Privacy Policy —
slot138 Online Casino

slot138 ("the Platform", "we", "us", "our") is committed to safeguarding the privacy and personal data of every individual who accesses or uses our online casino and sports betting services at https://slot138.cam. This Privacy Policy ("Policy") sets out the basis on which we collect, process, store, use, and disclose personal information relating to our registered players and site visitors ("you", "your").

This Policy applies to all personal data we process in connection with your use of the Platform, including data collected through account registration, deposits and withdrawals, gameplay activity, customer support interactions, marketing communications, and your general browsing behaviour on our website.

Please read this Policy in full before creating an account or continuing to use the Platform. By accessing slot138, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. This Policy should be read alongside our Terms & Conditions.

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, email address, phone number, financial details, device identifiers, and IP addresses.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, use, disclosure, transmission, or deletion.
• "Data Controller" — the entity that determines the purposes and means of processing Personal Data. For the purposes of this Policy, slot138 is the Data Controller.
• "Data Processor" — a third party that processes Personal Data on behalf of the Data Controller, under instruction and pursuant to a written data processing agreement.
• "Cookies" — small text files stored on your device by a website to retain session information, preferences, and tracking data across browsing sessions.
• "KYC Data" — documentation and information collected for Know Your Customer and Anti-Money Laundering compliance purposes, including government-issued identification and proof of address.
• "Special Category Data" — personal data that is sensitive in nature and accorded heightened protection, including data relating to health, financial vulnerability, or gambling behaviour patterns.

slot138 acts as the Data Controller in respect of all Personal Data collected and processed through the Platform. As Data Controller, we are responsible for ensuring that your Personal Data is processed lawfully, fairly, and transparently, and that it is kept accurate, secure, and only retained for as long as necessary for the purposes for which it was collected.

Where we engage third-party service providers to process data on our behalf — for example, payment processors, identity verification services, or analytics providers — those parties act as Data Processors under written agreements that require them to process your data only as instructed by slot138 and to implement appropriate technical and organisational security measures.

The categories of Personal Data we collect depend on the nature of your interaction with the Platform. We collect data through three primary channels: information you provide directly, information we collect automatically, and information received from third parties.

We process your Personal Data only where we have a lawful basis for doing so. The following table sets out the primary purposes for which we process your data and the corresponding legal basis for each:

• Account Registration and Management — to create, maintain, and administer your player account, verify your identity and age, and provide you with access to the Platform's gaming services. Legal basis: Performance of contract.
• Payment Processing — to process MYR deposits and withdrawals via DuitNow, FPX, Maybank, CIMB, Touch 'n Go eWallet, Boost, GrabPay, and other accepted methods. Legal basis: Performance of contract.
• KYC and AML Compliance — to verify your identity, confirm your age as 21 or above, and comply with applicable anti-money laundering and counter-terrorism financing obligations. Legal basis: Legal obligation.
• Fraud Prevention and Security — to detect, investigate, and prevent fraudulent activity, unauthorised account access, multi-accounting, and other prohibited conduct. Legal basis: Legitimate interests.
• Responsible Gambling — to monitor gameplay patterns for signs of problem gambling, enforce self-exclusion and deposit limits, and deliver Responsible Gambling Tools as described in our Responsible Gambling page. Legal basis: Legal obligation and legitimate interests.
• Customer Support — to respond to your enquiries, resolve disputes, and provide ongoing account assistance. Legal basis: Performance of contract.
• Marketing Communications — to send you promotional offers, bonus notifications, VIP programme updates, and personalised recommendations, where you have opted in to receive such communications. Legal basis: Consent (withdrawable at any time).
• Platform Analytics and Improvement — to analyse usage patterns, improve the player experience, test new features, and optimise Platform performance. Legal basis: Legitimate interests.

slot138 does not sell, rent, or trade your Personal Data to third parties for their own commercial purposes. We disclose your data only in the following limited and controlled circumstances:

We retain your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with our legal obligations, and to resolve any disputes that may arise. The following indicative retention periods apply:

• Account Data: Retained for the duration of your active account relationship plus five (5) years following account closure, in accordance with standard anti-money laundering record-keeping obligations.
• KYC Documents: Retained for a minimum of five (5) years following account closure or the last transaction, as required for AML compliance purposes.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction to comply with financial record-keeping requirements.
• Support Correspondence: Retained for three (3) years following resolution of the relevant support case, to facilitate dispute resolution and quality review.
• Marketing Consent Records: Retained for the duration of the consent plus three (3) years, to evidence lawful marketing activity.
• Technical Logs and Analytics: Generally retained for twelve (12) to twenty-four (24) months, depending on the nature of the log data.

Following the expiry of applicable retention periods, Personal Data is securely deleted or anonymised such that it can no longer be associated with an individual.

slot138 implements a comprehensive set of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform.
• Encryption of sensitive data fields (including financial credentials and KYC documents) at rest in our secure database infrastructure.
• Multi-factor authentication available for player accounts and mandatory for all administrative system access.
• Real-time fraud detection and intrusion prevention systems monitoring the Platform around the clock.
• Strict role-based access controls limiting employee access to Personal Data on a need-to-know basis.
• Regular penetration testing and security audits conducted by independent cybersecurity professionals.
• Segregation of Player Funds from operational accounts, reducing financial risk exposure.

slot138 uses cookies and similar tracking technologies to operate the Platform effectively, provide a personalised player experience, and analyse how the site is used. The following categories of cookies are in use:

As an online platform serving players across Malaysia and operating under international licensing, slot138 may transfer your Personal Data to third-party service providers and data processors located outside Malaysia. Such transfers may include data processed by cloud infrastructure providers, KYC verification services, and fraud detection platforms operating in multiple jurisdictions.

Where Personal Data is transferred internationally, we ensure that appropriate safeguards are in place to protect your data. These safeguards include: contractual data processing agreements requiring the recipient to uphold equivalent data protection standards; transfer to jurisdictions assessed as providing an adequate level of data protection; and the implementation of technical security measures as described in Section 8.

By using the Platform, you acknowledge and consent to the transfer of your Personal Data to international service providers as described in this section, subject always to the protective measures detailed herein.

Subject to applicable law and any overriding legal obligations binding on slot138, you have the following rights in relation to your Personal Data. To exercise any of these rights, please contact us using the details in Section 14. We will respond to verified requests within thirty (30) calendar days.

The slot138 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or retain Personal Data from individuals under the age of 21. Age verification is a mandatory step in the account registration and KYC process, and any account found to have been created by an underage individual will be immediately closed.

Where we become aware that Personal Data has been submitted by an individual under the age of 21, we will take immediate steps to delete all associated data and close the relevant account. If you are a parent or guardian and believe that your child may have accessed the Platform, please contact us immediately using the details in Section 14 so that we can investigate and take appropriate action.

slot138 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. The effective date of the current version is displayed at the top of this page and will be updated each time a material change is made.

Where changes to this Policy are material — for example, where we introduce a new purpose for processing your data or share data with a new category of third party — we will notify you by email to your registered address and/or by a prominent notice on the Platform prior to the changes taking effect. For non-material updates such as minor clarifications or corrections, the updated Policy will be published on this page without separate notification.

Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with the changes, you should cease using the Platform and may request account closure in accordance with the process described in our Terms & Conditions.

For all data protection enquiries, requests to exercise your rights under Section 11, questions about this Privacy Policy, or to report a suspected data breach, please contact the slot138 Data Protection team through the following channels:

This Privacy Policy was last reviewed and updated on 1 January 2026. Prior versions are available upon written request. This Policy does not form part of any contract with you and may be updated at our discretion as described in Section 13.