Privacy Policy

This Privacy Policy ("Policy") sets out the data privacy practices of slot99, the operator of the online casino and sports betting platform accessible at slot99.buzz ("Platform"). For the purposes of this Policy, "slot99", "we", "us", and "our" refer to the Operator. "You", "User", and "Member" refer to any individual who accesses, visits, registers, or otherwise interacts with the Platform.

We understand that your personal data is important to you, and we take our responsibilities in handling it seriously. This Policy explains in plain, professional terms exactly what personal information slot99 collects, the purposes for which it is processed, the parties with whom it may be shared, how long we retain it, and the rights you hold with respect to your own data.

slot99 operates in compliance with applicable data protection legislation, including the Personal Data Protection Act 2010 (PDPA) of Malaysia. By registering an account or continuing to use the Platform following any update to this Policy, you acknowledge and consent to the data practices described herein.

The following definitions apply throughout this Privacy Policy:

slot99 collects the following categories of Personal Data in the course of operating the Platform and providing services to Users:

3.1 Identity and Registration Data

• Full legal name as it appears on government-issued identification;
• Date of birth (used to verify the 21-year minimum age requirement);
• Gender (optional, collected to personalise promotional communications);
• Government-issued identity document number (MyKad number or passport number, collected during KYC verification);
• Username and password (password stored in hashed, non-reversible format).

3.2 Contact and Communication Data

• Email address;
• Mobile phone number (used for two-factor authentication and account notifications);
• Malaysian residential address (city-level or full address, where required for KYC);
• Records of all communications you have with slot99 via live chat, email, or support ticket systems.

3.3 Financial and Payment Data

• Payment method details — e-wallet account identifiers (Touch 'n Go eWallet, Boost, GrabPay), DuitNow/FPX reference identifiers, bank account numbers (partial, masked format), and cryptocurrency wallet addresses (BTC, ETH, USDT TRC20);
• Transaction history including deposit amounts, withdrawal amounts, dates, and method references;
• Account balance and wagering history.

3.4 Technical and Device Data

• IP address and approximate geolocation derived from IP;
• Device type, operating system, browser type and version;
• Unique device identifiers;
• Session duration, pages visited, and clickstream data;
• Referral URL and search terms that brought you to the Platform (where applicable).

3.5 Responsible Gambling Data

• Any deposit limits, loss limits, session limits, or self-exclusion preferences you configure;
• Records of responsible gambling tool activations and durations.

slot99 collects Personal Data through the following means:

• Direct submission: Information you actively provide when registering an account, completing KYC verification, making a deposit or withdrawal request, submitting a support query, or responding to a promotional communication.
• Automated collection: Technical data collected passively as you use the Platform, including through cookies, web beacons, server logs, and similar tracking technologies described further in Section 8.
• Third-party sources: Identity and fraud-check data received from licensed KYC and anti-money-laundering (AML) verification service providers, and transaction confirmation data received from payment gateway partners including e-wallet operators and Malaysian banks.
• Inferred data: Behavioural and preference data derived from your interactions with the Platform, such as preferred game categories, peak playing times, and deposit frequency patterns — used solely to improve your experience and tailor responsible gambling communications.

slot99 processes your Personal Data for the following defined purposes only. We do not process your data in any manner that is incompatible with these stated purposes.

slot99 does not sell your Personal Data to any third party, and we do not use your data for profiling purposes beyond what is necessary to deliver the Services described in this Policy.

Where required by applicable data protection law, slot99 relies on the following legal grounds to process your Personal Data:

• Contractual necessity: Processing required to fulfil the obligations of the user agreement between you and slot99, including account management, payment processing, and game access.
• Legal obligation: Processing required to comply with applicable laws, including KYC/AML obligations under Malaysian financial regulations, age verification requirements, and tax reporting duties.
• Legitimate interests: Processing necessary for slot99's legitimate operational interests — including fraud prevention, platform security, responsible gambling monitoring, and business analytics — where these interests are not overridden by your fundamental rights.
• Consent: Processing for purposes such as direct marketing and personalised promotional communications, where you have provided explicit, freely given consent that may be withdrawn at any time by contacting [email protected].

slot99 does not sell, rent, or trade your Personal Data. We may share your data with third-party Data Processors only to the extent necessary to deliver the Services or fulfil legal obligations. All third-party processors are bound by contractual data protection obligations consistent with this Policy.

Categories of third parties with whom data may be shared include:

• Payment service providers: Malaysian e-wallet operators (Touch 'n Go eWallet, Boost, GrabPay), DuitNow/FPX gateway providers, Malaysian bank clearing networks (Maybank, CIMB, Public Bank, Hong Leong), and cryptocurrency network processors — for the purpose of processing deposits and withdrawals.
• KYC and AML service providers: Licensed identity verification and fraud screening services engaged to satisfy our regulatory obligations. These providers receive identity documents and are bound by strict confidentiality agreements.
• Cloud infrastructure and technology providers: Server hosting, content delivery network (CDN), and database providers that process data on our behalf under binding data processing agreements.
• Customer support platforms: Third-party live chat and ticketing systems used to manage support interactions. These providers process communication data only.
• Analytics providers: Anonymised and aggregated platform usage data may be shared with analytics providers to support Platform improvement. No individually identifiable data is shared for this purpose.
• Regulatory and law enforcement authorities: Where slot99 is required by applicable law, court order, or regulatory directive to disclose data, we will comply. Where legally permitted, we will notify affected Users of such requests.

slot99 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit the Platform. Cookies do not contain executable code and cannot access other files on your device.

We use the following categories of cookies:

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication tokens, CSRF protection cookies, and load balancer routing cookies. They cannot be disabled without impairing Platform functionality.
• Functional cookies: Store your preferences such as language settings, display preferences, and responsible gambling reminder configurations so that these persist across sessions.
• Analytics cookies: Used to collect anonymised data on how Users interact with the Platform — including pages visited, session duration, and navigation paths — to help us identify improvements. Data collected through analytics cookies is aggregated and does not identify individual Users.
• Security cookies: Support our fraud detection systems by recording device fingerprint signals and detecting unusual access patterns that may indicate unauthorised account access attempts.

You may manage or disable non-essential cookies through your browser settings at any time. Note that disabling functional cookies may affect your experience on the Platform. For guidance on managing cookies in your browser, refer to the help documentation of your specific browser (e.g., Google Chrome, Mozilla Firefox, Microsoft Edge, Safari).

slot99 retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law, whichever is longer.

• Active account data: Retained for the duration of your active membership and for a minimum of seven (7) years following account closure, to satisfy financial record-keeping obligations under Malaysian law and AML regulations.
• Transaction records: Retained for a minimum of seven (7) years from the date of the transaction in compliance with financial regulatory requirements applicable to Malaysian licensed operators.
• KYC documents: Retained for the duration of the account relationship plus a minimum of five (5) years after account closure, or such longer period as required by applicable law.
• Support communications: Retained for three (3) years from the date of the interaction, unless the communication relates to an unresolved dispute or legal claim, in which case it is retained until resolution plus one (1) year.
• Analytics and technical data: Retained in anonymised and aggregated form indefinitely for Platform improvement purposes. Individually identifiable technical data is deleted or anonymised after twenty-four (24) months.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be attributed to any identifiable individual.

slot99 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, loss, destruction, alteration, or disclosure. Our security framework includes:

• Encryption in transit: All data transmitted between your device and slot99's servers is encrypted using TLS 1.3 (256-bit encryption). Our Platform enforces HTTPS on every page and sub-domain.
• Encryption at rest: Sensitive data fields — including identity documents, financial reference data, and password hashes — are encrypted at the storage layer using AES-256 encryption.
• Access controls: Access to Personal Data by slot99 personnel is governed by role-based access controls (RBAC). Only staff with a legitimate operational need may access specific data categories, and all access is logged and audited.
• Two-factor authentication (2FA): Available for all User accounts. slot99 strongly recommends enabling 2FA to protect against unauthorised account access.
• Penetration testing and security audits: slot99 engages independent third-party security specialists to conduct regular penetration tests and vulnerability assessments of the Platform.
• Data breach procedures: In the event of a confirmed personal data breach that poses a risk to your rights, slot99 will notify affected Users and the relevant regulatory authority within the timeframe required by applicable law.

As a data subject under the Personal Data Protection Act 2010 (PDPA) of Malaysia and applicable international data protection principles, you hold the following rights with respect to the Personal Data that slot99 holds about you:

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Rights Request — [Your Account Username]". We will acknowledge your request within 3 business days and provide a substantive response within 21 calendar days, or notify you if a statutory extension applies.

Verification of your identity will be required before we can action any data rights request. This is to protect your Personal Data from unauthorised access or manipulation.

The slot99 Platform is strictly intended for individuals aged 21 years and above. slot99 does not knowingly collect Personal Data from any person below the age of 21. Age verification is a mandatory step in the account registration process, and slot99 reserves the right to request documentary proof of age from any User at any time.

If slot99 discovers or has reasonable grounds to believe that an Account has been registered by a person under the age of 21, we will immediately suspend the Account, delete all associated Personal Data to the extent permitted by law, void all balances and pending transactions, and report the incident if required by applicable child protection regulations.

slot99 operates primarily for the Malaysian market and stores the majority of its data on servers located within or serving the Asia-Pacific region. However, some of our third-party Data Processors — including cloud infrastructure providers, game studio technology partners, and security service providers — may process data in jurisdictions outside Malaysia.

Where Personal Data is transferred to a jurisdiction that does not provide a level of data protection equivalent to Malaysia's PDPA standards, slot99 ensures that appropriate safeguards are in place, including:

• Contractual clauses with Data Processors that impose data protection obligations at least as stringent as those required under the PDPA 2010;
• Transfer only to jurisdictions with adequate data protection frameworks as recognised by applicable regulatory guidance;
• Binding corporate rules or equivalent mechanisms where applicable.

slot99 reserves the right to revise this Privacy Policy at any time. When material changes are made, we will notify active Users via email to their registered address and/or through a prominent notice on the Platform prior to the changes taking effect. The "Last Updated" date at the top of this page will reflect the date of the most recent revision.

We encourage you to review this Policy periodically to stay informed about how slot99 handles your data. Your continued use of the Platform following any published update to this Policy constitutes your acceptance of the revised terms. If you do not agree to the amended Policy, you should cease using the Platform and request account closure.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how slot99 handles your Personal Data, please contact our Data Protection team through the following channels: