slots33 Privacy Policy

1 Overview & Data Controller

slots33 is the data controller responsible for the personal data processed in connection with the slots33 platform. As data controller, slots33 determines the purposes and means of processing your personal data and is accountable for ensuring that such processing is conducted lawfully, fairly, and transparently in accordance with applicable data protection legislation and the requirements of the international gaming authority licence under which slots33 operates.

This Policy covers personal data collected through the slots33 website, the account registration process, platform usage, payment transactions, customer support interactions, and marketing communications. It does not cover personal data processed by third-party websites or services that may be linked from the slots33 platform. slots33 is not responsible for the privacy practices of any third party.

The slots33 platform is strictly for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under the minimum age, we will take immediate steps to delete that data and close the associated account.

2 Personal Data We Collect

slots33 collects personal data that is necessary for the purposes described in this Policy. The categories of personal data we collect include:

2.1 Registration Data

• Full legal name;
• Date of birth (for age verification);
• Email address;
• Mobile telephone number (where provided for two-factor authentication);
• Country and city of residence (e.g., Kuala Lumpur, Penang, Johor Bahru);
• Username and encrypted password.

2.2 Identity Verification (KYC) Data

• Copy of government-issued identification document (Malaysian MyKad, passport, or equivalent);
• Proof of address documentation where required;
• Source-of-funds documentation where required for compliance purposes.

2.3 Financial Data

• Payment method identifiers (e.g., masked e-wallet account references for Touch n Go, Boost, GrabPay; masked bank account details for Maybank, CIMB, Hong Leong Bank);
• Transaction history — deposits, withdrawals, bonuses, and wagers;
• Account balance records.

2.4 Platform Usage Data

• Games accessed, bet history, and session duration;
• Sportsbook markets accessed and betting activity;
• Responsible gaming settings and any limit or exclusion records;
• Customer support interaction records including live chat logs and email correspondence.

2.5 Technical Data

• IP address and approximate geolocation (country/city level);
• Device type, operating system, and browser type;
• Cookie identifiers and session tokens (see Section 6);
• Login timestamps and access logs.

3 How We Use Your Personal Data

slots33 uses the personal data we collect for the following purposes:

• Account Management: Creating, maintaining, and securing your slots33 account; verifying your identity and age at registration and upon request; processing login requests and managing session security;
• Service Delivery: Providing access to all slots33 platform products — slots, live casino, sportsbook, and Lucky Dice; processing deposits, withdrawals, and bonus credits; delivering customer support;
• Regulatory Compliance: Fulfilling KYC and anti-money laundering obligations under our Licence; reporting to regulatory authorities as required; maintaining records required by the licensing authority;
• Responsible Gaming: Monitoring player activity for signs of problem gambling; enforcing deposit limits, session restrictions, and self-exclusion records; preventing self-excluded players from accessing the platform;
• Fraud Prevention & Security: Detecting and preventing fraudulent account activity, bonus abuse, and multi-accounting; identifying and blocking access from Restricted Territories;
• Platform Improvement: Analysing aggregated, anonymised usage data to improve game selection, platform performance, and user experience;
• Marketing Communications: Sending promotional emails and platform notifications to players who have consented to receive them (see Section 11 for opt-out rights).

4 Legal Basis for Processing

slots33 processes personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our obligations under the account Terms and Conditions accepted at registration — including account creation, game access, payment processing, and customer support;
• Legal Obligation: Processing required to comply with applicable law and our Licence obligations — including KYC verification, AML record-keeping, and regulatory reporting;
• Legitimate Interests: Processing conducted for fraud prevention, platform security, responsible gaming monitoring, and aggregated service improvement analytics — where our legitimate interests are not overridden by your fundamental rights;
• Consent: Processing of personal data for direct marketing communications, where we rely on your freely given, specific, and informed consent obtained at registration or subsequently. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5 Data Sharing & Disclosure

slots33 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We disclose personal data only in the following circumstances:

• Licensed Game Providers: Game studios and live casino platform providers receive session tokens and anonymous player identifiers necessary to deliver game content. These providers do not receive your full registration data;
• Payment Processors: Payment service providers (including e-wallet operators such as Touch n Go and Boost, and banking partners) receive the financial data necessary to process deposit and withdrawal transactions. These providers are contractually bound to process data only as directed by slots33;
• KYC & AML Service Providers: Identity verification and anti-money laundering screening services receive the specific data necessary to complete verification checks on our behalf;
• Regulatory Authorities: slots33 will disclose personal data to the issuing gaming authority, relevant financial regulators, or law enforcement agencies where required by law or valid legal order;
• Corporate Transactions: In the event of a merger, acquisition, or sale of substantially all assets of slots33, personal data held on registered players may be transferred to the successor entity, subject to equivalent data protection obligations.

6 Cookies & Tracking Technologies

slots33 uses cookies and similar tracking technologies to operate the platform, maintain session state, and improve the player experience. The categories of cookies used by slots33 include:

• Strictly Necessary Cookies: Essential to the operation of the slots33 platform — including session authentication cookies that keep you logged in during an active session. These cannot be disabled without preventing platform access;
• Functional Cookies: Store your platform preferences (such as language and game lobby display settings) to personalise your experience across sessions;
• Analytics Cookies: Collect anonymised and aggregated data on how players navigate and use the platform, used solely for internal performance improvement purposes. slots33 does not share analytics data in identifiable form with third parties;
• Responsible Gaming Cookies: Store session duration data locally to support session time reminder functionality.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in to your slots33 account and accessing the platform.

7 Data Retention

slots33 retains personal data for as long as necessary to fulfil the purposes described in this Policy, subject to the following minimum retention periods required by our Licence and applicable law:

• Account and KYC records: Retained for a minimum of five (5) years following account closure, in compliance with anti-money laundering regulations;
• Transaction records: Retained for a minimum of five (5) years following each transaction, as required by financial record-keeping obligations;
• Customer support records: Retained for a minimum of three (3) years following the closure of each support case;
• Self-exclusion records: Retained for the duration of the exclusion period and for a minimum of five (5) years thereafter to prevent re-registration during the exclusion window;
• Marketing consent records: Retained until consent is withdrawn and for a reasonable period thereafter as evidence of the consent basis.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in a manner that prevents reconstruction of identifiable information.

8 Data Security

slots33 implements technical and organisational security measures appropriate to the nature of the personal data processed and the risks associated with its processing. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the slots33 platform;
• Encryption of passwords and sensitive financial data at rest using industry-standard algorithms;
• Role-based access controls limiting internal staff access to personal data on a strict need-to-know basis;
• Regular penetration testing and security audits conducted by independent third parties;
• Incident response procedures for the detection, containment, and notification of personal data breaches in accordance with applicable regulatory requirements.

While slots33 takes all reasonable steps to protect your personal data, no internet transmission or electronic storage system is completely secure. Players are responsible for maintaining the confidentiality of their own account credentials. slots33 will never ask you for your password by email, live chat, or any other communication channel.

9 Your Data Protection Rights

Subject to applicable law and the conditions of our Licence, registered players and visitors to the slots33 platform have the following rights in relation to their personal data:

• Right of Access: You may request a copy of the personal data slots33 holds about you;
• Right to Rectification: You may request correction of inaccurate or incomplete personal data;
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations;
• Right to Restriction: You may request that we restrict processing of your personal data in certain circumstances while a query or objection is being assessed;
• Right to Data Portability: Where processing is based on consent or contractual necessity, you may request that your personal data be provided to you in a structured, machine-readable format;
• Right to Object: You may object to processing based on legitimate interests or direct marketing at any time;
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, contact the slots33 data protection team at [email protected] with "Data Rights Request" in the subject line. We will respond within 30 days of receiving a valid request. We may require identity verification before processing data rights requests.

10 Children & Minors

If slots33 becomes aware, through the KYC verification process or any other means, that personal data has been collected from a person under the age of 21, we will immediately suspend the associated account, delete the collected data to the extent permitted by our legal retention obligations, and report the matter to the licensing authority where required.

If you are a parent or guardian and believe that a person under the age of 21 in your care has registered an account with slots33, please contact us immediately at [email protected] so that we may take prompt remedial action.

11 Marketing Communications

slots33 may send promotional emails, platform notifications, and SMS messages to players who have provided consent to receive marketing communications at the time of registration or subsequently through account settings. Marketing communications may include information about new games, bonus offers, sportsbook promotions, and platform updates.

You may withdraw consent to receive marketing communications at any time by:

• Updating your communication preferences in your slots33 account settings;
• Clicking the unsubscribe link in any marketing email from slots33;
• Contacting the slots33 support team at [email protected] with a written opt-out request.

Withdrawal of marketing consent will be processed within 5 business days. Please note that withdrawal of marketing consent does not affect the receipt of essential transactional communications — such as deposit confirmations, withdrawal notifications, and security alerts — which are sent on the basis of contractual necessity and cannot be opted out of while your account remains active.

Players who have an active self-exclusion record will not receive any marketing communications from slots33 for the duration of the exclusion period, regardless of their recorded marketing consent status at the time of self-exclusion.

12 International Data Transfers

As an internationally licensed platform serving Malaysian players, slots33 may process or transfer personal data to service providers and infrastructure partners located outside Malaysia. Where such transfers occur, slots33 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required under our Licence, including:

• Standard contractual clauses or equivalent data transfer agreements with recipient service providers;
• Transfers only to jurisdictions recognised as providing an adequate level of data protection, or where equivalent contractual protections are in place;
• Contractual obligations on all data processors requiring them to implement appropriate technical and organisational security measures.

13 Amendments to This Policy

slots33 reserves the right to amend this Privacy Policy at any time. Material amendments will be notified to registered players via email to the address on record or via a prominent notice on the platform at next login, with the "Last Updated" date on this page revised accordingly.

Your continued use of the slots33 platform following the publication of an amended Policy constitutes your acceptance of the revised terms. If you do not agree to any amendment, you should cease using the platform and may request voluntary account closure in accordance with the slots33 Terms and Conditions.

14 Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by slots33, please contact us using the details below:

If you are dissatisfied with our response to a data rights request or privacy concern, you have the right to escalate your complaint to the licensing authority's dispute resolution mechanism or to the relevant data protection supervisory authority in your jurisdiction of residence.