Privacy Policy

This Privacy Policy governs the collection, processing, storage, and disclosure of personal data by slot838 (hereinafter referred to as "slot838", "the Platform", "We", "Us", or "Our") in connection with the operation of the online casino and sports betting services available at https://slot838.cam and any associated mobile interfaces.

slot838 is committed to handling personal data responsibly and in compliance with applicable data protection principles. This policy is designed to be transparent, accessible, and written in plain language so that every Member — whether in Kuala Lumpur, Penang, Johor Bahru, or elsewhere in Malaysia — can clearly understand how their information is handled.

By creating an Account on slot838, completing the registration process, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. This Policy should be read in conjunction with our Terms & Conditions.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

slot838 acts as the Data Controller in respect of all Personal Data collected from Members and visitors through the Platform. As Data Controller, slot838 is responsible for determining the purposes and means by which Personal Data is processed.

Queries regarding this Privacy Policy, requests to exercise your data rights, or concerns about how your Personal Data is handled should be directed to our Data Protection contact as set out in Section 15 (Contact Us) of this Policy.

slot838 collects Personal Data through several channels: directly from you during registration and Account use; automatically through your interaction with the Platform; and, where necessary, from third-party verification and payment service providers. The categories of data we collect are set out below.

slot838 processes Personal Data only where a lawful basis exists for doing so. The primary purposes for which we process your data, together with the corresponding legal basis, are as follows:

• Account registration and management: Processing is necessary for the performance of the contract between you and slot838 (i.e., your Account registration and use of the Platform).
• Payment processing and withdrawal facilitation: Necessary for the performance of the contractual relationship and to comply with financial transaction obligations.
• Identity verification (KYC) and Anti-Money Laundering (AML) compliance: Processing is required to comply with applicable legal and regulatory obligations imposed on slot838 as an operator.
• Fraud detection and prevention: Necessary for the purposes of slot838's legitimate interests in protecting the integrity of the Platform and the security of all Members.
• Customer support and complaint handling: Necessary for the performance of the contract and in pursuit of slot838's legitimate interest in resolving Member queries efficiently.
• Responsible gambling monitoring and intervention: Processing is required to comply with responsible gambling obligations and to protect Members' welfare.
• Platform analytics and improvement: Processed on the basis of slot838's legitimate interest in maintaining and improving the quality, performance, and security of the Platform.
• Direct marketing communications (where consented): Where you have provided explicit consent to receive promotional communications from slot838, we may use your contact information for this purpose. Consent may be withdrawn at any time.

All processing of Personal Data at slot838 is conducted in accordance with the following principles: lawfulness, fairness, and transparency; purpose limitation; data minimisation; accuracy; storage limitation; integrity and confidentiality; and accountability.

6.1 Automated Decision-Making

slot838 utilises automated processing for certain operational functions, including fraud screening, suspicious transaction monitoring, and responsible gambling risk flagging. Where automated processing produces a decision that has a significant effect on you (for example, Account suspension pending fraud investigation), you have the right to request human review of that decision by contacting slot838 Support.

6.2 Payment Data Processing

Financial transaction data, including deposits made via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX bank transfer (Maybank, CIMB, Public Bank, Hong Leong Connect), or cryptocurrency wallets, is processed through encrypted channels. Full payment account credentials (e.g., online banking passwords, full card numbers) are never stored by slot838; only transaction reference identifiers and payment method type are retained for record-keeping purposes.

slot838 does not sell, rent, or otherwise commercially disclose your Personal Data to third parties. We may, however, share Personal Data with the following categories of recipients where doing so is necessary for the purposes described in this Policy:

• Payment service providers: To facilitate deposits and withdrawals via DuitNow, Touch 'n Go eWallet, Boost, GrabPay, FPX, and cryptocurrency payment processors. These providers receive only the minimum data necessary to process your transaction.
• Identity verification and KYC/AML service providers: Third-party identity verification platforms that assist slot838 in meeting its regulatory Know Your Customer and Anti-Money Laundering obligations.
• Game content providers: Licensed game studios and sports data providers whose software is integrated into the Platform. These providers may receive non-personally identifiable session data for the purposes of game performance and integrity monitoring.
• IT infrastructure and cloud service providers: Hosting, database, and security service providers who process data on slot838's behalf under binding data processing agreements that require equivalent data protection standards.
• Regulatory and law enforcement authorities: Where slot838 is required by applicable law, court order, or regulatory direction to disclose Personal Data. slot838 will, where legally permissible, notify the affected Member of such a request prior to disclosure.
• Professional advisors: Legal, accounting, or auditing advisors engaged by slot838 in connection with regulatory compliance or legal proceedings, subject to professional confidentiality obligations.

