Privacy Policy

Introduction

This Privacy Policy ("Policy") issued by slot2u ("we", "us", "our", "the Platform"), the operator of the online casino and sports betting platform accessible at https://slot2u.cam. It describes how slot2u collects, stores, processes, and transfers personal data in connection with your use of the Platform, and outlines the rights available to you as a data subject.

slot2u takes data privacy seriously. We collect only the personal information that is necessary for us to operate the Platform safely, comply with applicable regulatory obligations, and deliver an effective, secure experience to our players. We do not sell personal data to third parties under any circumstances.

This Policy applies to all registered users of slot2u, including players who access the Platform from Malaysia — including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other states and territories — as well as visitors who browse the Platform without creating an account.

By registering an account on slot2u or continuing to use the Platform after this Policy has been published or updated, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. This Policy should be read in conjunction with our Terms & Conditions.

Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings assigned below:

• Personal Data: Any information relating to an identified or identifiable natural person — a data subject — who can be identified, directly or indirectly, by reference to that information.
• Processing: Any operation or set of operations performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, or erasure.
• Data Controller: The entity that determines the purposes and means of processing personal data. For the purposes of this Policy, slot2u is the Data Controller.
• Data Processor: A third party that processes personal data on behalf of the Data Controller, acting under the Data Controller's instructions.
• Data Subject: The natural person to whom personal data relates — in this context, you the Player or visitor.
• Consent: A freely given, specific, informed, and unambiguous indication of the Data Subject's agreement to the processing of their personal data for a stated purpose.
• KYC: Know Your Customer — the mandatory identity verification process applied to all Players before withdrawals are permitted.
• Cookie: A small text file placed on your device by the Platform to support session management, analytics, and personalisation functionality.

Data We Collect

slot2u collects personal data through several channels: directly from you during registration and KYC verification; automatically through your use of the Platform; and, in limited circumstances, from third-party payment processors and identity verification providers.

The categories of personal data we collect are set out in the table below:

Lawful Basis for Processing

slot2u processes your personal data only where a valid lawful basis exists. The applicable legal bases under which we process personal data are as follows:

4.1 Contractual Necessity

Processing is necessary for the performance of the contract between you and slot2u (i.e., our Terms & Conditions). This includes account registration, identity verification, payment processing via Malaysian banking channels such as Maybank, CIMB Clicks, Public Bank, and Hong Leong Connect, and the settlement of winings and withdrawals.

4.2 Legal Obligation

Processing is necessary for compliance with our legal obligations under applicable international gaming licence requirements and anti-money laundering (AML) frameworks. This includes mandatory KYC verification, suspicious transaction reporting, and retention of financial records.

4.3 Legitimate Interests

Processing is necessary for the purposes of legitimate interests pursued by slot2u — including fraud detection and prevention, platform security, detection and investigation of Prohibited Activities, and the improvement of the Platform's performance and user experience. We ensure that these interests are balanced against and do not override your fundamental rights and freedoms.

4.4 Consent

Certain processing activities — such as direct marketing communications and the use of non-essential cookies — are carried out on the basis of your explicit consent. You have the right to withdraw at any time without affecting the lawfulness of processing that took place prior to withdrawal.

How We Use Your Data

slot2u uses the personal data we collect for the following purposes:

• Account Management: Creating, maintaining, and administering your Player Account, including authentication and login security;
• Identity Verification (KYC): Verifying your identity and age (21+) in compliance with our international gaming licence requirements;
• Payment Processing: Facilitating deposits and withdrawals through Malaysian payment methods including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank Online, and Hong Leong Connect, as well as cryptocurrency channels;
• Transaction Records: Maintaining accurate financial records of all deposits, wagers, bonuses, and withdrawals for regulatory and dispute resolution purposes;
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, money laundering, collusion, and other Prohibited Activities;
• Responsible Gambling: Administering player-set deposit limits, self-exclusion requests, cooling-off periods, and reality checks; monitoring for signs of problem gambling behaviour;
• Customer Support: Responding to your enquiries, managing disputes, and providing assistance via live chat and email;
• Platform Improvement: Analysing usage patterns and technical data to improve Platform performance, game selection, and user experience;
• Legal Compliance: Meeting our obligations under applicable gaming licence conditions, AML requirements, and any applicable court order regulatory directive;
• Marketing Communications: Sending promotional offers, bonus notifications, and relevant product updates — only where you have provided explicit consent to receive such communications, or where permitted under applicable direct marketing frameworks.

