slots33 Privacy Policy

1. About This Policy

This Privacy Policy ("Policy") is published by slots33 ("slots33", "we", "us", "our"), the operator of the online gaming platform at slots33.club. This Policy describes how slots33 collects, uses, discloses, and safeguards personal data provided by users ("you", "Player") when you access or use any part of the slots33 platform, including the website, mobile applications, and customer support channels.

By registering an account or continuing to use slots33, you acknowledge that you have read and understood this Policy. If you do not agree with the practices described here, you should discontinue use of the platform and contact us to close your account.

2. Personal Data We Collect

2.1 Information You Provide Directly

When you register and use slots33, we collect the following categories of personal data that you provide to us:

• Identity Data: Full legal name, date of birth, gender, and copies of government-issued identification documents (MyKad, passport, or equivalent) submitted during KYC verification.
• Contact Data: Email address, Malaysian mobile phone number, and residential address.
• Financial Data: Bank account details, e-wallet identifiers (such as Touch n Go eWallet or Boost account references), and transaction history. Slots33 does not store full card numbers; payment processing is handled by PCI-DSS compliant third-party processors.
• Account Data: Username, encrypted password, account preferences, responsible gaming settings, and communication preferences.
• Support Communications: Records of your communications with the slots33 support team via live chat, email, or any in-platform messaging system.

2.2 Data Collected Automatically

When you access the slots33 platform, certain technical and behavioural data is collected automatically:

• Device & Technical Data: IP address, browser type and version, operating system, device identifiers, screen resolution, and time zone.
• Usage Data: Pages visited, game sessions initiated, betting and wagering history, session duration, login timestamps, and navigation paths within the platform.
• Cookie Data: As described in Section 6 of this Policy.
• Location Data: Approximate geographic location derived from your IP address, used for regulatory compliance (geo-restriction enforcement) and fraud prevention purposes.

3. How We Use Your Personal Data

slots33 uses your personal data for the following purposes:

• Account Management: To create, maintain, and manage your player account, including processing deposits, withdrawals, and bonus credits.
• Identity Verification (KYC): To verify your identity and age (21+ minimum requirement), as mandated by our operating licence and AML obligations.
• Service Delivery: To provide access to games, the sportsbook, live casino, and all other platform features you use.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, money laundering, account takeover attempts, and other prohibited conduct.
• Regulatory Compliance: To fulfil our obligations under applicable gaming, AML, and data protection laws, including reporting requirements to relevant authorities.
• Customer Support: To respond to your enquiries, resolve disputes, and process complaints.
• Platform Improvement: To analyse usage patterns, identify technical issues, and improve the functionality and user experience of slots33.
• Responsible Gaming: To monitor gaming behaviour, apply responsible gaming limits you have set, and identify players who may need additional support.
• Marketing Communications: To send you promotional offers, newsletters, and personalised game recommendations where you have consented to receive such communications. You may withdraw consent at any time.

4. Legal Basis for Processing

slots33 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our contract with you (the Terms & Conditions), including account management, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with applicable law, including KYC/AML requirements, regulatory reporting, and data retention obligations.
• Legitimate Interests: Processing necessary for our legitimate business interests, including fraud prevention, platform security, and service improvement, where these interests are not overridden by your rights.
• Consent: Processing for marketing communications and certain cookie usage, where your explicit consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing & Disclosure

slots33 does not sell your personal data. We share your data only in the following circumstances and only to the extent necessary:

5.1 Service Providers

We engage third-party service providers to support our operations, including payment processors (handling Touch n Go, FPX, and bank transfers), KYC verification providers, cloud infrastructure providers, and customer support platforms. All service providers are contractually bound to process data only on our instructions and to maintain appropriate security standards.

5.2 Game Providers

Game providers integrated into the slots33 platform receive limited technical data (such as session tokens and bet amounts) necessary to deliver game functionality. They do not receive your full identity data unless required for jackpot verification.

5.3 Regulatory & Law Enforcement Bodies

slots33 will disclose personal data to regulators, gaming authorities, financial intelligence units, or law enforcement agencies when required to do so by applicable law, regulatory obligation, or court order. We may also disclose data where we believe disclosure is necessary to protect the rights, property, or safety of slots33, our players, or the public.

