Myslot138 Privacy Policy – Personal Data Protection for Malaysian Members

Myslot138 is a digital entertainment platform operating in Malaysia, offering a wide range of online games including slots, Live Casino, table games, football and badminton Sports Betting, lottery, and jackpots. In providing these services, myslot138 needs to collect and process certain personal data relating to our members.

We regard privacy as a fundamental right that must be respected and protected. myslot138 does not view your personal data as a business asset — we see it as personal information entrusted to us for very specific and limited purposes. Your trust in us is something we never take lightly.

This Privacy Policy aims to give you a clear and complete picture of:

• What personal data we collect and where it comes from
• The purposes for which that data is used
• Who data may be shared with and under what circumstances
• How we protect your data from unauthorised access
• How long we retain your data
• Your rights in relation to that data and how to exercise them

This Policy applies to all registered myslot138 members in Malaysia regardless of how they access the platform — whether via desktop computer, smartphone, or any other device.

Myslot138 collects your personal data from several sources — primarily information you provide directly when registering and using the platform, as well as data generated automatically as you browse our platform.

Myslot138 uses your personal data only for legitimate purposes that are clearly stated here. We will not use your data for any other purpose without first obtaining your consent.

• Account management: To create, verify and manage your myslot138 account, including identity verification, limit-setting and VIP tier management.
• Transaction processing: To process deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX and other Malaysian payment methods; and to process withdrawals to your bank account or e-wallet.
• Provision of gaming services: To enable you to play slots, live casino, table games, football and badminton Sports Betting, lottery and all other services available on myslot138.
• Fraud prevention and security: To detect and prevent fraud, money laundering, multiple accounts, bonus abuse, and other suspicious activity that could harm the platform or other members.
• Legal compliance: To comply with legal obligations applicable to myslot138, including financial reporting requirements and requests from competent authorities pursuant to valid court orders.
• Customer support: To handle your enquiries, complaints, and requests via live chat, email, or other support channels, and to improve the quality of our support services based on interaction records.
• Service communications: To send you important account-related notifications such as transaction confirmations, security alerts, terms updates, and critical platform information. These are not marketing emails and cannot be turned off as they are necessary for the operation of your account.
• Marketing (with consent): If you have agreed to receive marketing communications, we may send you information about myslot138 promotions, bonuses, and special offers. You may withdraw this consent at any time.
• Platform improvements: To analyse usage patterns, platform performance, and member feedback for the purpose of improving the overall user experience. This analysis is typically carried out using anonymised data.

Myslot138 does not sell, rent or commercialise your personal data to any third party. However, in the course of operating the platform, there are limited situations where your data may be shared with the following parties, all of whom are bound by strict confidentiality terms:

• Payment service providers: Payment gateways that process your deposits and withdrawals — including Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow and Malaysian FPX banks — require the necessary transaction details to securely process your payments.
• Game service providers: Companies such as Evolution Gaming, Pragmatic Play Live and other game providers that deliver live casino experiences may receive the session information required to facilitate gameplay. This data is limited to technical requirements and does not include full financial details.
• Technology service providers: Companies that provide myslot138 with server infrastructure, cloud services, analytics, and cybersecurity tools may have limited access to data in the course of performing their technical functions. All such providers are bound by data protection agreements.
• Legal authorities: myslot138 may be required to disclose data to law enforcement agencies, courts, or Malaysian government authorities if mandated by law or a valid court order. In such situations, we will endeavour to notify you unless doing so is prohibited by law.
• Business merger process: In the event that myslot138 is involved in a merger, acquisition or asset transfer, member data may be transferred as part of that transaction. You will be notified before your data becomes subject to a different privacy policy.

