KingSlot Privacy Policy

This Privacy Policy (hereinafter "the Policy", "this Policy") is issued by KingSlot (hereinafter "KingSlot", "we", "us", "our"), the operator of the online gaming and sports betting platform accessible at https://kingslot.cam (the "Platform").

This Policy governs the collection, use, disclosure, storage, and protection of personal data relating to individuals who access or use the KingSlot Platform, including registered account holders, prospective players, and visitors to the website (collectively referred to as "Users", "you", "your").

KingSlot is committed to safeguarding the privacy of all Users and to handling personal data responsibly, transparently, and in accordance with applicable data protection laws and regulations. By registering an account on or continuing to use the KingSlot Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

This Policy should be read in conjunction with our Terms & Conditions and our Responsible Gambling Policy, both of which form part of the overall agreement between you and KingSlot.

For the purposes of this Policy, the following terms shall have the meanings set out below:

• "Account" means a registered user account created on the KingSlot Platform.
• "Consent" means a freely given, specific, informed, and unambiguous indication of a User's agreement to the processing of their personal data for a stated purpose.
• "Data Controller" means KingSlot, being the entity that determines the purposes and means of processing personal data.
• "Data Processor" means a third party that processes personal data on behalf of KingSlot in accordance with written instructions.
• "Data Subject" means any identified or identifiable natural person whose personal data is processed — in this context, any User of the KingSlot Platform.
• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, email address, phone number, identification document details, IP address, device identifiers, and financial account details.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Sensitive Personal Data" means personal data that warrants heightened protection, including but not limited to national identification numbers (such as Malaysian MyKad numbers) and financial data.

KingSlot acts as the Data Controller in respect of all personal data collected from Users of the Platform. As Data Controller, KingSlot determines the purposes for which personal data is collected and the means by which it is processed.

Where KingSlot engages third-party service providers to process personal data on its behalf — such as payment processors, KYC verification providers, and hosting infrastructure providers — those parties act as Data Processors and are bound by written data processing agreements that restrict their use of your data to the specific purpose for which it was shared.

KingSlot collects the following categories of personal data from Users:

KingSlot collects personal data through the following channels and mechanisms:

• Account Registration: Information you provide when creating an account on the Platform, including name, email address, date of birth, and contact details.
• KYC Verification: Identity and address documents submitted by you in order to complete Know Your Customer verification prior to processing withdrawals.
• Deposits and Withdrawals: Financial information collected when you make transactions via Malaysian payment methods including Maybank2u, CIMB Clicks, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Public Bank, and cryptocurrency wallets.
• Platform Usage: Technical and usage data collected automatically as you navigate and interact with the Platform, including through cookies and session tracking technologies.
• Customer Support: Information you provide when you contact the KingSlot support team via live chat, email, or WhatsApp.
• Promotional Activities: Data collected when you participate in promotions, surveys, or the KingSlot referral programme.
• Third-Party Sources: In limited circumstances, KingSlot may receive information about you from third-party identity verification providers, fraud prevention services, or payment processors as part of our legal compliance obligations.

KingSlot processes personal data for the following specific purposes:

KingSlot processes personal data on one or more of the following legal bases:

• Contractual Necessity: Processing required to perform the contract between KingSlot and the User — including account registration, processing transactions, and delivering gaming services.
• Legal Obligation: Processing required to comply with applicable laws, including anti-money laundering legislation, KYC regulatory requirements, and data retention obligations.
• Legitimate Interests: Processing carried out in pursuit of KingSlot's legitimate business interests — including fraud detection, platform security, responsible gambling monitoring, and service improvement — where such interests are not overridden by the rights and interests of the User.
• Consent: Where KingSlot relies on your consent as the legal basis — for example, in respect of optional marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal. To withdraw consent, contact KingSlot support or update your account communication preferences.

KingSlot does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. Personal data is disclosed to third parties only in the following limited circumstances:

• Payment Processors: Financial data is shared with accredited Malaysian payment processors and banking partners (including those facilitating Maybank2u, CIMB, FPX, DuitNow, and e-wallet transactions) solely for the purpose of processing your deposits and withdrawals.
• KYC and Identity Verification Providers: Identity documents and personal information may be shared with regulated third-party KYC verification providers for the purpose of fulfilling our legal identity verification obligations.
• Fraud Prevention and Security Services: Technical and account data may be shared with fraud detection and cybersecurity service providers to protect the Platform and its users from fraudulent activity.
• Regulatory and Law Enforcement Authorities: KingSlot may disclose personal data to competent authorities, regulators, or law enforcement bodies where required to do so by law, court order, or regulatory direction.
• IT Infrastructure and Hosting Providers: Technical data is processed by KingSlot's hosting and cloud infrastructure partners subject to written data processing agreements.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of KingSlot's business assets, personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

All third parties with whom KingSlot shares personal data are contractually required to process that data only for the specified purpose, to maintain appropriate security standards, and to comply with applicable data protection laws.

