Slotomania Privacy Policy — Personal Data Protection for Malaysian Users

01 Introduction and Scope of This Privacy Policy

Slotomania is an online casino entertainment platform operating in Malaysia. We are committed to protecting the privacy of all users who access or use our services on slotomania.world and its associated mobile applications (the "Platform").

This Privacy Policy ("Policy") describes our practices regarding the collection, use, disclosure, storage and protection of your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and its regulations. This Policy applies to all individuals who register an account, use our services, or simply browse the Slotomania Platform.

By using the Slotomania Platform, you consent to the collection and processing of your personal data as described in this Policy. If you do not agree with any part of this Policy, please discontinue use of our Platform.

02 Types of Personal Data We Collect

Slotomania collects different types of personal data depending on how you interact with our Platform. This data falls into four main categories:

A. Identity & Contact Data

• Full name as stated on your MyKad or passport
• MyKad number or passport number (for KYC verification)
• Active email address
• Malaysian mobile phone number
• Date of birth
• Current residential address in Malaysia

B. Financial & Transaction Data

• Digital wallet account information (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay) — account number and account holder name only
• DuitNow and FPX details (bank name, account number — stored in masked format)
• Deposit and withdrawal history in Malaysian Ringgit (RM)
• Credit and debit transaction history within your Slotomania account

C. Gaming Activity Data

• Slots, live casino, poker, lottery, and Sports Betting history
• Bonus records received and wagering requirement status
• Personal gaming limit settings (deposit limits, session time limits)
• Game session history including login and logout times

D. Technical & Usage Data

• IP address and approximate location derived from IP
• Web browser type and version, and operating system
• Cookie and session tracking data
• Server access logs including pages visited and time spent
• Device information (phone model, screen size) for display optimisation

03 Purposes and Legal Basis for Data Processing

Slotomania only processes your personal data for legitimate and necessary purposes. Below are the primary purposes for which your data is used, along with the legal basis for each processing activity:

• Service Delivery: Managing your account, processing deposits and withdrawals in MYR, verifying your identity (KYC), and enabling access to all games including slots, live casino, poker, and Sports Betting on the Malaysia Super League or EPL.
• Security & Fraud Prevention: Detecting and investigating suspicious account activity, preventing money laundering, and ensuring each account belongs to an eligible individual.
• Legal Compliance: Fulfilling obligations under Malaysia's PDPA, KYC/AML requirements, and complying with directives from any relevant Malaysian authority.
• Product Improvement: Analysing platform usage patterns on an aggregate (not individual) basis to improve the user experience, introduce new features, and identify technical issues.
• Service Communications: Sends important account-related notifications such as deposit confirmations, bonus wagering requirement reminders, and security updates.
• Marketing (with Consent): Sending promotional offers, bonuses and new game updates to users who have given explicit consent to receive marketing communications.

04 Data Sharing and Disclosure to Third Parties

Slotomania does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Your data is shared only in limited circumstances and with adequate contractual safeguards in place:

• Malaysian Payment Providers: To process deposit and withdrawal transactions, we share the necessary information with authorised payment providers such as FPX gateway providers, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay and DuitNow. This disclosure is limited strictly to data required to complete the transaction.
• Game Providers: Third-party game providers whose platforms are supported on Slotomania may receive the game session data necessary to run the games properly. They do not receive your full identity data.
• Technology Providers: Companies providing technology infrastructure (web hosting, CDN, cybersecurity) that are bound by strict confidentiality agreements.
• Malaysian Authorities: Slotomania will disclose data when required to do so by court order, law enforcement agency directive, or any applicable Malaysian legal requirement.

In all instances of data sharing with third parties, Slotomania ensures that those parties are bound by adequate data protection agreements and may only use your data for the purposes expressly permitted.

05 Data Security Measures at Slotomania

Slotomania continually invests in security infrastructure to protect the personal data of all members. The technical and organisational security measures we implement include:

• Data Encryption in Transit: All communications between your browser and Slotomania's servers use TLS 1.3 protocol with 256-bit encryption — the same technology trusted by Malaysian online banking.
• Stored Data Encryption: Sensitive data such as passwords is stored in hashed form using secure algorithms. Financial data is stored in encrypted format.
• Internal Access Controls: Only Slotomania staff with a legitimate business need are permitted to access members' personal data, and all access is recorded in an audit log.
• Two-Factor Authentication (2FA): All Slotomania accounts can — and are encouraged to — enable two-factor authentication for an added layer of security.
• 24/7 Monitoring: Slotomania's cybersecurity team continuously monitors our systems to detect any suspicious activity or attempted intrusions.
• Regular Security Testing: The Slotomania platform undergoes regular penetration testing and security audits conducted by independent third parties.

06 Use of Cookies and Tracking Technologies

Slotomania uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions properly. Cookies are small text files stored on your device when you visit our Platform.

Below are the types of cookies used by Slotomania and their respective functions:

You can manage your cookie preferences through your browser settings. Please note that disabling essential cookies may affect core Slotomania Platform functionality, including the ability to log in and play.

07 Your Rights Under Malaysia's PDPA

As an individual whose data is processed by Slotomania, you have certain rights under Malaysia's Personal Data Protection Act 2010. Slotomania respects and facilitates the exercise of all these rights:

To exercise any of the above rights, please email privacy@slotomania.world with the subject line "Privacy Rights Request", along with your full name and Slotomania account number. We will process your request within 14 business days.

08 Data Retention & Deletion Policy

Slotomania retains your personal data only for as long as necessary to fulfil the original purpose of collection or as required by Malaysian law. The following are our data retention guidelines:

• Active Account Data: Retained for the duration your Slotomania account remains active and used on an ongoing basis to deliver our services.
• After Account Closure: Basic personal data and financial transaction records are retained for 5 years after account closure to meet legal obligations, financial regulatory compliance, and the resolution of any disputes that may arise.
• Technical Log Data: Server logs and technical data are retained for a maximum of 12 months for security and technical troubleshooting purposes.
• Marketing Data: If you withdraw your marketing consent, your data will be removed from our marketing lists within 30 business days.

Once the applicable retention period has expired, your data will be securely deleted or permanently anonymised so that it can no longer be linked to you as an individual.

09 Children's Privacy and Minor Users

The Slotomania Platform is intended exclusively for individuals aged 18 and above. We do not knowingly collect or process personal data from anyone under the age of 18.

Should Slotomania discover that personal data belonging to a child or individual under 18 years of age has been collected without our knowledge, we will take immediate action to:

• Closing the associated account.
• Deleting all personal data associated with the account.
• Refunding any remaining credit balance to the original payment method used.

10 Contact Us About Privacy

Slotomania takes every privacy-related inquiry, complaint, and request seriously. If you have any questions about how we handle your personal data, wish to exercise your privacy rights, or want to report a privacy concern, please reach out to us through the following channels:

• Privacy Email: privacy@slotomania.world
• General Support Email: support@slotomania.world
• Live Chat: Available 24/7 via the Slotomania Platform

We are committed to responding to all privacy-related enquiries within 14 working days of receipt. For more complex complaints requiring thorough investigation, we will notify you within 5 working days of the expected timeframe and keep you updated on the progress.

If you are not satisfied with our response, you have the right to lodge a complaint with Malaysia Personal Data Protection Department under the Ministry of Digital. However, we encourage you to contact Slotomania first so your issue can be resolved more quickly and directly.

This Privacy Policy will be updated from time to time to reflect changes in our practices or legal requirements. Any significant changes will be communicated to you via your registered email or through a notice displayed on the Slotomania Platform before the changes take effect. The latest version is always available on this page, and the current effective date is 1 January 2026.