Winslot Privacy Policy – Our Commitment to Protecting Your Personal Data in Malaysia

Winslot ("we", "platform", "winslot-vip.com") is the data controller for personal information collected through this platform. This Privacy Policy applies to all users and members who register or access winslot, regardless of access method — whether via web browser or mobile application.

This document has been drafted in accordance with the requirements of Personal Data Protection Act 2010 (PDPA) Malaysia and international best practices in data protection. As a platform serving users in Malaysia, winslot is committed to complying with all applicable local legislation on privacy and data protection.

This policy covers all winslot services, including online slots, live casino, poker, Sports Betting for the Malaysia Super League and EPL, e-sports, baccarat, and all related customer support and financial systems.

Winslot collects various types of personal information to enable us to provide you with a secure, fair, and personalised experience. The information collected falls into the following categories:

Winslot collects your personal information through the following methods:

• Account Registration — when you complete the winslot registration form, the information you enter is collected and stored directly.
• KYC Verification — when you upload identity documents (ID card, bank statement) for the identity verification process.
• Financial Transactions — each time you make a deposit or withdrawal, our system records the relevant transaction details.
• Platform Usage — usage data is collected automatically via cookies, server logs, and tracking technologies as described in Section 7.
• Support Communications — when you reach out to the winslot support team via Live Chat, email, or WhatsApp, the conversation is recorded for quality and security purposes.
• Gaming Activity — game and betting history is automatically recorded for compliance, dispute resolution, and responsible gaming purposes.

Winslot uses the personal data collected solely for legitimate and necessary purposes. The following are the primary purposes for which your data is used:

1. Account Management — to create, maintain, and secure your winslot account.
2. Transaction Processing — processing deposits via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow or FPX, and managing withdrawals securely.
3. Identity Verification (KYC) — to ensure legal compliance and prevent fraud and money laundering.
4. Service Provision — giving you access to all winslot games and services, including slots, live casino, poker, Sports Betting and e-sports.
5. Customer Support — to efficiently handle your enquiries, complaints, and support requests.
6. Platform Security — detecting and preventing fraud, multi-account abuse, and other unlawful activities.
7. Responsible Gaming — monitoring gameplay patterns to identify players who may need assistance and offering appropriate support.
8. Service Communications — sending important notices regarding your account, transactions, and relevant platform updates.
9. Marketing (with consent) — sending information about winslot promotions and offers relevant to your preferences — only where you have given your consent.
10. Legal Compliance — compliant with PDPA, AML, and relevant Malaysian legislation.

Winslot does not sell, rent, or trade your personal data to any third party. However, in certain limited situations, winslot may need to share your information with the following parties:

• Payment Processors — service providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX require minimum information to process your financial transactions. Such sharing is necessary and strictly limited to what is required.
• Game Software Providers — third-party game providers partnering with winslot may receive anonymised player IDs for game logging and result verification purposes.
• Audit & Compliance Firms — independent audit bodies that verify the fairness of winslot's games and financial compliance may access non-personally identifiable data.
• Legal Authorities — in cases where winslot is required by law or court order to disclose certain information to law enforcement agencies or regulatory bodies.

In all instances of data sharing described above, winslot ensures that recipients adhere to equivalent data security standards and use the information solely for the specified purposes.

Winslot consistently invests in cybersecurity infrastructure to ensure your personal data remains protected at all times. Our technical and organisational safeguards include:

• 256-bit SSL/TLS Encryption for all data transmitted between your browser and winslot's servers.
• Data encryption at rest for all sensitive data stored in our databases.
• Role-based access control — winslot staff may only access data that is directly relevant to their specific role.
• Two-factor authentication (2FA) for all internal staff system access.
• Regular security audits by independent third parties to identify and address system vulnerabilities.
• 24/7 continuous monitoring for suspicious activity and unauthorised access attempts.
• Incident response plan that is documented and tested regularly to ensure a prompt response in the event of a data breach.

Winslot uses cookies and similar tracking technologies to enhance user experience and platform functionality. Cookies are small text files stored on your device when you visit the winslot platform.

Types of cookies used by winslot:

• Essential Cookies (Required) — required for core platform functions such as login sessions, security, and transaction processing. Cannot be disabled.
• Functional Cookies — stores your preferences such as language, display settings, and game preferences for your convenience.
• Analytics Cookies — helping winslot understand how users interact with the platform for improvement purposes — data is collected anonymously.
• Performance Cookies — enabling winslot to optimise platform speed and reliability based on real usage data.

You can manage and delete cookies through your web browser settings. However, disabling certain cookies may affect the functionality of the winslot platform. For more information, refer to your browser's cookie settings guide.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by winslot:

Winslot retains your personal data for as long as necessary to fulfil the purposes outlined in this Privacy Policy, subject to applicable legal requirements. General data retention periods are as follows:

• Active account data — retained for the duration the account remains active, and for a minimum of 5 additional years after account closure for AML and PDPA compliance purposes.
• Financial transaction records — retained for a minimum of 7 years in accordance with Malaysia's financial reporting requirements.
• Support communication logs — retained for 2 years from the date of last communication.
• Usage data and technical logs — retained for 90 days for security and technical troubleshooting purposes.
• KYC Documents — retained for a minimum of 6 years from the date of submission or account closure, whichever is later.

Once the applicable retention period has elapsed, personal data will be securely deleted or anonymised in a manner that ensures it can no longer be linked to any specific individual.

The winslot platform is for users aged 18 and above only. Winslot does not knowingly collect, process, or store personal data of individuals under the age of 18.

If you believe a child has registered an account on winslot or has provided their personal information to our platform without parental or guardian consent, please contact us immediately at privacy@winslot-vip.com. winslot will take prompt action to close the account in question and delete all associated data.

Winslot reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or changes to the services we offer.

When material amendments are made, winslot will notify members via one or more of the following methods:

• In-account notice displayed upon login
• Email notification to the registered address
• SMS notification to the registered phone number
• Announcements on the winslot platform homepage

The "Updated" date at the top of this document reflects the date of the most recent revision. Continued use of the winslot platform following any published amendment constitutes acceptance of the updated terms.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how winslot handles your personal data, please contact our Privacy Officer through the following channels:

• Privacy Email: privacy@winslot-vip.com
• Customer Support (Live Chat): Available 24/7 on the winslot platform
• General Support: support@winslot-vip.com

We are committed to responding to all privacy-related enquiries within 5 business days. For more complex cases such as data access or deletion requests, the full process may take up to 21 working days in accordance with PDPA requirements.