Data Minimisation
slotsmy collects only the personal data that is strictly necessary for account registration, identity verification, transaction processing and legal compliance. We do not collect surplus information for speculative future use.
Privacy at a Glance
Six Core Commitments Behind the slotsmy Privacy Framework
These feature cards summarise the most important aspects of how slotsmy handles your personal data. They do not replace the full policy text below, which should be read in its entirety.
Purpose Limitation
Data collected for a specific purpose — for example, KYC identity verification or payment processing — will not be repurposed for unrelated activities without your separate consent or a legitimate legal basis.
Security Safeguards
All personal data stored by slotsmy is protected by industry-standard technical and organisational measures, including encrypted storage, access controls, regular security audits and staff data-handling training.
Your Legal Rights
Under applicable Malaysian and international data protection principles, you hold meaningful rights over your personal data — including the right to access, correct, restrict and in certain circumstances erase the information we hold about you.
No Unsolicited Sharing
slotsmy does not sell, rent or trade your personal data to commercial third parties for their own marketing purposes. Data shared with service providers is governed by strict contractual data-processing obligations.
Transparent Cookie Use
We use cookies and similar tracking technologies only for session management, fraud detection and aggregate analytics. Detailed information on cookie categories, their purpose and opt-out options is provided in the Cookies section of this policy.
Privacy Policy Full Text
1 Introduction
This Privacy Policy ("Policy") governs the collection, use, storage and disclosure of personal data by slotsmy ("we", "us", "our"), the operator of the website accessible at https://slotsmy.cam. slotsmy is a Malaysia-focused information and entertainment platform providing guidance on online casino games, sports betting, responsible gambling practices, account security and Malaysian payment methods.
This Policy has been prepared with reference to Malaysian data protection principles and applicable international privacy standards. By accessing, registering on or otherwise using the slotsmy platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.
This Policy should be read alongside the slotsmy Terms and Conditions and Responsible Gambling guidelines. Where any conflict exists between this Policy and those documents, the specific provisions most protective of your personal data shall take precedence.
If you are a Malaysian resident, you hold specific rights regarding your personal data under applicable data protection laws. These rights are described in Section 11 of this Policy.
2 Definitions
For the purposes of this Policy, the following terms carry the meanings assigned below:
"Personal Data"
Any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial data and device identifiers.
"Processing"
Any operation performed on personal data, including collection, storage, retrieval, use, disclosure, erasure or destruction.
"Data Subject"
The natural person to whom the personal data relates — in most cases, a registered User of the slotsmy platform.
"Data Controller"
slotsmy, as the entity that determines the purposes and means of processing personal data collected through the platform.
"Third Party"
Any natural or legal person other than slotsmy, the Data Subject, or persons acting under slotsmy's direct authority to process personal data.
"Consent"
A freely given, specific, informed and unambiguous indication of the Data Subject's agreement to the processing of their personal data for a stated purpose.
"KYC"
Know Your Customer — the identity and age verification process conducted to comply with anti-money laundering, responsible gambling and regulatory obligations.
3 Data We Collect
slotsmy collects personal data across several categories depending on the nature of your interaction with the platform. The following table details the principal data types collected:
| Category | Examples | Collection Trigger |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, MyKad / passport number | Registration, KYC verification |
| Contact Data | Email address, mobile number, residential address (including city — Kuala Lumpur, Penang, Johor Bahru etc.) | Registration, profile updates |
| Financial Data | Bank account identifiers, eWallet account references (Touch 'n Go, Boost, GrabPay), FPX/DuitNow transaction IDs, deposit and withdrawal history in MYR/RM | Deposit, withdrawal, payment processing |
| KYC Documents | Scanned or photographed identity documents, proof of address, selfie verification images | KYC verification process |
| Technical Data | IP address, device type, browser type, operating system, login timestamps, session duration | Automatic collection on site visit |
| Usage Data | Pages visited, game categories browsed, search queries, click patterns, referral source | Automatic collection on site interaction |
| Communications Data | Support ticket content, live chat transcripts, email correspondence, feedback submissions | User-initiated contact with support |
4 How We Collect Data
slotsmy collects personal data through the following methods:
- Direct Submission Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support or responding to a survey.
- Automated Technical Collection Data collected automatically through cookies, server logs, analytics software and device fingerprinting technologies when you access or navigate the slotsmy website.
- Payment Provider Data Transaction reference data received from Malaysian payment processors including Maybank, CIMB, Public Bank, Hong Leong, FPX, DuitNow, Touch 'n Go eWallet, Boost and GrabPay when a financial transaction is initiated.
- Identity Verification Services Data returned by third-party KYC verification providers engaged to confirm identity, age and address details against government-issued document databases.
- Anti-Fraud and Compliance Tools Data generated by fraud-detection systems that monitor transaction patterns, device behaviour and account activity for suspicious indicators.
5 Purposes of Processing
slotsmy processes personal data for the following defined purposes. We do not process personal data in a manner incompatible with the purposes listed below without first seeking your renewed consent or establishing an alternative legal basis:
- Account Registration and Management To create, maintain and administer your slotsmy account, including authentication, profile management and account security.
- Identity and Age Verification (KYC) To confirm that you meet the 21+ age requirement and to satisfy anti-money laundering (AML) and responsible gambling compliance obligations before processing withdrawals.
- Transaction Processing To process deposits, withdrawals and related financial transactions in MYR/RM using eligible Malaysian payment instruments, and to maintain accurate financial records.
- Customer Support To respond to enquiries, resolve complaints, manage escalations and provide assistance through live chat, WhatsApp and email support channels.
- Responsible Gambling Obligations To monitor gambling behaviour, enforce deposit limits, process self-exclusion requests, apply cooling-off periods and identify accounts that may require intervention in line with responsible gambling commitments.
- Fraud Prevention and Security To detect, investigate and prevent fraudulent activity, account compromise, money laundering, bonus abuse and other prohibited conduct outlined in the Terms and Conditions.
- Legal and Regulatory Compliance To comply with applicable Malaysian laws, regulatory requirements, court orders and legitimate requests from competent authorities.
- Platform Improvement and Analytics To analyse aggregated usage data, identify content performance, improve navigation and enhance the overall user experience — using anonymised or pseudonymised data wherever possible.
- Marketing Communications To send promotional offers, bonus notifications and platform updates where you have provided explicit consent and have not subsequently withdrawn it.
6 Legal Bases for Processing
slotsmy processes personal data only where a valid legal basis exists. The principal legal bases relied upon are as follows:
- Contractual Necessity Processing required to perform the contract entered into when you register on slotsmy and accept the Terms and Conditions — covering account management, payment processing and KYC.
- Legal Obligation Processing required to comply with applicable Malaysian law, anti-money laundering obligations, responsible gambling regulations and law enforcement directives.
- Legitimate Interests Processing necessary to pursue slotsmy's legitimate business interests — including fraud prevention, platform security and aggregate analytics — where these interests are not overridden by your data protection rights.
- Consent Processing based on your explicit, informed consent — primarily in respect of optional marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.
7 Data Sharing and Disclosure
slotsmy does not sell, rent or trade your personal data to third parties for their own independent commercial purposes. Data may be shared in the following strictly controlled circumstances:
- Payment Service Providers Transaction data shared with Malaysian payment processors (including banks such as Maybank, CIMB, Public Bank, Hong Leong and eWallet providers such as Touch 'n Go, Boost, GrabPay, as well as FPX and DuitNow) solely to facilitate the processing of deposits and withdrawals.
- KYC and Compliance Providers Identity document data shared with authorised third-party verification services engaged to conduct KYC checks, subject to binding data-processing agreements.
- IT Infrastructure and Hosting Providers Technical data stored and processed by cloud hosting and infrastructure providers who operate under contractual obligations to maintain equivalent data protection standards.
