myslot Privacy Policy —
Your Data, Your Rights

Introduction

This Privacy Policy ("Policy") is published by myslot ("we", "us", "our", "the Platform"), the operator of the online casino and sports betting platform accessible at https://myslot.click. This Policy describes how myslot collects, processes, stores, and protects the personal data of registered players, visitors, and any other individuals who interact with our platform.

We are committed to handling your personal information in a responsible, transparent, and lawful manner, consistent with applicable data protection principles including those reflected in Malaysia's Personal Data Protection Act 2010 (PDPA) and internationally recognised data governance standards.

By registering an account on myslot, accessing the platform, or otherwise providing personal information to us, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please do not use the myslot platform.

Definitions

The following definitions apply throughout this Privacy Policy unless context requires otherwise:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial information, IP address, and device identifiers.
• "Processing" — any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" — myslot, as the entity that determines the purposes and means of processing your personal data.
• "Data Processor" — any third party that processes personal data on behalf of myslot under a contractual data processing agreement.
• "Consent" — freely given, specific, informed, and unambiguous agreement to the processing of personal data for a stated purpose.
• "KYC Data" — identity verification documentation including government-issued photo ID (e.g., MyKad), proof of address, and payment method ownership evidence.
• "Cookies" — small data files placed on your device by a website to facilitate session management, preferences, and analytics.
• "AML" — Anti-Money Laundering obligations imposed on myslot under applicable regulatory frameworks.

Personal Data We Collect

myslot collects the following categories of personal data from players and platform visitors. The specific data collected may vary depending on the nature of your interaction with the platform:

3.1 Registration & Identity Data

When you create a myslot account, we collect: full legal name, date of birth, Malaysian residential address (or applicable international address), email address, and mobile phone number. This information is mandatory for account creation.

3.2 KYC Verification Data

Prior to processing withdrawals, we collect identity verification documents including: copies of government-issued photo identification (Malaysian MyKad, passport, or equivalent), proof of residential address (utility bill or bank statement dated within 90 days), and in applicable cases, proof of payment method ownership.

3.3 Financial Transaction Data

We collect records of all deposits, withdrawals, and account balance movements. This includes payment method details (e.g., Touch 'n Go eWallet account identifier, bank account last four digits, FPX transaction reference), transaction amounts in MYR, and timestamps. Full card numbers or bank credentials are never stored on myslot servers — these are handled exclusively by our payment processing partners.

3.4 Platform Activity Data

We collect records of your gameplay activity, betting history, session durations, game preferences, promotional redemptions, and responsible gambling tool usage. This data is used for account management, fraud prevention, bonus eligibility assessment, and platform improvement.

3.5 Technical & Device Data

When you access myslot, we automatically collect: IP address, browser type and version, operating system, device type and identifiers, referring URL, and session timestamps. This data is used for security monitoring, fraud detection, and platform performance optimisation.

3.6 Communications Data

We retain records of your communications with myslot support — including live chat transcripts, email correspondence, and support tickets — for quality assurance, training, and dispute resolution purposes.

How We Collect Your Data

We collect personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or update your account profile;
• Automatically — through cookies, server logs, and analytics tools when you access and use the myslot platform;
• From payment processors — transaction confirmation data received from DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, or cryptocurrency network processors when processing your deposits and withdrawals;
• From identity verification services — where applicable, we may use third-party KYC verification tools to assist in confirming the authenticity of documents submitted by players;
• From fraud prevention partners — device fingerprint and behavioural risk signals from our anti-fraud infrastructure partners, used solely for account security and fraud prevention.

Purpose of Data Processing

myslot processes your personal data for the following specific and legitimate purposes:

• Account management: creating, maintaining, and administering your player account;
• Identity verification (KYC): confirming your identity, age (21+), and residential address to comply with our obligations;
• Transaction processing: facilitating deposits and withdrawals via Malaysian payment methods including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, and USDT TRC20;
• Regulatory compliance: meeting our AML, counter-terrorism financing (CTF), and responsible gambling obligations under applicable regulations;
• Fraud prevention and security: detecting and preventing fraudulent activity, multiple accounts, and unauthorised access;
• Customer support: responding to your enquiries and resolving disputes;
• Platform personalisation: tailoring game recommendations and promotional offers based on your activity history;
• Responsible gambling: monitoring gameplay patterns to identify potential problem gambling indicators and offering appropriate interventions;
• Legal obligations: complying with court orders, regulatory investigations, or other mandatory legal requirements.

Legal Basis for Processing

myslot processes your personal data on the following legal bases, depending on the specific type and purpose of processing:

• Contractual necessity: processing required to fulfil our obligations to you under our Terms & Conditions, including account management and transaction processing;
• Legal obligation: processing required to comply with applicable laws, including AML regulations, KYC requirements, and responsible gambling obligations;
• Legitimate interests: processing for fraud prevention, platform security, and internal analytics, where such interests do not override your fundamental rights;
• Consent: processing for marketing communications and optional platform personalisation features, where you have provided explicit, withdrawable consent.

Data Sharing & Third-Party Disclosure

myslot does not sell, rent, or commercially disclose your personal data to third parties. We share personal data only in the following limited circumstances:

7.1 Payment Processing Partners

Transaction data is shared with our payment processing partners — including DuitNow, FPX operators, Touch 'n Go eWallet, Boost, GrabPay, and cryptocurrency network processors — solely for the purpose of processing your deposits and withdrawals. These partners operate under strict contractual data processing agreements.

7.2 Identity Verification Services

KYC documentation may be shared with third-party identity verification service providers engaged to assist with the verification of player identity and document authenticity. These providers process data solely on our instruction.

7.3 Game Technology Providers

Gameplay session data (including account identifiers and game activity) is shared with licensed third-party game studios and sports betting providers whose games are integrated into the myslot platform. This sharing is limited to what is technically necessary for game delivery and fair play auditing.

7.4 Regulatory and Law Enforcement Bodies

myslot will disclose personal data to competent regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, regulatory direction, court order, or where disclosure is necessary to prevent or investigate fraud, money laundering, or other serious criminal activity.

7.5 Business Transfers

In the event of a merger, acquisition, or sale of all or part of myslot's business operations, your personal data may be transferred to the acquiring entity as part of that transaction, subject to equivalent data protection obligations being maintained.

Data Retention

myslot retains personal data for as long as necessary to fulfil the purposes described in this Policy or as required by applicable legal and regulatory obligations. The following indicative retention periods apply:

• Account and identity data: retained for the duration of the account relationship and for a minimum of 5 years following account closure, in accordance with AML record-keeping requirements;
• Financial transaction records: retained for a minimum of 7 years from the date of each transaction, as required under applicable financial regulations;
• KYC documentation: retained for a minimum of 5 years following the end of the business relationship;
• Customer support communications: retained for 2 years from the date of the interaction;
• Technical logs and device data: retained for up to 12 months for security and fraud prevention purposes;
• Marketing consent records: retained for the duration of the consent and for 2 years thereafter as evidence of lawful processing.

Upon expiry of the applicable retention period, personal data is securely deleted, anonymised, or pseudonymised in accordance with our internal data lifecycle procedures.

Data Security

myslot implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or disclosure. These measures include:

• AES-256 encryption for all personal data stored at rest in our databases;
• TLS 1.2 or higher encryption for all data transmitted between your device and our servers;
• Role-based access controls limiting database access to authorised personnel only;
• Full audit logging of all administrative access to personal data systems;
• Two-factor authentication (2FA) available to all registered players and mandatory for all internal administrative accounts;
• Regular penetration testing and security vulnerability assessments conducted by independent security specialists;
• Real-time fraud detection and anomaly monitoring systems;
• Secure development practices with security review integrated into all platform update pipelines.

While myslot employs industry-standard security measures, no online system can be guaranteed to be 100% secure. We encourage all players to use strong, unique passwords, enable two-factor authentication, and notify us immediately at [email protected] if they suspect any unauthorised access to their account.

Cookies & Tracking Technologies

myslot uses cookies and similar tracking technologies to operate and improve the platform. The following categories of cookies are used:

10.1 Essential Cookies

Required for the platform to function. These include session management cookies that keep you logged in during your visit, security tokens that protect against cross-site request forgery (CSRF), and load-balancing cookies. These cookies cannot be disabled without significantly impairing platform functionality.

10.2 Performance & Analytics Cookies

Used to collect anonymised data on how players navigate and use the platform — including page load times, error rates, and feature engagement metrics. This data is used solely to improve platform performance and user experience. No personally identifiable information is included in analytics reporting.

10.3 Preference Cookies

Store your platform preferences such as language settings and display configurations to provide a consistent experience across visits.

10.4 Security Cookies

Used by our fraud detection systems to identify suspicious login patterns, recognise trusted devices, and help protect your account from unauthorised access.

myslot does not use third-party advertising cookies or tracking pixels that share your browsing behaviour with advertising networks. You may manage cookie preferences through your browser's cookie settings. Disabling essential cookies may affect platform functionality.

Your Data Rights

As a data subject, you hold the following rights in respect of your personal data processed by myslot. To exercise any of these rights, please contact us at [email protected] with your full registered name and account email address.