slotsmy Privacy Policy

1 Introduction

slotsmy ("we", "us", "our") operates the online gaming platform at slotsmy.one, serving players primarily in Malaysia and the broader Southeast Asian region. We understand that your privacy matters, and we take our obligations as a data controller seriously.

This Privacy Policy describes in plain and legal terms how slotsmy collects, uses, stores, shares, and protects the personal data of individuals who visit or use the slotsmy platform ("Players", "you", "your"). It also explains your rights in relation to your personal data and how you can exercise those rights.

By registering an Account with slotsmy or continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, you should not use the slotsmy platform.

2 Data Controller

2.1 For the purposes of applicable data protection legislation, slotsmy is the data controller responsible for the personal data collected and processed through slotsmy.one.

2.2 You may contact slotsmy regarding any data protection matter, including to exercise your rights under this policy, using the contact details provided in Section 15 of this Privacy Policy.

3 Personal Data We Collect

3.1 Registration Data. When you create a slotsmy account, we collect: full name, date of birth, email address, mobile number, and chosen username and password (stored in hashed form).

3.2 Identity Verification (KYC) Data. To comply with age verification and anti-money laundering obligations, slotsmy collects: government-issued photo identification (e.g., Malaysian MyKad or passport), proof of residential address documents, and where required, proof of payment method ownership.

3.3 Financial Transaction Data. Records of all deposits and withdrawals including: transaction amounts in MYR, payment method details (masked card numbers, e-wallet identifiers, bank account references), transaction timestamps, and reference numbers.

3.4 Gaming Activity Data. Records of game play including: wagers placed, game outcomes, session durations, bonus usage, and win/loss history. This data is used for account management, dispute resolution, and responsible gaming monitoring.

3.5 Technical Data. Automatically collected when you access slotsmy: IP address, device type and model, operating system, browser type and version, mobile network provider, screen resolution, and session timestamps.

3.6 Communications Data. Records of communications between you and slotsmy including: live chat transcripts, email correspondence, and support ticket history.

3.7 Responsible Gaming Data. Information you provide when setting responsible gaming limits, requesting self-exclusion, or participating in problem gambling assessments.

4 How We Use Your Personal Data

4.1 Account Management. To create, operate, and maintain your slotsmy account, authenticate your identity at login, and process your requests and transactions.

4.2 Service Delivery. To provide access to all slotsmy products — slots, live casino, sportsbook, lucky bingo, and promotions — and to ensure their proper functioning.

4.3 Payment Processing. To process deposits and withdrawals via Touch 'n Go eWallet, Boost, Maybank, CIMB, Public Bank, and other supported payment channels.

4.4 KYC and Regulatory Compliance. To verify your identity and age (21+), comply with anti-money laundering (AML) obligations, and fulfil reporting requirements under applicable gaming regulations.

4.5 Fraud Prevention and Security. To detect, investigate, and prevent fraudulent transactions, unauthorised account access, bonus abuse, and other prohibited conduct as defined in the slotsmy Terms & Conditions.

4.6 Responsible Gaming. To monitor gaming patterns for signs of problem gambling, administer responsible gaming tools including deposit limits and self-exclusion, and fulfil our duty of care obligations to Players.

4.7 Customer Support. To respond to your queries, resolve disputes, and maintain records of communications for quality assurance and audit purposes.

4.8 Service Improvement. To analyse platform usage patterns (in aggregated and anonymised form where possible) to improve user experience, game selection, and platform performance for Malaysian mobile users.

4.9 Legal Obligations. To comply with applicable laws, respond to lawful requests from regulatory or law enforcement authorities, and defend slotsmy's legal position in disputes.

4.10 Marketing Communications. With your consent, to send you promotional offers, bonus notifications, and gaming updates relevant to your slotsmy account. You may withdraw this consent at any time — see Section 13.

5 Legal Basis for Processing

slotsmy processes your personal data on the following legal bases:

• Contract Performance — Processing necessary to deliver the services you have contracted for by registering a slotsmy account.
• Legal Obligation — Processing required to comply with KYC, AML, age verification, and other regulatory requirements applicable to online gaming operators.
• Legitimate Interests — Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement where these interests are not overridden by your rights.
• Consent — For marketing communications and the use of non-essential cookies, where your express consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6 Sharing Your Personal Data

6.1 slotsmy does not sell, rent, or trade your personal data. We share data only in the following circumstances:

• Payment Processors: Touch 'n Go, Boost, Maybank, CIMB, and other payment service providers receive the minimum data required to process your transactions.
• KYC Verification Providers: Identity verification and document authentication services that process KYC submissions on slotsmy's behalf under data processing agreements.
• Game Content Providers: Third-party game studios receive session identifiers and wager data necessary to operate their games on the slotsmy platform. They do not receive your identity or payment data.
• Fraud Prevention Services: Third-party anti-fraud and AML screening providers that assess transaction risk as part of our security infrastructure.
• Legal Authorities: Where slotsmy is required to disclose data by law, court order, or legitimate request from a regulatory or law enforcement authority.
• Business Successors: In the event of a merger, acquisition, or asset sale involving slotsmy, Player data may be transferred to the acquiring entity subject to equivalent privacy protections.

6.2 All third-party data processors engaged by slotsmy are subject to contractual data processing agreements that require them to process Player data only as instructed by slotsmy and to maintain appropriate security measures.

7 Cookies and Tracking Technologies

7.1 slotsmy uses cookies and similar tracking technologies on slotsmy.one. Cookies are small text files placed on your device that enable certain platform functionality and help us understand how the site is used.

7.2 Essential Cookies — Required for the platform to function. These include session authentication cookies, security cookies, and load-balancing cookies. These cannot be disabled without affecting platform functionality.

7.3 Functional Cookies — Remember your preferences such as language settings and login state ("Remember Me" feature).

7.4 Analytics Cookies — With your consent, collect aggregated data about how Players navigate slotsmy to help us improve the platform. Individual-level data from analytics is anonymised before analysis.

7.5 Marketing Cookies — With your consent, track interactions with slotsmy promotional content to measure campaign effectiveness. These are strictly opt-in.

7.6 You may manage your cookie preferences through your browser settings. Disabling certain cookies may affect the performance or functionality of the slotsmy platform on your device.

8 Data Security

8.1 slotsmy implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction.

8.2 Security measures in place at slotsmy include: TLS/SSL encryption for all data in transit; AES encryption for sensitive data at rest; multi-factor authentication for administrative access; regular third-party security audits and penetration testing; access control systems that restrict data access to authorised personnel on a need-to-know basis; and continuous monitoring for suspicious access patterns.

8.3 Players are encouraged to contribute to their own account security by using a strong unique password, enabling two-factor authentication (2FA) from account settings, and logging out of the slotsmy platform after each session on shared devices.

9 Data Retention

9.1 slotsmy retains your personal data for the following periods, which are set in accordance with operational necessity and applicable regulatory requirements:

• Account Data: For the duration of your active account plus five (5) years following account closure, to comply with gaming regulatory record-keeping requirements.
• KYC Documents: Five (5) years following account closure or the completion of the business relationship, in accordance with AML obligations.
• Transaction Records: Seven (7) years from the date of the transaction, as required by financial regulatory standards.
• Gaming Activity Logs: Three (3) years from the date of the relevant gaming session, for dispute resolution and responsible gaming purposes.
• Communications Records: Three (3) years from the date of the communication.
• Technical Logs: Ninety (90) days, unless a longer period is required for a specific security investigation.

9.2 Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with slotsmy's data destruction procedures.

10 Your Data Protection Rights

10.1 Subject to applicable law and certain limitations, you have the following rights in relation to your personal data held by slotsmy:

• Right of Access: To request a copy of the personal data slotsmy holds about you.
• Right to Rectification: To request correction of inaccurate or incomplete personal data.
• Right to Erasure: To request deletion of your personal data in certain circumstances (note: this right may be limited where retention is required by law or for legitimate platform purposes such as dispute resolution).
• Right to Restrict Processing: To request that we limit how we process your data in certain circumstances while a dispute or complaint is resolved.
• Right to Data Portability: To receive your personal data in a structured, machine-readable format where processing is based on consent or contract.
• Right to Object: To object to processing based on legitimate interests, including profiling for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, to withdraw that consent at any time without affecting the lawfulness of prior processing.

10.2 To exercise any of these rights, contact slotsmy at [email protected] with the subject line "Data Subject Request". slotsmy will respond within 30 days of receiving your request. We may need to verify your identity before processing your request.

11 International Data Transfers

11.1 The slotsmy platform may engage third-party service providers and data processors located outside Malaysia. Where personal data is transferred internationally, slotsmy ensures that appropriate safeguards are in place, including standard contractual clauses or equivalent transfer mechanisms recognised under applicable data protection law.

11.2 By using the slotsmy platform, you acknowledge that your personal data may be processed in countries outside Malaysia. slotsmy ensures that all international transfers maintain the same level of data protection as described in this Privacy Policy.

12 Children's Privacy and Age Restriction

12.1 The slotsmy platform is strictly for individuals aged 21 years and above. slotsmy does not knowingly collect personal data from anyone under the age of 21. If slotsmy discovers that a person under 21 has provided personal data through the registration process, that data will be deleted and the Account will be immediately suspended.

12.2 If you believe that a minor has accessed or registered on slotsmy, please contact us immediately at [email protected]. We take underage access extremely seriously and will act promptly on any credible report.

13 Marketing Communications

13.1 slotsmy will only send marketing communications — including promotional offers, bonus notifications, and gaming updates — to Players who have expressly opted in to receive such communications at registration or through their account settings.

13.2 You may opt out of marketing communications at any time by: (a) adjusting your notification preferences in your slotsmy account settings; or (b) contacting slotsmy support at [email protected] with the subject line "Marketing Opt-Out".

13.3 Withdrawal of marketing consent does not affect the delivery of essential account communications such as transaction confirmations, security alerts, and policy update notifications, which are necessary for the operation of your account.

14 Changes to This Privacy Policy

14.1 slotsmy may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or platform services. The "Last Updated" date at the top of this page will be revised accordingly.

14.2 Where changes are material — for example, new categories of data collected or new uses of existing data — slotsmy will notify registered Players by email to the address on file and/or by a prominent notice on the platform. Continued use of slotsmy following notification constitutes acceptance of the updated Privacy Policy.

14.3 If you do not accept the updated Privacy Policy, you should discontinue use of the platform and may request Account closure. Any personal data collected prior to your request will continue to be retained in accordance with the applicable retention periods described in Section 9.

15 Contact Us

15.1 For all data protection enquiries, data subject access requests, or privacy complaints, please contact slotsmy using the following details:

15.2 slotsmy will acknowledge all privacy-related correspondence within 5 business days and aims to fully respond to data subject requests within 30 calendar days. For complex requests, we will notify you of any required extension within the initial 30-day period.