Myslot138 continuously invests in cybersecurity infrastructure to ensure your personal data is always protected against unauthorised access, accidental disclosure, alteration or destruction. The following are the key security measures we have in place:

• Encryption of data in transit: All communications between your device and myslot138 servers are encrypted using Transport Layer Security (TLS) with 256-bit SSL standards — covering all gaming activity, financial transactions, and live chat sessions.
• Data encryption at rest: Sensitive data stored in the myslot138 database — including identity information, financial records and passwords — is encrypted using strong encryption algorithms. Passwords are stored in an irreversible hashed format.
• Access controls: Access to member data within myslot138's internal systems is strictly restricted based on the principle of least privilege. Only staff who require access to carry out their specific duties are permitted, and all access is logged.
• 24/7 security monitoring: The myslot138 system is continuously monitored for suspicious activity, intrusion attempts and security anomalies. Our security team responds to alerts in real time.
• Regular security audits: myslot138 conducts regular penetration testing and security audits by independent security experts to identify and address vulnerabilities before they can be exploited.
• Multi-factor authentication: myslot138's internal systems require multi-factor authentication for all staff access. We also encourage members to enable two-factor authentication for an added layer of protection on their accounts.

Myslot138 retains your personal data only for as long as necessary to fulfil the original purpose of collection and to meet applicable legal obligations. Retention periods vary by data type:

• Active account data: Your core account data is retained for as long as your account remains active and in use, allowing us to continue providing our services. Inactive accounts (no logins or transactions within 24 months) will receive a notification before any action is taken.
• Financial and transaction records: Deposit, withdrawal, winnings and loss records are retained for a minimum of 7 years from the transaction date to meet financial compliance and anti-money laundering legal requirements.
• Identity verification records: Identity verification documents (copies of MyKad, passport) are retained for the duration of the active account plus 5 years after account closure, subject to applicable legal requirements.
• Security logs: Access logs, transaction logs, and security data are retained for 2 years to support investigations in the event of a security incident or dispute.
• Support communication records: Live chat session records and emails with the myslot138 support team are retained for 2 years for quality control and dispute resolution purposes.
• Marketing data: Data collected with your consent for marketing purposes is retained until you withdraw that consent, after which it will be deleted or anonymised within 30 days.

Once the retention period expires, myslot138 will securely delete or anonymise your data so that it can no longer be linked to your identity. Early deletion requests from members will be considered, subject to any legal obligations that may require us to retain certain data in the interim.

The myslot138 platform uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and understand how the platform is used. The following types of cookies are in use:

You can manage cookie settings through your browser preferences. However, disabling required cookies will affect the functionality of the myslot138 platform. For optional cookies such as analytics, you may opt out without impacting your overall gaming experience.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a myslot138 member have the following rights regarding your personal data. myslot138 is committed to respecting and facilitating the exercise of these rights.

Myslot138 is an adult entertainment platform strictly for individuals aged 18 and above. This platform is not directed at children or minors, and we do not knowingly collect personal data from individuals under 18.

• All registered myslot138 members must confirm that they are 18 years of age or older at the time of registration.
• Myslot138 reserves the right to request age verification documents (MyKad or passport) from any member at any time.
• If we find that personal data belonging to a minor has been collected inadvertently, we will delete that data immediately and close the relevant account.
• Parents or guardians who discover that their child has registered a myslot138 account should contact our support team immediately at support@myslot138.click for prompt action.

Myslot138 reserves the right to amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform improvements. We are committed to notifying you of any material changes before they take effect.

• Change notifications: For material changes to how we process your data, myslot138 will provide clear notice on the platform's main page or via email at least 14 days before the changes take effect.
• Minor changes: Minor amendments such as spelling corrections, language clarifications or changes that do not materially affect your rights may be made without prior notice, though the "Updated" date at the top of the document will always reflect the current version.
• Implied acceptance: Continued use of the myslot138 platform after any amendment takes effect will be considered acceptance of the updated Privacy Policy. If you do not agree with the changes, you should stop using the platform and close your account.
• Previous version archive: myslot138 retains previous versions of the Privacy Policy for reference. You may request a copy of the version that was in effect during any specific period by contacting our support team.

If you have any questions, concerns or requests regarding this Privacy Policy or how myslot138 handles your personal data, our team is ready to assist through the following channels:

• 24/7 live chat: The fastest way to get immediate assistance — the live chat button is available on every page of the myslot138 platform with an average response time of under 2 minutes in Bahasa Melayu.
• Support email: For more detailed privacy enquiries or formal requests relating to PDPA rights, email us at support@myslot138.click. We will respond within 2 business days.
• Personal account manager: Diamond and Platinum VIP members may contact their personal account manager directly for sensitive or urgent privacy matters.