Privacy Policy

1. Introduction

Slot212 ("we", "us", "our", "the Platform") operates the online casino and sports betting service available at slot212.cam, serving registered players across Malaysia including Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, and Johor Bahru. In the course of operating this platform and providing our services, we collect and process certain personal data about our players and visitors.

This Privacy Policy sets out the types of personal data we collect, the purposes for which it is collected and processed, the parties with whom it may be shared, the security measures we apply to protect it, and the rights you hold as a data subject. We are committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection laws and international standards.

This Privacy Policy should be read alongside our Terms & Conditions, which govern the overall agreement between Slot212 and each registered player. Together, these documents form the complete framework for your relationship with the platform.

2. Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" — Any information that identifies or could reasonably be used to identify a natural person, whether directly or indirectly. This includes, but is not limited to, name, identity card number, email address, phone number, IP address, and payment account details.
• "Processing" — Any operation performed on personal data, including collection, recording, storage, use, disclosure, transfer, erasure, or destruction, whether by automated means or otherwise.
• "Data Controller" — Slot212, which determines the purposes and means of processing personal data collected through the platform.
• "Data Processor" — Any third party that processes personal data on behalf of Slot212, acting under contractual instruction and subject to data protection obligations.
• "Data Subject" — The natural person to whom personal data relates. In the context of Slot212, this is primarily the registered player or website visitor.
• "KYC" — Know Your Customer — the identity and document verification process required for all Slot212 accounts prior to withdrawal processing.
• "Cookies" — Small text files placed on a user's device by a web server for the purpose of storing session information, user preferences, or tracking data.

3. Personal Data We Collect

Slot212 collects personal data in several categories depending on the nature of your interaction with the platform. We collect only the data that is necessary for the purposes described in this policy — no more.

3.1 Identity & Registration Data

• Full legal name as it appears on government-issued identification
• Date of birth (for age verification — players must be 21 or above)
• Nationality and country of residence
• Residential address, including city and postcode
• Email address
• Mobile phone number
• Username and encrypted account password

3.2 KYC Verification Documents

• Scanned or photographed copy of government-issued photo identification (National Identity Card, passport, or driving licence)
• Proof of address documentation (utility bill, bank statement, or official government correspondence dated within three months)
• Proof of payment method (e.g., e-wallet account screenshot showing your name, or redacted bank statement)
• Additional documentation as may be required for enhanced due diligence

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts, dates, and payment method references
• E-wallet account identifiers (Touch 'n Go eWallet, Boost, GrabPay) — account names only, not full credentials
• Bank account or FPX/DuitNow reference details used for transactions
• Cryptocurrency wallet addresses used for USDT TRC20 deposits and withdrawals
• Bonus and promotion utilisation records

3.4 Gaming & Betting Activity Data

• Game session records including titles played, bet amounts, and outcomes
• Sports betting selections, stakes, and settlement records (including markets such as Liga Super Malaysia, EPL, and UFC)
• Account balance history
• Responsible gambling tool activations and settings (deposit limits, self-exclusion records)

3.5 Technical & Device Data

• IP address and geolocation data (city and country level only)
• Device type, operating system, and browser information
• Session duration and platform interaction logs
• Cookie identifiers and tracking pixel data where applicable

3.6 Communications Data

• Records of live chat, email correspondence, and support ticket content
• Complaint and dispute records
• Responses to surveys or feedback requests where voluntarily provided

4. How We Collect Personal Data

Slot212 collects personal data through the following channels and mechanisms:

• Direct provision by you: Data entered during account registration, KYC document upload, deposit and withdrawal requests, support interactions, and voluntary survey responses
• Automated technical collection: IP addresses, device data, session logs, and cookie data collected automatically when you access or use the platform
• Payment service providers: Transaction confirmation data received from payment processors facilitating deposits and withdrawals via DuitNow, FPX, e-wallets, and cryptocurrency networks
• Identity verification services: Confirmation data from third-party KYC and document verification providers used to authenticate identity documents
• Fraud detection and AML screening systems: Risk signals and screening results from sanctions screening and anti-money laundering monitoring systems

5. Data Processing & Purposes

Slot212 processes your personal data exclusively for the purposes set out in the table below. We do not process personal data for any purpose that is incompatible with these stated purposes without obtaining your explicit consent or having another lawful basis to do so.

