Privacy Policy

This Privacy Policy ("Policy") is issued by SlotWin ("we", "us", "our", "the Platform"), the operator of the online gaming platform accessible at slotwin.cam. This Policy governs the collection, use, storage, disclosure, and protection of personal data relating to users ("you", "Player", "data subject") of the SlotWin platform and any associated services.

SlotWin operates as an English-language gaming platform serving the Malaysian market, including players in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and across Malaysia. We process personal data in connection with account registration, identity verification (KYC), financial transactions, customer support, and the delivery of gaming services.

By registering an account or using any part of the SlotWin platform, you acknowledge that you have read, understood, and consented to the data practices described in this Policy. If you do not agree with this Policy, you should not access or use SlotWin's services.

The following definitions apply throughout this Privacy Policy:

• "Personal Data" means any information that relates to an identified or identifiable natural person, including but not limited to name, identification number, contact information, financial data, location data, and online identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means SlotWin, which determines the purposes and means of Processing Personal Data collected through the Platform.
• "Data Processor" means any third party engaged by SlotWin to process Personal Data on our behalf under written instructions.
• "KYC" means Know Your Customer — the identity verification process required under anti-money laundering and responsible gambling obligations.
• "Cookies" means small text files placed on your device by the Platform for purposes including session management, analytics, and platform functionality.
• "Sensitive Personal Data" means personal data revealing racial or ethnic origin, political opinions, religious beliefs, health data, biometric data, or financial account credentials, to the extent applicable.

SlotWin collects personal data through several channels, including account registration forms, KYC verification submissions, payment transactions, customer support interactions, and automated technical systems. The categories of data we collect are set out below.

SlotWin does not knowingly collect Sensitive Personal Data beyond what is strictly required for identity verification purposes. We do not collect biometric data for authentication, nor do we collect data related to political opinions or religious beliefs.

SlotWin processes personal data only where a valid legal basis exists. The applicable legal bases are as follows:

• Contractual Necessity: Processing required to perform the contract between SlotWin and the Player — including account management, payment processing, and the delivery of gaming services.
• Legal Obligation: Processing required to comply with applicable legal and regulatory obligations, including anti-money laundering (AML) requirements, KYC verification, and responsible gambling mandates.
• Legitimate Interests: Processing carried out for SlotWin's legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by the Player's privacy rights.
• Consent: Where required by applicable law, SlotWin will seek your explicit consent for specific processing activities — such as the use of non-essential cookies or the sending of promotional communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

SlotWin uses personal data solely for the purposes identified at the point of collection and in accordance with this Policy. Specific use cases include:

5.1 Account Management & Service Delivery

• Creating and maintaining your Player account;
• Processing deposits and withdrawals via Malaysian payment methods including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, and Public Bank Online;
• Delivering gaming content, managing session data, and recording wagering activity;
• Administering VIP tier status, bonus credits, and promotional offers.

5.2 Identity Verification & Compliance

• Conducting KYC verification to confirm the identity, age, and address of Players;
• Screening Players against applicable sanctions, watchlists, and politically exposed persons (PEP) databases;
• Fulfilling anti-money laundering (AML) monitoring and reporting obligations;
• Enforcing the minimum age requirement of 21 years for all gambling activities.

5.3 Security & Fraud Prevention

• Detecting, investigating, and preventing fraudulent activity, account takeovers, and collusion;
• Monitoring for patterns indicative of bonus abuse or multi-accounting;
• Maintaining logs of login activity and financial transactions for audit and security purposes.

5.4 Customer Support

• Responding to support enquiries submitted via live chat or email;
• Maintaining records of prior interactions to enable consistent and efficient support;
• Processing complaints and escalations in accordance with our internal procedures.

5.5 Platform Improvement & Analytics

• Analysing aggregated, anonymised usage data to improve platform performance, user experience, and game offerings;
• Conducting A/B testing and feature evaluation to enhance service quality;
• Generating internal reports for operational and strategic planning purposes.

SlotWin does not sell, rent, or license your personal data to any third party. Data is shared only in the limited circumstances described below, and only to the minimum extent necessary for the specified purpose.