KingSlot's primary operations and data storage infrastructure are oriented toward serving Malaysian users. Where it is necessary to transfer personal data to service providers or partners located outside Malaysia, KingSlot will ensure that appropriate safeguards are in place to protect the transferred data, including contractual clauses requiring the recipient to uphold standards equivalent to those described in this Policy.

KingSlot will not transfer personal data to jurisdictions that do not provide an adequate level of data protection without first implementing appropriate safeguards and, where required, obtaining your consent.

KingSlot retains personal data for no longer than is necessary for the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following general retention principles apply:

• Active Account Data: Retained for the duration of your account and for a period of at least five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements.
• KYC and Verification Documents: Retained for a minimum of five (5) years following the conclusion of the business relationship, or longer where required by applicable law.
• Transaction Records: Financial transaction data (deposits, withdrawals, bet history) is retained for a minimum of five (5) years for audit and compliance purposes.
• Customer Support Communications: Retained for up to two (2) years following the closure of the relevant support interaction, unless longer retention is required for dispute resolution.
• Technical and Usage Data: Aggregated or anonymised analytics data may be retained indefinitely. Individual session and log data is retained for up to twelve (12) months.
• Marketing Consent Records: Records of consent and opt-out preferences are retained for the duration of your account plus two (2) years following closure.

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised in accordance with KingSlot's internal data disposal procedures.

KingSlot implements a comprehensive range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Encryption in Transit: All data transmitted between your device and the KingSlot Platform is protected using 256-bit TLS/SSL encryption.
• Encryption at Rest: Sensitive personal and financial data stored on KingSlot servers is encrypted at rest using industry-standard algorithms.
• Two-Factor Authentication (2FA): Players are strongly encouraged and may be required to enable two-factor authentication on their accounts to prevent unauthorised access.
• Access Controls: Access to personal data within KingSlot's internal systems is restricted to staff on a strict need-to-know basis and is subject to role-based access controls and audit logging.
• Regular Security Audits: KingSlot conducts periodic security assessments and penetration testing of its Platform and infrastructure.
• Incident Response: KingSlot maintains a documented security incident response process. In the event of a data breach that poses a material risk to Users, KingSlot will notify affected individuals and relevant authorities in accordance with applicable legal requirements.

While KingSlot takes all reasonable steps to protect your personal data, no system can be guaranteed to be completely secure. You are responsible for maintaining the confidentiality of your own account credentials and for notifying KingSlot immediately if you suspect unauthorised use of your account.

KingSlot uses cookies and similar tracking technologies on the Platform to provide a functional, personalised, and secure user experience. Cookies are small text files stored on your device when you visit the Platform.

KingSlot uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function correctly — including maintaining your login session, remembering your account preferences, and enabling secure transactions. These cannot be disabled without impacting Platform functionality.
• Performance and Analytics Cookies: Used to collect anonymised or aggregated data about how Users interact with the Platform, which pages are visited most, and where errors occur. This data is used to improve Platform performance.
• Functional Cookies: Used to remember your preferences such as language settings, interface customisations, and previously selected deposit methods.
• Security Cookies: Used to support fraud detection mechanisms, session integrity checks, and bot prevention systems.

You may configure your browser settings to refuse or delete certain types of cookies. However, disabling strictly necessary cookies may prevent the Platform from functioning correctly. For detailed instructions on managing cookies in your browser, consult your browser's help documentation.

Subject to applicable law and certain conditions, you have the following rights in relation to the personal data KingSlot holds about you. These rights may be exercised by contacting KingSlot through the channels set out in Section 16.

KingSlot will respond to all verified rights requests within thirty (30) days of receipt. Where a request is complex or numerous, this period may be extended by a further two (2) months, in which case KingSlot will inform you of the extension and the reasons for it. Exercising your rights is free of charge.

KingSlot implements age verification controls at the point of registration and during KYC processes to prevent individuals under the age of 21 from accessing the Platform. Parents or guardians who believe a minor has registered on KingSlot are requested to contact us immediately at the details provided in Section 16 so that we may take prompt corrective action.

KingSlot reserves the right to update or revise this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our data practices, or the services we offer. All updates will be published on this page with a revised "Last Updated" date at the top of the Policy.

Where changes are material — meaning they significantly affect your rights or the way in which your data is processed — KingSlot will provide advance notice to registered Users via email or in-platform notification before the changes take effect.

Your continued use of the KingSlot Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the revised Policy, you should cease using the Platform and contact us to close your account.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way in which KingSlot handles your personal data, please contact us through any of the following channels:

KingSlot serves players across Malaysia, including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and Bangsar. We aim to acknowledge all privacy-related communications within two (2) business days and to resolve substantive requests within thirty (30) days as described in Section 13.