Privacy Policy Slotkaya — How We Protect Your Personal Data in Malaysia

Slotkaya collects personal data in a number of different situations. Below is a detailed breakdown of the types of data collected and their sources:

Data we do not collect: Slotkaya never stores full credit or debit card numbers in our systems. All card transaction processing is handled directly by licensed, PCI DSS-certified payment providers.

Slotkaya uses the personal data collected solely for the following purposes. We will not use your data for any other purpose without first obtaining your renewed consent.

• Account management: Creating, verifying, and maintaining your Slotkaya account, including the mandatory KYC (Know Your Customer) process.
• Transaction processing: Processes deposits via Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, and FPX, as well as withdrawals of winnings to the same methods.
• Service delivery: Allows you to play slots, live casino, jackpot, and place Sports Betting wagers on events such as the Malaysia Super League, EPL, BWF badminton, and esports.
• Platform security: Detecting and preventing fraud, money laundering, multiple account usage, and other harmful activities.
• Customer support: Responding to enquiries, resolving technical issues, and improving our service quality based on your feedback.
• Legal compliance: Fulfilling obligations under Malaysian law, including PDPA 2010 and applicable financial reporting requirements.
• Personalise your experience: Personalising game recommendations, promotions, and notifications based on your preferences and playing habits — only where you have given your consent.

Slotkaya does not sell, rent, or trade your personal data to any third party for their own marketing purposes. This is a commitment we stand by.

However, in the course of operating the platform, we share limited data with the following parties under defined circumstances:

• Licensed payment providers: Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, FPX (Maybank2u, CIMB Clicks) — used solely to process your financial transactions. They are subject to strict PCI DSS security standards.
• Game software providers: Pragmatic Play, Evolution Gaming, PG Soft, and other licensed providers — minimum data required to deliver games and verify results.
• Cloud services and infrastructure: Server providers hosting the Slotkaya platform. All providers are bound by strict confidentiality agreements.
• Competent authorities: Malaysian law enforcement agencies or regulatory bodies where required by law or a valid court order.

Protecting your personal data is the highest technical priority at Slotkaya. We continually invest in our security infrastructure to ensure your information remains protected at all times.

• 256-bit SSL encryption: All communications between your browser and Slotkaya's servers are encrypted using the TLS 1.3 protocol — the same standard used by Malaysia's leading banks.
• Data encryption at rest: Sensitive data in our databases is encrypted at rest using AES-256. Even in the highly unlikely event of an intrusion, the data would remain unreadable to any unauthorised party.
• Two-factor authentication (2FA): Slotkaya provides and encourages the use of 2FA for all player accounts, adding an extra layer of protection beyond passwords.
• Internal access controls: Slotkaya staff may only access player data on a strict need-to-know basis. All access is logged and monitored automatically.
• Regular security testing: The Slotkaya platform undergoes regular penetration testing and security audits conducted by independent experts.
• Incident response plan: Slotkaya has tested incident response procedures in place to ensure any security breach is addressed swiftly and players are notified accordingly.

Slotkaya uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly.

Types of cookies we use:

• Essential cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled.
• Performance cookies: Collects anonymous information about how players use the platform to help us identify and resolve technical issues.
• Functional cookies: Saves your preferences such as language, display settings, and personal configurations to provide a more comfortable experience.
• Analytics cookies: Helps us understand aggregated usage patterns to improve the design and content of the Slotkaya platform.

You can manage your cookie settings through your web browser. However, disabling essential cookies may affect the functionality of the Slotkaya platform.

Given that Slotkaya involves financial transactions in Malaysian Ringgit (RM), we apply the most stringent payment security standards in the industry.

• No full card data stored: Slotkaya does not store full credit or debit card numbers. All card processing is handled by PCI DSS-certified payment providers.
• Tokenisation: For your convenience, your saved payment method details (such as your verified Touch 'n Go account number) are stored in tokenised form and cannot be used to process transactions without additional identity verification.
• 24/7 fraud monitoring: Slotkaya's automated fraud detection system monitors every transaction to identify suspicious activity and protect your funds.
• Segregated funds: Player funds are held in dedicated accounts separate from Slotkaya's operational accounts.
• Payment method verification: Withdrawals may only be made to the same payment method used for the deposit, or to a method that has been verified through the identity verification process.

Slotkaya does not retain personal data longer than necessary for the purpose it was collected, or beyond the period required under Malaysian law.

• Active account data: Retained for the duration of the active account and for 7 years after account closure to meet financial record-keeping and anti-money laundering requirements.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian legal requirements for financial records.
• Support communication logs: Retained for 3 years from the date of last interaction.
• Technical log data: Retained for 90 days to 12 months depending on log type and security requirements.
• Marketing data: Retained until you withdraw consent or for 3 years from the last interaction, whichever comes first.

When data is no longer needed, it is securely deleted using certified data erasure methods, ensuring it cannot be recovered.

Slotkaya reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our operations, legal requirements, or current industry best practices.

When we make significant changes:

• We will display a clear notice on the Slotkaya platform homepage at least 7 days before any changes take effect.
• You will receive a notification via your registered email or through an in-platform notification.
• The latest version will always be available on this page with a clear update date.
• For changes that require your renewed consent, we will obtain explicit consent before continuing to process your data.

We recommend reviewing this page periodically. Continued use of the Slotkaya after the change notice will be considered acceptance of the updated Privacy Policy, except for changes that require explicit consent.

If you have any questions, concerns, or wish to exercise your privacy rights, the privacy team Slotkaya here to help: