1. Introduction
slot33 ("we", "us", "our") operates the website at https://slot33.asia (the "Platform"). We recognise that privacy is important to our users and we are committed to being transparent about the personal data we handle. This Privacy Policy (the "Policy") sets out in detail what information we collect, why we collect it, how we use it, how long we keep it, with whom we may share it, and what rights you have in relation to your personal data.
This Policy applies to all individuals who visit, browse or register on the Platform, including users based in Malaysia and elsewhere. By continuing to use the Platform after being presented with this Policy, you acknowledge that you have read and understood its terms. If you do not agree with any aspect of this Policy, you should discontinue use of the Platform and contact us to request deletion of any data we may hold.
This Policy is to be read alongside the slot33 Terms & Conditions and the Responsible Gambling policy, each of which is incorporated by reference.
2. Definitions
In this Policy, the following terms have the meanings set out below:
- "Personal Data" — any information that identifies or can reasonably identify a living individual, directly or in combination with other data.
- "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, transfer or deletion.
- "Data Subject" — the individual to whom Personal Data relates; in this context, you, the user.
- "Data Controller" — the entity that determines the purposes and means of Processing Personal Data (slot33).
- "Data Processor" — a third party that Processes Personal Data on the Data Controller's behalf and instructions.
- "Consent" — freely given, specific, informed and unambiguous agreement by a Data Subject to the Processing of their Personal Data.
- "PDPA" — Malaysia's Personal Data Protection Act 2010, which governs the Processing of personal data in commercial transactions involving Malaysian residents.
- "Cookie" — a small text file stored on a user's Device by a browser to record session or preference information.
3. Data Controller
slot33 acts as the Data Controller in respect of Personal Data collected through the Platform. Enquiries relating to this Policy, or requests to exercise data-subject rights, should be directed to our support team at [email protected]. We will acknowledge receipt of a valid request within a reasonable period and respond substantively within thirty (30) calendar days unless complexity or volume of requests requires a reasonable extension, of which you will be informed.
4. Data We Collect
4.1 Registration and Account Data
When you create a slot33 account, we collect the following categories of data:
- Full legal name, date of birth and nationality;
- Residential address (including city, state and postcode within Malaysia where applicable);
- Email address and contact telephone number;
- Username and encrypted password.
4.2 Identity Verification (KYC) Data
As part of our age verification, anti-fraud and anti-money-laundering obligations, we may request and retain:
- Copies of government-issued identity documents (e.g., MyKad, passport);
- Proof of address documents (e.g., utility bills, bank statements issued in Malaysia);
- Selfie or liveness-check images where required by our verification provider.
4.3 Financial and Payment Data
When you make a deposit or request a withdrawal, transaction data is processed including the payment method used (such as FPX, DuitNow, Maybank, CIMB, Public Bank, Hong Leong Bank, Touch 'n Go eWallet, Boost or GrabPay), transaction reference numbers, amounts in MYR and timestamps. Full card numbers or full bank account credentials are not stored on our servers; they are handled by accredited payment processors under their own security frameworks.
4.4 Usage and Technical Data
We automatically collect certain technical information when you access the Platform, including:
- IP address and approximate geolocation;
- Browser type, version and language settings;
- Device type, operating system and screen resolution;
- Pages visited, session duration and referring URL;
- Cookie identifiers and session tokens.
4.5 Communications Data
If you contact slot33 support, including via email to [email protected], we retain a record of that correspondence, including the content of your messages and our responses, for service quality, compliance and dispute-resolution purposes.
5. Purposes of Processing
slot33 processes your Personal Data for the following purposes:
| Purpose |
Categories of Data Used |
| Account creation and management |
Registration data, communications data |
| Age and identity verification (KYC) |
KYC documents, registration data |
| Payment processing and fraud prevention |
Financial data, KYC data, usage data |
| Compliance with legal and regulatory obligations |
All categories as required |
| Customer support and dispute resolution |
Account data, communications data |
| Platform security and abuse prevention |
Usage data, technical data |
| Service communications (transactional only) |
Registration data (email address) |
| Analytics and platform improvement (aggregate) |
Usage data, technical data |
We do not use Personal Data for automated decision-making that produces significant legal effects on you without human review, nor do we sell Personal Data to third-party marketers.
6. Legal Basis for Processing
Depending on the activity, slot33 relies on one or more of the following lawful bases:
- Contractual necessity — Processing required to perform our agreement with you (account creation, payment processing, identity verification);
- Legal obligation — Processing required to comply with applicable law, including anti-money-laundering regulations and age-restriction requirements;
- Legitimate interests — Processing for fraud prevention, platform security and aggregated analytics where these interests are not overridden by your rights;
- Consent — Where you have provided explicit consent, for example, when you opt in to receiving promotional communications.
Malaysian users should note that the Personal Data Protection Act 2010 (PDPA) provides additional protections in relation to Personal Data processed in connection with commercial transactions. The principles of the PDPA — including notice, choice, disclosure, security, retention, data integrity and access — inform our approach to all data processing.
7. Data Sharing and Disclosure
7.1 Payment Service Providers
In order to process deposits and withdrawals, slot33 shares necessary financial and identity data with accredited payment processors. These providers operate under contractual obligations that require them to maintain adequate data-protection standards and to use the data only for the stated purpose.