• Payment Service Providers: Financial transaction data is shared with our payment processing partners (including the operators of DuitNow, FPX, Touch 'n Go eWallet, and banking interfaces such as Maybank and CIMB) solely to facilitate deposit and withdrawal processing.
• Identity Verification Providers: KYC documents and identity data may be shared with accredited third-party identity verification service providers acting as Data Processors under written data processing agreements.
• Regulatory & Law Enforcement Authorities: SlotWin may disclose personal data to competent authorities where required to do so by applicable law, court order, or regulatory direction — including disclosure to financial intelligence units in connection with AML obligations.
• Fraud Prevention Agencies: Data may be shared with fraud prevention and risk management organisations for the purpose of detecting and preventing financial crime.
• Professional Advisers: Legal, financial, and compliance advisers may access personal data on a strictly confidential basis as necessary for the conduct of their professional services to SlotWin.
• Corporate Transactions: In the event of a merger, acquisition, or asset sale involving SlotWin, personal data may be transferred to the relevant successor entity, subject to equivalent privacy protections.

SlotWin uses cookies and similar tracking technologies to operate and improve the Platform, manage user sessions, and gather anonymised analytics data. Cookies are small data files stored on your device when you access the Platform.

You may control the use of non-essential cookies through your browser settings. Disabling essential cookies will impair your ability to use the Platform. SlotWin does not use third-party advertising or behavioural tracking cookies.

SlotWin retains personal data for no longer than is necessary for the purposes for which it was collected, or as required by applicable law. Specific retention periods are as follows:

• Account and Identity Data: Retained for the duration of the active account relationship, and for a minimum period of five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by applicable financial regulations.
• KYC Documents: Retained for a minimum of five (5) years following the completion of the KYC process or account closure, whichever is later.
• Customer Support Records: Retained for three (3) years from the date of the last interaction, or as required for the resolution of ongoing disputes.
• Technical / Log Data: Retained for up to twelve (12) months from the date of collection, unless longer retention is required for security investigation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data destruction procedures.

SlotWin implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Security measures include:

• 256-bit SSL / TLS encryption for all data transmitted between your device and SlotWin's servers;
• Encryption of personal data at rest using industry-standard algorithms;
• Strict role-based access controls limiting staff access to personal data on a need-to-know basis;
• Multi-factor authentication required for administrative access to systems holding personal data;
• Regular penetration testing and security audits by qualified third-party security professionals;
• Real-time intrusion detection and anomaly monitoring systems;
• Data breach response procedures, including notification protocols where required by applicable law.

Whilst SlotWin takes every reasonable precaution to protect your data, no online system can be guaranteed to be entirely invulnerable. You are responsible for maintaining the security of your own account credentials and for notifying SlotWin immediately if you suspect any unauthorised access to your account.

Subject to applicable law and certain limitations related to regulatory compliance obligations, you have the following rights in respect of your personal data held by SlotWin:

SlotWin's platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If you are under 21 years of age, you must not register an account, deposit funds, or use any service on the SlotWin platform.

If SlotWin becomes aware that personal data has been collected from a person under 21 years of age, that account will be suspended immediately and the data will be securely deleted. Any funds in such an account will be withheld pending investigation in accordance with our Terms & Conditions.

The SlotWin platform may, from time to time, reference or integrate with third-party payment service providers (such as the Touch 'n Go eWallet gateway, DuitNow infrastructure, or FPX banking interfaces). When you interact with such third-party services, you are subject to their own privacy policies and terms.

SlotWin is not responsible for the privacy practices, data handling, or content of any third-party service or platform. We recommend reviewing the privacy policy of any third party with which you share personal data.

SlotWin may process or store personal data in jurisdictions outside of Malaysia in connection with its infrastructure, cloud hosting, or third-party service providers. Where data is transferred internationally, SlotWin ensures that appropriate safeguards are in place to protect the data at a standard equivalent to that required under applicable Malaysian data protection law.

Such safeguards may include contractual clauses binding the recipient to equivalent data protection standards, reliance on adequacy decisions where applicable, or other lawful transfer mechanisms. You may request information about the specific safeguards in place for international transfers by contacting our support team.

SlotWin reserves the right to update or revise this Privacy Policy at any time in response to changes in applicable law, regulatory guidance, business practices, or platform functionality. When material changes are made, SlotWin will notify registered Players by email or via a prominent notice on the Platform prior to the changes taking effect.

The "Last updated" date at the top of this page indicates the date of the most recent revision. Your continued use of the SlotWin platform following the effective date of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the revised Policy, you must cease using the Platform and request account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy, or wish to exercise your data subject rights, please contact SlotWin's Data Protection team using the details set out below. Please include your registered account email address and a clear description of your request to enable us to respond efficiently.