- Fraud Prevention and Risk Analysis Services Behavioural and transactional data shared with specialist anti-fraud tools to identify and mitigate suspicious activity and account abuse.
- Regulatory and Legal Authorities Personal data disclosed to Malaysian regulatory bodies, law enforcement agencies or courts where legally required, including for the reporting of suspicious financial activity.
- Business Transfers In the event of a merger, acquisition or sale of business assets, personal data held by slotsmy may be transferred to the relevant successor entity, subject to equivalent privacy protections being maintained.
slotsmy will never share your personal data with advertising networks, data brokers or social media platforms for profiling or retargeting purposes without your explicit opt-in consent.
8 International Data Transfers
Where slotsmy engages service providers whose systems are located outside Malaysia, personal data may be transferred to and processed in jurisdictions with differing data protection frameworks. In such cases, slotsmy ensures that:
- Binding contractual data-processing agreements are in place with all international recipients of personal data.
- Recipient jurisdictions or organisations provide a level of data protection that is materially equivalent to that afforded under Malaysian law.
- Transfers are limited to the minimum data necessary for the specific processing purpose, with appropriate technical safeguards applied during transit.
9 Data Retention
slotsmy retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory or contractual obligations. The following general retention principles apply:
- Active Account Data Retained throughout the period your account remains active and for a minimum period thereafter as required by AML and responsible gambling record-keeping obligations.
- KYC Documents Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction, in accordance with standard AML record-keeping requirements.
- Transaction Records Financial transaction data retained for a minimum of seven (7) years to satisfy applicable tax, audit and regulatory reporting obligations.
- Support Communications Customer support records retained for the period necessary to resolve the relevant issue and thereafter for quality assurance and legal dispute purposes, not exceeding three (3) years post-resolution.
- Marketing Consent Records Records of marketing consent retained for as long as the consent remains valid plus a reasonable period thereafter to demonstrate compliance.
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be attributed to an identifiable individual.
10 Cookies and Tracking Technologies
slotsmy uses cookies and similar browser-based tracking technologies to support essential site functionality, protect against fraud and gather aggregate performance insights. The following categories of cookies are used:
- Strictly Necessary Cookies Required for core platform functions including session authentication, security token management and load balancing. These cookies cannot be disabled without significantly impairing the user experience.
- Functional Cookies Enable the platform to remember your preferences — such as language selection and last-visited page — to provide a more personalised experience on return visits.
- Analytics Cookies Collect anonymised or pseudonymised data on page views, session duration and navigation paths to help slotsmy understand how visitors interact with the platform and identify areas for improvement. No personally identifiable information is included in analytics reports.
- Security and Anti-Fraud Cookies Used to detect unusual account activity, identify suspicious device behaviour and mitigate bot access, bonus abuse and account takeover attempts.
You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may prevent access to certain slotsmy features. Detailed cookie management instructions are available in your browser's help documentation.
11 User Rights
As a Data Subject, you hold the following rights in respect of personal data processed by slotsmy. To exercise any right, please contact us using the details in Section 16. We will respond within a reasonable timeframe and in any event within 30 days of receipt of a verifiable request:
Right of Access
Request a copy of the personal data slotsmy holds about you, along with information about how it is being processed.
Right to Rectification
Request correction of inaccurate or incomplete personal data held in your slotsmy account profile.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the stated purpose, subject to applicable legal retention obligations.
Right to Restriction
Request that slotsmy restricts processing of your data in certain circumstances, such as while a dispute regarding accuracy is being resolved.
Right to Portability
Where processing is based on consent or contractual necessity, receive your personal data in a structured, machine-readable format.
Right to Object
Object to processing carried out on the basis of legitimate interests or for direct marketing purposes. Objections to marketing will be actioned immediately.
Right to Withdraw Consent
Where processing is based on your consent, withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
Right to Lodge a Complaint
Lodge a complaint with the relevant data protection supervisory authority if you believe your personal data rights have not been respected.
