Privacy Policy – slot100

1. Introduction

slot100 ("we", "us", "our") operates the online gaming platform accessible at https://slot100.win (the "Platform"). We are committed to protecting the privacy and personal data of all individuals who register accounts, visit the Platform, or otherwise interact with our services.

This Privacy Policy describes the types of personal data we collect, the purposes for which it is used, the conditions under which it may be shared with third parties, and the rights available to data subjects in connection with their personal data. This Policy should be read alongside our Terms & Conditions and Responsible Gaming policy.

2. Data Controller

For the purposes of applicable data protection legislation, slot100 is the data controller responsible for the personal data processed in connection with the Platform. Questions, requests, and complaints regarding this Policy should be directed to the contact details set out in Section 14.

3. Personal Data We Collect

We collect personal data through various means, including directly from you at the time of account registration, through your use of the Platform, and through automated technical means. The categories of data we collect include:

We do not collect or process special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, or biometric data) except where strictly necessary to comply with legal obligations, such as anti-money laundering regulations.

4. How We Use Your Personal Data

slot100 uses the personal data we collect for the following purposes:

• Account management — to create, maintain, and authenticate your slot100 account and enforce the single-account policy.
• Service delivery — to provide access to games, process bets, operate the sportsbook, and deliver live casino services.
• Payment processing — to facilitate deposits and withdrawals via Malaysian payment channels including Maybank2u, FPX, Touch 'n Go eWallet, DuitNow, and Boost.
• Identity verification (KYC) — to verify your identity and age (21+) as required by our operating obligations and responsible gaming commitments.
• Fraud prevention and security — to detect, investigate, and prevent fraudulent transactions, bonus abuse, money laundering, and unauthorised access.
• Regulatory compliance — to meet our obligations under applicable gaming, financial, and data protection regulations, including record-keeping requirements.
• Customer support — to handle account queries, technical issues, payment disputes, and responsible gaming requests submitted via Live Chat or email.
• Personalisation and analytics — to improve the Platform, personalise your experience, and analyse aggregate usage patterns. This does not involve selling your data to third parties.
• Marketing communications — to send you promotional offers, bonus notifications, and platform updates, where you have consented to receive such communications. You may opt out at any time.
• Responsible gaming monitoring — to identify patterns of play that may indicate problem gambling and to intervene in accordance with our Responsible Gaming policy.

5. Legal Basis for Processing

slot100 processes your personal data on the following legal bases:

• Contractual necessity — processing required to fulfil the player account agreement, including account creation, game access, and payment processing.
• Legal obligation — processing required to comply with applicable laws, including anti-money laundering (AML) regulations, age verification requirements, and regulatory reporting obligations.
• Legitimate interests — processing carried out for fraud detection, platform security, and responsible gaming monitoring, where our interests do not override your fundamental rights.
• Consent — processing for marketing communications and certain analytics activities, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Sharing Your Personal Data

slot100 does not sell, rent, or trade your personal data to third parties. We may share your data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment service providers — including FPX gateway operators, Touch 'n Go eWallet, Boost, DuitNow QR network, and GrabPay, solely for the purpose of processing transactions.
• Identity verification services — third-party KYC and AML compliance providers engaged to verify player identities and comply with regulatory requirements.
• Game content providers — studios such as PG Soft, Pragmatic Play, and Habanero receive minimal technical data (session tokens, bet history) necessary to operate game services.
• IT and infrastructure providers — cloud hosting, database, and CDN service providers operating under strict data processing agreements that prohibit independent use of your data.
• Regulatory and law enforcement authorities — where required by law, court order, or regulatory directive. slot100 will only disclose data to such bodies to the extent strictly required.
• Professional advisers — legal counsel, auditors, and insurers, bound by confidentiality obligations, where necessary for the conduct of our business.

All third-party data processors engaged by slot100 are required to implement appropriate technical and organisational security measures and are contractually prohibited from using your data for any purpose beyond the specific service they provide to us.

