Slot97 Privacy Policy — Personal Data Protection for Malaysian Members

Slot97 is an online betting platform operating in Malaysia, serving members from every corner of the country — from Perlis to Sabah and Sarawak. As a platform handling sensitive financial and personal information, we place data security and privacy among our highest priorities across all operations.

This Privacy Policy forms part of the overall agreement between you and slot97, and should be read together with Terms & Conditions us. The terms of this Privacy Policy are binding and apply to all registered members and users browsing the slot97 platform, regardless of the access method used — whether via web browser or mobile app.

Slot97 collects various types of personal data depending on how you interact with the platform. The following are the main categories of data we collect:

Data you provide directly:

• Full name as per identity card or passport
• Identity card number (MyKad) or passport number
• Date of birth and age
• Active mobile phone number
• Email address
• Residential address in Malaysia
• Payment method details (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX account number via Maybank2u or CIMB Clicks)
• Account password (stored in encrypted form — slot97 never stores passwords in plain text)

Data collected automatically during platform use:

• Your device's IP address
• Web browser type and operating system version
• Platform usage data, including pages visited, session duration, and actions taken
• Device information such as phone model and screen resolution
• Geographic location data (state and city) based on IP address
• Transaction history records for deposits, withdrawals and bets

Data collected by slot97 is used solely for the following purposes:

• Account management: Creating and maintaining your member account, including identity verification and account recovery.
• Transaction processing: Processing deposits, withdrawals and bets accurately and securely through your chosen Malaysian payment methods.
• Identity verification (KYC): Meeting legal know-your-customer requirements to prevent fraud and money laundering.
• Customer support: Enables slot97's Malay-speaking support team to assist you more effectively whenever you reach out to us.
• Platform improvements: Analysing usage patterns to improve the user experience, fix bugs and introduce new features that are more useful.
• Important communications: Sending account-related notifications such as deposit confirmations, withdrawal approvals or important security alerts.
• Marketing communications: Sending information about slot97 promotions and offers — but only to members who have given their consent.
• Fraud prevention: Detecting and preventing suspicious activity, fraud or violations of slot97's platform terms of use.

Slot97 does not sell or rent members' personal data to any third party for their own commercial purposes. However, there are limited situations where slot97 may need to share relevant data with certain parties:

• Payment service providers: Required transaction information is shared with payment providers such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and banks supporting FPX to process your financial transactions.
• Technology providers: Cloud, hosting, and security service providers used by slot97 may process certain data in the course of delivering their technical services — however, all such providers are bound by strict data confidentiality agreements.
• Legal authorities: Slot97 will disclose required data to Malaysian authorities where mandated by law, court order, or legitimate authority request for the purposes of criminal investigation or law enforcement.
• Audit and compliance: Independent auditors or compliance bodies appointed by slot97 may access certain subsets of data when conducting security or regulatory compliance audits — subject to strict access controls.

In all of the data sharing cases above, slot97 only shares information that is strictly necessary (minimum disclosure principle) and ensures that data recipients are bound by confidentiality obligations equivalent to or higher than slot97's own standards.

Slot97 continually invests in security infrastructure to ensure your personal data remains protected at all times. The key security measures we employ include:

• 256-bit SSL Encryption: All communications between your browser or app and slot97's servers are fully encrypted using the latest SSL standards.
• Data encryption at rest: Sensitive data stored in slot97's database is encrypted — passwords are hashed using a one-way algorithm that cannot be decrypted.
• Role-based access control: Only slot97 staff who require access to specific data in order to perform their duties are permitted to access it — with a full audit log maintained for every access.
• Continuous security monitoring: slot97's systems are monitored 24 hours a day to detect any unauthorised access attempts or suspicious activity.
• Regular penetration testing: Slot97 conducts regular security testing by independent experts to identify and address any potential vulnerabilities.
• Two-factor authentication (2FA): slot97 members are encouraged to enable 2FA to add an extra layer of security to their accounts.

The slot97 platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. The following are the types of cookies used:

You can manage cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the slot97 platform. Analytics and marketing cookies can be declined without impacting your ability to use slot97 fully.

Slot97 retains your personal data for as long as your account remains active or as long as it is needed to provide services to you. For closed accounts, slot97 keeps certain records for the period required under Malaysian law for audit, compliance, and fraud prevention purposes.

Specifically, slot97's data retention policy is as follows:

• Active account data: Retained for as long as your account remains active on the slot97 platform.
• Financial transaction records: Retained for seven (7) years in accordance with Malaysian legal requirements relating to financial records and anti-money laundering.
• Support communication records: Retained for three (3) years for reference and service improvement purposes.
• Security log data: Retained for twelve (12) months for security monitoring and incident investigation purposes.

Once the retention period expires, slot97 will securely delete or anonymise the data in accordance with established procedures. You may also request early deletion of your data — see Section 8 for details on your rights.

As a slot97 member, you have the following rights regarding your personal data under the provisions of Malaysia's Personal Data Protection Act 2010:

To exercise any of the above rights, please contact the slot97 support team via live chat or email at support@slot97.run. We will verify your identity before processing any request relating to personal data.

The slot97 platform is intended for users aged 18 and above only. Slot97 does not knowingly collect, store or process personal data of individuals under the age of 18.

If slot97 discovers that a child's personal data has been collected without our knowledge, we will take immediate steps to delete that data and close the relevant account. Parents or guardians who suspect their underage child has registered an account with slot97 are asked to contact our support team immediately so that appropriate action can be taken without delay.

The slot97 platform may contain links to third-party websites or services in certain contexts. This Privacy Policy applies solely to the slot97 platform and does not cover the privacy practices of any other websites you may visit through those links.

Slot97 is not responsible for the privacy policies or content of third-party websites. We encourage you to read the privacy policy of every website you visit before providing them with any personal information. The security of your data on external websites is your own responsibility and is beyond slot97's control.

Slot97 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, new legal requirements, or platform improvements. All changes take effect immediately upon publication of the updated version on the slot97.run platform.

For material changes — that is, changes that significantly affect how we use your data — slot97 will notify members via an in-platform notification or the email registered to your account at least seven (7) days before the changes take effect. The last updated date is always displayed at the top of this document.

Your continued use of the slot97 platform following any changes to this Privacy Policy will be considered your acceptance of the updated version. If you do not agree with any changes, you have the right to close your account and request deletion of your data in accordance with the procedure set out in Section 8.

If you have any questions, concerns, or complaints regarding how slot97 handles your personal data, or if you wish to exercise any of the rights set out in this Privacy Policy, please contact us through the following channels:

• Email: support@slot97.run — reply within 24 hours
• Live Chat: Available on the slot97 platform — 24 hours a day, 7 days a week, in Bahasa Melayu

Slot97's support team is fluent in Malay and operates around the clock, ready to assist you with any privacy or data security enquiries. We are committed to responding to all privacy-related queries within a reasonable timeframe and providing clear, satisfactory explanations.

If you are not satisfied with the response provided by the slot97 team, you have the right to file a complaint with Malaysia's Department of Personal Data Protection (JPDP), the body responsible for enforcing the PDPA 2010 in this country.