — where required by applicable law, court order, or regulatory direction. Such disclosures are made only to the minimum extent required.

7.4 Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of slot123's assets, your personal data may be transferred to the acquiring entity, subject to equivalent data protection commitments.

The slot123 Platform is operated with infrastructure hosted in data centres that may be located outside of Malaysia. Where personal data is transferred internationally, slot123 ensures that adequate safeguards are in place to maintain the level of protection required under applicable data protection law.

Safeguards employed for international transfers include:

• Contractual clauses requiring recipient third parties to maintain data protection standards equivalent to those applied by slot123.
• Transfer only to recipients in jurisdictions that have been assessed as providing an adequate level of protection.
• Technical and organisational measures to protect data in transit, including encryption and access controls.

Where you require further information about the specific safeguards applied to any international transfer of your data, you may contact us using the details in Section 15.

slot123 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our general retention guidelines are as follows:

Following the expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be associated with any individual.

Subject to applicable law and certain exceptions, you hold the following rights in relation to your personal data held by slot123. You may exercise any of these rights by contacting us at [email protected] with the subject line "Data Rights Request".

We aim to respond to all data rights requests within 30 calendar days of receipt. Where a request is complex or involves a large volume of data, we may extend this by a further 60 days, in which case we will notify you of the extension and the reasons for it. There is no fee for exercising your rights unless a request is manifestly unfounded or excessive.

slot123 uses cookies and similar tracking technologies on the Platform to ensure functionality, enhance your experience, and support analytics and fraud prevention. A cookie is a small text file stored on your device when you visit a website.

The categories of cookies we use are as follows:

You may manage your cookie preferences through your browser settings or any consent management tool we make available on the Platform. Disabling certain cookies may impact the functionality and performance of some Platform features. Strictly necessary and functional cookies cannot be disabled without compromising your ability to use the Platform.

The slot123 Platform is strictly restricted to individuals who are 21 years of age or older. We do not knowingly collect personal data from any person under the age of 21.

During account registration, we collect date of birth and require submission of government-issued identification documents as part of our KYC process. This is designed to verify that all Players meet the minimum age requirement before any betting or gaming activity is permitted.

If slot123 becomes aware that personal data has been collected from a person under 21, we will take immediate steps to:

• Suspend and close the relevant Account without delay.
• Void any related transactions and return net deposits where technically feasible.
• Delete or anonymise all personal data associated with the underage account as promptly as possible.
• Report the matter to relevant authorities where required by applicable law.

If you believe that a person under 21 has registered an Account on slot123 or that we hold data about a minor, please contact us immediately at [email protected].

slot123 implements a comprehensive range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security infrastructure includes:

• Transport Layer Security (TLS/SSL): All data transmitted between your device and the slot123 Platform is encrypted using industry-standard TLS 1.2 or higher, protecting it from interception in transit.
• Data Encryption at Rest: Sensitive stored data — including KYC documents and financial information — is encrypted using AES-256 encryption on our servers.
• Access Controls: Personal data is accessible only to authorised slot123 personnel and third-party processors on a strict need-to-know basis. Role-based access controls are enforced across all internal systems.
• Intrusion Detection & Monitoring: Our infrastructure is subject to continuous automated monitoring for unusual activity, with incident response procedures in place for any suspected data breach.
• Regular Security Audits: Periodic penetration testing and security audits are conducted by qualified third-party specialists to identify and remediate vulnerabilities.
• Staff Training: All slot123 personnel with access to personal data undergo regular data protection and information security training.

While we take all reasonable steps to protect your personal data, no online transmission or electronic storage method is 100% secure. We encourage you to also take steps to protect your own Account security, including using a strong unique password and not sharing your login credentials. For account security guidance, please refer to our Terms & Conditions.

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, slot123 will notify affected individuals without undue delay and take all reasonably practicable steps to mitigate the impact.

slot123 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform functionality. The most current version of this Policy will always be accessible at https://slot123.cam/privacy-policy.

Where material changes are made to this Policy — particularly changes that affect the nature of the data we collect, the purposes for which we use it, or your rights — we will provide advance notice through one or more of the following means:

• A notification sent to the email address registered to your Account at least 7 days before the changes take effect.
• A prominent banner or notice displayed on the Platform upon your next login.
• An update to the "Last Updated" date displayed at the top of this Policy.

Your continued use of the Platform after the effective date of any update constitutes acceptance of the revised Policy. If you do not agree with the changes, you should discontinue use of the Platform and contact us to arrange Account closure in accordance with the process described in our Terms & Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which slot123 processes your personal data, please contact our Data Protection team using the details below:

When submitting a data rights request, please include your full name, registered email address, and Account username to allow us to locate your records accurately. For requests involving sensitive actions such as data deletion or account closure, we may need to carry out identity verification before proceeding.

We are committed to handling all privacy-related enquiries with the care and confidentiality they deserve. If you are not satisfied with our response, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.