7. Cookies & Tracking Technologies

The slot100 Platform uses cookies and similar tracking technologies to operate core platform functions, maintain session state, detect fraud, and analyse usage patterns. The following categories of cookies are used:

• Strictly Necessary Cookies — required for the Platform to function. These include session authentication cookies, security tokens, and load balancer cookies. These cannot be disabled.
• Functional Cookies — used to remember your preferences, such as game display settings and lobby filters. These enhance your experience but are not essential to Platform operation.
• Analytics Cookies — used to collect aggregate data on how players navigate the Platform. This data is used to improve game lobby design, page performance, and support workflows. Analytics data is not linked to your personal identity.

You may manage functional and analytics cookies through your browser settings. Disabling strictly necessary cookies will impair Platform functionality and may prevent login.

8. Data Retention

slot100 retains personal data for as long as necessary to fulfil the purposes set out in this Policy, subject to the following minimum retention periods:

• Account and identity data — retained for the duration of your account plus a minimum of 5 years following account closure, to comply with AML record-keeping requirements.
• Transaction records — retained for a minimum of 7 years from the date of the transaction in accordance with financial record-keeping obligations.
• KYC documentation — retained for a minimum of 5 years following account closure or the completion of the relevant due diligence process.
• Support communications — retained for a minimum of 3 years from the date of the communication for dispute resolution and quality assurance purposes.
• Marketing consent records — retained for the duration of your account plus 3 years to demonstrate compliance with consent obligations.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

9. Your Data Rights

Subject to applicable data protection law, you have the following rights in respect of your personal data held by slot100:

• Right of Access — you may request a copy of the personal data we hold about you.
• Right to Rectification — you may request correction of inaccurate or incomplete personal data.
• Right to Erasure — you may request deletion of your personal data, subject to our legal obligation to retain certain records.
• Right to Restriction — you may request that we restrict processing of your data in certain circumstances, such as while a rectification request is being assessed.
• Right to Data Portability — you may request your personal data in a structured, commonly used, machine-readable format where processing is based on consent or contractual necessity.
• Right to Object — you may object to processing based on legitimate interests, including profiling for responsible gaming purposes, subject to slot100 demonstrating compelling legitimate grounds.
• Right to Withdraw Consent — where processing is based on consent (e.g., marketing emails), you may withdraw that consent at any time via your account settings or by contacting support.

To exercise any of the above rights, please contact us at the details set out in Section 14. We will respond to all valid requests within 30 days. We may need to verify your identity before processing a request.

10. Data Security

slot100 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• Encryption at rest for sensitive personal data stored in our databases.
• Role-based access controls limiting internal staff access to personal data on a strict need-to-know basis.
• Regular security assessments, penetration testing, and vulnerability scanning of Platform infrastructure.
• Multi-factor authentication for administrative access to systems holding personal data.

While we take all reasonable precautions, no internet-based system is entirely immune from risk. In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you as required by applicable law.

11. Children's Privacy

The slot100 Platform is strictly for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If you believe that we may have inadvertently collected data from an underage individual, please contact us immediately at the details in Section 14. Upon confirmation, we will delete all such data and close the associated account without delay.

12. International Data Transfers

Some of the third-party service providers engaged by slot100 (including game studios, cloud infrastructure providers, and fraud prevention services) may process personal data outside Malaysia. Where such transfers occur, slot100 ensures that appropriate safeguards are in place, including contractual data processing agreements incorporating standard data protection clauses that require the recipient to protect personal data to a standard consistent with this Policy.

13. Changes to This Privacy Policy

slot100 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered players via the email address associated with their account or via a prominent notice on the Platform. The "Last updated" date at the top of this Policy reflects the date of the most recent revision. Continued use of the Platform following notification of a change constitutes acceptance of the revised Policy.

14. Contact & Data Requests

For privacy-related enquiries, data subject access requests, or to exercise any of the rights described in Section 9, please contact the slot100 Data Protection team:

• Live Chat: Available 24/7 on the Platform. For urgent account or data security concerns, Live Chat is the fastest channel.
• Email: [email protected] — please include "Privacy Request" in the subject line of your message. (Plain text — not a clickable link.)

We will acknowledge all privacy-related requests within 5 business days and provide a substantive response within 30 days of receiving a valid, verified request.