Data Sharing & Disclosure

slot2u does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share personal data in the limited circumstances described below:

6.1 Service Providers (Data Processors)

We engage trusted third-party service providers who process personal data on our behalf, strictly in accordance with our instructions and under written data processing agreements. These include payment processors (e.g., gateway providers for DuitNow, FPX, and e-wallet integrations), identity verification providers, cloud hosting and infrastructure providers, and customer support platform operators. These third parties are contractually obligated to process your data only as directed by slot2u and to maintain appropriate security standards.

6.2 Regulatory & Legal Disclosure

We may disclose personal data to relevant authorities where required to do so by law, court order, regulatory direction, or in connection with our obligations under anti-money laundering and counter-terrorism financing frameworks. Such disclosures are made only to the extent required and are not within our control once a valid legal obligation exists.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of our assets, personal data held by slot2u may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and any material changes to data processing practices that result from it.

6.4 No Sale of Personal Data

slot2u will never sell your personal data to advertising networks, data brokers, or any other third party for commercial gain. This is an unconditional commitment.

Cookies & Tracking Technologies

slot2u uses cookies and similar tracking technologies to operate core Platform functionality, enhance your experience, and gather analytics data that helps us improve the Platform.

7.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session authentication cookies, security tokens, and load-balancing cookies. These cookies cannot be disabled without affecting core functionality.
• Performance & Analytics Cookies: Used to collect aggregated, anonymised data on how Players interact with the Platform — including pages visited, time on page, and error events. This data is used solely to improve Platform performance.
• Functional Cookies: Store your preferences such as language settings, preferred game categories, and display options to personalise your experience.
• Marketing Cookies: Used to deliver relevant promotional content where you have consented to receive marketing. These are only set where explicit consent has been obtained.

7.2 Managing Cookies

You may manage or disable non-essential cookies through your browser settings or through the cookie preference centre available on the Platform. Please note that disabling strictly necessary cookies will impair your ability to use the Platform. Detailed instructions for managing cookies are available in the documentation for your specific browser.

Data Retention

slot2u retains personal data for as long as necessary to fulfil the purposes described in this Policy and to comply with applicable legal, regulatory, and licensing obligations. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your Account plus a minimum of five (5) years following Account closure, in compliance with AML record-keeping requirements under our gaming licence conditions.
• Financial Transaction Records: Retained for a minimum of seven (7) years from the date of each transaction, in accordance with standard financial record-keeping obligations.
• KYC Documentation: Retained for a minimum of five (5) years from the date of verification or Account closure, whichever is later.
• Support Communications: Retained for three (3) years from the date of the communication, or longer if the communication relates to an ongoing dispute.
• Responsible Gambling Records: Self-exclusion records and deposit limit histories are retained for a minimum of five (5) years to prevent circumvention of exclusion obligations.
• Technical and Usage Data: Typically retained in aggregate or anonymised form for up to two (2) years for analytics purposes.

Upon expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised in accordance with our internal data destruction procedures.

Data Security

slot2u implements a range of technical and organisational security measures designed to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include, but are not limited to:

• 256-bit Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and the Platform;
• Encryption of sensitive stored data fields, including financial identifiers and KYC documentation;
• Role-based access controls ensuring that employee access to personal data is restricted to those with a legitimate operational need;
• Two-factor authentication (2FA) availability for all Player accounts;
• Regular security audits, penetration testing, and vulnerability assessments conducted by qualified third-party security specialists;
• Secure, access-controlled data centres with redundant infrastructure to support our99.6% uptime commitment;
• Formal incident response procedures designed to identify, contain, and notify affected parties of any data security breach within 72 hours of discovery.

International Data Transfers

slot2u operates under an international gaming licence and, as consequence, some personal data may be processed by service providers or infrastructure located outside of Malaysia. Where such transfers occur, slot2u ensures that appropriate safeguards are in place to protect the transferred data, including:

• Transfers to service providers in jurisdictions recognised as providing an adequate level of data protection by relevant international frameworks;
• Use of contractually binding data processing agreements incorporating standard data protection clauses that impose equivalent obligations on the recipient;
• Assessment of the data protection practices of third-party processors prior to engagement and through ongoing due diligence reviews.

By using the Platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside Malaysia. slot2u will always take reasonable steps to ensure that any such transfer is handled in a manner consistent with the protections described in this Policy.

Your Rights as a Data Subject

As a data subject, you hold a number of rights with respect to the personal data slot2u holds about you. These rights are described below. To exercise any of these rights, please contact our support team using the contact details provided in Section 14.