7.2 Identity Verification Providers
KYC and age-verification services are performed by third-party providers who receive only the minimum personal data required to complete the verification. Their use of that data is governed by their own agreements with slot33 and applicable law.
7.3 Regulatory and Law-Enforcement Authorities
slot33 may disclose Personal Data to relevant authorities, licensing bodies or law-enforcement agencies where required or permitted by law, including in response to a valid court order, subpoena, or official regulatory request.
7.4 Business Transfers
In the event of a merger, acquisition, restructuring or sale of assets, Personal Data may form part of the transferred assets. You will be notified of any such change and your rights under this Policy will be maintained.
8. International Data Transfers
slot33 operates in an international context and your Personal Data may be transferred to, stored in, or processed in jurisdictions outside Malaysia. Where such transfers take place, we take steps to ensure that appropriate safeguards are in place, such as contractual clauses that require the recipient to maintain data-protection standards consistent with applicable law.
By providing your Personal Data and using the Platform, you acknowledge that your data may be processed in countries whose data-protection laws may differ from those in Malaysia.
9. Data Retention
We retain Personal Data for as long as your Account is active and for such further period as is necessary to comply with our legal and regulatory obligations. In practice:
- Account data and KYC documents are typically retained for a minimum of five (5) years following account closure, in line with anti-money-laundering requirements;
- Transaction records are retained for a minimum period required by the applicable licensing framework, which is generally five (5) to seven (7) years;
- Technical and usage data collected via cookies is retained for shorter periods appropriate to its analytical purpose (typically up to twenty-four (24) months for analytics identifiers);
- Support correspondence is retained for three (3) years after resolution unless a legal dispute requires longer retention.
When retention periods expire, data is securely deleted or irreversibly anonymised.
10. Your Data Subject Rights
Subject to applicable law, you have the following rights in relation to your Personal Data:
- Right of access — to obtain confirmation of whether we hold Personal Data about you and to receive a copy of that data;
- Right to rectification — to request correction of inaccurate or incomplete Personal Data;
- Right to erasure — to request deletion of Personal Data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations;
- Right to restrict processing — to request that we limit how we use your data in certain circumstances;
- Right to data portability — to receive Personal Data you have provided to us in a structured, commonly used and machine-readable format;
- Right to object — to object to processing based on legitimate interests, including direct marketing;
- Right to withdraw consent — where processing is based on consent, to withdraw that consent at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, submit a written request to [email protected]. We may need to verify your identity before processing the request. We will respond within thirty (30) days or notify you if additional time is required.
Malaysian Users: The Personal Data Protection Act 2010 (PDPA) affords Malaysian residents specific rights in relation to personal data processed in connection with commercial transactions. If you believe your PDPA rights have been infringed, you have the right to lodge a complaint with the Department of Personal Data Protection (JPDP) of Malaysia.
11. Cookies and Tracking Technologies
11.1 What We Use
slot33 uses the following categories of cookies and similar technologies:
- Strictly necessary cookies — Essential for session management, authentication and security. These cannot be disabled without preventing core site functions.
- Functional cookies — Store your preferences such as language and display settings to personalise your experience.
- Analytics cookies — Collect aggregated, anonymised data about how users navigate the Platform to help us improve content and structure. We do not link this data to individual accounts.
11.2 Managing Cookies
You can control or delete cookies through your browser settings. Disabling strictly necessary cookies may impair the functionality of the Platform. Detailed instructions for managing cookies in common browsers are available in each browser's help documentation.
12. Minors
The Platform is strictly intended for individuals aged 21 years and above. slot33 does not knowingly collect Personal Data from anyone below this age. If we become aware that a minor has provided Personal Data, we will take immediate steps to delete that data and close the associated account. If you believe a minor has registered on the Platform, please contact us at [email protected] without delay.
13. Security Measures
slot33 implements technical and organisational measures appropriate to the risk presented by the processing activities, including:
- Encryption of data in transit using industry-standard TLS protocols;
- Access controls limiting internal access to Personal Data on a need-to-know basis;
- Regular review of security controls and system monitoring for anomalous activity;
- Contractual requirements for third-party processors to maintain equivalent security standards.
No method of data transmission over the internet is completely secure. While slot33 takes reasonable precautions, we cannot guarantee the absolute security of data transmitted to or from the Platform. You are responsible for protecting your own account credentials and for using a secure network connection when accessing your Account.
14. Amendments to This Policy
slot33 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal obligations or service features. Where revisions are material, we will provide notice via the Platform or by email. The date of the most recent version is shown at the top of this document. Continued use of the Platform following the publication of an updated Policy constitutes acceptance of the revised terms. We encourage you to review this page periodically.
For any questions, concerns or formal requests relating to this Privacy Policy or your Personal Data, please contact slot33 in writing. We are committed to addressing privacy matters promptly and professionally.
Email: [email protected]
Response language: English
Service hours: Monday to Friday, Malaysia Time (MYT). We aim to provide a substantive response within thirty (30) calendar days of receiving a valid request.
For further guidance on your rights as a Malaysian resident, please refer to the Department of Personal Data Protection (JPDP) of Malaysia via official government channels.