5.4 Business Transfers

In the event of a merger, acquisition, or sale of all or part of the slots33 business, personal data may be transferred to the acquiring entity. Affected players will be notified prior to any such transfer and the receiving entity will be bound by privacy obligations equivalent to those in this Policy.

6. Cookies & Tracking Technologies

slots33 uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies and security tokens. They cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, game lobby filters, and responsible gaming display options to personalise your experience.
• Analytical Cookies: Collect aggregated, anonymised data about how players use the platform — pages visited, session duration, error encounters — to help us improve the service.

slots33 does not use third-party advertising or tracking cookies. You may manage functional and analytical cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the platform.

7. Data Security

slots33 implements industry-standard technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and slots33 servers.
• AES-256 encryption for sensitive data stored at rest, including financial records and identity documents.
• Salted cryptographic hashing for stored passwords — slots33 cannot read your password in plain text.
• Role-based access controls limiting staff access to personal data to those with a demonstrated operational need.
• Regular third-party penetration testing and vulnerability assessments of platform infrastructure.
• Automated anomaly detection to identify and respond to unusual access patterns or potential data breaches.

In the event of a personal data breach that poses a risk to your rights and freedoms, slots33 will notify you and relevant authorities within the timeframes required by applicable law.

8. Data Retention

slots33 retains personal data for the following periods:

• Active account data: Retained for the duration of your account and for seven (7) years following account closure, as required by AML and gaming regulatory obligations.
• Transaction records: Retained for seven (7) years from the date of transaction in accordance with financial record-keeping requirements.
• KYC documents: Retained for the period required by our operating licence and applicable AML law, typically five (5) to seven (7) years from account closure.
• Support communications: Retained for three (3) years from the date of the most recent communication in a given support case.
• Marketing consent records: Retained until consent is withdrawn and for twelve (12) months thereafter as evidence of compliance.

Where data is no longer required, it is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.

9. Your Data Protection Rights

Subject to applicable law and regulatory restrictions, you have the following rights in respect of your personal data held by slots33:

• Right of Access: Request a copy of the personal data slots33 holds about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention requirements.
• Right to Restrict Processing: Request that we limit the ways in which we use your data in certain circumstances.
• Right to Data Portability: Request a machine-readable copy of personal data you have provided to us, where processing is based on consent or contract.
• Right to Object: Object to processing of your data based on legitimate interests, including direct marketing.
• Right to Withdraw Consent: Withdraw consent for marketing communications or optional cookies at any time. Withdrawal does not affect the lawfulness of prior processing.

To exercise any of these rights, submit a written request to [email protected]. We will respond within 30 days. Identity verification will be required before any request is processed.

10. Children's Privacy

The slots33 platform is strictly intended for adults aged 21 years and above. slots33 does not knowingly collect, process, or store personal data from individuals under the age of 21. Where we become aware that personal data has been collected from a person under this age, we will delete such data immediately and close the associated account. Parents or guardians who believe their child has registered with slots33 should contact us immediately at [email protected].

11. International Data Transfers

slots33 is operated by an entity incorporated outside Malaysia, and your personal data may be transferred to and processed in countries other than Malaysia. Where such transfers occur, slots33 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable Malaysian data protection law. These safeguards may include contractual clauses approved by relevant data protection authorities and technical security measures equivalent to those described in Section 7 of this Policy.

12. Changes to This Privacy Policy

slots33 reserves the right to update this Privacy Policy at any time. Material changes that affect your rights or the ways in which we process your personal data will be communicated to you via email at least fourteen (14) days before taking effect. Minor changes — such as clarifications of existing practices — will be reflected on this page with an updated "Last Updated" date.

Continued use of the slots33 platform following the effective date of any revision constitutes your acceptance of the updated Policy. If you do not accept the changes, you may close your account prior to the effective date.

13. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by slots33, please contact our Data Protection team:

slots33 takes all privacy enquiries seriously. Our team will acknowledge receipt of your request promptly and provide a substantive response within the statutory timeframe.