slot838 retains Personal Data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following general retention periods apply:

• Active Account data: Retained for the duration of your Account registration and for a period of five (5) years following Account closure or the last recorded transaction, whichever is later, to satisfy anti-money laundering record-keeping obligations.
• Financial transaction records: Retained for a minimum of seven (7) years from the date of the transaction in accordance with financial regulatory requirements.
• KYC verification documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant verification, as required under applicable AML regulations.
• Customer support communications: Retained for three (3) years from the date of the interaction unless the communication relates to an ongoing dispute, in which case records are retained until final resolution.
• Technical and usage data: Retained for a rolling period of twelve (12) months for operational analytics and security purposes, after which aggregated and anonymised data may be retained indefinitely.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised in a manner that prevents reconstruction of identifiable information.

slot838 implements a comprehensive range of technical and organisational security measures to protect Personal Data against unauthorised access, accidental loss, destruction, or disclosure. These measures include but are not limited to:

• 256-bit SSL/TLS encryption across all data transmissions between your device and the Platform;
• Encrypted storage of sensitive data fields including passwords (stored as salted cryptographic hashes), financial account identifiers, and identity document data;
• Role-based access controls ensuring that staff can only access the Personal Data necessary for their specific job function;
• Multi-factor authentication for staff access to systems containing Member Personal Data;
• 24/7 intrusion detection and threat monitoring across all production systems;
• Regular penetration testing and security audits by qualified third-party security professionals;
• Secure data centres with physical access controls, redundant power, and network infrastructure.

In the event of a personal data breach that is likely to result in a high risk to the rights and freedoms of affected Members, slot838 will notify the relevant supervisory authority and, where required, the affected Members without undue delay.

slot838 uses cookies and similar tracking technologies (collectively, "Cookies") on the Platform to support essential functions, analyse usage patterns, and improve the Member experience. The following categories of Cookies are used:

Most web browsers allow you to control Cookie settings through the browser's privacy or settings menu. Disabling certain Cookies may affect the functionality of the Platform. Essential and Security Cookies cannot be disabled as they are required for the Platform to operate safely.

Subject to applicable data protection law and certain statutory exceptions, you have the following rights in relation to your Personal Data held by slot838:

To exercise any of the above rights, please contact slot838's data protection team using the contact details in Section 15. slot838 will respond to all verified rights requests within 30 days of receipt. We may ask you to verify your identity before processing a rights request to ensure the security and integrity of your data.

The slot838 Platform and all associated services are strictly intended for persons aged 21 years and above. slot838 does not knowingly collect Personal Data from individuals under the age of 21. Age verification is enforced as part of the Account registration process.

If slot838 becomes aware that Personal Data has been collected from a person under the age of 21 without verified parental consent, we will take immediate steps to delete such data and close the associated Account. Any transactions processed on an underage Account will be handled in accordance with the measures set out in our Terms & Conditions.

In the course of operating the Platform and providing services to Malaysian Members, Personal Data may be transferred to, and processed in, countries outside of Malaysia. Such transfers may occur in connection with cloud infrastructure providers, game content delivery networks, and KYC verification services that operate globally.

Where Personal Data is transferred outside of Malaysia to a country that does not offer an equivalent level of data protection, slot838 will ensure that appropriate safeguards are in place, including but not limited to: binding data processing agreements incorporating standard contractual clauses; transfers to recipients in jurisdictions recognised as providing an adequate level of protection; or other legally approved transfer mechanisms.

Members may request information about the specific safeguards applicable to any international transfers of their Personal Data by contacting slot838 Support at the address provided in Section 15.

slot838 reserves the right to update or amend this Privacy Policy at any time to reflect changes in data protection law, regulatory guidance, or the operational practices of the Platform. The "Last Updated" date at the top of this document indicates the date of the most recent revision.

Where amendments are material — meaning they significantly affect how we use your Personal Data or the rights available to you — slot838 will notify registered Members by email or via a prominent notice on the Platform at least 14 days before the revised Policy comes into effect.

Your continued use of the Platform following the effective date of any amendment constitutes your acknowledgement of the revised Policy. If you do not accept the amended Policy, you should cease use of the Platform and request Account closure in accordance with the Terms & Conditions.

For any questions, requests to exercise your data rights, concerns regarding this Privacy Policy, or to report a suspected privacy breach, please contact slot838 using the following channels: