Privacy Policy Slotkaya — Malaysian Player Data Protection

Welcome to the Privacy Policy page Slotkaya. This document explains in detail how we — Slotkaya, operating under the domain slotkaya.click — collect, process, store, and protect your personal data as a user or member of our platform.

We understand that your trust is Slotkaya's most valuable asset. Whether you're registering an account, making a deposit via DuitNow, Touch 'n Go eWallet, GrabPay, or any other Malaysian payment method, playing slots, live baccarat, EPL football betting, or Malaysia Super League — every interaction involves data that we handle with the utmost responsibility.

This Privacy Policy applies to all users of the Slotkaya platform, including website visitors, registered members, and individuals who interact with our services through any communication channel. By using the Slotkaya platform, you agree to the collection and use of data as described in this document.

Slotkaya collects various categories of personal data depending on how you interact with our platform. Below is a full breakdown of the data we collect and the purposes for which it is used:

We only collect data that is strictly necessary to provide the services you request. The principle of "data minimisation" is central to Slotkaya's approach to privacy — we do not collect excessive or irrelevant data.

Slotkaya uses the personal data we collect for the following legitimate and transparent purposes:

• Account Management: Creating, verifying, and maintaining your Slotkaya account so you can securely log in, deposit, play, and withdraw.
• Payment Processing: Processing deposits via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, Maybank2u, CIMB Clicks, and other Malaysian payment methods, as well as verifying and processing your winning withdrawal requests.
• Fraud Prevention & Security: Detecting and preventing fraudulent activity, money laundering, and unauthorised access to your account through real-time transaction monitoring.
• Legal Compliance: Meet reporting obligations under applicable Malaysian laws, including KYC (Know Your Customer) and AML (Anti-Money Laundering) requirements.
• Personalise Your Experience: Recommends relevant games — slots, live baccarat, Sports Betting, e-sports — based on your play history for a more enjoyable experience.
• Customer Support: Handling your enquiries, complaints, and support requests more efficiently and effectively.
• Service Communications: Sending important notifications about your account, security, changes to our terms, or promotional activity (if you have opted in to receive them).
• Platform Improvements: Analysing usage patterns (in aggregate and anonymised form) to improve Slotkaya's products, technical performance, and overall user experience.

Slotkaya does not sell, rent, or transfer your personal data to third parties for marketing purposes. However, in the course of operating the platform, we may share data with the following categories of parties under limited and controlled circumstances:

• Payment Service Providers: Authorised payment processors that facilitate deposit and withdrawal transactions via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, FPX Maybank2u, and CIMB Clicks. They are bound by strict confidentiality agreements.
• Licensed Game Providers: Gaming software providers that supply slots, live casino, and other games on the Slotkaya platform. Data shared is limited strictly to the session information required.
• KYC / Identity Verification Service Providers: A dedicated platform that helps us verify new players' identities in accordance with legal requirements.
• Relevant Authorities: Law enforcement agencies, regulatory bodies, or courts when we are legally required to do so under Malaysian law.
• Technical Infrastructure: Cloud and hosting service providers that store your data on secure servers, bound by data protection agreements.

All third parties that receive data from Slotkaya are required to uphold a privacy standard comparable to our own. We conduct regular reviews of our vendors to ensure ongoing compliance.

We continuously invest in security technologies and procedures to protect your personal data from unauthorised access, misuse, loss, or disclosure. Key measures we have implemented include:

• Encryption in Transit: TLS 1.3 protocol with 256-bit SSL encryption for all data transmitted between your device and Slotkaya's servers.
• Encryption at Rest: Sensitive data stored in our databases — including passwords and financial information — is encrypted using AES-256 standards.
• Multi-Layer Access Control: Only Slotkaya staff who require access to perform their job functions may view user data, and all such access is logged and monitored.
• Periodic Security Checks: Security audits and penetration testing are conducted regularly by independent parties to identify and address vulnerabilities.
• Real-Time Threat Detection System: Round-the-clock monitoring to detect suspicious activity, unauthorised login attempts, and transaction anomalies.
• Two-Factor Authentication (2FA): Available and recommended for all Slotkaya members as an additional layer of account security.

Slotkaya retains your personal data for as long as necessary to fulfil the original purpose of collection, or as required by Malaysian law. The following are our data retention guidelines:

• Active Account Data: For as long as your account remains active on Slotkaya, plus any post-closure period required for legal compliance.
• Financial Transaction Records: A minimum of 7 years from the transaction date, in compliance with Malaysian accounting and financial legislation.
• KYC Records & Identity Verification: Minimum 5 years after the business relationship ends, in accordance with AML/CFT legal requirements.
• Support Communication Logs: 3 years from the date of last interaction, for reference and dispute resolution purposes.
• Aggregated Usage Data (Anonymised): May be retained indefinitely for analytics and product improvement purposes, as they cannot be traced back to any individual.

Once the retention period expires, your personal data will be securely deleted or anonymised in accordance with Slotkaya's established data disposal procedures.

As a data subject, you have important rights regarding the personal data held by Slotkaya. We respect and support the exercise of these rights:

To exercise any of the rights above, contact us by email at support@slotkaya.click or via in-platform live chat. We will process your request within 30 business days and may require identity verification before doing so.

The Slotkaya website uses cookies and similar tracking technologies to enhance the user experience and analyse platform performance. Below are the types of cookies we use:

• Essential Cookies (Required): Required for core platform functions — login, session management, and security. Cannot be disabled.
• Performance Cookies: Collects information about how you use Slotkaya — pages visited, time spent, errors encountered — to help us improve the platform.
• Functional Cookies: Remembering your preferences such as language, display settings, and login details for a more convenient experience.
• Analytics Cookies: Helps us understand aggregate usage patterns without identifying you as an individual.

You can manage and control cookies through your web browser settings. However, disabling certain cookies may affect the functionality of the Slotkaya platform. Continued use of our website is considered consent to the use of cookies as described above.

Slotkaya is a casino entertainment platform restricted to individuals aged 18 years of age and above only. We do not knowingly collect, process, or store personal data from children or minors.

Slotkaya processes a range of financial transactions involving Malaysian payment methods. We apply the highest security standards to protect your financial data:

• Bank account details and e-wallet numbers (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow) are stored in encrypted form and accessed solely for transaction processing purposes.
• Slotkaya does not store your credit/debit card details directly. All card-based transactions are processed through certified payment gateways.
• Every withdrawal request is verified against the original deposit records to prevent money laundering.
• Transactions exceeding certain thresholds are subject to additional review in line with Malaysia's AML/CFT requirements.

We encourage you to regularly monitor your transaction history within your Slotkaya account and promptly report any suspicious activity to our support team.

Slotkaya reserves the right to update or amend this Privacy Policy at any time to reflect changes in our operations, new Malaysian legal requirements, or evolving industry practices.

When material changes are made to this Privacy Policy, we will notify you via:

• A clear notice on the main page of the Slotkaya platform.
• An email to the address registered to your account.
• In-app notification messages on the Slotkaya mobile app (where applicable).

Continued use of the Slotkaya platform after any amendments take effect will be considered acceptance of the updated Privacy Policy. It is your responsibility to review this page periodically and ensure you agree with the current terms.

If you have any questions, concerns, or requests regarding Slotkaya's Privacy Policy or how we handle your personal data, please reach out to us through the following channels:

For formal requests relating to personal data rights under Malaysia's PDPA, please submit a written request to privacy@slotkaya.click including your full name, Slotkaya account number, and details of your request. We will process all requests within 30 business days of receipt.