6. Lawful Basis for Processing

Slot212 relies on the following lawful bases when processing your personal data:

• Contract Performance: Processing is necessary to fulfil our contractual obligations to you as a registered player, including account management, payment processing, and service delivery.
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, KYC requirements, age verification mandates, and regulatory reporting duties.
• Legitimate Interests: Processing is necessary for our legitimate business interests, including fraud prevention, platform security, responsible gambling monitoring, and service improvement — provided these interests are not overridden by your rights.
• Consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time by contacting our support team. Withdrawal of consent does not affect the lawfulness of prior processing.

7. Data Sharing & Third-Party Disclosure

Slot212 does not sell, rent, or trade your personal data to any third party. We share personal data only in the following limited and controlled circumstances:

7.1 Service Providers & Data Processors

We engage carefully selected third-party service providers who process personal data on our behalf under written contractual agreements that impose strict data protection obligations. These include:

• Payment processors — facilitating deposits and withdrawals via DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, and cryptocurrency networks
• KYC and identity verification providers — verifying the authenticity of identity documents and conducting age confirmation
• AML and fraud screening systems — monitoring transactions for suspicious activity and sanctions compliance
• IT infrastructure and cloud hosting providers — providing secure server infrastructure for platform operations
• Customer support platforms — facilitating live chat and email support operations

7.2 Regulatory & Legal Disclosure

Slot212 may disclose personal data to governmental authorities, law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, court order, or lawful regulatory request. We will notify affected players of any such disclosure to the extent permitted by law.

7.3 Business Transfers

In the event of a merger, acquisition, sale of assets, or restructuring involving Slot212, personal data held by the platform may be transferred to the acquiring or successor entity as part of that transaction, subject to equivalent privacy protections being maintained.

8. Data Retention

Slot212 retains personal data for only as long as is necessary to fulfil the purposes for which it was collected, or for as long as is required by applicable law or regulation. The following general retention periods apply:

• Account and identity data: Retained for the duration of the active account relationship plus a minimum of five (5) years after account closure, in accordance with AML and regulatory record-keeping obligations.
• KYC documentation: Retained for a minimum of five (5) years from the date of account closure or the date of the last transaction, whichever is later.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Gaming activity records: Retained for a minimum of three (3) years from the date of the activity.
• Support and communications records: Retained for three (3) years from the date of the last communication.
• Marketing consent records: Retained for the duration of your consent plus three (3) years for audit purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Anonymised data may be retained indefinitely for statistical and analytical purposes.

9. Data Security

Slot212 implements technical and organisational security measures commensurate with the sensitivity of the personal data we hold and the risks associated with its processing. These measures include, but are not limited to:

• Encryption in transit: All data exchanged between your device and the Slot212 platform is encrypted using TLS (Transport Layer Security) protocols.
• Encryption at rest: Sensitive data stored on our servers, including KYC documents and financial records, is encrypted using AES-256 or equivalent standards.
• Access controls: Personal data is accessible only to authorised Slot212 personnel and service providers on a strict need-to-know basis, with role-based access controls enforced.
• System monitoring: Our infrastructure is continuously monitored for unauthorised access, suspicious activity, and potential security incidents.
• Penetration testing and audits: Regular security assessments are conducted to identify and remediate vulnerabilities in the platform's technical architecture.

10. Cookies & Tracking Technologies

Slot212 uses cookies and similar tracking technologies to operate the platform effectively, maintain your session, personalise your experience, and analyse platform usage. The following categories of cookies may be placed on your device:

• Essential Cookies: Strictly necessary for the platform to function. These cookies manage your login session, remember your security preferences, and ensure the integrity of your gaming session. These cannot be disabled without impairing platform functionality.
• Functional Cookies: Remember your preferences, such as language settings, and provide a more personalised experience. Disabling these may affect some non-essential features.
• Analytical Cookies: Collect anonymised data about how players use the platform, including pages visited and features used, to help us improve the service. Data collected is aggregated and does not identify individuals.
• Security Cookies: Used to detect fraudulent activity, authenticate users, and protect the platform against automated attacks and account takeover attempts.

Most web browsers allow you to control cookie settings through the browser's preferences or settings menu. Blocking certain categories of cookies may affect the availability and functionality of some platform features. For more information on managing cookies on your device, consult your browser's help documentation.

11. Your Data Rights

As a data subject, you hold the following rights in relation to the personal data Slot212 holds about you. These rights may be exercised by contacting our support team via the details provided in Section 15. We will respond to all verifiable rights requests within thirty (30) days of receipt.

11.1 Right of Access

You have the right to request a copy of the personal data Slot212 holds about you, along with information about the purposes for which it is being processed, the categories of data held, and the parties to whom it has been disclosed.

11.2 Right to Rectification

If you believe that any personal data Slot212 holds about you is inaccurate or incomplete, you have the right to request its correction. Slot212 will action rectification requests within ten (10) business days, subject to verification of the corrected information.

11.3 Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent and no other lawful basis applies, or where the data has been unlawfully processed. Please note that Slot212 is subject to legal retention obligations (see Section 8) that may preclude full erasure of certain categories of data.

11.4 Right to Restriction of Processing

You may request that Slot212 restrict the processing of your personal data in certain circumstances, including where you contest the accuracy of the data or where you have objected to processing pending verification of our legitimate grounds.

11.5 Right to Data Portability

Where processing is based on your consent or contract performance, you have the right to receive the personal data you have provided to Slot212 in a structured, commonly used, machine-readable format, and to transmit that data to another controller.

11.6 Right to Object

Where processing is based on our legitimate interests, you have the right to object to that processing. Slot212 will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, or where the processing is necessary for legal claims.

11.7 Right to Withdraw Consent

Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

12. Minors & Age Verification

The Slot212 platform is strictly for individuals aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory component of the Slot212 KYC process, and accounts will not be permitted to make deposits or withdrawals until the account holder's age has been confirmed through verified identity documentation.

If Slot212 becomes aware that personal data has been collected from a person under the age of 21, we will immediately suspend the associated account, delete the personal data in question to the extent possible within our legal retention obligations, and take such further action as may be required by applicable law or our responsible gambling policies.

If you have reason to believe that a person under the age of 21 has registered an account or provided personal data to Slot212, please contact us immediately at the details provided in Section 15.

13. International Data Transfers

As an international online gaming platform, Slot212 may transfer personal data to servers, service providers, or processing facilities located outside of Malaysia. Where such transfers occur, Slot212 ensures that appropriate safeguards are in place to protect personal data to a standard equivalent to or greater than that required under applicable Malaysian data protection law.

Safeguards for international transfers may include standard contractual clauses agreed with data processors, adequacy assessments of recipient jurisdictions, and binding data processing agreements that impose equivalent data protection obligations on receiving parties.

14. Changes to This Privacy Policy

Slot212 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or operational requirements. Material changes — those that significantly affect your rights or the manner in which we use your data — will be communicated to registered players by email notification and a prominent notice on the platform no less than seven (7) days before they take effect.

Non-material updates, such as typographical corrections or minor clarifications that do not alter the substance of our data practices, may be made without advance notice. The date of the most recent revision is displayed at the top of this page. We encourage you to review this Privacy Policy periodically to remain informed of our data handling practices.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data Slot212 holds about you, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the Slot212 platform interface — the fastest channel for privacy and account queries
• Email: [email protected] — for formal written data rights requests, please clearly mark the subject line "Data Rights Request" or "Privacy Enquiry"

When submitting a data rights request, please include your registered username, the email address associated with your account, and a clear description of your request. We will verify your identity before processing any request relating to personal data access, rectification, or erasure. All privacy enquiries are handled by our compliance and customer service teams and will be responded to within thirty (30) calendar days.