Some rights are subject to exceptions where legal, regulatory or contractual obligations require slotsmy to retain or continue processing your data. We will always explain the applicable basis if a right cannot be fully exercised.
12 Children and Minors
The slotsmy platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process or retain personal data from persons under the age of 21.
If slotsmy becomes aware that personal data has been submitted by an individual below the required minimum age, that data will be deleted promptly and the associated account will be closed. All deposits and promotional credits associated with such an account will be voided.
If you are a parent or guardian and believe a minor has registered on slotsmy, please contact our support team immediately so that the account can be closed and the data erased without delay.
13 Security Measures
slotsmy implements a layered security architecture to protect personal data against unauthorised access, accidental loss, destruction and disclosure. The key measures in place include:
- Encryption in Transit All data transmitted between your browser and the slotsmy platform is protected by Transport Layer Security (TLS/HTTPS), preventing interception by third parties.
- Encryption at Rest Sensitive personal data — including KYC documents, financial records and account credentials — is stored using industry-standard encryption algorithms.
- Access Controls Access to personal data within slotsmy's systems is restricted to personnel with a legitimate operational need. Role-based access controls and multi-factor authentication are enforced for system administrators.
- Penetration Testing and Audits Regular security assessments, vulnerability scans and penetration tests are conducted to identify and remediate weaknesses in the platform's infrastructure.
- Incident Response A documented data breach response procedure is in place. In the event of a breach likely to affect your rights, slotsmy will notify relevant authorities and affected users within the timeframe required by applicable law.
14 Third-Party Services
The slotsmy platform may reference or integrate with third-party services for specific functional purposes. slotsmy is not responsible for the privacy practices, data handling or security standards of those third parties. Each third-party service is subject to its own independent privacy policy:
- Malaysian payment network providers (Maybank, CIMB, Public Bank, Hong Leong, FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay) operate under their own respective terms and data policies.
- Third-party KYC verification platforms engaged by slotsmy are bound by contractual data-processing agreements but maintain their own operational privacy frameworks.
- Cloud infrastructure and hosting partners are selected on the basis of their independently certified security credentials and contractual data-protection commitments.
We recommend reviewing the privacy policies of any third-party service you interact with directly through your slotsmy account activity.
15 Changes to this Policy
slotsmy reserves the right to update or revise this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, platform functionality or data-processing practices. When material changes are made, the updated Policy will be published on this page with a revised "Last Reviewed" date.
Where changes are materially significant to your rights or how your data is processed, slotsmy will endeavour to provide advance notice through a visible notification on the platform or via your registered email address. Continued use of the slotsmy website following publication of a revised Policy constitutes your acceptance of the updated terms.
We recommend reviewing this page periodically to remain informed of your current privacy rights and the data practices applicable to your use of slotsmy.
16 Contact Us
If you have any questions, concerns or requests regarding this Privacy Policy, the processing of your personal data, or the exercise of any of your data protection rights, please contact the slotsmy Data Protection team through the following channels:
- Website Email [email protected] — please include "Privacy Request" in your subject line, along with your registered account name and a clear description of your enquiry. We aim to acknowledge all privacy requests within 5 business days and provide a substantive response within 30 days.
- Live Chat Support Available 24 hours a day, 7 days a week in English, Bahasa Melayu and Mandarin Chinese. Our agents can accept initial privacy enquiries and escalate verified requests to the data protection team.
- Data Erasure or Portability Requests Please submit these requests via email with appropriate identity verification. For security reasons, data erasure requests will not be processed via live chat without supporting written confirmation.
slotsmy will verify your identity before processing any data access, rectification or erasure request to ensure that personal data is not disclosed to or modified by an unauthorised party.
Your Privacy, Our Priority
Understand Your Rights Before You Play
A clear understanding of how your personal data is handled is the foundation of a safe and trustworthy experience. Review our Responsible Gambling guide for practical limit-setting tools, or visit the FAQ for answers to common account, payment and privacy questions.
For adults aged 21 and above only. Gambling involves financial risk and does not guarantee profit.